GDPR Policy

As the data controller, TYNEGO SAS (Treelys brand) undertakes to respect and facilitate the exercise of your rights regarding the protection of personal data, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the amended French Data Protection Act.

1. Who does this concern?

This policy applies to anyone whose personal data is processed by Treelys, including:

• Customers who have placed an order on the Treelys.com website
• Visitors to the Treelys.com website
• Subscribers to the Treelys newsletter
• Anyone who has contacted our customer service department

2. Your rights in detail

2.1 Right of access (Article 15 GDPR)

You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, where it is, to obtain a copy of it along with the following information: the purposes of the processing, the categories of data, the recipients, and the retention periods.

2.2 Right to rectification (Article 16 GDPR)

You have the right to obtain the rectification of inaccurate data concerning you and to complete incomplete data.

2.3 Right to erasure / “Right to be forgotten” (Article 17 GDPR)

You may request the deletion of your personal data in the following cases: the data is no longer necessary in relation to the purposes for which it was collected; you withdraw your consent; you object to the processing; or the data has been processed unlawfully.

This right does not apply where processing is necessary to comply with a legal obligation (e.g., retaining invoices).

2.4 Right to restriction of processing (Article 18 GDPR)

You may request the temporary suspension of the processing of your data, particularly if you dispute the accuracy of the data or have objected to the processing (during the verification period).

2.5 Right to data portability (Article 20 GDPR)

You have the right to receive your data in a structured, commonly used, and machine-readable format. This right applies only to data processed on the basis of your consent or as part of the performance of a contract.

2.6 Right to object (Article 21 GDPR)

You may object at any time to the processing of your data when it is based on the legitimate interest of the data controller, particularly for direct marketing purposes.

2.7 Right to withdraw consent

Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal. You may unsubscribe from our newsletter at any time using the unsubscribe link included in each email.

2.8 Right relating to automated decision-making (Article 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

3. How can you exercise your rights?

To exercise any of these rights, you may contact us by email at the following address: contact@treelys.com

Your request must be accompanied by proof of identity where necessary (to protect your data against unauthorized access). We undertake to respond within a maximum of 30 days from receipt of your request. This period may be extended by an additional two months in the event of a complex or numerous request, in which case we will inform you.

4. Right to lodge a complaint with the CNIL

If you believe that the processing of your personal data does not comply with the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

National Commission for Information Technology and Civil Liberties (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: www.cnil.fr
Telephone: +33 (0)1 53 73 22 22

5. Transfers of data outside the European Union

Some of our service providers (particularly Google, Meta, TikTok, Klaviyo, Mailchimp, and Shopify) are established outside the European Union, particularly in the United States. These transfers are governed by:

• Standard contractual clauses approved by the European Commission
• Recognized certification mechanisms (EU-U.S. Data Privacy Framework)
• Appropriate safeguards within the meaning of Article 46 of the GDPR

Upon simple request sent to contact@treelys.com, you may obtain a copy of the safeguards implemented to govern these transfers.

6. Data Protection Officer (DPO)

TYNEGO SAS is not legally required to appoint a Data Protection Officer. For any questions relating to the protection of your data, you may contact the data controller directly at the following address: contact@treelys.com

7. Changes

This policy may be updated at any time to reflect legal or regulatory developments. You will be informed of any substantial changes by email or through a clearly visible notice on the website.

Last updated: May 2025