Privacy Policy and Data Protection Policy

Last update: December 10, 2025

In accordance with the legislation in force regarding the Protection of Personal Data, Justhost SAS, operating the website justhost.fr and its sub-domains, informs Users of its online platform and its Extranet of the Privacy and Data Protection Policy it will apply when processing the personal data that the User voluntarily provides by accessing the aforementioned website or the corresponding mobile application.

By providing the company, one of its subsidiaries or one of its sites, with personal data through the website’s electronic forms, the User expressly consents to Justhost SAS, or one of its subsidiaries, processing this data under the terms of this Privacy and Data Protection Policy clause.

Before registering or placing an order with Justhost SAS, one of its subsidiaries or one of its sites, Users must read this Privacy and Data Protection Policy and accept it by ticking the box in the registration form.

When registering, the User will have to provide certain data for the creation of their profile and the payment of orders. On the one hand, concerning individual customers, they must provide the following data: first name, last name, phone number, country of origin, address of residence during their stay, and bank card number. In addition, employees of third-party companies falling under URSSAF circular no. 20120000042 may be required to provide their social security number, date and place of birth.

As for professional customers, they may be required to provide the following data: first name, last name, address, phone number, bank account number, SIRET. In addition, Justhost SAS or one of its subsidiaries or one of its sites, with Users’ authorization, may collect data related to their location, including the real-time geographic location of their computer or mobile device.

Once registration is completed or the order has been placed, any User may contact us to access their profile, complete it and/or edit it according to their preferences.

The User undertakes to enter real and truthful data. In addition, they will be solely responsible for any damage and loss that Justhost SAS, one of its subsidiaries or one of its sites, or third parties may suffer due to lack of truthfulness, inaccuracy, lack of validity and authenticity of the data provided.

The data collected by Justhost SAS, one of its subsidiaries or one of its sites, will be used exclusively for the purpose defined in the Website Terms and Conditions of Use, which can be consulted here:

Applicable legislation on users’ personal data (Personal Data Protection)

Who is responsible for users’ data?

What is the legal basis for processing the Data?

What personal information does Justhost SAS collect about its users?

Why does Justhost SAS collect information about its users?

Is the information received shared?

What are Users’ rights?

How is the protection of users’ personal data ensured?

Notifications and amendments

Applicable legislation on users’ personal data (Personal Data Protection)

Justhost SAS, its subsidiaries or its sites demonstrate their commitment to comply at all times with the legislation in force regarding data protection. Users are informed that the personal data provided on the Website will be subject to automated processing and will be included in files belonging to Justhost SAS, its subsidiaries or its websites, for the purposes of managing users registered on the Website.

Basic information on Data Protection

Identity Justhost SAS

SIRET 938 380 052 00010

Purpose Management of requested services

Legal basis Performance of the contractual relationship, legitimate interest and User consent

Rights Access, rectification and deletion of data, as well as other rights as described in the additional information

Additional information Additional and detailed information on data protection is available in the sections below

In accordance with applicable legislation, below is the Privacy Policy that Justhost SAS, its subsidiaries or websites use when processing the data of Users registered on their Platform.

Who is responsible for Users’ Data?

Any personal information provided and collected will be processed by Justhost SAS, the data controller, with the contact information shown below:

Data Controller – Responsible for the treatment of Personal Data

Identity

Identity Justhost SAS

SIRET 938 380 052 00010

Postal address

Postal Address 16 Cours du Danube, 77700 Serris, France

Contact Email contact@justhost.fr

What personal information do we collect about users?

The platforms made available by Justhost SAS, its subsidiaries or its websites are used by Users, Service Providers and Resellers. The information that Justhost SAS, its subsidiaries or its websites receive from users is collected as indicated below.

Justhost SAS, its subsidiaries or its websites collect information from the user that is provided directly and other information that is provided indirectly through the use of the services made available.

a) Information the user provides directly

Registration data: the information the user provides when creating an account: username and email address.

User profile data: the information users add on the platform in order to use the services provided, i.e., the user’s phone number and the user’s delivery address. The user can view and modify their profile’s personal data at any time. We do not store the User’s credit card data, but it is sent to authorized electronic payment service providers, who will store the data to facilitate the payment process for the user and manage it on behalf of Justhost SAS, its subsidiaries or its websites. Under no circumstances is this data stored on the servers of Justhost SAS, its subsidiaries or its websites. The User may, at any time, delete the data of the cards linked to their account. With this action, the service providers will delete the data and it will be necessary to enter it again or select it again in order to place new orders.

