This Privacy Notice for Thingers, SASU ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://thingers.world, or any website of ours that links to this Privacy Notice.

• Engage with us in other related ways, including any sales, marketing, or events.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@thingers.world

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.

• What personal information do we process? We may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

• Do we process any sensitive personal information? No, we do not process sensitive personal information.

• Do we collect any information from third parties? No, we do not collect any information from third parties.

• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with the law. 

• In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.

• How do we keep your information safe? We implement organizational and technical processes and procedures to protect your personal information. However, no electronic transmission over the internet can be guaranteed to be 100% secure. 

• What are your rights? Depending on your location, you may have certain rights regarding your personal information. 

• How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request or by contacting us.

Want to learn more about what we do with any information we collect? Review the Privacy Policy in full.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Email addresses.

Sensitive Information

We do not process sensitive information.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.

• To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues.

• To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

• To fulfill and manage your orders. We may process your information to fulfill and manage your orders, payments, returns, and exchanges made through the Services.

• To enable user-to-user communications. We may process your information if you choose to use any of our offerings that allow for communication with another user.

• To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.

  
  

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, such as your consent, compliance with laws, providing you with services, fulfilling contractual obligations, protecting your rights, or serving legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. 

• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.

• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation.

• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.

• For investigations and fraud detection and prevention.

• For business transactions provided certain conditions are met.

• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim.

• For identifying injured, ill, or deceased persons and communicating with next of kin.

• If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse.

• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

We may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

  
  

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements, tailor advertisements to your interests, or send abandoned shopping cart reminders (depending on your communication preferences). The third parties and service providers use their technology to provide advertising about products and services tailored to your interests, which may appear either on our Services or on other websites.

To the extent these online tracking technologies are deemed to be a "sale"/"sharing" (which includes targeted advertising, as defined under applicable laws) under applicable US state laws, you can opt out of these online tracking technologies by submitting a request as described below under section "DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?"

Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 years old or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services.

If we learn that personal information from users under 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at hello@thingers.world.

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you may have certain rights regarding your personal information.

In some regions (like the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right to:

• Request access to and obtain a copy of your personal information.

• Request rectification or erasure of your personal information.

• Restrict the processing of your personal information.

• If applicable, request data portability.

• Not be subject to automated decision-making.

In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us at hello@thingers.world

If you are located in the EEA or UK and believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or the UK data protection authority. If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Withdrawing your consent

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us. However, this will not affect the lawfulness of the processing before its withdrawal.

Opting out of marketing and promotional communications

You can unsubscribe from our marketing and promotional communications at any time by clicking the unsubscribe link in the emails we send or by contacting us at hello@thingers.world. However, we may still communicate with you for non-marketing purposes.

Cookies and similar technologies

Most web browsers accept cookies by default. You can usually choose to remove or reject cookies in your browser settings, but this may affect certain features or services of our Services.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature that you can activate to signal your privacy preference. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. Therefore, we do not currently respond to DNT browser signals.

If a standard for online tracking is adopted that we must follow in the future, we will update this Privacy Notice accordingly.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

• A. Identifiers: Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name. Collected: NO

• B. Personal information as defined in the California Customer Records statute: Name, contact information, education, employment, employment history, and financial information. Collected: NO

• C. Protected classification characteristics under state or federal law: Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data. Collected: NO

• D. Commercial information: Transaction information, purchase history, financial details, and payment information. Collected: NO

• E. Biometric information: Fingerprints and voiceprints. Collected: NO

• F. Internet or other similar network activity: Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements. Collected: NO

• G. Geolocation data: Device location. Collected: NO

• H. Audio, electronic, sensory, or similar information: Images and audio, video or call recordings created in connection with our business activities. Collected: NO

• I. Professional or employment-related information: Business contact details, work history, and professional qualifications if you apply for a job with us. Collected: NO

• J. Education Information: Student records and directory information. Collected: NO

• K. Inferences drawn from collected personal information: Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics. Collected: NO

• L. Sensitive personal Information: Not applicable. Collected: NO

We may also collect other personal information through the following:

We may collect additional personal information in instances where you interact with us in person, online, or by phone or mail in the following contexts:

• Receiving help through our customer support channels.

• Participation in customer surveys or contests.

