Privacy Policy

Nap&Up, registered under the number 824 004 485, is the publisher of the websites accessible at the addresses https://www.napandup.com and https://www.pachamama-solutions.com, and the mobile application available on the Apple Store and Google Store under the name “Nap&Up – La micro-sieste” (the “Sites”). It offers services such as the creation of resource spaces, notably through the provision of micro-nap and breastfeeding furniture within client companies and organizations (the “Clients”) (the “Services”).

Nap&Up, in its capacity as data controller, processes your personal data:

  • When you browse the Site;
  • When you interact with the Site, for example, by filling out an online form and/or subscribing to its newsletter;
  • When the Company contacts you to offer services or partnerships;
  • When you create an account and use the Services;
  • When you are a contact person for one of its clients, partners, or suppliers;
  • When you apply for a job at Nap&Up.

This privacy policy provides the required information under applicable laws regarding the collection and processing of your personal data in accordance with Law No. 78-17 of January 6, 1978, relating to information technology, files, and freedoms, and Regulation (EU) 2016/679 on the protection of individuals concerning the processing of personal data (the “GDPR”) (collectively referred to as the “Applicable Regulation”).

Additionally, Nap&Up uses “cookies” as part of the Site’s operation. For more information, you are invited to consult the “Cookie Management” policy available on the websites:

For more general information on the protection of personal data, you can consult the website of the French Data Protection Authority (CNIL): https://www.cnil.fr.

This privacy policy is subject to change. Nap&Up therefore invites you to consult it regularly.

DATE OF LAST UPDATE TO THIS PRIVACY POLICY: OCTOBER 2024

Purposes, legal basis, and retention period

Nap&Up collects and processes personal data about you for the purposes identified in the table below, which also identifies the legal basis of the processing and the retention period for each purpose.

At the end of the identified retention periods, the data may be kept to enable Nap&Up to fulfill its legal or regulatory obligations, as well as to assert its rights for any relevant period in light of the applicable statute of limitations. These processes are carried out based on Nap&Up’s compliance with legal obligations or legitimate interests, as part of intermediate archiving.

1. Sending newsletters and other commercial solicitations as requested on a professional basis, including managing subscriptions when you have opted in.

2. Operation and security of the Site. 

3. Improving the services provided by Nap&Up. 

4. Audience measurement and general traffic statistics. 

5. Creation of user accounts

6. Access and use of the Services. User assistance.

7. Management of favorites (audio). 

8. Evaluation of user usage.

9. Management of relationships with clients, partners, and suppliers of Nap&Up, particularly for contract management, invoicing, and disputes

10. Accounting records

11. Complaint management

12. Management of the client relationship, including tracking your satisfaction with service usage

13. Management of your application

14. Management of your requests to exercise rights

1. Legitimate interests of Nap&Up

2. Legitimate interests of Nap&Up

3. Legitimate interests of Nap&Up

4. Consent for the use of cookies and other trackers.

5. User account

6. User account

7. Legitimate interests of the user

8. Legitimate interests of the user

9. Legitimate interests of the user

10. Compliance with a legal obligation

11. Contract execution or legitimate interests of Nap&Up

12. Legitimate interests of Nap&Up

13. Legitimate interests of Nap&Up

14. Compliance with a legal obligation

1. 4 years from collection or last contact with the data subject, or until consent is withdrawn.

2. 13 months for the IP address and other connection data.

3. 13 months for the IP address and other connection data.

4. 13 months for the IP address and other connection data.

5. As long as the account is in use, with inactive accounts being purged after 12 months

6. As long as the account is in use, with inactive accounts being purged after 12 months

7. As long as the account is in use, with inactive accounts being purged after 12 months

8. Duration necessary to achieve the survey objective or until the right to object is exercised.

9. Duration of the relationship with the client, partner, or supplier, unless a change of contact is reported by the concerned client, partner, or supplier, or by yourself.

10. Legal retention period in intermediate archive (e.g., 10-year accounting obligation)

11. Duration of the contractual relationship.

12. 3 years from the date of collection or the last contact established with the concerned person

13. Duration of processing your application. 2 years if you do not object to the retention of your data by Nap&Up

14. Duration of request processing. Deletion of the identity verification document, if requested, once the verification has been completed.

Categories of data involved

Data you provide directly to Nap&Up

You may provide information about yourself during various interactions with Nap&Up.

