PRIVACY POLICY – EXPERT CARE

1. Data Controller

This platform is operated by: Pentabell
Address: Atlantic Building Montparnasse, Entrance No. 7, 3rd floor, 75015 Paris
Email: [email protected]

Pentabell acts as the data controller for personal data collected through the platform, in accordance with the General Data Protection Regulation (GDPR).

2. Scope of This Policy

This Privacy Policy applies to all users of the Expert Care platform, including:

• Visitors
• Registered users
• Experts/service providers

3. Personal Data We Collect

3.1 Data Provided by Users

• Identity information (name, surname, nationality)
• Email address and phone number
• Account credentials
• Profile data (timesheets, contracts, payments)
• Communication content (complaints, requests)

3.2 Automatically Collected Data

• IP address
• Device and browser information
• Usage data (pages visited, session duration)
• Cookies and tracking technologies

3.3 Sensitive Data

Where applicable, users may share sensitive information (e.g., passport or CIN information). Such data is processed only with explicit consent.

4. Legal Basis for Processing (GDPR Compliance)

We process personal data based on:

• Contractual necessity (to provide services)
• User consent (for specific processing activities)
• Legitimate interest (platform security, improvement)
• Legal obligations

5. How We Use Personal Data

Your personal data is used to manage user accounts, facilitate consultant missions, process contracts and payments, ensure secure access to the platform, and improve the overall user experience. We may also use certain information to prevent fraud, maintain platform security, and comply with legal obligations.

6. Data Sharing and Disclosure

We do not sell personal data.

We may share data with:

• Service providers (hosting, analytics, payment processors)
• Other users (as required for service interaction)
• Legal authorities when required

7. International Data Transfers

If data is transferred outside your jurisdiction, we ensure:

• Adequate protection measures
• Standard contractual clauses where required

8. Data Retention

Pentabell retains personal data only for the period necessary for the purposes for which it was collected, in compliance with applicable legal requirements:

• Account and profile data: user data (identity, contact details, profile information) is retained for the duration of the contractual relationship (active account). In the event of prolonged inactivity, the account and associated data will be deleted or anonymized after a period of three (3) years from the user’s last contact or last login, unless a legal obligation requires otherwise.
• Financial and contractual data: documents related to contracts, timesheets, and payments are retained for five (5) years following the end of the contractual relationship, in accordance with applicable French civil and commercial limitation rules.
• Accounting and invoicing data: invoices and accounting records are retained for ten (10) years from the closing of the relevant accounting year, in accordance with the French Commercial Code.
• Browsing data and cookies: connection data, IP addresses, and tracking technologies are retained for a maximum period of six (6) to thirteen (13) months depending on the type of cookie and applicable regulations.
• Sensitive data (Passport / CIN): such data collected for compliance and identity verification purposes is deleted immediately after verification is completed or, at the latest, upon expiration of the expert’s mission contract.

At the end of these retention periods, data is either securely deleted or anonymized for exclusively statistical purposes.

9. Your Rights (GDPR)

In accordance with GDPR, users have the right to access, correct, delete, or restrict the processing of their personal data. Users may also object to certain processing activities, request data portability, or withdraw consent at any time.

To exercise your rights, contact: [email protected]

10. Cookies Policy

We use cookies to:

• Ensure platform functionality
• Analyze usage
• Improve user experience

In accordance with applicable French regulations and CNIL guidelines, the platform implements a cookie consent banner (CMP) allowing users to provide prior, explicit, and affirmative consent before any non-essential cookies are deposited on their device.

Users may manage or withdraw their cookie preferences at any time through the cookie management tool or browser settings.

11. Data Security

We implement appropriate technical and organizational measures:

• Encryption (HTTPS)
• Access control
• Secure infrastructure