• Facilitation in the delivery of our Services and to respond to your inquiries.

  
  

Retention of Collected Data

We will use and retain the collected personal information as needed to provide the Services or for:

• Category H (Audio, electronic, sensory, or similar information) – As long as the user has an account with us.

  
  

Sources of Personal Information

Learn more about the sources of personal information we collect in "WHAT INFORMATION DO WE COLLECT?"

How We Use and Share Personal Information

Learn more about how we use your personal information in the section, "HOW DO WE PROCESS YOUR INFORMATION?"

Will your information be shared with anyone else?

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information in the section, "WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?"

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered "selling" of your personal information.

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future belonging to website visitors, users, and other consumers.

Your Rights

You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. These rights include:

• Right to know whether or not we are processing your personal data.

• Right to access your personal data.

• Right to correct inaccuracies in your personal data.

• Right to request deletion of your personal data.

• Right to obtain a copy of your personal data that you previously shared with us.

• Right to opt out of targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects.

Depending on your state, you may also have:

• Right to access categories of personal data processed (Minnesota privacy law).

• Right to obtain a list of categories of third parties to whom we disclosed personal data (California, Delaware privacy laws).

• Right to obtain a list of specific third parties to whom we disclosed personal data (Minnesota, Oregon privacy laws).

• Right to review, understand, and question automated decision-making (Minnesota privacy law).

• Right to limit use and disclosure of sensitive personal data (California privacy law).

• Right to opt out of sensitive data collection (Florida privacy law).

  
  

How to Exercise Your Rights

To exercise these rights, you can contact us by submitting a data subject access request, emailing us at hello@thingers.world, or using the contact details at the bottom of this document.

Request Verification

Upon receiving your request, we will need to verify your identity. If we cannot verify your identity, we may request additional information for verification and security purposes.

Appeals

If we decline your request, you may appeal our decision by emailing us at hello@thingers.world. If your appeal is denied, you may submit a complaint to your state attorney general.

California "Shine The Light" Law

California Civil Code Section 1798.83 permits California residents to request and obtain information about categories of personal information disclosed to third parties for direct marketing. If you are a California resident, submit your request in writing to hellot@thingers.world.

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have additional rights regarding your personal information.

Residents of these states may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, obtain a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

Categories of Personal Information We Collect

We have collected the following categories of personal information in the past twelve (12) months:

• Identifiers, such as contact details (real name, alias, postal address, telephone number, email address, and account name).

• Professional or employment-related information, such as job history or qualifications.

• Transaction information, including purchase history and payment details.

• Internet or other network activity, such as browsing history and interactions with our Services.

  
  

How We Use and Share Personal Information

We use your personal information to provide and improve our Services, process transactions, communicate with you, and for security and compliance with the law. We may share this data with service providers, business partners, and regulatory bodies when necessary.

We do not sell or share personal information for monetary gain. Any disclosure is done strictly for business or operational purposes as outlined in this Privacy Notice.

Your Rights

As a U.S. resident, you may have the right to:

• Access your personal data and request details on how we process it.

• Request correction of inaccurate personal data.

• Request deletion of your personal data.

• Obtain a copy of the personal data you previously shared with us.

• Opt out of targeted advertising, data sales, or profiling.

Depending on your state of residence, additional rights may apply, such as:

• The right to know the categories of personal data being processed.

• The right to object to automated decision-making.

• The right to restrict the use of sensitive data.

  
  

How to Exercise Your Rights

To exercise these rights, contact us at hello@thingers.world or submit a data subject access request. You may also designate an authorized agent to act on your behalf, provided they submit valid proof of authorization.

If we decline your request, you may appeal by emailing us at hello@thingers.world. If your appeal is denied, you may file a complaint with your state attorney general.

12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes, we may notify you via email or by prominently posting a notice on our website.

We encourage you to review this Privacy Notice frequently to stay informed about how we protect your information.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact our Data Protection Officer (DPO) by email at hello@thingers.world, or by mail at:

Thingers, SASU
122 Rue Amelot
Paris 75011, France

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, request corrections, or request deletion of your personal information.

To make such a request, please contact us at hello@thingers.world.

If you would like to update your preferences, correct inaccuracies, or delete your account, please submit a data subject access request.

We will consider and respond to all requests in accordance with applicable data protection laws.