PRIVACY POLICY – LINEBERTY

Last update: 06/13/2025

Identification

The company Lineberty (hereinafter "Lineberty"), registered under SIREN number 808 240 063 on December 11, 2014, with its head office located at 23 rue d'Anjou, 75008 Paris, and with intra-community VAT number FR46808240063.

Unless otherwise indicated at the time of ticketing, Lineberty acts as the data controller for your personal data.

What is the purpose of our Privacy Policy?

Lineberty, which publishes the Lineberty digital queue management solution, places great importance on protecting your personal data. This policy reflects our commitment to comply with applicable regulations, particularly the General Data Protection Regulation (GDPR).

It aims to transparently inform you about the data we collect, the reasons for collection, and how it is processed as part of the service provided.

Who is our Privacy Policy for?

This privacy policy is intended for any user of our Lineberty service aged at least 16 years. If you are under 16, use of the service requires prior consent from a legal representative to be sent to: data.protection@lineberty.com.

Why do we process your personal data and on what basis?

Data is processed for the following purposes:

- To issue and manage your digital ticket;

- To notify you by SMS or email of your upcoming turn or appointment;

- To ensure proper operation and security of our service;

- To manage complaints and service-related requests.

- To manage specific user communication needs linked to certain use cases, which are systematically specified at the time of reservation.

What personal data do we process and for how long?

We have summarized below the categories of personal data and their respective retention periods:

• Personal identification data (e.g.: name, first name, etc.) and phone number or email to receive our technical and alert messages, retained by default until the end of the day following access to the service for which you have taken a ticket or appointment, or until a potential later date if specified when the ticket is issued
• Connection data (e.g.: logs, IP address, etc.) retained for a duration of 1 year.
• Geolocation data retained by default until the end of the day following access to the service for which you have taken a ticket or appointment, or until a potential later date if specified when the ticket is issued, and which, for certain locations, determine whether you are authorized to access the service. This data is only processed for locations requiring a restriction on the maximum distance between the user and the site.

After the applicable retention periods expire, your personal data is irreversibly deleted and can no longer be communicated to you. At most, we may only retain anonymous data for statistical purposes.

Please also note that in case of litigation, we are required to retain all your data for the entire duration of the case processing, even after the expiration of the above-mentioned retention periods.

What rights do you have to control the use of your personal data?

In accordance with regulations, you have the following rights:

- Right of access, rectification, and erasure;

- Right to restriction and objection;

- Right to data portability;

- Right to define post-mortem directives.

Any request may be sent to: data.protection@lineberty.com.

Who can access your personal data?

Your personal data is processed by our teams and by our technical service providers solely to ensure our service operates. We ensure all our providers strictly comply with data protection regulations.

Can your personal data be transferred outside the European Union?

Personal data processed by our Lineberty solution is hosted exclusively on servers located within the European Union. Additionally, we do our utmost to use only technical tools with servers also located in the EU. If this is not the case, we ensure that such tools implement the required safeguards to maintain the confidentiality and protection of your personal data.

How do we protect your personal data?

Lineberty implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. We draw on market standards, particularly ISO 27001. Implemented measures include:

- Encryption of communications;

- Access traceability;

- Team awareness training;

- Data breach management protocols.

Do we use cookies?

Lineberty does not use cookies as part of the digital ticketing process.

Do we use subcontractors?

Lineberty uses subcontractors to ensure the smooth operation of its service. We ensure that these subcontractors comply with data protection regulations and implement appropriate technical and organizational measures to protect your personal data.

For the proper functioning of our service, we use the following subcontractors:

- Google Cloud Platform (GCP) for hosting our servers and managing our databases in Belgium;

- Google Workspace for sending transactional emails and notifications;

- Infobip for sending transactional SMS and notifications.

Who can you contact for more information?

For any questions, you can contact our data protection team at the following email address: data.protection@lineberty.com.

How can you contact the CNIL?

In case of dispute, you can contact the CNIL: 3 Place de Fontenoy – TSA 80715, 75334 Paris Cedex 07 – Phone: 01 53 73 22 22.

Can the Privacy Policy be modified?

We reserve the right to modify this policy at any time to reflect new processing or legislative changes.