Privacy Policy
Last updated: 09/20/2026
1. Data Controller
For customer data (managers, prospects, visitors): Parc Avenue Group(PAG), 12bis rue sur les gros degrés Verdun 55100, France — contact@parcavenue.eu.
For employee data and end-customer data of a user company: theuser company is the data controller; Parc Avenue Group(PAG) acts as a data processor.
2. Data Collected
- Account and identification : last name, first name, email, phone number, credentials, connection logs (IP address, browser).
- Space : company name, SIRET, address, KBIS, contact details, subscribed offer and options, billing.
- HR (entered by the employer): contracts, schedules, timesheets, leave, pay slips, documents, medical examinations, civil status from the personnel register, encrypted NIR for DPAE.
- Commerce and booking : CRM contacts, quotes, invoices, bookings, reviews, payments (no card number is stored by PAG).
- Technical : push notifications, preferences, usage statistics.
3. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Service provision, account and subscription management | Performance of a contract |
| Billing, accounting, fraud prevention | Legal obligation / legitimate interest |
| Service-related notifications | Performance of a contract |
| Security, logging, abuse prevention | Legitimate interest |
| Support and service improvement | Legitimate interest |
| PAG commercial communications | Consent (withdrawable at any time) |
4. Recipients and Processors
Data is accessible to authorized teams at Parc Avenue Group(PAG) and its technical subcontractors: hosting (IONOS), payment (PayPal, Stripe), email sending (Resend, SendGrid), SMS (Twilio), push notifications. These service providers only access data for the purposes of their mission. Some may be located outside the European Union; appropriate safeguards (standard contractual clauses) govern such transfers.
5. Retention Periods
- Account data: duration of the subscription then 3 years.
- Payroll and HR documents: legal retention periods applicable to the employer (up to 5 years, 50 years for pay slips retained by the employer).
- Invoices and accounting records: 10 years.
- Connection logs: 12 months.
- Prospects: 3 years after the last contact.
6. Security
Encrypted communications (TLS), encryption of sensitive data (gateway credentials, NIR), role-based access control, two-factor authentication for administrators, audit log, regular backups.
7. Your Rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to set post-mortem instructions. Write to contact@parcavenue.eu with proof of identity. You may lodge a complaint with the CNIL (www.cnil.fr).
Employees exercise their rights with their employer; PAG provides assistance to the latter.
8. Cookies
Only strictly necessary cookies and local storage (session, language, currency, display preferences) are used. They do not require consent.
9. Changes
This policy may be updated; the date of the last update appears at the top of the document.