Privacy Policy
HUNGRY BUDDY (hereinafter referred to as the “COMPANY”), a simplified joint-stock company (SAS) with a share capital of €25,000.00, headquartered at 16 Rue Marteville, 35000 RENNES, registered with the Rennes Trade and Companies Register under number 924 995 426, and represented by its President, Mr. Vincent LABASSE, has developed a solution called Supperhero (hereinafter referred to as “SUPPERHERO”). This is an online platform accessible via the following website: https://www.supperhero.io/fr/.
The COMPANY places great importance on respecting your privacy and protecting your personal data (“Data”).
This policy informs you about how your Data is collected and processed in connection with the use of SUPPERHERO. It becomes contractually binding, alongside the General Terms of Use and Sale (GTUS), as soon as you accept it by registering on SUPPERHERO, including the statement “By continuing, you accept the terms of use and the privacy policy.”
Data processing is carried out by the COMPANY in accordance with French data protection law “Informatique et Libertés” No. 78-17 of January 6, 1978 (“LIL”) and the applicable European regulation derived from the General Data Protection Regulation 2016/679 of April 27, 2016 (“GDPR”).
Data Controller, Data Collected, and Purpose(s) of Processing
The Data collected during your use of SUPPERHERO is processed by the COMPANY, acting in its capacity as the data controller (“Data Controller”).
The term “Data” refers to “any information relating to an identified or identifiable natural person […] in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.”
The Data collected by the COMPANY concerns culinary content creators (hereinafter “CREATOR(S)”) as well as fans (hereinafter “SUBSCRIBER(S)”).
The purpose of this Data collection must be determined in advance, and the collection must be limited to this purpose only.
The COMPANY informs you that it collects the following Data concerning you:
PERSONS CONCERNED | DATA COLLECTED | PURPOSES |
|---|---|---|
CREATORS | Identification data: display name, username, profile picture, social media URLs, date of birth. Contact data: email address, phone number. | Creation and management of accounts on SUPPERHERO |
SUBSCRIBERS | Identification data: display name, username, profile picture, social media URLs, date of birth. Contact data: postal address, email address, phone number. | Creation and management of accounts and subscriptions on SUPPERHERO |
Legal Bases for Processing and Data Retention Periods
The processing of your Data is justified by the legitimate interest of the COMPANY, as the collection of Data is necessary for the provision of the SUPPERHERO service.
In any case, your Data will be kept for no longer than is necessary for the purposes for which it was collected. At the end of these periods, the Data will be deleted from active databases and, if necessary, archived for no longer than the applicable statutory limitation or retention periods. Once these periods have expired, the Data will be permanently deleted.
Data Controller, Data Collected, and Purpose(s) of Processing
The Data collected and processed is intended for use by the Data Controller, in accordance with the purpose of the processing. It may be shared with service providers to whom the COMPANY delegates certain services (“Sub-Processors”), solely for the purposes of their tasks and in compliance with data protection regulations, including:
Amazon Web Services, Inc. – [email protected] – 410 Terry Avenue North, Seattle, WA 98109-5210, USA
Firebase (Google LLC) – 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – [email protected]
Cloudflare, Inc. – 101 Townsend St, San Francisco, CA 94107, USA – [email protected]
Supabase Inc. – 8 Cross Street, #18-109, Singapore 048424 – [email protected]
Stripe Payments Europe, Ltd. – 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland – [email protected]
Axeptio SAS – 12 Rue de Penthièvre, 75008 Paris, France – [email protected]
Access is strictly controlled by security policies implemented by the COMPANY and its Sub-Processors, so that human intervention in the Data remains highly exceptional.
The COMPANY ensures, as the Data Controller, that each Sub-Processor complies with the obligations of this policy. It also ensures that each Sub-Processor provides sufficient guarantees regarding the implementation of appropriate technical and organizational measures, so that processing meets the requirements of the GDPR.
The COMPANY may also be required to disclose your Data to third parties when such disclosure is permitted or required by law or a court decision, or when it is necessary to ensure the protection and defense of its rights.
Outside of these cases, your Data will not be shared or made accessible to any third parties without your prior consent.
Transfer of Data Outside the European Union
Your Data will not be transmitted to providers located outside the European Union.
Security and Confidentiality
The COMPANY implements technical and organizational measures to ensure the strict confidentiality and security of the Data. This Data is accessible only to duly authorized persons.
About Cookies
A “cookie” is a small file that a website, application, or any other platform stores on your computer, tablet, smartphone, or other similar device, to record information about your browsing and/or usage on the site.
Most cookies are used to improve your user experience on the sites you visit (for example, by facilitating navigation) or to help sites develop further.
