Privacy Policy

Professional services and requests

Requests include the service needed, proposed time and, if the visitor chooses, the vehicle description from Garage. Protection files and serial numbers are not shared with the professional through this feature. Visitor and professional access rights remain distinct.

Confirmations and reminders are messages related to the requested service. Professional emails use the establishment language and an editable preference. Codes expire after fifteen minutes and are single use; the database holds a request-bound keyed hash, never the plain code.

Profile statistics are daily aggregates per establishment, without visitor identifiers or IP addresses in these counters. They are retained for thirteen months. Technical transport logs are separate; sent messages are removed from the application outbox after thirty days.

Account closure removes related requests, photos and private professional content. Billing references needed for reconciliation and legal obligations follow applicable retention rules.

Data controller

CEAM TRADING, a SASU whose registered office is at 17 avenue de Toulouse, 34310 Capestang, France, is the controller for the processing described in this policy. Personal-data requests may be sent to contact@e-zybike.com or by post to the registered office.

The stated contact handles rights requests and privacy questions. It must not be described as a data protection officer contact unless a formal appointment has been documented.

Data processed

Depending on use of the service, data may include account information, language preference, consent records, saved vehicles and components, saved professionals, requests, reviews, profile claims and support communications.

Technical security data may be processed, such as IP address, logs, device, browser and timestamps. Location is requested only after a voluntary action and is used for proximity search. It must not be sent to audience-measurement tools.

Published professional data

Profiles may contain company data and, where a natural person is identifiable, professional personal data. This data may come from public or open sources, authorised partners, the professional, users or internal checks.

Provenance, date, confidence level and correction requests are managed under the Professional Data Policy.

Purposes and legal bases

Processing is used to provide the account and requested functions, secure the service, answer support requests, moderate content, verify profiles, comply with legal obligations, establish or defend rights, and improve the service.

• Performance of the Terms or pre-contract steps: account, My Garage, saved professionals, requests and profile claims.
• Legitimate interests: security, fraud prevention, directory quality, moderation and non-intrusive improvement, after balancing individual rights.
• Legal obligation: accounting, responses to authorities and required retention.
• Consent: non-exempt audience measurement, advertising, direct marketing or optional trackers. Consent may be withdrawn without affecting prior lawful processing.

Required information

Fields marked as required are necessary for the requested function. Without them, the relevant account, request, review or claim cannot be processed. Location sharing is optional and search by city remains available.

Recipients and processors

Access is limited to authorised CEAM TRADING personnel and providers necessary for hosting, security, technical email delivery, payment once activated, and audience measurement after consent. A professional receives only the information required for a request concerning that professional.

Hosting is supplied by EasyHoster, a service of Kim Communication Limited. The provider’s registered-office address does not by itself determine the physical location of all data. Processing locations and contractual safeguards must be documented with each provider before public launch.

Transfers outside the European Economic Area

Where a provider processes data outside the European Economic Area, CEAM TRADING implements the mechanism and safeguards required by law, together with any necessary supplementary measures. Applicable information will be kept up to date in this policy or the processor list.

Retention periods

Data is retained for the period necessary for each purpose, then deleted, anonymised or archived where the law requires it. Account and My Garage data are retained until account closure, subject to records strictly required for security, evidence or a legal obligation.

• Requests and communications: while being handled, followed by limited archiving for evidence or disputes.
• Reviews and moderation: while published, followed by a limited period needed for disputes and the establishment or defence of rights.
• Technical logs: a short period proportionate to security and diagnostics.
• Consent evidence and contract versions: for the period needed to demonstrate the choice and comply with limitation periods.
• Accounting records for a future paid service: the applicable statutory period.

Individual rights

Subject to the conditions in applicable law, individuals may request access, rectification, erasure, restriction or portability, or object to processing. They may withdraw consent at any time and define instructions concerning their data after death where French law permits.

Requests must be sent to contact@e-zybike.com. Proof of identity may be requested only where reasonable doubt remains. Individuals may lodge a complaint with the French CNIL at cnil.fr.

Automated decisions and location

Results, distances and compatibility information support search but do not produce a legal or similarly significant effect based solely on automated processing. Location remains under the user’s control and must not be retained beyond what is needed for the request unless a separate choice is clearly offered.

Security and breaches

CEAM TRADING applies proportionate measures, including access control, password hashing, limited logging, backups and environment separation. Transport protections must be validated in each environment before it is opened to the public. No system can, however, guarantee zero risk.

A breach presenting a risk is assessed and documented and, where required by law, notified to the CNIL and affected individuals.

Policy updates

This policy is updated when features, purposes, providers or requirements change materially. The date appears at the top of the document. A change requiring new consent is not applied retroactively.