1. Who we are
This policy explains how Sloft collects and uses your personal data, and what your rights are. It applies to all our websites and services:
www.sloft-magazine.com
shop.sloft-magazine.com
www.sloft-projets.com
www.sloft-immo.com
Data controller: SLOFT, a French simplified joint-stock company (SAS) with share capital of €2,260, whose registered office is at 38 avenue de Wagram, 75008 Paris, France. SIREN 823 518 022, SIRET 823 518 022 00038, EU VAT number FR65823518022. Sloft is represented by its President.
Contact for any question about your data: confidentialite@sloft-magazine.com, or by post to Sloft – Données personnelles, 38 avenue de Wagram, 75008 Paris, France. Sloft has not appointed a Data Protection Officer (DPO), as this is not mandatory given the nature of its activities.
2. Data we collect and why
We only collect the data needed for each service. Mandatory fields are marked in our forms.
Online shop. We collect your first and last name, postal address, email address, phone number (optional) and order details, in order to process and deliver your order or subscription, provide customer service and issue invoices. Card details are entered directly with our payment providers: Sloft has no access to them.
Newsletter. We collect your email address and, where applicable, your first and last name, as well as email open and click statistics, in order to send you our news, projects and invitations, and to measure interest in our content.
Events. We collect your first and last name and email address, in order to manage your registration, send you practical information and, if you agree, pass your details on to the event’s partners (see below).
Sloft Projets. We collect your contact details, the property address, the project description, the budget, and any photos and plans you send us, in order to review your request and forward it to partner architects and professionals who may be able to help.
Contact forms, project submissions and job applications. We collect your contact details and the content of your message (and your CV where applicable), in order to reply to your request and review your project or application.
Features and editorial content. We collect your name, photos and information about your home or project, in order to publish our features, with your prior written consent.
Browsing our websites. We collect connection and browsing data through cookies, in order to run the websites and, with your consent, measure their audience (see section 7).
Sharing with event partners. When an event is organised with one or more partners, they are named in the registration form. Your first name, last name and email address may be passed on to them only if you have agreed to this in the form. Each partner is then responsible for how it uses your data.
Forwarding to Sloft Projets professionals. Your request is only forwarded to professionals selected for your project, who undertake to use your data solely to contact you about it.
Other than in these cases, Sloft never sells, rents or exchanges its contact lists.
3. Legal bases
Each processing activity relies on one of the legal bases set out in the GDPR (Article 6).
Orders, subscriptions, delivery and customer service: performance of a contract.
Invoicing and accounting: legal obligation.
Newsletter sent to people who signed up through a form: consent.
Emails about similar products sent to our shop customers: legitimate interest, with the option to opt out when ordering and in every email.
Event registration and practical information: performance of your registration request.
Passing your details on to event partners: consent.
Processing and forwarding a Sloft Projets request: performance of your request.
Replying to messages, project submissions and applications: performance of your request.
Publication in our features: consent (written authorisation).
Email open and click tracking: legitimate interest; you may object.
Audience measurement cookies: consent.
Strictly necessary cookies: legitimate interest (operation of the website).
You may withdraw your consent at any time, without affecting processing carried out before the withdrawal.
4. Who receives your data
Your data can only be accessed by Sloft’s management and by our technical service providers, strictly as needed for their work. These providers act on our instructions, as processors within the meaning of the GDPR.
Shopify: hosting of the shop and orders. Ireland (contracting entity); data processed in particular in Canada and the United States.
Shopify Payments, Stripe, PayPal: online payment. European Union, with possible transfers outside the EU.
La Poste, Chronopost, FedEx: order delivery. France; United States and international for FedEx.
Brevo: sending of the newsletter and emails. France.
Tally: registration forms. Belgium.
Airtable: contact and registration database. United States.
Sellsy: sales management and invoicing. France.
Google (Analytics, Tag Manager): audience measurement. Ireland, with transfers to the United States.
Axeptio: cookie consent management. France.
Infomaniak: hosting of sloft-magazine.com, sloft-projets.com and sloft-immo.com. France.
Google: email services. Ireland, with transfers to the United States.
