Personal data protection policy

Personal data protection policy

Last updated on 01/07/2026

Preamble

The purpose of this Privacy Policy is to inform users of the Services and visitors to the website. Wemet.fr on the information collected and processed by the company WEMET (hereinafter “WEMET” or “us”) in the context of the use and access to the services offered by WEMET.

This Policy explains what data may be collected, how this data is used, and what steps we take to ensure its confidentiality and security.

It also specifies the general framework for the processing of personal data carried out within the company WEMET and, in this sense, aims to provide the persons concerned with the information necessary for full compliance with the regulations in force.

By using the Services, the User acknowledges having read the Personal Data Protection Policy and having accepted it.

WEMET is committed to complying with French and European regulations on the protection of personal data, in particular the General Data Protection Regulation (EU) of April 27, 2016 (“RGPD”) and the Data Protection Act of January 6, 1978 as amended (“LIL”).

Definition

“Personal Account”: refers to the account created by the User when he first ordered Wecard and allowing him to access his private space in order to use the Services.

“General Terms and Conditions of Sale” or “CGV”: refers to the WEMET General Terms and Conditions of Sale accepted by Users.

“Data”: refers to the personal data of Users collected and processed as part of the use of the Platform and the implementation of the Services.

“Product (s)”: refers to all products marketed and sold, regardless of the description, by the company WEMET.

“Data Controller”: within the meaning of the Regulation means the legal or natural person responsible for the processing of personal data in the context of the use of the Platform and the implementation of the Services.

“Regulation”: refers jointly to Law No. 78-17 of January 6, 1978 relating to information technology, files and freedoms as amended (known as the “Data Protection Act”) and EU Regulation 2016/679 relating to the protection of natural persons with regard to the processing of personal data and to the free movement of such data of April 27, 2016 (known as “RGPD”).

“Service (s)”: refers to the Services made available by Wemet. The Services include in particular the WeCard Pro management service, the WeConnect service and the reservation of the Atelier by Wemet.

“Site”: refers to the web interface accessible at www.wemet.fr allowing Users to access various Services.

“User (s)”: refers to any natural or legal person, individual or professional, visiting the Website Wemet.fr or making a WeCard purchase via the Site or through personalized support provided by WEMET employees.

“WeCard”: refers to connected business cards marketed by WEMET. The term WeCard refers indifferently to WeCard Original and WeCard Pro.

Scope of this policy

This Privacy Policy applies to all Users, customers, or potential customers (collectively, “User”, “you”, or “your”), and to all Services linked to this Privacy Policy.

In the context of accessing, browsing and using the Site and the services it offers, the User is required to communicate to WEMET personal data concerning himself or his relatives. As such, WEMET has put in place appropriate guarantees and security measures in order to protect your personal data.

What personal data may be collected by WEMET?

In accordance with the legislation in force, WEMET has adopted the principle of minimization in the collection and collects only the data strictly necessary for the objective pursued and explained from Users, leaving them with full capacity to exercise their rights.

WEMET collects different types of Personal Data depending on the services you use. As explained below, some data is automatically collected when you browse or make a purchase on the Site. Other data is provided by you when you register and fill in your information, purchase a product or service, or contact customer service. WEMET may also acquire data indirectly from third parties and other sources, including social networks.

Information you provide when you create an account or make a purchase: The personal data that may be requested, depending on the nature of the services or products provided, is as follows:

• Your name and contact information, including email and postal addresses,

• Your function, corporate name and a logo if applicable,

• Your telephone and fax numbers,

where applicable:

• your website

• your photograph

• any other digital information you want to transmit

Information you provide when you personalize a product When you personalize a product on our website, you may provide text or images that contain personal information, such as your contact information on a WeCard.

Information you provide when you agree to connect with a User through the WeConnect Service: When a User transmits their information to you through their WeCard, a web window will allow you to connect virtually to this User by providing in turn the information you choose to transmit.

