Privacy Policy

1. Introduction

This privacy and personal data protection policy (hereinafter the "Policy") sets out the rules applicable to information processed by Parkshare, holder of the registered trademark "Parkshare" at the INPI (hereinafter the "Company"), identified by SIREN number 988 226 916, whose registered office is located at 50 avenue des Champs-Élysées, 75008 Paris, France.

Use of the parkshare.net website (hereinafter the "Site"), its subdomains, in particular app.parkshare.net, as well as the Parkshare mobile application available on iOS and Android (hereinafter together the "Platform") requires acceptance by the user (hereinafter the "User") of this Privacy Policy, as well as the Terms of Use.

This Policy sets out how we process personal data collected by the Company. Users are invited to read this Policy carefully in order to know and understand our practices regarding the processing of their personal data.

The Company complies with all applicable regulations regarding the protection of personal data, in particular Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), the French Data Protection Act No. 78-17 of 6 January 1978 as amended, in particular by Act No. 2018-493 of 20 June 2018 and Ordinance No. 2018-1125 of 12 November 2018, as well as the French Act on Confidence in the Digital Economy No. 2004-575 of 21 June 2004.

If the User disagrees with any of the terms of this Policy, they are free to stop using the Platform, and may also contact the Company at [email protected] in order to exercise their rights as defined in Article 4.

This Policy applies to all services offered by the Company via the main website https://parkshare.net, its subdomains, in particular https://app.parkshare.net, and the Parkshare mobile application.

2. Glossary

Application: means the Parkshare mobile application, available on iOS and Android, enabling residents to share their parking spaces with their neighbours and guests.

Cookies: A cookie is a small text file containing information that is placed on the User's computer or mobile device when they visit a website or mobile application; cookies are used in particular to recognise the User's device when they access a website or application that has already been visited.

Personal Data or Data: means any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to their physical, physiological, genetic, mental, economic, cultural or social identity.

Specific Rights: means the rights granted to the User by the Personal Data Regulations and described in Article 4.

Platform: means the ensemble comprising the parkshare.net website, its subdomains, and the mobile Application.

Personal Data Regulations: means all applicable regulations regarding the protection of personal data, in particular the General Data Protection Regulation No. 2016/679 of 27 April 2016, the French Data Protection Act No. 78-17 of 6 January 1978 as amended, the French Act on Confidence in the Digital Economy No. 2004-575 of 21 June 2004 and Ordinance No. 2018-1125 of 12 December 2018.

GDPR: means the General Data Protection Regulation No. 2016/679 of 27 April 2016, applicable since 25 May 2018.

Service: means the matching service between residents of the same building for the purpose of free parking space sharing, offered by the Company via the Platform.

Device: means the hardware equipment (computer, smartphone, tablet, etc.) that you use to access or view the Platform.

3. Protection of your Personal Data

We may collect the following data concerning you:

3.1. Personal Data collected

a. Data voluntarily provided (contact form)

We collect data that you voluntarily provide via a collection form on the Platform, such as: surname, first name, telephone number, email address and country.

Legal basis: legitimate interest of the Company, enabling it to respond to requests for information.
Retention period: up to 3 years from the last contact.

b. User account data

When creating an account on the Application, we collect: first name, email address and phone number.

Legal basis: performance of the service contract to which the User has subscribed.
Retention period: duration of the account, then deletion within 1 year after account closure, unless a longer legal retention obligation applies.

c. Data shared between users in the context of the Service

In order to enable the proper execution of parking sharing agreements between neighbours, the Company shares the first name and phone number of a User with another User of the same building, in the following cases:

  • when a User accepts a reservation request from a neighbour, the contact details of both parties are made accessible in the Application;
  • when a parking space is made available and reserved, the contact details of both parties are shared to facilitate coordination.

The User is expressly informed of this sharing at the time of any action that triggers it.

Legal basis: performance of the Service to which the User consented upon registration.
Retention period: the shared contact details are accessible for the duration necessary to execute the relevant sharing agreement.

d. GPS location data (optional)

With your explicit consent, the Application may access your GPS location on a one-off basis in order to verify whether a parking lot corresponds to your residential address. This data is used solely for this purpose and is not stored long-term by the Company.

Legal basis: User's consent (explicitly requested within the Application).
Retention period: one-off use, not retained beyond the verification.

e. Push notification token

If you accept push notifications on your mobile device, we collect a technical identifier (token) enabling the sending of Service-related notifications (booking confirmation, neighbour request, etc.).

Legal basis: User's consent (granted via the device's notification settings).
Retention period: until consent is withdrawn or the account is deleted.

f. Booking history

We retain the history of parking space requests and bookings made via the Application, in order to allow the User to consult their past activity and to ensure the proper functioning of the Service.

Legal basis: performance of the service contract.
Retention period: duration of the account.

g. Payment data (subscription)

In the context of subscriptions taken out by building managers, payment data (card number, billing information) is processed directly by our payment provider Stripe. The Company does not store or have access to bank card data. Only the billing data necessary for subscription management (email, name) is retained by the Company.

