As part of its daily business activities, Studely collects personal information from its customers and potential customers in order to provide them with products and services. The privacy of its customers is of the utmost importance to Studely, and this policy is intended to allow the protection and respect of the confidentiality of information and the privacy of individuals. It defines how Studely's products and services use and manage personal information received from the customer or a third party or that Studely collects from the use of the services and/or the application.
The purpose of this policy is to present the methods of collecting and processing the personal data of Studely's customers and prospects, and in particular:
The identity of the data controller and his obligations,
The purpose of processing personal data
The mandatory or optional nature of the answers and the consequences of a lack of response,
The recipients of the data,
Possible data transfers to countries outside the EU.
In accordance with the provisions of article 5 of the RGPD, the collection and processing of data from users of the site respect the following principles:
Lawfulness, loyalty and transparency: data is collected and processed only in the cases provided for by law. The user is systematically informed of the use that is made of his data.
Limited purposes: data is collected and processed to meet one or more specific purposes.
• Minimization of data collection and processing: only the data necessary for the successful achievement of the objectives pursued by Studely are collected.
• Limitation of data retention over time: users' personal data is kept for a limited period of time. The user is always informed of this duration.
Lawfulness, loyalty and transparency: data is collected and processed only in the cases provided for by law. The user is systematically informed of the use made of his data. • Limited purposes: the data is collected and processed to meet one or more specific purposes. • Minimization of data collection and processing: only the data necessary for the successful achievement of the objectives pursued by Studely is collected. • Limitation of data retention over time: users' personal data is kept for a limited period of time. The user is always informed of this duration.
Studely is committed to respecting all of these principles as part of its GDPR compliance. In accordance with the requirements of Article 6 of the GDPR, Studely only processes personal data in one of the following cases:
The user has given his consent to the treatment,
The processing is necessary for the proper execution of a contract between Studely and the user,
The treatment meets a legal obligation,
The Data Controller The processing and collection of personal data is necessary for the purposes of legitimate and private interests pursued by Studely or by a third party.
The Data Controller
The person responsible for processing personal data is the company Studely, located (head office) at 12 rue des Bateliers 92 110 Clichy, registered with the Nanterre Trade and Companies Register under number (SIREN) 820541449. Anyone who would like to find out about how their personal data is processed or who would like to exercise their rights can contact the company by one of the following ways:
By email to dpo @studely
By mail: 12 rue des Bateliers 92 110 Clichy
The data controller undertakes to protect personal data, not to transmit them to third parties without the user having been informed and to respect the purposes for which this data was collected. In addition, the data controller undertakes to notify the user in the event of correction or deletion of data, unless this involves disproportionate formalities, costs and procedures for the user. Finally, in the event of a personal data breach presenting a risk to the rights and freedoms of individuals, Studely undertakes to notify the CNIL of the incident as soon as possible, and, in the event of a high risk, to notify the persons concerned.
Data protection measures
Studely has taken all necessary precautions to maintain the security of personal data and, in particular, to prevent them from being deformed or damaged or from being accessed by unauthorised third parties. These measures include the following:
Access tracking,
Encrypted data transmission using https/VPN technology
Encryption of sensitive data and backups,
In addition, access to personal data by Studely's internal department is done through technologies that require strong authentications.
4.1. Data retention period
Studely keeps the personal data it collects in its systems, under reasonable security conditions, for a period of 5 (five) years from the closure of the customer account. This data is kept by Studely in order to manage its commercial relationships and to comply with its legal obligations, in particular those concerning the fight against money laundering and the financing of terrorism. For technical reasons and for continuity of service, Studely cannot delete certain data after this period. However, at the end of the 5-year period, this data is completely anonymized.
4.2. Categories of data collected
First of all, Studely keeps data relating to the identity of its customers (name, first name, address, etc.). In order to better know its customers, it also collects data on their professional life, their economic and financial situation, etc. Studely collects and processes these types of data related to the knowledge of its customers in order to provide them with the most appropriate services. It also collects them in order to comply with its regulatory obligations in the fight against money laundering and terrorist financing. Secondly, Studely processes personal data relating to the use that users make of its service (transaction history, account number, IBAN, etc.). This also includes connection data (IP address, logs, login credentials, etc.).