Currently, there are several types of cookies:
Essential cookies: These do not require user consent. They are essential for the proper functioning of the site and enable navigation. These cookies cannot be disabled.
Exempt cookies: Based on legitimate interest, these cookies are intended to produce anonymous site traffic statistics to optimize ergonomics, navigation, and content. Disabling these cookies will prevent the COMPANY from analyzing site traffic.
Non-essential cookies: These require user consent before activation. They must also be accompanied by clear and comprehensive information to enable the user to give informed consent.
Various cookies are used on SUPPERHERO to improve interactivity between you and the solution.
[link to the Cookies page]
A cookie management panel, accessible at any time on SUPPERHERO, allows you to view all the cookies in use, along with information about their purpose, duration, and whether they are managed by the COMPANY or by third parties. This enables you to manage the activation and deactivation of cookies that are not strictly necessary for the operation of the sites.
The COMPANY notes that refusing to install a cookie may result in the inability to access certain services on SUPPERHERO.
7. Rights of Data Subjects
In accordance with the provisions of the GDPR, data subjects can exercise their rights with the Data Controller: the right of access, rectification, and, under the conditions set out in Articles 17, 18, 20, and 21 of the aforementioned regulation, the right to erasure, restriction of processing, objection, portability of their Data, as well as the right not to be subject to an automated individual decision.
In accordance with Article 85 of the LIL, you also have the right to define the handling of your data after your death.
You can exercise any of these rights with the Data Controller:
(i) By email to: [email protected]
(ii) By postal mail to: Hungry Buddy, 16 Rue Marteville, 35000 RENNES
Please include, if applicable, a copy of an identity document with the signature of the holder of the document, and specify the address to which the response should be sent.
For further information or in case of difficulties concerning the use of your Data or the exercise of your rights, you can contact the COMPANY using the above-mentioned addresses.
If a dispute remains unresolved or you wish to make a complaint about the processing of your Data, you can contact the CNIL electronically at https://www.cnil.fr/fr/agir or by post at:
Commission Nationale de l’Informatique et des Libertés
3 Place de Fontenoy – TSA 80715
75334 PARIS CEDEX 07, France.
Modification of the Privacy Policy
The information in this Privacy Policy may be modified if the COMPANY deems it necessary. In such cases, you will be notified via a communication to your email address. All modifications take effect as soon as they are published.
In any event, the COMPANY recommends that you review this Privacy Policy from time to time to keep up to date with any changes.
HUNGRY BUDDY (hereinafter referred to as the “COMPANY”), a simplified joint-stock company (SAS) with a share capital of €25,000.00, headquartered at 16 Rue Marteville, 35000 RENNES, registered with the Rennes Trade and Companies Register under number 924 995 426, and represented by its President, Mr. Vincent LABASSE, has developed a solution called Supperhero (hereinafter referred to as “SUPPERHERO”). This is an online platform accessible via the following website: https://www.supperhero.io/fr/.
The COMPANY places great importance on respecting your privacy and protecting your personal data (“Data”).
This policy informs you about how your Data is collected and processed in connection with the use of SUPPERHERO. It becomes contractually binding, alongside the General Terms of Use and Sale (GTUS), as soon as you accept it by registering on SUPPERHERO, including the statement “By continuing, you accept the terms of use and the privacy policy.”
Data processing is carried out by the COMPANY in accordance with French data protection law “Informatique et Libertés” No. 78-17 of January 6, 1978 (“LIL”) and the applicable European regulation derived from the General Data Protection Regulation 2016/679 of April 27, 2016 (“GDPR”).
Data Controller, Data Collected, and Purpose(s) of Processing
The Data collected during your use of SUPPERHERO is processed by the COMPANY, acting in its capacity as the data controller (“Data Controller”).
The term “Data” refers to “any information relating to an identified or identifiable natural person […] in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.”
The Data collected by the COMPANY concerns culinary content creators (hereinafter “CREATOR(S)”) as well as fans (hereinafter “SUBSCRIBER(S)”).
The purpose of this Data collection must be determined in advance, and the collection must be limited to this purpose only.
The COMPANY informs you that it collects the following Data concerning you:
PERSONS CONCERNED | DATA COLLECTED | PURPOSES |
|---|---|---|
CREATORS | Identification data: display name, username, profile picture, social media URLs, date of birth. Contact data: email address, phone number. | Creation and management of accounts on SUPPERHERO |
SUBSCRIBERS | Identification data: display name, username, profile picture, social media URLs, date of birth. Contact data: postal address, email address, phone number. | Creation and management of accounts and subscriptions on SUPPERHERO |
Legal Bases for Processing and Data Retention Periods
The processing of your Data is justified by the legitimate interest of the COMPANY, as the collection of Data is necessary for the provision of the SUPPERHERO service.
