GDPR Policy

As the data controller, TYNEGO SAS (Treelys brand) is committed to respecting and facilitating the exercise of your personal data protection rights, in accordance with the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and the amended Data Protection Act.

1. Who is concerned?

This policy applies to anyone whose personal data is processed by Treelys, including:

• Customers who have placed an order on the Treelys.com website
• Visitors to the Treelys.com website
• Subscribers to the Treelys newsletter
• Anyone who has contacted our customer service

2. Your rights in detail

2.1 Right of access (Article 15 GDPR)

You have the right to obtain confirmation as to whether or not data concerning you is being processed, and, where that is the case, to obtain a copy of the data as well as the following information: purposes of the processing, categories of data, recipients, retention periods.

2.2 Right to rectification (Article 16 GDPR)

You have the right to obtain the rectification of inaccurate data concerning you and to have incomplete data completed.

2.3 Right to erasure / “Right to be forgotten” (Article 17 GDPR)

You can request the deletion of your personal data in the following cases: the data is no longer necessary for the purposes for which it was collected; you withdraw your consent; you object to the processing; the data has been unlawfully processed.

This right does not apply when processing is necessary for compliance with a legal obligation (e.g., retention of invoices).

2.4 Right to restriction of processing (Article 18 GDPR)

You can request the temporary suspension of the processing of your data, particularly if you contest the accuracy of the data or if you have objected to the processing (during the verification period).

2.5 Right to data portability (Article 20 GDPR)

You have the right to receive your data in a structured, commonly used and machine-readable format. This right applies only to data processed based on your consent or in the context of the performance of a contract.

2.6 Right to object (Article 21 GDPR)

You can object at any time to the processing of your data when it is based on the legitimate interest of the data controller, particularly for direct marketing purposes.

2.7 Right to withdraw consent

Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before such withdrawal. You can unsubscribe from our newsletter at any time via the unsubscribe link in each email.

2.8 Right concerning automated decision-making (Article 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

3. How to exercise your rights?

To exercise any of these rights, you can contact us by email at the following address: contact@treelys.com

Your request must be accompanied by proof of identity if necessary (to protect your data from unauthorized access). We commit to responding to you within a maximum of 30 days from the receipt of your request. This period may be extended by an additional two months in the case of complex or numerous requests, in which case we will inform you.

4. Right to lodge a complaint with the CNIL

If you believe that the processing of your personal data does not comply with the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07
Website: www.cnil.fr
Phone: +33 (0)1 53 73 22 22

5. Data transfers outside the European Union

Some of our service providers (including Google, Meta, TikTok, Klaviyo, Mailchimp, Shopify) are established outside the European Union, particularly in the United States. These transfers are governed by:

• Standard contractual clauses approved by the European Commission
• Recognized certification mechanisms (EU-US Data Privacy Framework)
• Appropriate safeguards within the meaning of Article 46 of the GDPR

Upon simple request sent to contact@treelys.com, you can obtain a copy of the safeguards put in place to govern these transfers.

6. Data Protection Officer (DPO)

TYNEGO SAS is not legally obliged to appoint a Data Protection Officer. For any questions regarding the protection of your data, you can directly contact the data controller at the following address: contact@treelys.com

7. Amendments

This policy may be updated at any time to reflect legal or regulatory changes. You will be informed of any substantial modification by email or via a visible notice on the site.

Last updated: May 2025