Legal basis: performance of the subscription contract.
Retention period: duration of the subscription, then 5 years for billing data (statutory accounting obligation).

h. Automatically collected data (analytics)

We collect and retain anonymised usage data when you access the Platform. We use Umami for this purpose, an audience analytics tool configured in cookieless mode, which places no cookies on your Device and does not enable personal identification. These measurements allow us to evaluate the number of page views, visits, and general activity on the Platform.

Legal basis: legitimate interest of the Company (service improvement).
Retention period: aggregated and anonymised data, no identifiable personal data retained.

3.2. Transfer of Personal Data

In connection with the performance of the Services, we may transfer certain of your Data to subcontractors and service providers. We ensure that these third parties provide sufficient guarantees regarding the implementation of appropriate technical and organisational measures to protect your Data.

Our main subcontractors are:

  • Resend: transactional email provider (booking confirmations, account notifications, etc.). Only the data necessary to send the email (email address, message content) is transmitted.
  • Stripe: online payment provider for subscription management. Stripe processes payment data in accordance with its own privacy policy and is PCI-DSS certified.
  • Umami: cookieless audience analytics tool, transmitting no identifiable personal data.

Furthermore, in the context of the matching Service, certain personal data (first name, phone number) is shared between Users of the same building, in accordance with the terms described in Article 3.1.c above.

Outside of the cases mentioned above, we do not sell, rent or share your Personal Data with third parties for commercial or advertising purposes.

4. Your rights

In accordance with the applicable Personal Data Regulations, you have the following rights:

  • Right to withdraw consent at any time (Article 13(2)(c) of the GDPR);
  • Right of access to your Data (Article 15 of the GDPR);
  • Right to rectification (Article 16 of the GDPR) or completion of your Data;
  • Right to erasure ("right to be forgotten") of your Data (Article 17 of the GDPR), when it is inaccurate, incomplete, ambiguous, out of date, or whose collection, use, disclosure or retention is prohibited;
  • Right to restriction of processing of your Data (Article 18 of the GDPR);
  • Obligation to be notified in the event of rectification or erasure of your Data, or restriction of processing (Article 19 of the GDPR);
  • Right to portability of Data provided by you, where such Data is subject to automated processing based on consent or on a contract (Article 20 of the GDPR);
  • Right to object to the processing of your Data (Article 21 of the GDPR);
  • Right to define the fate of your data after your death and to choose the third party whom you have previously designated to whom we must communicate (or not) your Data (Article 40-1 of the French Data Protection Act).

To exercise these rights, you may contact us:

  • in writing at the following address: Parkshare, 50 avenue des Champs-Élysées, 75008 Paris, France;
  • by email at: [email protected].

In connection with your request, you will need to prove your identity by providing a copy of an identity document (identity card or passport). Requests for deletion of Personal Data will be subject to the legal obligations imposed on us, in particular with regard to the retention or archiving of documents.

In any event, we take all reasonable measures to ensure the accuracy and relevance of your Personal Data with regard to the purposes for which we process it.

Finally, you may at any time lodge a complaint with the supervisory authorities, specifically in France with the CNIL (https://www.cnil.fr/fr/plaintes).

5. Social networks

We are present on social networks (LinkedIn, Instagram).

We remind you that access to these social networks requires your acceptance of their contractual terms containing provisions relating to the Personal Data Regulations for processing carried out by them.

6. Cookies

A cookie is a small text file containing information that is placed on your Device when you visit a website or mobile application; they are used in particular to recognise your Device when it accesses a website or application that has already been used.

We only issue cookies that are strictly necessary for the operation of the Platform. These cookies are essential to provide you with the available Services, in particular to access certain secure areas (personal account). Without these cookies, essential features could not be provided.

Regarding audience analytics, we use Umami in cookieless mode. This tool places no cookies on your Device and collects no data that would allow you to be personally identified. No other analytics or tracking solution is used on the Platform.

Your consent regarding the necessary cookies placed via our Platform has a lifespan of thirteen (13) months at most. Upon expiry of this period, we will request your consent again when you log on.

7. Personal data of minors under 16 years of age

The Services are intended for adult customers. The Company does not intend to collect Personal Data of minors under 16 years of age.

However, should it happen that, without our knowledge, such Personal Data has actually been collected and processed without obtaining the authorisation of the holder of parental responsibility for the minor in question, we would take all necessary measures to erase such Personal Data as soon as possible.

If you are the holder of parental responsibility for a minor under 16 years of age and learn that we have collected and processed data concerning them, you may contact us at: [email protected].

8. Updates to the Privacy Policy

The Company may update this Privacy Policy at any time. We advise you to consult this page regularly to become aware of any changes made to our Policy.

9. Contact

For any questions, comments or complaints regarding our Privacy Policy, you may contact us at: Parkshare, 50 avenue des Champs-Élysées, 75008 Paris, France (indicating "Privacy – Data Protection"), or by email at: [email protected].