In any case, your Data will be kept for no longer than is necessary for the purposes for which it was collected. At the end of these periods, the Data will be deleted from active databases and, if necessary, archived for no longer than the applicable statutory limitation or retention periods. Once these periods have expired, the Data will be permanently deleted.
Data Controller, Data Collected, and Purpose(s) of Processing
The Data collected and processed is intended for use by the Data Controller, in accordance with the purpose of the processing. It may be shared with service providers to whom the COMPANY delegates certain services (“Sub-Processors”), solely for the purposes of their tasks and in compliance with data protection regulations, including:
Amazon Web Services, Inc. – [email protected] – 410 Terry Avenue North, Seattle, WA 98109-5210, USA
Firebase (Google LLC) – 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA – [email protected]
Cloudflare, Inc. – 101 Townsend St, San Francisco, CA 94107, USA – [email protected]
Supabase Inc. – 8 Cross Street, #18-109, Singapore 048424 – [email protected]
Stripe Payments Europe, Ltd. – 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland – [email protected]
Axeptio SAS – 12 Rue de Penthièvre, 75008 Paris, France – [email protected]
Access is strictly controlled by security policies implemented by the COMPANY and its Sub-Processors, so that human intervention in the Data remains highly exceptional.
The COMPANY ensures, as the Data Controller, that each Sub-Processor complies with the obligations of this policy. It also ensures that each Sub-Processor provides sufficient guarantees regarding the implementation of appropriate technical and organizational measures, so that processing meets the requirements of the GDPR.
The COMPANY may also be required to disclose your Data to third parties when such disclosure is permitted or required by law or a court decision, or when it is necessary to ensure the protection and defense of its rights.
Outside of these cases, your Data will not be shared or made accessible to any third parties without your prior consent.
Transfer of Data Outside the European Union
Your Data will not be transmitted to providers located outside the European Union.
Security and Confidentiality
The COMPANY implements technical and organizational measures to ensure the strict confidentiality and security of the Data. This Data is accessible only to duly authorized persons.
About Cookies
A “cookie” is a small file that a website, application, or any other platform stores on your computer, tablet, smartphone, or other similar device, to record information about your browsing and/or usage on the site.
Most cookies are used to improve your user experience on the sites you visit (for example, by facilitating navigation) or to help sites develop further.
Currently, there are several types of cookies:
Essential cookies: These do not require user consent. They are essential for the proper functioning of the site and enable navigation. These cookies cannot be disabled.
Exempt cookies: Based on legitimate interest, these cookies are intended to produce anonymous site traffic statistics to optimize ergonomics, navigation, and content. Disabling these cookies will prevent the COMPANY from analyzing site traffic.
Non-essential cookies: These require user consent before activation. They must also be accompanied by clear and comprehensive information to enable the user to give informed consent.
Various cookies are used on SUPPERHERO to improve interactivity between you and the solution.
[link to the Cookies page]
A cookie management panel, accessible at any time on SUPPERHERO, allows you to view all the cookies in use, along with information about their purpose, duration, and whether they are managed by the COMPANY or by third parties. This enables you to manage the activation and deactivation of cookies that are not strictly necessary for the operation of the sites.
The COMPANY notes that refusing to install a cookie may result in the inability to access certain services on SUPPERHERO.
7. Rights of Data Subjects
In accordance with the provisions of the GDPR, data subjects can exercise their rights with the Data Controller: the right of access, rectification, and, under the conditions set out in Articles 17, 18, 20, and 21 of the aforementioned regulation, the right to erasure, restriction of processing, objection, portability of their Data, as well as the right not to be subject to an automated individual decision.
In accordance with Article 85 of the LIL, you also have the right to define the handling of your data after your death.
You can exercise any of these rights with the Data Controller:
(i) By email to: [email protected]
(ii) By postal mail to: Hungry Buddy, 16 Rue Marteville, 35000 RENNES
Please include, if applicable, a copy of an identity document with the signature of the holder of the document, and specify the address to which the response should be sent.
For further information or in case of difficulties concerning the use of your Data or the exercise of your rights, you can contact the COMPANY using the above-mentioned addresses.
If a dispute remains unresolved or you wish to make a complaint about the processing of your Data, you can contact the CNIL electronically at https://www.cnil.fr/fr/agir or by post at:
Commission Nationale de l’Informatique et des Libertés
3 Place de Fontenoy – TSA 80715
75334 PARIS CEDEX 07, France.
Modification of the Privacy Policy
The information in this Privacy Policy may be modified if the COMPANY deems it necessary. In such cases, you will be notified via a communication to your email address. All modifications take effect as soon as they are published.
In any event, the COMPANY recommends that you review this Privacy Policy from time to time to keep up to date with any changes.