1. Introduction
Seek & Win SAS ("we", "our", "us") is committed to protecting the privacy of the users of our platform. This privacy policy explains how we collect, use, share, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).
2. Data controller
The data controller is:
Seek & Win SAS
Paris, France
Email: privacy@seekandwin.world
3. Data we collect
We collect the following categories of data:
- Identification data: first name, last name, email address, phone number
- Connection data: IP address, session identifiers, connection logs
- Location data: GPS position (with your explicit consent)
- Usage data: interactions with the platform, completed hunts, rewards obtained
- Payment data: billing information (processed by our PCI-DSS certified payment providers)
4. Legal bases for processing
We process your data on the following legal bases:
- Performance of the contract: to provide our services
- Consent: for geolocation and marketing communications
- Legitimate interest: to improve our services and prevent fraud
- Legal obligation: to comply with our tax and accounting obligations
5. Purposes of processing
Your data is used to:
- Provide and improve our treasure hunt services
- Manage your user account
- Process payments and rewards
- Send service-related communications
- Send marketing communications (with your consent)
- Analyze platform usage and improve the user experience
- Prevent fraud and ensure the security of the platform
6. Data sharing
We may share your data with:
- Our partner venues (hunt participation information)
- Our service providers (hosting, payment, analytics)
- The competent authorities where legally required
We never sell your personal data to third parties.
7. International transfers
Your data is hosted within the European Union. In the event of a transfer outside the EU, we ensure that appropriate safeguards are in place (standard contractual clauses, adequacy decisions).
8. Retention periods
- Account data: for the duration of your registration + 3 years
- Transaction data: 10 years (legal obligations)
- Location data: 1 year maximum
- Cookies: 13 months maximum
9. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access: obtain a copy of your data
- Right to rectification: correct your inaccurate data
- Right to erasure: request the deletion of your data
- Right to portability: receive your data in a structured format
- Right to object: object to the processing of your data
- Right to restriction: restrict the processing of your data
- Right to withdraw your consent: at any time
To exercise these rights, contact us at privacy@seekandwin.world. You may also lodge a complaint with the CNIL (the French data protection authority).
10. Security
We implement appropriate technical and organizational measures to protect your data: SSL/TLS encryption, secure authentication, restricted data access, and system monitoring.
11. Changes
We may amend this policy. Significant changes will be notified by email or through the platform.
12. Contact
For any questions regarding this policy:
Email: privacy@seekandwin.world
Data Protection Officer: dpo@seekandwin.world