templates/pages/privacy_policy.html.twig line 1

Open in your IDE?
  1. <!DOCTYPE html>
  2. <html lang="en">
  3. <head>
  4. <meta charset="UTF-8" />
  5. <meta name="viewport" content="width=device-width, initial-scale=1" />
  6. <meta
  7. property="og:image"
  8. content="https://care.pentabell.com/assets/img/logo.jpg"
  9. />
  10. <title>{% block title %}Expert Care - PRIVACY POLICY{% endblock %}</title>
  11. <link rel="icon" href="{{ asset('assets/img/dashboard/logo.svg') }}" />
  13. <link
  14. rel="stylesheet"
  15. href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css"
  16. />
  17. <link
  18. href="https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.0/css/bootstrap.min.css"
  19. rel="stylesheet"
  20. />
  22. <script
  23. src="https://cdnjs.cloudflare.com/ajax/libs/bootstrap/5.3.0/js/bootstrap.bundle.min.js"
  24. defer
  25. ></script>
  26. </head>
  28. <body>
  29. <div class="container mt-5 mb-5">
  30. <div class="row">
  31. <div class="col-md-8 offset-md-2">
  32. <h1>PRIVACY POLICY – EXPERT CARE</h1>
  33. <p class="text-muted">Last Updated: May 26,2026</p>
  35. <section class="mt-4">
  36. <h2>1. Data Controller</h2>
  37. <p>
  38. This platform is operated by:<strong> Pentabell</strong>
  39. <br />
  40. <strong>Address: </strong>Atlantic Building Montparnasse, Entrance
  41. No. 7, 3rd floor, 75015 Paris
  42. <br />
  43. <strong>Email:</strong> [email protected]
  44. </p>
  46. <p>
  47. Pentabell acts as the data controller for personal data collected
  48. through the platform, in accordance with the General Data
  49. Protection Regulation (GDPR).
  50. </p>
  51. </section>
  53. <section class="mt-4">
  54. <h2>2. Scope of This Policy</h2>
  55. <p>
  56. This Privacy Policy applies to all users of the Expert Care
  57. platform, including:
  58. </p>
  59. <ul>
  60. <li>Visitors</li>
  61. <li>Registered users</li>
  62. <li>Experts/service providers</li>
  63. </ul>
  64. </section>
  66. <section class="mt-4">
  67. <h2>3. Personal Data We Collect</h2>
  68. <h6>3.1 Data Provided by Users</h6>
  69. <ul>
  70. <li>Identity information (name, surname, nationality)</li>
  71. <li>Email address and phone number</li>
  72. <li>Account credentials</li>
  73. <li>Profile data (timesheets, contracts, payments)</li>
  74. <li>Communication content (complaints, requests)</li>
  75. </ul>
  76. <br />
  78. <h6>3.2 Automatically Collected Data</h6>
  79. <ul>
  80. <li>IP address</li>
  81. <li>Device and browser information</li>
  82. <li>Usage data (pages visited, session duration)</li>
  83. <li>Cookies and tracking technologies</li>
  84. </ul>
  85. <br />
  87. <h6>3.3 Sensitive Data</h6>
  88. <p>
  89. Where applicable, users may share sensitive information (e.g.,
  90. passport or CIN information). Such data is processed only with
  91. explicit consent.
  92. </p>
  93. </section>
  95. <section class="mt-4">
  96. <h2>4. Legal Basis for Processing (GDPR Compliance)</h2>
  97. <p>We process personal data based on:</p>
  98. <ul>
  99. <li>Contractual necessity (to provide services)</li>
  100. <li>User consent (for specific processing activities)</li>
  101. <li>Legitimate interest (platform security, improvement)</li>
  102. <li>Legal obligations</li>
  103. </ul>
  104. </section>
  106. <section class="mt-4">
  107. <h2>5. How We Use Personal Data</h2>
  108. <p>
  109. Your personal data is used to manage user accounts, facilitate
  110. consultant missions, process contracts and payments, ensure secure
  111. access to the platform, and improve the overall user experience.
  112. We may also use certain information to prevent fraud, maintain
  113. platform security, and comply with legal obligations.