Additional information the user wishes to share: information the user provides to Justhost SAS, its subsidiaries or its websites for another purpose—for example, a photograph of themselves or a billing address, if the user requests to receive invoices.

Information about communications with Justhost SAS, its subsidiaries or its websites: we will have access to the information users provide to resolve questions or complaints regarding the use of the services.

The processing of this data by Justhost SAS, its subsidiaries or its websites is necessary to comply with the contractual relationship established. If the User does not provide it, the requested services may not be available and we will not be able to provide them.

b) Information the user provides indirectly

Usage data: Justhost SAS, its subsidiaries or its websites collect usage data about the user when they interact with the services made available.

Device and usage data: Justhost SAS, its subsidiaries or its websites collect data from the devices the user uses to access the services made available:

The IP address the user uses to connect to the internet with their computer or phone.

Information about the user’s computer or phone, such as their internet connection, browser type, version and operating system, and device type.

The complete browsing path of Uniform Resource Locators (URLs), including date and time.

Data from the user account: information about the orders placed by the user, as well as the ratings and/or comments the user makes about their orders.

Browsing history and user preferences.

Basic data: if the user arrives at the site and the services made available from an external source (such as a link on another site or in an email), we record information about the source that referred the user to Justhost SAS, its subsidiaries or its websites.

Incident management data and Contacts: if the User communicates via the Contact Form or instant messaging, Justhost SAS, its subsidiaries or its websites will collect the messages received in the format used by the User and may use and store them to manage current or future incidents.

Data derived from “Cookies”: Justhost SAS, its subsidiaries or its websites use their own cookies and those of third parties to facilitate user navigation and for statistical purposes.

Information from third parties: Justhost SAS, its subsidiaries or its websites may collect personal information or data from third parties if the user gives permission for third parties to share this information with us. For example, if the user creates an account through Facebook, Facebook could provide us with personal data about that user if it appears on their Facebook profile (name, gender, age, …).

Likewise, if the user accesses the services made available through products and services offered by Google, Google may send browsing data to Justhost SAS, its subsidiaries or its websites, with access to the platform via links created by Google.

Information provided by the external third party may be controlled by the User in accordance with that party’s own privacy policy.

Geolocation data: where users authorize it, data related to their position may be collected, including the real-time geographic location of users’ computers or mobile phones.

This data is processed to comply with the contractual relationship established with the user.

Why is information about Users collected?

Justhost SAS, its subsidiaries or its websites use the information collected about users so that they can access and communicate with the services made available and carry out the requested services. This information will also be used to show the User all orders placed through the platform and to enable them to provide feedback on the services provided by Justhost SAS, its subsidiaries or its websites.

Justhost SAS, its subsidiaries or its websites also use the information to study and analyze ways to improve the services provided.

In particular, Justhost SAS, its subsidiaries or its websites may use data to ensure the proper use of the products requested on the platform (provide pharmacist advice, guarantee delivery to persons over 18 years old, …).

Thus, when Justhost SAS, its subsidiaries or its websites act as an intermediary in providing services or activities, it expressly authorizes Justhost SAS, its subsidiaries or its websites to transmit its data to the organizer of the activity so that the organizer, responsible for delivering the service, can contact the buyer when it deems it necessary, without the organizer being able to use the data for purposes other than providing the advice necessary to supply the entrusted service.

Justhost SAS, its subsidiaries or its websites may use users’ information for internal purposes to ensure that the services provided are secure and operational (e.g., testing, fraud prevention, abusive activity prevention, phishing).

Justhost SAS, its subsidiaries or its websites perform statistical analyses of collected information to study user behavior and trends and to better understand how the services are used. Thus, Justhost SAS, its subsidiaries or its websites may use the data provided in order to manage incidents that may arise in the provision of services.

Justhost SAS, its subsidiaries or its websites may use the personal data provided by the User to contact them by email and/or SMS to inform them about the operation of the service. Justhost SAS, its subsidiaries or its websites send messages to the User’s mobile phone to inform them of the progress of their order, and once the order is delivered, Justhost SAS, its subsidiaries or its websites send an email that may include an order summary and a receipt indicating the price of the order. By registering with Justhost SAS, its subsidiaries or its websites, the User accepts this privacy policy and therefore authorizes Justhost SAS, its subsidiaries or its websites to send these two communications.

With the User’s agreement, Justhost SAS, its subsidiaries or its websites may send promotional messages and/or offers relating to the service offered to the User’s email address. If a User of Justhost SAS, its subsidiaries or its websites does not wish to receive such information and/or marketing communications, they may unsubscribe at any time by clicking the “unsubscribe” link in the email; consequently, Justhost SAS, its subsidiaries or its websites will immediately stop sending this type of information.

