Sillon

Privacy policy

Sillon processes the least data it can to get a parcel out and tell its buyer about it. This page says which data, why, and until when.

Data controller

Ludovic Cleuet, Apt 43, 2 rue Aimé Merchez, 80000 Amiens, France. For any question, or to exercise your rights: contact@klaaro.fr.

If you are a seller

  • Your Discogs authorisation. An access token issued by Discogs, along with your user ID and username. The token is encrypted before it is written to the database: a copy of the database contents is not enough to use it.
  • Your Discogs orders. Records sold, amounts, shipping method, dates, and the buyer's username. This data comes from Discogs and serves to prepare the shipment and then the DAC7 summary.
  • Your shipments. Carrier, tracking number, date, and the parcel photographs you upload.
  • Your subscription. A customer ID and a subscription ID supplied by Polar, with the status and the period end date. No payment data reaches our servers.

Lawful bases: performance of the subscription contract for everything above, and legal obligation for the retention of accounting records.

If you are a buyer

You have no account with us, and you do not create one by opening the link a seller sent you. The page you are looking at carries neither your name, nor your address, nor your username: it holds only the records shipped, the tracking number, the dispatch date and the photographs of the parcel. Its address contains a random identifier that cannot be guessed, and that identifier is the only thing protecting it — the page is not indexed, but anyone holding the link can open it.

Your Discogs username and the detail of your order are, for their part, visible to your seller in their own workspace: that is the information Discogs already passes them so they can deliver to you.

If you do not become a customer

Authorising Sillon with Discogs without an active subscription creates no account and writes no data: neither your user ID nor your access token is kept. You are simply sent back to this site.

Who else is involved

  • Discogs (Zink Media, Inc., United States) — the source of your sales, and the channel through which a message can be sent to the buyer if you ask for it.
  • Polar — collecting the subscription payment, invoicing and VAT. Polar is who holds your payment data.
  • Cloudinary — storing and serving the parcel photographs.
  • Hetzner Online GmbH — hosting the servers and the database, inside the European Union.

No data is sold, rented, or passed on for advertising purposes. Transfers outside the European Union, where they occur, rest on the European Commission's standard contractual clauses.

Cookies and analytics

This site sets no cookie and does not measure its audience. It loads no font, no script and no image from a third party.

The seller application sets a single cookie, strictly necessary to sign you in: it is signed, unreachable by the page's JavaScript, and expires after thirty days. No consent is required for a cookie of that kind, and there is no other.

For how long

  • Your orders, shipments and photographs: for as long as your account exists. Summary pages stay online for your buyers, including after your subscription ends.
  • The records needed for the DAC7 summary: for as long as the reporting obligation requires.
  • Invoices and accounting records, at Polar as with us: ten years, as the law requires.
  • If you ask for your account to be deleted: your seller data is erased within thirty days, except for what accounting rules oblige us to keep.

Your rights

You may access your data, have it corrected or erased, ask for a portable copy, or object to a processing operation. Write to contact@klaaro.fr; you will have an answer within a month. You can also withdraw the authorisation given to Sillon directly from your Discogs account settings, which cuts our access to your sales immediately.

If an answer does not satisfy you, you may lodge a complaint with the CNIL (cnil.fr), the French data protection authority, or with the authority of your own country of residence.