Information you provide when you contact customer service: When you send a contact request via our website, in accordance with article 6 (f) of the General Data Protection Regulation, we use the personal data you provide to us through our contact form such as your email address, name and telephone number in order to answer your questions.

Information that you provide about third parties: If necessary, the User may be required to communicate the personal data of a third party, in particular when the User orders a WeCard for an employee or a relative. In this context, it is necessary to remind the User that he is required to inform this person about the communication and processing of their personal data by WEMET And of him communicate this policy.

Information that WEMET receives from other sources: WEMET may also obtain information about you that is publicly available or from other sources, such as independent third parties, business partners. Any information that WEMET obtains from these sources is combined with Personal Data that you provide to us for the purposes described in this Privacy Policy.

WEMET does not have access to the bank details of Customer Users, which are managed directly by the authorized and secure payment provider Stripe.

In addition, some User data is automatically collected by the Site, namely:

Data category
Purposes
Connection and navigation data (Date and time of connection, IP address, IP address location, pages visited, browser type, browser language)
This data is necessary for the proper technical functioning of the Site and the products and services it offers.
Data relating to the use of the Site
This data is necessary for the proper technical functioning of the Site and the products and services it offers.
Session cookies (recording mouse movements, clicks, typing, scrolling, etc.)
This data is necessary for the proper technical functioning of the Site and for its improvement.
Purchase and transaction history
This data is kept for compliance, where applicable, with legal obligations and is necessary for the processing of User requests (request for information, complaint or complaint, etc.)

Why is User Data collected and processed, on what legal basis and for what duration?

As part of the management of the Site, WEMET, in its capacity as Data Controller, processes Users' Personal Data only for the following reasons and purposes:

Purposes
Legal foundations
Shelf life
Creation, management and maintenance of the Personal Account on the Site: to manage your account and facilitate services; to allow you to connect and make purchases; to provide you with technical assistance
Art. 6 of the RGPD: Execution of the contract (the collection and processing of your Personal Data is necessary for the execution of the contract or for the completion of steps in order to conclude a contract with you)
Until the account is deleted or 5 years from the last activity. Archiving: 10 years
Use of Site Services
Art. 6 of the RGPD: Execution of the contract
Until the account is deleted or 5 years from the last activity. Archiving: 10 years
Billing and payment management
Art. 6 of the RGPD: Execution of the contract
Until the account is deleted or 5 years from the last activity. Archiving: 10 years
Managing and improving customer service
Art. 6 of the GDPR: Contract execution and WEMET's legitimate interest in improving customer service
Until the account is deleted or 5 years from the last activity
Customizing the Services
Art. 6 of the GDPR: Legitimate interest of WEMET to improve its Services
Until the account is deleted or 5 years from the last activity
Management of reviews/Assessment of satisfaction
Art. 6 of the GDPR: Legitimate interest of WEMET to improve its Services
Until the account is deleted or 5 years from the last activity
Realization of statistics
Art. 6 of the RGPD: Legitimate interest of WEMET to improve its Services and the Site
Until the account is deleted or 5 years from the last activity
Compliance with legal and regulatory obligations
Art. 6 of the RGPD: Legal and regulatory obligations imposed on WEMET in its capacity as data controller
WEMET may disclose your Personal Data in response to subpoenas, court orders, and other legitimate requests from regulatory and law enforcement authorities.

Where required under applicable law, WEMET will seek your consent before processing your Personal Data (for example, for the purposes of direct marketing communications). You can withdraw your consent at any time as described in the Contacting Us section below.

Who can have access to your personal data?

