Legal notice

ARTICLE 1. PERSONAL DATA

As part of its service, Sabre will process personal data of its Customers as a data controller.

1.1 Data processed by Sabre as data controller

1.1.1 Identity of the data controller

The company responsible for the collection and processing of data is Sabre, a simplified joint stock company with registered office at 4 allée des Vergers, building A, 78240 Aigremont, France. SIREN: 390649044.

1.1.2 Identity of the Data Protection Officer

The Data Protection Officer is the law firm Deshoulières Avocats Associés, 121 boulevard de Sébastopol, 75002 Paris, France. SIREN 879 733 947, contact@deshoulieres-avocats.com.

1.1.3 Data collected from customers

In the course of its contractual relationship, Sabre may collect and process information from its Customers, namely:

  • Family name:
  • First name:
  • Email:
  • Phone number:
  • Land mail address:
  • Bank details.

1.1.4 Purposes of the collection of personal data

The data collected during the contractual relationship are subject to automated processing, of which the end-purposes are as follows:

  • Execute contractual commitments;
  • Follow up on the service rendered by Sabre;
  • Contact Customer contacts;
  • Ensure and improve the safety of services;
  • Initiate legal proceedings, where required;
  • Check the identity of a Customer;
  • Send information and contact the Customer, including by e-mail, telephone and push notification;
  • Prevent illicit or illegal activities from taking place.

1.1.5 Legal basis of the processing

The legal basis for the data collected is a contractual relationship.

1.1.6 Destinataires des données

The data collected can only be consulted by the Sabre management team, as well as by personnel in charge of the Customer’s dossier, doing so within the limits strictly necessary for the execution of the contractual commitments.

These data, whether in individual or aggregated form, are never made freely viewable by a third party.

1.1.7 Duration of retention of personal data

The personal data collected is kept for the duration of the contractual relationship, and for the time during which Sabre may be held liable.

Once the retention period has expired, Sabre will permanently delete the data of the persons concerned without keeping a copy.

1.1.8 Security and confidentiality of personal data

Personal data is kept in secure conditions, using state-of-the-art technical means, in compliance with the provisions of the General Data Protection Regulation and the national legislation in force.

1.1.9 Minimization of data

Sabre may also collect and process any data voluntarily submitted by its Customers.

Sabre supports its Customers in providing only personal data that is strictly necessary for the performance of the contractual obligations.

Sabre undertakes to keep and process only the data strictly necessary for its professional activities, and will delete, as soon as possible, any data received that is not useful for its activities.

1.1.10 Respect for rights

Sabre customers have the following rights regarding their personal data, which they may exercise by writing to Sabre's postal address or by sending an email request to service-client@sabre.fr

1.1.10.1 Right to information, access and communication of data

Sabre's customers have the ability to access their personal information.

Due to Sabre's obligation of security and confidentiality in the processing of personal data, requests will only be processed if Customers provide proof of their identity, in particular by submitting a scan of a valid identity document (in the case of a request via the dedicated electronic form) or a signed photocopy of their valid identity document (in the case of a written request), both accompanied by the words “I certify on my honour that the copy of this identity document is a true copy of the original. Done at ... on ...", followed by their signature.

To help them with this procedure, Customers will find here a template letter drawn up by the CNIL (French Data Privacy Authority).

1.1.10.2 Right to rectify date and delete data and the right to be forgotten

Sabre's customers have the right to request the rectification, updating, blocking or deletion of their personal data that may be inaccurate, erroneous, incomplete or obsolete.

Sabre customers may also establish general and specific directives regarding the disposition of personal data after their death. Where applicable, the heirs of a deceased individual may request that the death of their loved one be taken into consideration and/or that any necessary updates be made.

To help them with this procedure, Customers will find here a template letter drawn up by the CNIL (French Data Privacy Authority).

1.1.10.3 Right to object to data processing

You have the possibility to object to the processing of your personal data.

To do so, you should send an email to the following address: service-client@sabre.fr, and, in this email, you specify the data that you wish to see deleted as well as the reasons justifying this request, except in the case of commercial prospecting.

1.1.10.4 Right to data portability

Sabre's customers have the right to receive the personal data they have provided to Sabre in a transferable, open and readable format.

1.1.10.5 Right to restrict processing

Sabre's customers have the right to request that Sabre's processing of their personal data be restricted. This means that their data will only be stored and not used by Sabre.

1.1.10.6 Withdrawal of consent

Your consent is essential for Sabre to process your data. However, you may withdraw your consent at any time. Such withdrawal will result in the deletion of your personal data.

However, services that require Sabre to process your data will no longer be available.

1.1.10.7 Response times

Sabre undertakes to reply to any request for access, rectification or opposition or any other additional request for information within a reasonable timeframe, which shall not exceed 1 month from receipt of the request.

1.1.10.8 Complaint to the competent authority

If Sabre's Customers consider that Sabre is not complying with its obligations with respect to their personal data, they may make a complaint or request to the competent authority. In France, the competent authority is the CNIL to which they can send a request < href="https://www.cnil.fr/fr/plaintes/internet" title="here">here.

1.1.11 Transfer of collected data

1.1.11.1 Transfers to partners

Sabre uses authorized service providers to facilitate the collection and processing of data. These service providers may be located outside of the European Union and may have access to the data collected.

Sabre has previously ensured that its service providers have implemented adequate safeguards and comply with strict conditions regarding confidentiality, use and protection of data.

Sabre uses the following subcontractors:

List of Subcontractors
Partner Country of destination Treatment carried out Guarantees
Klaviyo USA Email service

https://www.klaviyo.com/marketing-resources/data-privacy

Coaxial France

IT service provider

https://privacy.microsoft.com/fr-fr/privacystatement

Shopify Canada

Website hosting

https://www.shopify.com/legal/privacy
LM expertise France

Chartered Accountant

See contractual clause

1.1.11.2 Transfer on requisition or court order

Customers also agree that Sabre may disclose the data collected to any person upon request of a governmental authority or court order.

1.1.11.3 Transfer in connection with a merger or acquisition

Were Sabre to become involved in a merger, sale of assets, financing transaction, liquidation or bankruptcy or in an acquisition of all or part of its business by another company, Customers consent to the transfer, to that company, of the data collected by Sabre and Customers further consent to that company replacing Sabre in the processing of personal data as described in these Terms and Conditions of Service.