Privacy policy

1. Data controller

For the aslot.fr website, its forms and the management of client organisations’ accounts, the data controller is:

When you book a space

The data entered in the booking module is collected on behalf of the organisation offering the space. That organisation is the data controller. ASLOT PARK acts as a processor within the meaning of Article 28 of the GDPR: it processes this data on the organisation’s instructions and never uses it for its own purposes.

To exercise your rights regarding a booking, please contact the organisation first. If you write to us, we will forward your request to the organisation concerned and help it respond.

2. Data collected

Through the website’s forms

Identity, contact details, organisation and the content of your message.

When you make a booking

Identity and contact details, billing information if you provide it, booking details and amount, payment information (excluding bank details, which are never known to ASLOT PARK) and, where applicable, data relating to access to the space.

Browsing data

Technical connection data and data from cookies (see the Cookies section).

Audience measurement

If you consent, Google Analytics, loaded by Google Tag Manager, records the pages viewed, the length and source of the visit, the type of device and browser, an approximate location (country, city) and certain actions: clicking on a phone number or an email address, submitting a form. The IP address is used to determine this location and is then not kept. This data is linked to a random identifier stored in a cookie, never to your name.

Only the data needed for the purposes described below is collected.

3. Purposes and legal bases

• Responding to your contact, demo or access requests — legal basis: pre-contractual measures or consent (Art. 6(1)(b) and 6(1)(a) GDPR)
• Managing your booking and sending you the relevant information — legal basis: performance of the contract (Art. 6(1)(b) GDPR)
• Complying with accounting and legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR)
• Securing the service and preventing fraud — legal basis: legitimate interest (Art. 6(1)(f) GDPR)
• Measuring the website’s audience — legal basis: consent (Art. 6(1)(a) GDPR)

Contact details entered to make a booking are never used by ASLOT PARK for direct marketing.

4. Retention period

• Requests made through the website’s forms: 3 years from the last contact
• Client organisations’ data: term of the contract, then 5 years
• Bookings: period set by the organisation, within the limits of its subscription
• Accounting records: 10 years (Article L123-22 of the French Commercial Code)
• Browsing data and cookies: 13 months maximum
• Audience measurement statistics held by Google: 14 months maximum

At the end of these periods, the data is deleted or anonymised.

5. Data recipients

Booking data is accessible to the organisation concerned. ASLOT PARK’s teams only access it to keep the service running and to provide support. It may be passed on to the technical service providers required for the service, strictly within the limits of their assignment.

With your consent, audience measurement data is processed by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on behalf of ASLOT PARK, as part of the Google Analytics service.

ASLOT PARK has enabled the Google Analytics data sharing settings. Google may therefore also use this data, in aggregated and anonymised form, to improve its products and services, produce benchmarks across websites and provide technical support to ASLOT PARK. Google does not use this data to personalise or target ads, and ASLOT PARK has not linked Google Analytics to any advertising account.

ASLOT PARK does not sell, rent or transfer any personal data to third parties.

6. Transfers outside the European Union

Data is hosted in France. Where a service provider processes data outside the European Union, the transfer is governed by an adequacy decision of the European Commission or by its standard contractual clauses.

This is the case for audience measurement: Google may process this data in the United States. This transfer is based on the adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, to which Google LLC has signed up, supplemented by Google’s standard contractual clauses.

7. Security

ASLOT PARK implements appropriate technical and organisational measures to protect your data. Communications are encrypted and bank details do not pass through our servers.

8. Your rights

In accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:

• Right of access: to obtain a copy of the data concerning you
• Right to rectification: to correct inaccurate or incomplete data
• Right to erasure: to request the deletion of your data, subject to legal retention obligations
• Right to restriction: to restrict the processing of your data
• Right to object: to object to processing based on legitimate interest
• Right to data portability: to receive your data in a structured format
• Withdrawal of consent: at any time, for processing based on consent

For a booking, contact the organisation concerned, whose contact details appear in the confirmation email. For anything else, contact ASLOT PARK on +33 2 52 63 02 46 or at contact@aslot.fr. You will receive a reply within one month. You may also lodge a complaint with the CNIL (France’s data protection authority).

9. Cookies and local storage

On your first visit to aslot.fr, a banner informs you that cookies are used and lets you make your choice, which you can change at any time from the footer.

• Strictly necessary cookies: essential for the website to work and to remain secure, they cannot be disabled.
• Audience measurement cookies (Google Analytics): they are only set after you click “I accept”. The Google Tag Manager container, which loads Google Analytics, is itself only called at that point and does not set any cookie of its own. Cookies concerned: _ga and _ga_*, kept for 13 months maximum, which carry a random browser identifier. They are used solely to count visits and understand which pages are viewed; ASLOT PARK uses neither Google advertising nor targeting features. You can withdraw your consent at any time via the “Cookies” link in the footer, or block Google Analytics with the opt-out browser add-on. Processing by Google is described in its privacy policy.
• Choice cookie: aslot_cookie_consent remembers your answer to the banner for 12 months. It contains only that answer and does not require consent.
• Presentation video: it is hosted on YouTube (Google). When the video panel is displayed, its preview image is loaded from YouTube’s servers. The player itself is only loaded when you open the video, in privacy-enhanced mode; YouTube may then set its own cookies, in accordance with its privacy policy. The demo form shown below the video follows the same rules as the one on the “Request a demo” page.

The booking service does not set any advertising cookies. It may temporarily keep what you have entered in your browser so that you don’t have to start again.

10. Contact us

For any question about this policy or about exercising your rights, contact ASLOT PARK:

ASLOT PARK may amend this policy at any time. The version in force is the one available on the website.