In addition, Justhost SAS, its subsidiaries or its websites, with the user’s prior consent, may use the delivery address entered by the user in order to carry out promotional activities.

As explained above, if you connect your account to your account on social networks or a third-party platform, Justhost SAS, its subsidiaries or its websites may use the information made available by the User on the relevant social networks or third-party platform, and that the relevant social networks or third-party platform have made available to Justhost SAS, its subsidiaries or its websites, in accordance with the privacy settings and other parameters applicable to your account on the relevant social networks or third-party platform.

If the shareholding of Justhost SAS, its subsidiaries or its websites changes, or if all or almost all of the assets of Justhost SAS, its subsidiaries or its websites are acquired by a third party, Users are informed of the transfer of information. The new controller will communicate its identification data to Users. Justhost SAS, its subsidiaries or its websites state that they will inform the competent supervisory authority. Justhost SAS, its subsidiaries or its websites will inform Users of the change of controller at the time it occurs.

Justhost SAS, its subsidiaries or its websites do not use Users’ Data for purposes other than those described in this Privacy Policy and in the Terms of Use.

The processing defined in this point is carried out by Justhost SAS, its subsidiaries or its websites or by third parties on behalf of Justhost SAS, its subsidiaries or its websites, as described in the following point, given the legitimate interest of Justhost SAS, its subsidiaries or its websites in improving the services offered to Users, as well as improving their user experience on the platform and complying with the contractual relationship established between the user and Justhost SAS, its subsidiaries or its websites.

Do Justhost SAS, its subsidiaries or its websites share the information they hold?

As indicated in the previous section, the personal data collected by Justhost SAS, its subsidiaries or its websites is used exclusively for the execution of the service as defined in the “Terms of Use”.

For the proper development of the contractual relationship and excellence in service delivery, as well as the legitimate interest of Justhost SAS, its subsidiaries or its websites, certain User data may be shared with:

Service providers: the providers of Justhost SAS, its subsidiaries or its websites who perform the service. These will have access to the User’s personal information required only within the scope of their assignments. Service providers undertake to process personal information in accordance with this Personal Data Protection Statement and the legislation in force.

The User may receive emails from Justhost SAS, its subsidiaries or its websites and/or the Service Provider to confirm the order, organize the return of products, request the user’s opinion on the service offered, or receive an order summary.

Justhost SAS, its subsidiaries or its websites ensure that all partners—commercial, technical, suppliers or other relevant third parties—are contractually required to process the information shared with them in accordance with the instructions given by Justhost SAS, its subsidiaries or its websites, this Personal Data Protection Statement, and the legislation in force.

In selecting service providers, Justhost SAS, its subsidiaries or its websites may transfer user data outside the borders of the European Economic Area. In such cases, Justhost SAS, its subsidiaries or its websites will ensure that these service providers comply with the minimum security standards established by the European Commission and that they always process the data according to the instructions provided by Justhost SAS.

Payment gateway: Justhost SAS, its subsidiaries or its websites do not store users’ bank card data, nor data that could allow identification of the payment method with the cardholder’s identity. Nevertheless, bank card data (name and expiry date) is stored by the payment service provider, whose security measures are described as PC1 Compliant in accordance with the Payment Card Industry Data Security Standard (PCI DSS). If the User asks to delete the data corresponding to the payment methods they have entered in their profile, the payment service provider will delete this data from its servers.

Justhost SAS, its subsidiaries or its websites may share information with public authorities and/or third parties regarding ongoing proceedings aimed at investigating any type of suspected illegal activity.

Call center services and incident management: to provide customer service and a call center, and within the framework of actions aimed at measuring user satisfaction and providing administrative support services, Justhost SAS, its subsidiaries or its websites may communicate users’ data to companies located in countries outside the EEA, provided they are authorized and the security requirements mentioned in the previous point are met.

Service providers for fraud control: Justhost SAS, its subsidiaries or its websites will share Users’ data with providers offering fraud control services, to study the risk of operations carried out.

Service providers for anonymization of certain data: to prevent misuse of Users’ data by third-party service providers, Justhost SAS, its subsidiaries or its websites may assign Users’ data so that it can be anonymized and used only for providing the service to users. For example, Justhost SAS, its subsidiaries or its websites may assign Users’ phone numbers to third parties to anonymize them and provide them in this format to providers used to comply with the services contracted by Users.

Users’ data is stored on servers that comply with applicable data protection legislation and with the commitments set out in the current data privacy policy.

