Privacy Policy

In Kraft seit dem 08/10/2026 · Version 1

Dieses Dokument ist noch nicht in Ihre Sprache übersetzt: Hier sehen Sie die Fassung auf English, nur zur Information. Maßgeblich sind die französische und die spanische Fassung.

DOMILO GROUP attaches great importance to the protection of your personal data. This policy explains what data we collect through the application and the site, why, with whom we share it and what your rights are (European GDPR, the French Data Protection Act (Loi Informatique et Libertés) and, for Spanish residents, Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights, LOPDGDD).

1. Data controller

DOMILO GROUP, Société par actions simplifiée (SAS), 35 rue de Ponthieu, 75008 Paris, France (France). Contact for any question relating to your data: privacy@domiloapp.com. DOMILO GROUP is established in France: the lead supervisory authority is the CNIL; users residing in Spain may also contact the AEPD.

2. Data collected

Category Data Source
Account surname, first name, date of birth, email, phone, password (encrypted), language, account type you
Address and location service address and corresponding GPS coordinates, access details (floor, entry phone, etc.), device location if you allow it you, your device
Provider profile activity, SIREN/SIRET number, VAT, presentation, services, area and availability, vehicle/tools you, official registers
Identity verification (Providers) verification status, name and date of birth read from the identity document; the document and the selfie are processed by our verification provider you, verification provider
Payment payment customer identifier, transaction history and amounts, last four digits and brand of the card; we neither see nor store your full card number you, payment provider
Exchanges and content requests, proposals, messages, request and service completion photos, reviews, reports and exchanges with support you
Technical data IP address and date of last login, notification tokens, device type, security logs automatic
Contact (site) name, email, message sent via the contact form you

3. Purposes and legal bases

  • Performing the contract: creating and managing your account, connecting Clients and Providers, processing payments and payouts, managing cancellations, refunds and disputes (basis: performance of the contract).
  • Securing the platform: verifying the identity and business of Providers, preventing fraud and abuse, calculating Providers' reliability score, detecting abusive reports (basis: legitimate interest, legal obligations). These measures are never purely automated: a member of the team reviews important decisions.
  • Informing you: application notifications (new proposal, message, validation reminder, etc.), verification or service SMS and emails (basis: performance of the contract; push notifications: your consent).
  • Complying with our legal obligations: accounting, anti-money laundering, tax reporting of Providers' income (DAC7 Directive: identity, address, tax identifier, payout account, number of services and amounts), requests from authorities (basis: legal obligation).
  • Improving the service: aggregated usage statistics (basis: legitimate interest).
  • Replying to your messages sent via the site (basis: legitimate interest / pre-contractual measures).

4. Recipients

Your data is never sold. It is accessible to:

  • other users, to the extent necessary: the selected Provider sees the Client's name, address and access details; the Client sees the Provider's profile, rating and reviews;
  • the authorised DOMILO GROUP team (support, verification, fraud prevention);
  • our processors: Stripe (payments, payout accounts and identity verification), Google Firebase (push notifications), OVHcloud (verification SMS), DeepL (on-demand message translation), MapTiler, OpenStreetMap/Nominatim and the IGN Géoplateforme (maps and address search: the address or coordinates are sent to display the map and geocode), OVH SAS (hosting) and our email delivery providers;
  • authorities, where the law requires it.

5. Transfers outside the European Union

Some processors (for example Stripe or Google) may process data outside the European Union. These transfers are governed by an adequacy decision or by the European Commission's standard contractual clauses.

6. Retention periods

  • Account: for the duration of use, then 3 years after the last activity or the deletion of the account (evidence, disputes), unless a valid erasure request is made.
  • Transactions and invoices: 10 years (accounting obligation in France; this period also covers Spanish tax and commercial limitation periods).
  • DAC7 reporting data: 10 years.
  • Messages and service photos: duration of the account, then 12 months.
  • Identity verification data: kept by the verification provider according to its own retention periods; we keep only the status and the name read.
  • Contact form messages: 3 years.
  • Security logs: 12 months.

7. Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability of your data (in Spain, ARCO-POL rights), as well as the right to set directives on what happens to it after your death (French law) or to designate a person to exercise your rights upon your death (LOPDGDD). You may withdraw your consent at any time (notifications, geolocation) in your device settings. To exercise your rights: privacy@domiloapp.com. We reply within one month. You may finally lodge a complaint with the CNIL (cnil.fr, France) or the Spanish Data Protection Agency, AEPD (aepd.es), wherever you reside in the European Union.

8. Security

We protect your data through technical and organisational measures: encrypted connections, hashed passwords, restricted and logged access, strong authentication for the team, separation of payment data. As no system is infallible, we will inform you of any data breach under the conditions provided by law.

9. Minors

The Service is reserved for adults (aged 18 or over). We do not knowingly collect data from minors.

10. Commercial communications

We do not send commercial communications without your prior consent (Article 21 of Spanish Law 34/2002 LSSI-CE; French and European rules). The emails, SMS and notifications you receive concern your account, your requests, your payments and security.

11. Cookies

See our cookie policy.

12. Changes to this policy

We may update this policy; the effective date appears at the top of the document and important changes are notified in the application.