Consent cookie
Stored for 6 months
Your data, your choices
What data Dénichéo processes, why, for how long, with whom it is shared, and how to exercise your rights.
Dénichéo is a local marketplace: to show you listings near you, we need to know where “near you” is, and to let you talk to a seller, we need an account. This policy explains exactly what data that requires, on what legal basis we process it, how long we keep it, who receives it and how you stay in control. Our principle is simple: collect only what the service genuinely needs, and store nothing optional on your device without your consent.
Consent cookie
Stored for 6 months
Third-party ad trackers
TikTok and Snapchat pixels, subject to consent
Data hosting
European Union
In plain wordsThe site's publisher decides on the processing and answers for its compliance.
The controller of the personal data processing carried out from the Dénichéo platform is WB CONSULTING, the sole trader business operated by William BASTARD.
No data protection officer has been appointed, as the processing carried out does not fall within any of the mandatory appointment cases set out in Article 37 of Regulation (EU) 2016/679. All data protection requests are handled directly by the controller, at the contact address below.
In plain wordsThis policy covers everything you do on the site, with or without an account.
This policy applies to all processing carried out from denicheo.com and its subdomains: browsing, local search, account creation, listing publication, messaging, favourites, support, invoicing, promotional games and the chatbot.
It does not apply to processing carried out by another member on their own account, in particular where a professional seller manages its customer relationships, nor to third-party sites reachable from a link published on the Platform, which have their own policies.
In plain wordsAccount, listings, messages, location, technical and billing data: nothing beyond what makes the service work.
Depending on the features used, the following categories of data may be processed. Mandatory fields are indicated when collected; the others are optional.
In plain wordsEvery processing operation has a reason and a precise legal basis.
The processing carried out pursues the following purposes, each based on the legal basis indicated.
In plain wordsWithout a known area, the site asks for your position. You can always enter it manually or refuse.
Dénichéo ranks listings by proximity. Where no area is known yet, the site may request access to device geolocation, so as to avoid showing listings that are out of reach. That request goes through the browser or operating system permission mechanism: without explicit consent, no position is transmitted.
The area may also be entered manually at any time, by choosing a city or department. That does not require any geolocation permission.
Once determined, the area is stored in a technical session cookie for the duration of the visit, so that navigation remains consistent from page to page.
If the “local preferences” category has been accepted in the consent banner, the area is additionally stored persistently in the browser, so that it can be reused on a later visit. Without consent, it disappears at the end of the session.
The position transmitted by the browser is used only to determine a search area and compute distances. It is neither historised nor used to reconstruct movements.
In plain wordsOne consent cookie, one session cookie, one optional local preference. Nothing else.
A cookie is a file stored on or read from a device when a site is visited. Other trackers may have an equivalent effect, in particular through browser local storage.
Trackers strictly necessary to provide the service expressly requested may be used without consent, subject to clear information. All others require prior, free, informed, specific and unambiguous consent.
As at the date of this policy, the following trackers may be used on the Platform.
In plain wordsRefusing is as easy as accepting, and you can change your mind at any time from the footer.
The consent banner allows you, from your first visit, to accept, refuse or customise optional trackers. Refusal is available at the same level and with the same ease as acceptance.
No optional tracker is stored or read before a choice has been made. No response means refusal.
The choice made can be changed at any time via the “Gérer mes cookies” link in the site footer. Changes take effect immediately for the future.
The choice is remembered for six months, after which it is requested again. It is also requested again if the trackers used change significantly.
Your browser also lets you block, limit or delete cookies. Blocking strictly necessary trackers may degrade the service, in particular account login.
In plain wordsOur technical providers, and nobody else. No data is sold.
Data is accessible only to persons authorised to administer the Platform, within the limits of their duties, and to technical providers acting as processors, on documented instructions and under a contract compliant with Article 28 of Regulation (EU) 2016/679.
Some data is by nature visible to other members: public nickname, profile picture, content of published listings, approximate listing area and messages sent through the messaging system.
Data may be disclosed to competent administrative or judicial authorities where a legal obligation, a lawful request or a court decision so requires.