In the context of accessing, consulting, browsing and using the Platform and the services offered there, the User's personal data may be communicated to the following recipients:

Recipients
Purposes
Duly authorized staff within WEMET
For the provision of the products and services offered and the management of the Site
WEMET Subcontractors and Service Providers
For exclusively technical or logistical purposes, for:
- The completion or delivery of an order (services provided by La Poste, Chronopost, DHL);
- Data storage (service provided by OVH Cloud, a French company that hosts and stores data);
- Payment processing (service provided by the authorized and secure payment provider Stripe);
- Data security. These service providers are only authorized to use your data for the specific service they provide on our behalf.
External advice
Only in the context of the management of possible disputes or for any other legal subject, if applicable.
Enforcement of the law
We may also share your information, in accordance with and in accordance with the law, if we believe that the disclosure applies to cooperation in the investigation of activities declared illegal, to the execution of our Terms and Conditions, or to the protection of our rights or property, or the protection of our rights or property, or those of a third party.

Apart from the above cases, Users' personal data is strictly protected and anonymized.

WEMET also guarantees that its staff members and any person who processes Users' personal data comply with the internal rules and procedures relating to the processing of personal data and in particular the technical and organizational security measures put in place to protect your personal data.

How does WEMET protect your Data?

WEMET has implemented technical, physical, and administrative protection and security measures designed to prevent unauthorized access, disclosure, use, and modification of Personal Data. These measures include, but are not limited to, encryption methods, access controls, controlled administration of User rights, and limiting access to Personal Data to only qualified persons, as described in this document. We regularly review our security procedures to incorporate new technologies and appropriate methods.

We remind you that the protection of your Personal Data is also your responsibility: When you create an account, make sure you choose a strong password and do not share the password for your Personal Account with other people and secure your email box when interacting with WEMET collaborators.Information security and respect for your privacy is WEMET's priority. Our aim is to provide a safe and secure site for all users. To do this, we use external security researchers to report vulnerabilities. If you think you have identified a security vulnerability on our Site, please contact contact@wemet.fr.

What are your rights in terms of access to and control the use of your Personal Data?

In accordance with the applicable regulations on the protection of personal data, you have the following rights over your personal data:

  • you can request access to the personal data that Wemet has about you and to obtain a copy of it, including in electronic format;
  • you can request the correction, updating and deletion of your personal data, as well as the limitation of their processing;
  • you can ask to stop the use of your personal data;
  • you can withdraw your consent when it has been collected, without this withdrawal affecting the legality of the treatments previously carried out;
  • you can exercise your rights by contacting us directly or by filing a complaint with a local supervisory authority.

We may ask you to verify your identity before responding to your request.

How can you exercise your rights?

For any questions, requests and complaints, you can contact our Data Protection Officer (DPO) directly by sending an email to hannah@wemet.fr.

For access, rectification, obtaining a copy, deletion, portability. You can exercise some of the rights listed above by accessing the Account Settings page and updating your Personal Data and preferences.

You can also contact our customer service to exercise any of the rights listed above using any of the means in the “Contact Us” section below.

To unsubscribe from marketing communications. You can change your marketing communication preferences at any time by clicking the “Unsubscribe” link at the bottom of any marketing email or by contacting our customer service using one of the methods listed in the “Contact Us” section below.

Unsubscribing will not prevent WEMET from communicating with you by email, telephone, or letter about your orders or for other administrative purposes (for example, regarding an ongoing order, a problem not resolved by the service).

To file a complaint

If you have a complaint about this Privacy Policy or our privacy practices, please contact our Data Protection Officer by emailing hannah@wemet.fr, so that your grievances can be dealt with directly. If necessary, you can contact the CNIL via its website or by post: 3, place de Fontenoy - TSA 80715 75334 PARIS CEDEX 07. This right can be exercised at any time free of charge, except for the costs of the letter where applicable, and the possible costs of assistance or representation if you choose to be assisted in this procedure by a third party.

Updating this policy

WEMET may modify, supplement or update this Personal Data Protection Policy in order to take into account any legal, regulatory, jurisprudential and/or technical developments. This policy is also subject to change, in particular in the event of changes in the Services offered by WEMET on the Site. Therefore, we recommend that you review this policy each time you access the Site.