This data mainly includes:

  • Contact details, such as first name, last name, title, email address, phone number, company name, city, and the purpose of your request;
  • Data related to your employer (company code);
  • Data about your online reservations (date, time, duration, and cocoon name);
  • Information about your background and professional experience.

 

Data Nap&Up collects indirectly

Nap&Up may collect data indirectly:

  • In managing its relationships with clients, partners, and suppliers. This data is usually transmitted to Nap&Up through the primary contact person at the client, supplier, or partner;
  • When using the Services: information about your audio favorites;
  • When accessing and using the Services: information about your usage of the application (connection, connection duration, connection time);
  • Nap&Up may collect technical browsing and interaction data on the Site (notably via cookies) as well as technical connection data.

Recipients of your data

The data collected and processed by Nap&Up for the purposes mentioned above may be communicated, as necessary, to:

  • Nap&Up’s customer service, marketing/communications, and technical departments;
  • Nap&Up’s administrative, accounting, and legal departments;
  • Service providers specializing in the technical management of Nap&Up’s products and services;
  • Nap&Up’s human resources department, as well as the relevant hiring manager if applicable;
  • Administrative or judicial authorities authorized by French law.

Nap&Up may also grant access to your data to companies providing services to it. These providers may only use the data to perform their services and are contractually required to protect the personal data they are given.

The reserved time slots will be visible to other users of the application, but the identity of the person who booked the slots will not be revealed.

The number of active users in a month (users who booked a time slot during the relevant month), as well as evaluations, are shared with the user’s employer, without revealing the identities of the users concerned.

Transfers outside the European Union

Your data may be transmitted to certain Nap&Up service providers located outside the European Union.

These transfers are, depending on the service providers involved, governed by standard contractual clauses, the Data Framework Agreement, or binding corporate rules (BCR), possibly supplemented by additional measures. You can request more information and/or access to these clauses by contacting Nap&Up via email at contact@napandup.com.

Your rights

You may exercise the following rights over your personal data, under the conditions and limits set by the Applicable Regulation:

  • Right of access and information: You have the right to be informed clearly, transparently, and comprehensibly about how your personal data is processed. You also have the right to obtain confirmation whether or not personal data concerning you is being processed, and if so, to access that data by requesting a copy.

  • Right to rectification: You have the right to request that any incomplete and/or inaccurate personal data be corrected and/or supplemented.

  • Right to withdraw consent: Where processing is based on your consent, you can withdraw your consent at any time.

  • Right to object: You can object to the processing of your personal data for reasons related to your specific situation. In some cases, this right may not be exercisable, for example, if there are legitimate and compelling reasons, or for the establishment, exercise, or defense of legal claims.

  • Right to data portability: You have the right to receive the personal data you provided to Nap&Up so that you can transmit it to another data controller. This right applies only if the processing of your data is based on your consent or the execution of a contract and if it is carried out using automated methods.

  • Right to restriction of processing: In certain cases, you have the right to request the restriction of your personal data’s processing. This right allows you to request that some of your data be temporarily frozen if the conditions set by law are met.

  • Right to erasure: In certain cases, you can request the erasure of your personal data (for example, if the data is outdated and no longer necessary).

  • Right to human intervention in profiling or automated decision-making: If profiling or automated decision-making occurs, you have the right to object and to request human intervention.

  • Right to define post-mortem instructions: You can define instructions on how your personal data should be handled after your death.

If you wish to exercise any of these rights, you can contact Nap&Up by email at contact@napandup.com or by postal mail at the following address: Nap&Up, 24 rue du Sergent Bobillot, 93100 Montreuil, France. You will be required to prove your identity.

If you believe your rights have not been respected, you can file a complaint with the French Data Protection Authority (CNIL): https://www.cnil.fr

Data Protection Officer

Nap&Up has not appointed a Data Protection Officer, but you can contact the data protection representative designated by Nap&Up by writing to them at the following address:

By email: contact@napandup.com
or

by postal mail at the following address: Nap&Up, 103 rue Jean Jaurès, 92800 Puteaux, addressed to the data protection representative.

 

Security

Nap&Up applies various measures to protect your data. A firewall is present in the infrastructure of the public site you access, and authentication and passwords are encrypted.

However, Nap&Up would like to draw your attention to the fact that, although Nap&Up implements appropriate technical and organizational means to protect against unauthorized or unlawful processing of personal information and against any accidental loss, damage, or destruction of such information, the company cannot guarantee the absolute security of personal data.