Privacy Policy

Introduction

This Privacy Policy aims to transparently inform So Sponge users ("Users", "you", "your") about the collection, use and protection of their personal data. This data only concerns natural persons (contact details, identity).

This policy also specifies your rights relating to your data and any potential recipients of this information.

We invite you to read this document carefully to understand our data processing practices.

Collection and Use of Personal Data

So Sponge collects and processes your personal data when you use the website www.sosponge.com.

Personal data collected is retained only for the duration necessary to fulfil its purpose, then permanently deleted from our databases.

You may access your personal data, modify it or request its deletion at any time by contacting So Sponge.

Recipients of Personal Data

Your personal data is intended exclusively for So Sponge employees and is neither sold nor shared with third parties, except the technical processors required to run the site (hosting, email delivery, automated assistant).

Data Security and Confidentiality

So Sponge implements all necessary technical and organisational measures to guarantee the protection, confidentiality and security of the personal data collected, in order to prevent any alteration, destruction or unauthorised access.

However, we remind you that the use of the Internet carries inherent risks, and we cannot guarantee absolute security of data transmitted online.

Website assistant

The site offers an automated assistant that answers questions from the content published on sosponge.com. When you use it, we record your messages, the answers given, the page viewed, a non-reversible fingerprint of your IP address and the browser type. This data is used to keep the service secure and to improve the quality of the answers (legitimate interest). Conversations are kept for 90 days and then deleted. If you send a contact request from the assistant, the exchange is attached to your request and kept with it.

Answers are generated by an artificial intelligence model provided by Anthropic, acting as a processor: your messages are sent to it to produce the answer and are not used to train its models. This processing may involve a transfer of data outside the European Union, governed by standard contractual clauses. Do not enter sensitive data in the conversation. Your contact details are only requested if you choose to send a request.

Advertising and conversion measurement

So Sponge advertises its products on third-party services, including Google Ads and ChatGPT ads (OpenAI Ads). When you reach the site from one of these ads, the page address contains a technical click identifier provided by the advertising network (the gclid parameter for Google, oppref for OpenAI). This identifier contains neither your name, nor your email address, nor your IP address; it only lets the network know that an ad led to a contact request, a started order or a purchase.

The measurement tools of these networks (Google Ads, OpenAI pixel) are only loaded after you agree in the consent banner, where you can refuse them at any time. Independently of the pixel, our server may send the network the event type (request, started order, purchase), the amount and the product reference, together with the click identifier, unless you refused the corresponding service in the banner. No personal data is sent through this channel. These processing operations rely on your consent for cookies and on our legitimate interest in measuring the effectiveness of our campaigns for the rest. Measurement data is retained by the networks under their own policies (Google: policies.google.com/privacy; OpenAI: openai.com/policies/privacy-policy).

Your Rights Regarding Your Personal Data

In accordance with applicable data protection regulations, you have the following rights:

  • Right to information: You have the right to obtain clear, complete and understandable information about the use of your personal data.
  • Right of access: You may request a copy of the personal data we hold about you.
  • Right of rectification: You may request the correction of your personal data if it is incorrect, outdated or incomplete.
  • Right to erasure ("right to be forgotten"): You may request the deletion of your personal data under certain conditions.
  • Right to object to direct marketing: You may refuse to receive promotional communications from us at any time.
  • Right to restriction of processing: In certain circumstances, you may limit the use of your personal data.
  • Right to data portability: You may request to receive your personal data in a structured format in order to transfer it to another service if necessary.

To exercise these rights, you may contact us at the following address: guirec@sosponge.com

Complaint to the CNIL

If you believe that So Sponge does not comply with data protection regulations, you have the right to lodge a complaint with the Commission Nationale de l Informatique et des Libertes (CNIL):

Postal address: 3 Place de Fontenoy, TSA 80715, 75334 PARIS CEDEX 07, France
Website: www.cnil.fr