Privacy notice

The controller is SD CORP, a simplified joint-stock company (SAS) with share capital of €10,124, registered office at 25 rue Tronchet, 75008 Paris, France, registered with the Paris Trade and Companies Register under number 533 389 904, email contact@sd-corp.fr.

SD CORP has not appointed a data protection officer. Privacy requests may be sent to contact@sd-corp.fr.

This notice covers access to and use of the Mini Neo service (the “Service”), including the augmented-reality launch path. It is written for people in the European Economic Area and Switzerland. A short United Kingdom section appears below. In Switzerland the Federal Act on Data Protection may apply; requests go to contact@sd-corp.fr. The Service may load from other countries. SD CORP does not hold itself out as a United States service and does not apply the California Consumer Privacy Act.

The Service has no accounts. We do not ask for your name, address or payment details. Depending on how you use it, we may process:

• technical connection data (IP address, timestamps, URL, response codes) for security, bot filtering and operation;
• device class and user-agent (for example iOS, Android, desktop);
• interface language and the Mini Neo colour you view;
• a language cookie (detoximix-lang), strictly necessary to remember your interface choice, kept for one year;
• usage events: model ready, first interaction with the model, colour change, AR launch, click through to the shop;
• technical exception events (stack trace, page), with no room image and no camera feed.

We do not receive your camera images or a scan of your kitchen. If you launch augmented reality, the 3D model is shown on your device by Apple’s Quick Look or Google’s Scene Viewer. Any processing those firms perform is under their own terms.

We do not use advertising cookies or social-media trackers. No consent banner is shown: the only cookie is necessary for the Service to function, within the meaning of article 82 of the French Data Protection Act.

Processing rests on Article 6(1) GDPR, as follows:

• providing the Service (legitimate interest in operating a 3D / AR preview, and where relevant steps prior to a purchase if you continue to the shop);
• remembering the interface language (legitimate interest; strictly necessary cookie);
• security, availability and filtering of non-human traffic (legitimate interest);
• audience measurement and product improvement — including whether the model loads, whether it is handled, which colour is tried, whether AR is launched (legitimate interest). You may object;
• diagnosing technical errors (legitimate interest in keeping the Service stable).

We do not use this data for targeted advertising, and we do not sell or trade identity files.

• SD CORP, as controller;
• Hetzner Online GmbH, hosting the Service in the European Union;
• PostHog, Inc., via PostHog Cloud in the European Union, as processor for audience measurement and technical exceptions;
• Apple and Google, only if you launch augmented reality on your device, to run Quick Look or Scene Viewer.

We do not sell your data. We do not pass it to commercial partners for prospecting.

Hosting and the PostHog project referred to above are configured in the European Union. If a processor used a sub-processor outside the EEA, SD CORP would rely on appropriate safeguards, including the European Commission’s standard contractual clauses.

• technical logs: as long as needed for security and diagnosis, in practice a few weeks unless an incident requires longer;
• language cookie: one year, or until you delete it;
• audience and error events in PostHog: twelve months, unless the law requires longer or you exercise your rights.

You have, under the GDPR, rights of access, rectification, erasure, restriction, objection (including to audience measurement based on legitimate interest), and portability where it applies. You may lodge a complaint with the Commission nationale de l’informatique et des libertés (https://www.cnil.fr).

To exercise your rights, write to contact@sd-corp.fr. To object to Mini Neo audience measurement, use the subject line “Mini Neo analytics objection”; we will stop associating your connection with that measurement.

No decision producing legal effects is taken solely by automated means on the basis of this processing.

SD CORP has no establishment in the United Kingdom. If you use the Service from the UK, UK GDPR may apply to you. The supervisory authority is the Information Commissioner’s Office (https://ico.org.uk). The purposes, categories and recipients above still apply. You may write to contact@sd-corp.fr.

The Service is not directed at children under fifteen. We do not knowingly collect data from them. If we learn that a child under fifteen was involved, we will delete the relevant data.

We may update this notice. The date at the top of the page is authoritative. Material changes will appear here.