The collection and processing of the data mentioned above allow Studely to perform a number of operations relating to customer management. This concerns in particular the management of contractual relationships, invoicing, customer accounts, etc. This data also allows Studely to prevent fraud and illicit operations constituting money laundering. The data is also used to manage the user relationship, in particular with regard to requests made by customers to exercise their rights (right of access, right of opposition, etc.).
Changes to the Terms of Use
We may revise and update these Terms of Use from time to time at our sole discretion. All changes are effective immediately upon posting and apply to all access to and use of the Sites thereafter. Your continued use of the Sites after the posting of the new Terms of Use means that you accept the changes. You are responsible for checking this page from time to time to be aware of any changes.
6.1. A legal obligation
The processing of the personal data of the user of the service is carried out mainly due to a legal obligation to which Studely (as a payment service provider agent) is subject — the fight against money laundering and the financing of terrorism (art. L. 561-2 and following of the Monetary and Financial Code).
A legitimate interest
Studely also has a legitimate interest in the processing of personal data that it carries out. These interests lie in the prevention and treatment of fraud and in customer management.
Data whose provision is mandatory by the user of the service is indicated by an asterisk in the registration form (or contact request). In case of non-provision of data, the contact request cannot be processed.
Within the limits of their respective needs, the recipients of all or part of the data are:
Studely's internal services (examples: IT department, management, customer service, compliance, etc.),
Studely subcontractors involved in customer relationship management.
No personal data is transferred outside the European Union.
The data collected and processed by the site are exclusively hosted and processed in the countries of the European Union.
In accordance with the regulations concerning the processing of personal data (RGPD), the user has the rights listed below. In order for Studely to comply with the user's request, the user is required to provide him with: his name, first name, as well as his email address, and his customer account number. Studely undertakes to respond to the user within a maximum of 30 (thirty) days.
10.1. Rights of access, rectification and right to erasure
Any user can:
Access all the information concerning him,
Know the origin of the information concerning him,
Get a copy
Requiring that your data be, as appropriate, rectified, completed, updated or deleted.
The user can read, update, modify or request the deletion of data concerning him, by following the procedure set out below. The user must send an email to the person responsible for processing personal data, specifying the subject of the request and using the following contact email address: dpo @studely It should be noted that Studely can:
Refuse the request for access: in this case, he must justify his decision and inform the applicant of the means and time limits of appeal allowing it to be contested.
Do not respond to requests that are obviously abusive, in particular because of their number, their repetitive or systematic nature.
Users are expressly informed that, for all data processed by Studely due to a legal obligation, their rights relating to their data may be limited. The request will be processed within a maximum of 30 (thirty) days from the date of receipt. If the request is incomplete, Studely will have to ask for supplements: the deadline is then suspended and runs again once these elements have been provided.
10.2. Right to data portability
The right to data portability only applies if the data is processed automatically and based on the prior consent of the person concerned or the execution of the contract. Also, Studely does not have to respond to a request for portability concerning personal data processed as part of its obligation to fight money laundering and the financing of terrorism. The user may therefore, in certain cases, request the portability of his personal data, held by the site. Studely.com, to another site, by complying with the following procedure: the user must make a request for the portability of their personal data to the data controller, by sending an email to the following address: dpo @studely Portability requests will be studied by Studely on a case-by-case basis.
10.3. Right to the limitation and opposition of data processing.
The user has the right to request the limitation or to oppose the processing of their data by Studely, for legitimate reasons, unless the processing meets a legal obligation. In order to request the limitation of the processing of their data or to express an opposition to the processing of their data, the user must follow the following procedure: the user must make a request to limit the processing of their personal data to the data controller, by sending an email to the address below. dpo @studely
10.4. Right to refer the matter to the competent supervisory authority
In the event that the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or, if he believes that one of the rights listed above has been infringed, he is entitled to refer the matter to the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or any competent judge.
This privacy policy can be viewed at any time on the Studely website. The publisher of the site reserves the right to modify it in order to guarantee its compliance with the law in force. Therefore, the user is invited to come and consult this privacy policy regularly in order to keep up to date with the latest changes that will be made to it. It is brought to the attention of the user that the last update of the privacy policy took place on 01/09/2021.
By browsing the site, the user certifies that he has read and understood this privacy policy and accepts its conditions, in particular with regard to the collection and processing of his personal data.
You can consult Treezor's privacy policy hither
