Privacy Policy – parentbase.io

1. Identity of the Data Controller

The processing of personal data on the parentbase.io platform is carried out by:

h277 SAS, simplified joint-stock company (SAS)
SIREN: 994334654
Website: https://h277.net
Contact: [email protected]

2. Data Protection Officer (DPO)

h277 SAS has appointed a Data Protection Officer (DPO), who can be contacted at:
📧 [email protected]

3. Purposes of Processing

h277 SAS processes users’ personal data for the following purposes:

  • Provision of the platform’s main features:

    • Planning and organizing shared school trips between parents
    • Messaging between users
    • Posting and browsing classified ads
    • Managing the user account

  • Technical and operational management:

    • Internal statistical analysis
    • Maintenance, debugging, and feature improvement
    • Moderation of user-generated content

  • User communication:

    • Functional notifications (e.g., messages, reminders)
    • Marketing communications only if the user has explicitly opted in

4. Legal Bases for Processing

The processing of personal data is based on the following legal grounds:

  • Performance of a contract (Article 6.1.b GDPR): for creating and managing the account and providing the core platform features (e.g., trips, ads, messaging).
  • Legitimate interest (Article 6.1.f GDPR): for service improvement, moderation, internal statistics, and ensuring platform security.
  • Explicit consent (Article 6.1.a GDPR): for sending marketing communications, if consent is provided.

5. Categories of Personal Data Collected

The personal data collected includes:

  • First and last name
  • Email address
  • Postal address
  • Information related to school trips (e.g., school, schedule, meeting points)
  • Information shared by users in ads or messages
  • Connection and navigation data (IP address, technical logs, cookies – see cookie section)

No sensitive data (e.g., health, political views) is collected.

6. Data Recipients

Personal data is strictly processed by h277 SAS and its technical service providers, who act as data processors, solely for the purpose of operating the service (e.g., email delivery, hosting, address geocoding).

All third-party providers are contractually bound to ensure the confidentiality and security of the data.

7. Data Transfers Outside the European Economic Area (EEA)

No personal data is transferred outside the European Economic Area (EEA). All data is hosted within the European Union.

8. Data Retention Period

Personal data is retained for a maximum of 36 months following the user’s last activity on the platform.

Data may be deleted earlier upon request or when a user account is deleted.

9. User Rights

In accordance with the General Data Protection Regulation (GDPR), users have the following rights:

  • Right of access to their data
  • Right of rectification in case of error
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to object to processing based on legitimate interest
  • Right to data portability
  • Right to withdraw consent at any time, for processing based on consent

Users may exercise their rights by contacting h277 SAS at:
📧 [email protected]
or via the contact form available on the platform.

10. Right to Lodge a Complaint

Users have the right to lodge a complaint with their local data protection authority. In France, this is the CNIL:
📍 Commission Nationale de l’Informatique et des Libertés
https://www.cnil.fr

11. Cookies

h277 SAS uses only those cookies that are strictly necessary for the platform to function properly. These cookies allow us to:

  • Maintain user sessions
  • Ensure secure authentication
  • Preserve essential user preferences (e.g., language)

No cookies for advertising, tracking, or analytics are currently used.

A basic cookie consent system has been implemented as a precaution. As long as no non-essential cookies are deployed, no explicit user consent is required, in line with CNIL guidelines.

Users may configure their browser to block or delete cookies at any time, though this may limit certain platform functionalities.

For any questions about cookies, users can contact:
📧 [email protected]