Your data may also be shared with:
- event partners, if you have agreed to this (section 2)
- Sloft Projets partner professionals, to follow up on your request;
- administrative or judicial authorities, where required by law.
If Sloft is sold or merged, your data may be transferred to the new owner, who will be bound by the same commitments.
5. Transfers outside the European Union
Some providers (Shopify, Airtable, Google, PayPal, Stripe, FedEx) may process your data outside the European Union, in particular in the United States and Canada.
These transfers are covered by one of the safeguards provided for by the GDPR:
- an adequacy decision of the European Commission (Canada; US companies certified under the EU–US Data Privacy Framework);
- failing that, the standard contractual clauses adopted by the European Commission.
You can obtain a copy of these safeguards by writing to confidentialite@sloft-magazine.com.
6. How long we keep your data
We keep your data for as long as each purpose requires, then delete or anonymise it.
Orders and subscriptions: for the duration of the order or subscription, then 5 years in archive to handle any disputes.
Invoices and accounting records: 10 years (legal obligation).
Shop customers, for sending information: 3 years from the last order.
Newsletter subscribers: until you unsubscribe, or after 3 years without any open or click.
Event registrants: 1 year after the event (unless subscribed to the newsletter).
Sloft Projets requests: 3 years from the last contact.
Messages and project submissions: 3 years from the last contact.
Unsuccessful job applications: 2 years, unless you object.
Publication authorisations for features: for as long as the feature is published, then 5 years.
Email open and click statistics: 3 years maximum.
Audience measurement cookies: 13 months maximum; your cookie choice is kept for 6 months.
Proof of identity attached to a request to exercise your rights: 1 year.
7. Cookies and trackers
Our websites only use audience measurement cookies with your consent. We do not use any advertising or retargeting cookies.
Strictly necessary cookies. Cookies from Shopify (session, cart) and Axeptio (remembering your choice) run the websites and the shop and remember your preferences. They do not require your consent.
Audience measurement cookies. Google Analytics 4, deployed through Google Tag Manager, lets us measure traffic and improve our content. These cookies are only set with your consent.
On your first visit, an Axeptio banner lets you accept or refuse these cookies, as easily as each other. You can change your choice at any time via the « Gestion des cookies » (cookie settings) link at the bottom of every page.
Our emails contain a pixel that tells us whether they have been opened, and links that measure clicks. You can object to this by writing to confidentialite@sloft-magazine.com, or by blocking images in your email client.
8. Your rights
You have the following rights over your data at any time:
access: find out what data we hold and obtain a copy;
rectification: correct inaccurate or incomplete data;
erasure: ask for your data to be deleted;
restriction: temporarily freeze the use of your data;
objection: object to processing based on our legitimate interest, and at any time to direct marketing;
portability: receive the data you provided to us in a readable format;
withdrawal of consent, at any time;
post-mortem instructions: decide what happens to your data after your death.
To unsubscribe from the newsletter, simply click the link at the bottom of any email. To exercise your other rights, write to confidentialite@sloft-magazine.com or to Sloft – Données personnelles, 38 avenue de Wagram, 75008 Paris, France. We will reply within one month, which may be extended by two months for complex requests. If we have reasonable doubts about your identity, we may ask you for proof of identity.
If you believe your rights have not been respected, you may lodge a complaint with the CNIL, the French data protection authority (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – www.cnil.fr).
9. Security
Access to your data is restricted to Sloft’s management and protected by personal login credentials. Our websites use an encrypted connection (HTTPS). We choose providers that offer sufficient security guarantees and bind us through contractual data protection commitments. In the event of a data breach that poses a risk to you, we will notify the CNIL and, where necessary, the people concerned, within the time limits set by law.
10. Minors
Our services are open to everyone. Under French law, a minor under 15 may only sign up to the newsletter or register for an event with the consent of a parent or legal guardian. Orders on the shop are reserved for adults or for people acting with a parent’s consent.
11. Changes to this policy
We may update this policy to reflect changes to our services or to the law. The date of the latest update is shown at the top of the page. If we make a significant change, we will let you know by email or through a notice on our websites.
12. Contact us
For any question about this policy or your data: confidentialite@sloft-magazine.com, or Sloft – Données personnelles, 38 avenue de Wagram, 75008 Paris, France.