Dénichéo does not sell, rent or transfer any personal data for third-party marketing purposes.
In plain wordsHosting is European. The few transfers outside the EU are covered contractually.
Application hosting, the database and backups are located in the European Union.
Certain providers, in particular the delivery and image storage provider, may process data from infrastructure located outside the European Economic Area.
Such transfers are covered by the standard contractual clauses adopted by the European Commission, supplemented where appropriate by additional technical measures — encryption in transit and at rest, minimisation of the data transferred — and, as regards the United States, by the EU-US Data Privacy Framework where the provider is certified under it.
A copy of the safeguards in place may be requested at the controller's contact address.
In plain wordsEach category of data has a defined lifetime, after which it is deleted or anonymised.
Data is retained for the period strictly necessary for the purposes pursued, then deleted, anonymised or archived where further retention is required by law or necessary to defend legal claims.
In plain wordsEncryption, access segregation, logging, backups and strong authentication available.
Dénichéo implements appropriate technical and organisational measures to preserve the confidentiality, integrity and availability of data.
These include TLS encryption of exchanges, storage of passwords as non-reversible cryptographic hashes, availability of two-factor authentication and passkeys, segregation and limitation of administrative privileges, logging of sensitive actions, request rate limiting, regular backups and security updates.
In the event of a data breach likely to result in a risk to the rights and freedoms of individuals, the CNIL is notified within seventy-two hours, and data subjects are informed where the risk is high, in accordance with Articles 33 and 34 of Regulation (EU) 2016/679.
In plain wordsAlgorithms sort and detect, but no significant decision is taken without the possibility of human intervention.
The Platform uses automated processing: ranking of search results, category suggestion when publishing, image search, duplicate detection, scam pattern detection in messaging, and the chatbot.
The chatbot relies on a language model operated by a provider established in the European Union. Exchanges are transmitted to it to produce an answer and are not used to train models.
Photo search relies on a visual recognition model running on Dénichéo's own servers: no searched photograph is transmitted to a third party. To improve its relevance, the listings displayed as results and those that were opened are recorded, then used to adjust the order in which results are shown. This processing only affects the ranking of listings: it builds no advertising profile, sets no price and has no bearing on any account's rights.
No decision producing legal effects or significantly affecting a person — in particular account suspension or listing removal — is taken solely on the basis of automated processing without the possibility of obtaining human intervention, expressing a point of view and contesting the decision, in accordance with Article 22 of Regulation (EU) 2016/679.
The main listing ranking parameters are described in the professional terms of service.
In plain wordsAccess, rectification, erasure, objection, portability: most can be exercised directly from your account.
Every data subject has the rights listed below, under the conditions provided for by Regulation (EU) 2016/679.
Most of these rights can be exercised directly from the account area: changing profile information, exporting personal data, managing notification and newsletter preferences, closing the account.
For any other request, simply write to the controller's contact address or use the “Support” area. A reply is provided within one month of receipt, extendable by two months where the request is complex, the data subject being informed.
Proof of identity may be requested where there is reasonable doubt as to the requester's identity, and only in that case.
In plain wordsThe service is for adults only. Any detected minor's account is deleted.
The Platform is reserved for adults. No account may be created by a minor, and no data is knowingly collected from minors.
Any account found to have been created by a minor is closed and the associated data deleted, subject to statutory retention obligations.
Legal guardians who find that a minor in their care has created an account may request its immediate deletion through the support desk.
In plain wordsAny significant change is announced before it takes effect.
This policy may change to reflect new features, new providers, changes in the trackers used or changes in the applicable legal framework.
The version published online is the one applicable on the date of consultation. Each version bears a number and an update date.
Where a substantial change affects processing or the collection of consent, a notice is displayed on the Platform and, where relevant, sent by email before it takes effect.
Our support desk answers any request for clarification, correction or appeal, and keeps a written record of the exchange.
These documents form a whole: each refers to the others where relevant.
Vos transactions en toute sécurité
En cas de problème
Plus de confiance
Près de chez vous, partout en France