Ulule

Ulule is a pioneering crowdfunding platform dedicated to empowering creators worldwide by bringing their ideas to life through crowdfunding, training courses, and sustainable brands. With a global community, Ulule has successfully funded over 19,000 projects, supporting a diverse range of sustainable and innovative initiatives. The platform offers comprehensive services for getting started, training, and financing projects, positioning itself as a leader in the crowdfunding industry. Ulule is committed to ensuring the legitimate interests of its visitors and users by providing a seamless experience on its website, Ulule.com. The platform manages collection proposals and complies with legal obligations, including reporting of collections. For sensitive data communicated by creators or users, Ulule processes this information in accordance with the General Data Protection Regulation (GDPR), specifically Article 9.2(e), which pertains to data made public by the individuals concerned. The platform oversees contributions and fund transfers related to collections conducted on Ulule.com, balancing its legitimate interests in managing contributions with compliance to legal obligations, such as reporting contributions. For sensitive data communicated by contributors or revealed through their participation in a collection, Ulule processes this information under the same GDPR provision. Ulule retains data related to account creation, platform connections, content creation, and payments to fulfill potential legal requisitions. It also manages orders placed through Ulule Boutique, handling connections with merchants, delivery, customer service, and after-sales service. The platform is proactive in detecting, preventing, and combating fraudulent and illegal activities on the site. Customer service interactions, including emails, social media communications, chats, and phone calls, are recorded and processed to respond to customer requests, improve services, and train teams. Ulule collects and manages opinions on products, services, and customer service performance, and conducts surveys to enhance the site and its offerings. Personalized advertising and site content are displayed based on user browsing behavior, profiles, and provided information. Data retention policies vary depending on user activity and engagement. Active users' data is retained for the duration of their account, plus an additional three months following a closure request. Inactive users are prompted after three years of inactivity to confirm account retention; if no response is received, data is deleted after three months. Similar policies apply to creators and contributors, with retention periods extending up to five years to comply with legal limitation periods. Data related to training requests is retained for three years, while invoicing and session analysis data is kept for ten years from the end of the current financial year. Transaction data is deleted upon completion unless consent for retention is obtained, with a 15-month retention period for evidentiary purposes in case of disputes. Data related to obligations to combat fraud, money laundering, and terrorism financing is retained for five years from the termination of the contractual relationship or account closure. In cases of pre-litigation, data is deleted upon amicable settlement or limitation of legal action. In litigation scenarios, data is deleted when no further appeals are possible against the decision rendered. Instructions concerning the fate of data after death are also managed accordingly. Ulule collects and processes personal data when users browse the site and utilize its services. The data controller, Ulule SAS, determines the purposes and means of processing. For contributions made to collections, Ulule SAS and each creator act as joint data controllers. Similarly, for orders placed in the shop area, Ulule SAS and each merchant are joint data controllers. The platform ensures that all personal data processing is lawful, based on legal bases outlined in Article 6 of the GDPR or Article 9.2 for sensitive data. Payment collection on the site is managed by approved payment service providers, MANGOPAY and STRIPE, which conduct personal data processing as data controllers, adhering to their respective privacy policies. Ulule and its payment service providers perform processing to combat fraud, money laundering, and terrorist financing, including data combinations to assess fraud risk associated with payments or fundraising. These processes may justify decisions to refuse payments. Personal data collected includes information provided during account creation, collection creation, contributions, purchases, and training applications. Mandatory data collection is necessary for contractual and regulatory compliance. Users are advised to exercise caution when publicly revealing personal or sensitive information on the site. When sharing information about third parties, users must ensure they have the right to do so and provide the third parties with information on data processing as outlined in Ulule's Privacy Policy. Data retention periods are specified, with data subject to deletion or anonymization after the specified durations. Personal data may be transmitted to service providers for subcontracted processing, with guarantees in place to ensure data protection compliance. Data necessary for managing contributions is shared with creators, and data for managing orders is shared with merchants. Personal data may also be disclosed to authorities as required by law. Users have rights over their personal data, including access, rectification, deletion, and objection to processing. They can exercise these rights by contacting Ulule's Data Protection Officer (DPO). Personal data transfers outside the European Union are conducted securely and in compliance with data protection regulations. For any questions regarding personal data processing or to exercise rights, users can contact Ulule's DPO.