Privacy policy

At COCO SWAP, we care about respecting your privacy and are committed to protecting the personal data you share with us.
This Privacy Policy aims to provide you with important information about how COCO SWAP processes your personal data, which are essential for you to access our Services, and how you can exercise your rights.
It also aims to comply with the requirements of the new personal data protection regulations (Regulation No. 2016/679), which came into force on 25 May 2018.
For any questions or comments regarding our Privacy Policy, you can contact us by email at: contact@coco-swap.com
1. Who is the Data Controller of my personal data?
The Data Controller is COCO SWAP, whose registered office is located at 41 rue du Sabot - 21130 Auxonne, France.
We specialize in connecting families for cultural and language exchanges for young people aged 13 to 18 within the European Union and for adults abroad.
You can contact us by email at: contact@coco-swap.com
2. What personal data is processed by COCO SWAP and when is it collected?
2.1. Data you provide to us directly
When using our Website, we ask you to provide the following data:
- When creating your User Account:
- Last name
- First name
- Email address
- Phone number
- Referral code
- Password
- When creating your profile: information about your family’s identity, lifestyle, presentation of the family, and photos.
- During payment: your bank details.
- When using the contact form:
- Last name
- First name
- Email address
- Your message
2.2. Data we collect automatically
When you browse our Website, certain data is automatically collected:
- Country and city via IP address
- Cookies
- Language
- Application version
- Device model and specifications (operating system, camera model)
2.3. Am I required to provide my personal data?
Providing this data is necessary to access COCO SWAP Services. If you refuse, we will not be able to guarantee access to the Services.
Processing personal data is central to our activity and to the Services we provide.
3. Why does COCO SWAP process my personal data and on what legal basis?
We process your personal data only for the following purposes:
Purpose | Legal Basis |
---|---|
Create your User Account on the Website | Performance of the General Terms of Use |
Create your profile on the Website | Performance of the General Terms of Use |
Provide matchmaking Services | Performance of the General Terms and Conditions of Sale |
Contact you to gather your feedback on the Website | COCO SWAP’s legitimate interest in improving the Website |
Respond to questions or contact requests via the form | Consent |
We will never process your personal data for purposes other than those listed above without informing you in advance.
4. Is access to the Website allowed for minors?
Regulations require that for a minor under 15, consent must be given by the holder(s) of parental authority together with the minor.
COCO SWAP has decided to strengthen this protection and requests parental consent for any minor under 18.
If you indicate an age under 18 when creating your profile, you will be asked to provide the email address of the person with parental authority to obtain their consent.
Without this consent, we cannot provide the Services.
5. Information about the use of cookies
The COCO SWAP Website only uses functional cookies.
When you first visit the Website, a banner informs you of the presence of these cookies, which are essential for proper functioning.
6. How long is my personal data retained?
At COCO SWAP, we commit to retaining your personal data only for the time necessary for processing and no longer than the periods below:
- User personal data: for 1 year from the last contact, after which it will be deleted.
- Client identification data: for the duration of the Services, then for 5 years from the matchmaking date for legal retention. After this 5-year period, data will be deleted.
- Data related to contact or information requests: for 1 year from the last contact, then deleted.
- Billing data: for 10 years from the invoice date.
7. Is my personal data secure?
At COCO SWAP, we take the security of your data very seriously and act with great care to prevent it from being altered, damaged, or accessed by unauthorized third parties.
We have implemented measures to ensure the integrity, confidentiality, and availability of your data as much as possible.
Data is hosted in OVH datacenters.
Data is transmitted securely between your device and COCO SWAP servers via SSL certificates.
Security is also ensured by authentication procedures with personal and secure access through confidential usernames and passwords.
8. With whom does COCO SWAP share my personal data?
To give you access to the Website and allow you to use it, the following third parties have access to your personal data under COCO SWAP’s control:
- COCO SWAP staff managing Users, Clients, or contact requests. They are required not to disclose data without authorization and to take all measures to ensure confidentiality and integrity.
- COCO SWAP’s subcontractors: data hosting provider OVH.
- Technical and IT providers: the network, website, and archives are managed by service providers, who may process or store data.
Payments are processed via Payplug or Paypal, which have their own privacy policies. We recommend that you read them carefully to understand how they handle your data.
In general, any subcontractor we use will collect, use, and disclose your information only as necessary to provide their services.
In any case, COCO SWAP commits not to transfer data to third parties for commercial prospecting purposes. COCO SWAP does not sell or rent your personal data.
COCO SWAP may, however, be required to disclose data to comply with legal obligations, at the request of an administrative or judicial authority, or to protect its rights.
9. What are my rights regarding my personal data?
You have the right to access your data, rectify it, object to processing in certain cases, request its erasure, or restrict processing.
You may withdraw your consent at any time by emailing contact@coco-swap.com.
You also have the right to data portability.
Visit cnil.fr for more information on your rights.
To exercise your rights or for questions about how your data is processed, contact us at: contact@coco-swap.com.
We may verify your identity or ask for proof of identity to ensure that you are the requester.
In any case, we commit to responding within one month, extendable by two months if necessary due to complexity or volume of requests.
If, after contacting us, you feel your data protection rights have not been respected, you may file a complaint with the CNIL.