None of these data transfers includes the sale, rental, sharing or similar of personal data for commercial purposes, in a manner contrary to the commitments of this Personal Data Protection Statement.

Justhost SAS, its subsidiaries or its websites share Users’ information as described in order to comply with applicable regulations, to help Justhost SAS, its subsidiaries or its websites improve service delivery, and to comply with the contractual relationship with the User.

What rights do users have?

How long will Justhost SAS, its subsidiaries or its websites retain the data?

The personal data provided will be retained as long as the User does not request its deletion, for a period of 24 months from their last interaction with the Platform.

In the event of withdrawal of consent or objection to processing, the data will be blocked and will cease to be processed, and will be retained for a period of 4 years in order to be able to bring or defend against potential claims.

Right to withdraw your consent

At any time, the user may withdraw their consent for the processing of data by Justhost SAS, its subsidiaries or its websites.

To do so, the User simply needs to contact us by email at contact@justhost.fr. Withdrawal of consent may be carried out at any time by the data subject. Users accept that withdrawal of consent implies that Justhost SAS, its subsidiaries or its websites may no longer be able to provide the services.

What information do users have access to?

Justhost SAS, its subsidiaries or its websites provide the user with access to a large amount of information relating to their account and their past orders, so that they can consult it and, in some cases, modify it.

Any user can access the platform and create an account. The information and data then provided by the user is therefore permanently available.

Rights of access, rectification, erasure, restriction of processing, objection and right to data portability

The right of access is conceived as the right the user must request from Justhost SAS, its subsidiaries or its websites if it processes their data, as well as the information provided for in Article 15 of the Regulation.

In accordance with Article 16 of the Regulation, the user may ask Justhost SAS, its subsidiaries or its websites to rectify the data in its database if it is incomplete.

The right to erasure entitles the user to request Justhost SAS, its subsidiaries or its websites to delete their personal data in the cases provided for by the Regulation.

If the user requests it, on the basis of the conditions of the Regulation, Justhost SAS, its subsidiaries or its websites will restrict the use of its data to that established in this article.

The Regulation governs the right to portability that users have, which will allow them to ask Justhost SAS, its subsidiaries or its websites to send all the data they have in a structured, machine-readable format, and to request that it be transmitted to another controller.

The user will also have the right to object to the processing of personal data held by Justhost SAS, its subsidiaries or its websites, as established in the Regulation.

The exercise of these rights is very personal, so it will be necessary for the data subject to prove their identity. The exercise of these rights must be made by a signed written request by the owner of the data, indicating their address and attaching a copy of their national identity document or another supporting document, to Justhost SAS, via their contact form or the offices of Justhost SAS, its subsidiaries or its websites.

What options do users have?

As mentioned in the previous section, if the user wishes to no longer receive emails from Justhost SAS, its subsidiaries or its websites, they can adjust their subscription preferences by contacting us.

In addition, Users may choose not to share their location with Justhost SAS, its subsidiaries or its websites. Most mobile devices offer the user the possibility to disable geolocation services. This option is commonly accessible in the device’s settings menu. If in doubt about the procedure to follow to disable this function, it is recommended by Justhost SAS, its subsidiaries or its websites to contact the device manufacturer or the telecom operator.

Outside the exercise of the rights described above, Users have the right to submit a complaint to the supervisory authority for review of their complaint.

Protecting our users’ data

Justhost SAS, its subsidiaries or its websites have taken all necessary measures recommended by the European Commission and the competent Authority to guarantee an adequate level of protection, in accordance with the nature of the personal data and the circumstances of its processing, in order to safeguard its integrity, within the limits of current technology. Personal information provided to Justhost SAS, its subsidiaries or its websites will not be transferred to any third party without the prior consent of its owner.

Notifications and amendments

As stated above, all users are able to exercise their rights to access, rectify, cancel or object to any processing of their personal data. Users may exercise these rights or request further details about this Statement via the email address contact@justhost.fr.

Due to the changing nature of the activity, our Personal Data Protection Statement, the use of Cookies and the Terms of Use may change accordingly. Unless the user states otherwise, Justhost SAS, its subsidiaries or its websites may send by email or by other means ensuring receipt, notifications to the user regarding important changes and amendments to these documents. Nevertheless, Justhost SAS, its subsidiaries or its websites will not make any significant change to its statements and security practices that could affect the degree of protection of customer information that may have been collected in the past.

Right to register on the telephone solicitation opt-out list

Bloctel is a free service allowing you to register your phone number to oppose telephone marketing. You can register on the website bloctel.gouv.fr.