  114. </p>
  115. </section>
  117. <section class="mt-4">
  118. <h2>6. Data Sharing and Disclosure</h2>
  119. <p>We do not sell personal data.</p>
  120. <p>We may share data with:</p>
  121. <ul>
  122. <li>
  123. Service providers (hosting, analytics, payment processors)
  124. </li>
  125. <li>Other users (as required for service interaction)</li>
  126. <li>Legal authorities when required</li>
  127. </ul>
  128. </section>
  130. <section class="mt-4">
  131. <h2>7. International Data Transfers</h2>
  132. <p>If data is transferred outside your jurisdiction, we ensure:</p>
  133. <ul>
  134. <li>Adequate protection measures</li>
  135. <li>Standard contractual clauses where required</li>
  136. </ul>
  137. </section>
  139. <section class="mt-4">
  140. <h2>8. Data Retention</h2>
  141. <p>
  142. Pentabell retains personal data only for the period necessary for
  143. the purposes for which it was collected, in compliance with
  144. applicable legal requirements:
  145. </p>
  146. <ul>
  147. <li>
  148. <strong>Account and profile data: </strong>user data (identity,
  149. contact details, profile information) is retained for the
  150. duration of the contractual relationship (active account). In
  151. the event of prolonged inactivity, the account and associated
  152. data will be deleted or anonymized after a period of three (3)
  153. years from the user’s last contact or last login, unless a legal
  154. obligation requires otherwise.
  155. </li>
  156. <li>
  157. <strong>Financial and contractual data:</strong> documents
  158. related to contracts, timesheets, and payments are retained for
  159. five (5) years following the end of the contractual
  160. relationship, in accordance with applicable French civil and
  161. commercial limitation rules.
  162. </li>
  163. <li>
  164. <strong>Accounting and invoicing data:</strong> invoices and
  165. accounting records are retained for ten (10) years from the
  166. closing of the relevant accounting year, in accordance with the
  167. French Commercial Code.
  168. </li>
  169. <li>
  170. <strong>Browsing data and cookies: </strong>connection data, IP
  171. addresses, and tracking technologies are retained for a maximum
  172. period of six (6) to thirteen (13) months depending on the type
  173. of cookie and applicable regulations.
  174. </li>
  175. <li>
  176. <strong>Sensitive data (Passport / CIN):</strong> such data
  177. collected for compliance and identity verification purposes is
  178. deleted immediately after verification is completed or, at the
  179. latest, upon expiration of the expert’s mission contract.
  180. </li>
  181. </ul>
  182. <p>
  183. At the end of these retention periods, data is either securely
  184. deleted or anonymized for exclusively statistical purposes.
  185. </p>
  186. </section>
  188. <section class="mt-4">
  189. <h2>9. Your Rights (GDPR)</h2>
  190. <p>
  191. In accordance with GDPR, users have the right to access, correct,
  192. delete, or restrict the processing of their personal data. Users
  193. may also object to certain processing activities, request data
  194. portability, or withdraw consent at any time.
  195. </p>
  196. <p>To exercise your rights, contact: [email protected]</p>
  197. </section>
  199. <section class="mt-4">
  200. <h2>10. Cookies Policy</h2>
  201. <p>We use cookies to:</p>
  202. <ul>
  203. <li>Ensure platform functionality</li>
  204. <li>Analyze usage</li>
  205. <li>Improve user experience</li>
  206. </ul>
  207. <p>
  208. In accordance with applicable French regulations and CNIL
  209. guidelines, the platform implements a cookie consent banner (CMP)
  210. allowing users to provide prior, explicit, and affirmative consent
  211. before any non-essential cookies are deposited on their device.
  212. </p>
  213. <p>
  214. Users may manage or withdraw their cookie preferences at any time
  215. through the cookie management tool or browser settings.
  216. </p>
  217. </section>
  219. <section class="mt-4">
  220. <h2>11. Data Security</h2>
  221. <p>
  222. We implement appropriate technical and organizational measures:
  223. </p>
  224. <ul>
  225. <li>Encryption (HTTPS)</li>
  226. <li>Access control</li>
  227. <li>Secure infrastructure</li>
  228. </ul>
  229. </section>
  230. </div>
  231. </div>
  232. </div>
  233. </body>
  234. </html>