Privacy Policy

1. Data controller

The data controller is tukio.one, headquartered in Paris, France. For any questions regarding the protection of your data, you can contact our Data Protection Officer (DPO) at: dpo@tukio.one.

2. Data collected

We collect the following categories of data:

• Identification data : name, surname, email address, phone number.
• Professional data (providers) : SIRET, company name, professional address.
• Payment data : bank details (processed by Stripe, not stored on our servers).
• Navigation data : IP address, browser type, pages visited.
• Content data : messages, reviews, photos and published descriptions.

3. Processing purposes

• User account management and authentication.
• Connecting clients with service providers.
• Processing bookings and payments.
• Sending booking-related notifications.
• Improving our services and user experience.
• Fraud prevention and platform security.
• Compliance with legal and tax obligations.

4. Legal basis

Data processing is based on the following legal grounds: contract performance (for account and booking management), consent (for analytics cookies and commercial prospecting), legitimate interest (for security and fraud prevention), and legal obligation (for tax and accounting obligations).

5. Retention period

• Account data : retained for the duration of account use, then 3 years after the last activity.
• Booking data : retained 5 years after the service (accounting obligations).
• Payment data : retained by Stripe according to its retention policy.
• Navigation data : retained for a maximum of 13 months.
• Messages : retained for the duration of the account, then anonymised.

6. Data recipients

Your data may be shared with the following recipients: the Platform's technical providers (hosting, payment, emailing), event service providers in the context of a booking, and competent authorities in case of legal obligation. We never sell your data to third parties.

7. Transfers outside the European Union

Some data may be transferred to countries outside the European Union through the use of third-party services (Stripe, cloud hosting). These transfers are governed by standard contractual clauses approved by the European Commission or by adequacy decisions.

8. Your rights (Articles 15 to 21 of GDPR)

In accordance with the General Data Protection Regulation, you have the following rights:

• Right of access (Art. 15) : obtain confirmation of the processing of your data and receive a copy.
• Right of rectification (Art. 16) : correct inaccurate or incomplete data.
• Right to erasure (Art. 17) : request the deletion of your data under the conditions provided.
• Right to restriction (Art. 18) : obtain restriction of processing in certain cases.
• Right to data portability (Art. 20) : receive your data in a structured and readable format.
• Right to object (Art. 21) : object to the processing of your data on legitimate grounds.

To exercise these rights, contact us at dpo@tukio.one. In case of complaint, you can contact the CNIL (www.cnil.fr).

9. Cookies

For more information about the use of cookies, please see our Cookie Policy.

10. Data Protection Officer

Our Data Protection Officer can be reached at: dpo@tukio.one. They are your primary contact for any questions regarding the protection of your personal data.

11. Modifications

This privacy policy may be modified at any time. Users will be informed of any substantial modification by email or notification on the Platform. The date of the last update is indicated below.