Politique de Confidentialité

Data Controller

SocietyPopUp is a development project (MVP) without commercial activity.

The controller of personal data collected on this site is the publication director.

GDPR Contact: contact@societypopup.com

Important note: This site is a technical demonstration. No payment data is collected. No real financial transactions are processed.

As part of this MVP, we only collect data necessary for the demonstration's functionality:

Surname, first name, email address (collected when creating an account via Firebase Authentication).

Profile picture and optional information you choose to share.

Technical cookies, IP address, browser type and version.

Search history, listing views, and booking simulations.

Messages exchanged between users via the messaging functionality.

⚠️ No payment data is collected (no credit cards, no IBAN, no identity documents).

In accordance with GDPR Article 6, we process your data on the following legal bases:

Service execution: account creation, booking simulations, user communication via messaging.
Legitimate interest: platform improvement, feature testing, anonymized statistical analysis.
Consent: use of non-essential analytics cookies, browsing preferences.

Right of access: obtain a copy of your personal data.
Right of rectification: correct your data from your personal space.
Right to erasure: request deletion of your account and data.
Right to object: object to direct marketing via unsubscribe link.
Right to portability: receive your data in a structured format.
Right to lodge a complaint: with the CNIL (www.cnil.fr) or your local data protection authority.

As an MVP project, we apply limited retention periods:

Account data: retained during active service use.

Activity data (searches, booking simulations): retained during the test project.

Messages between users: retained while the account is active.

Account deletion: your data is permanently deleted within 30 days maximum.

You can request immediate deletion of all your data at any time.

Your data is shared only with technical providers necessary for site operation:

Firebase (Google Cloud Platform): hosting, Firestore database, authentication, and file storage.

Location: Firebase is hosted in Europe (GDPR compliant).

No third-party commercial sharing: your data is never sold or shared for marketing purposes.

Competent authorities: only in case of legal obligation or judicial request.

Firebase (Google) is GDPR compliant and has appropriate certifications.

You can manage your cookie preferences at any time from your browser settings or our cookie banner.