Privacy policy

PRIVACY AND DATA PROTECTION POLICY

Version: 2.1
Effective Date: October 13, 2026

PREAMBLE

This Privacy Policy aims to inform Users of the ScanHorizon mobile application, published by SAS SCAN HORIZON, about how their personal data is collected, processed, and protected. The Publisher is committed to strictly complying with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (Loi Informatique et Libertés).

ARTICLE 1. DEFINITIONS

• Personal Data: Any information identifying a natural person directly or indirectly (e.g., location, ad ID, IP address).
• Processing: Any operation on this data (collection, storage, deletion).
• Data Controller: The company SAS SCAN HORIZON.
• Profiling: Any automated processing of personal data consisting of using that data to evaluate certain personal aspects, in particular to analyze or predict a natural person's behaviour.

ARTICLE 2. COLLECTED DATA

We only collect data strictly necessary for the proper functioning of the service ("Privacy by Design").

2.1. Account Data

• User identifier (Firebase UID): Generated upon account creation, used for authentication and profile management.
• Email, username, avatarId: Entered during registration or profile setup.
• Account status and age bracket (ageRange): Used for access control, COPPA compliance, and advertising configuration.
• Timestamped consents: Your consent choices (analytics, crash reporting) and their timestamps are stored as proof of compliance.

2.2. Geolocation and Sensor Data

• Geolocation (GPS): latitude, longitude, altitude. This data is collected in real time when the Application is in use, in the foreground only, to identify aircraft via aeronautical data services. The Application does not request and does not use background location authorization.
• Orientation sensors: compass, accelerometer, gyroscope. This data is processed locally on your device for augmented-reality targeting and is not transmitted to our servers.

2.3. Technical and Backend Security Data

• IP address: Collected server-side for service security, abuse prevention, and legal compliance.
• HTTP technical headers: User-agent, x-forwarded-for, request origin — used for security and anti-abuse purposes.
• Position data (anti-fraud): GPS coordinates may be temporarily processed server-side to detect abnormal behavior (e.g., geographically inconsistent movements). This data is not retained beyond the durations stated in Article 7.
• Notifications: The Application uses two distinct mechanisms. Remote notifications: a notification token (Firebase Cloud Messaging) is associated with your device to enable notifications to be sent from our servers. This token is revoked on logout and automatically renewed by your operating system. Local notifications: certain reminders (scan streak, ongoing challenges) are scheduled directly on your device and triggered by it. They involve no data transmission to our servers.

2.4. Augmented Reality Data

• Camera Feed: The App accesses the rear camera to overlay flight information.
• Processing: Image processing is performed locally on your device. No images are transmitted to our servers, except via manual action by you (e.g., bug report with screenshot).

2.5. Usage Data and History

• Scan history: Your completed scans (aircraft label, details, timestamp, status) are stored in your account to enable multi-device synchronization and history consultation.
• Report data: When you submit an aircraft report or feedback, the submitted information (report type, free-text comment, aircraft data, timestamp) is retained for quality and aeronautical database improvement purposes.
• Usage counters: Free scans, bonus scans, cumulative total — linked to your account for service limit management.

2.6. Commercial Data (In-App Purchases)

• Purchase history and subscription status (Free/Pro).
• Important Note: The Publisher never has access to your banking details. Transactions are secured and managed exclusively by Apple (App Store) and Google (Play Store).

2.7. Advertising and measurement trackers (Subject to Consent)

• Mobile advertising IDs: IDFA (iOS) and GAID (Android).
• Advertising and performance technical data (impressions, clicks, fill rate, anti-fraud signals) processed through our ad and mediation partners.
• Partners that may be involved: Google AdMob (ad network and mediation layer), Meta Audience Network (Meta Platforms, Inc.), Unity Ads (Unity Technologies ApS), Pangle (ByteDance group) and Mintegral (Mobvista group), and, where applicable, their respective ad demand partners.
• This list corresponds to the networks integrated into our mediation layer. They may be enabled or disabled depending on delivery needs: not all of them necessarily receive data at any given time. The list of partners actually active, their purposes and their respective privacy policies can be consulted at any time from our consent management platform, within the Application.
• Rewarded ads server-side verification: when you watch a rewarded ad, your account identifier (UID) is transmitted to Google in order to credit the reward to the correct account and to prevent fraud.
• Pursuant to Article 45 of the French Data Protection Act (Loi Informatique et Libertés), which sets the digital age of consent at 15, personalized advertising and advertising trackers remain disabled for users aged 13 to 15 once their age has been verified. As an additional precaution, the technical indicator flagging a minor user (TFUA tag) is applied to all users aged 13 to 17, at every launch of the Application, regardless of the answer given on any consent screen, including from the Application's settings: only non-personalized advertising may be served to them.

2.8. CHILD PROTECTION (Minors under 13, and restrictions for ages 13-15)

In accordance with our Terms, the Application is strictly prohibited for users under 13 years old. A technical access control is applied at registration. The Publisher does not knowingly collect data from children under 13.

Pursuant to Article 45 of French Act n° 78-17 of 6 January 1978, as amended (Loi Informatique et Libertés), which sets the digital age of consent at 15, personalized advertising, analytics, crash reporting, and marketing use of profile data remain disabled for users aged 13 to 15 once their age has been verified, regardless of the answer given on the initial consent screen shown at first launch (the User's age not yet being known at that point). Only non-personalized advertising may, where applicable, be served to them (TFUA tag). If a parent or guardian discovers their child has provided data without authorization, they may contact us at contact@scan-horizon.com to request immediate deletion.

Clan chat: users aged 13 to 15 benefit from enhanced protections (stricter filtering, reduced sending limits, priority review of their reports), described in Articles 11.4 and 11.5.2 of the Terms and Conditions. The moderator role, which gives access to reported messages, is reserved for adult users.

2.9. Public data used for marketing purposes (subject to consent)

With your explicit consent, the Publisher may use certain data made public on your profile (for example: username, avatar, and general gameplay data such as global statistics or non-sensitive achievements) to promote the Application on its communication channels (website, social media, promotional visuals). No sensitive data or private contact data is used for this purpose. These materials are subject to periodic review to ensure they remain relevant and are kept online only for as long as necessary for the marketing purpose.

You may withdraw your consent at any time by contacting contact@scan-horizon.com. Withdrawal has no retroactive effect on processing already carried out before it is taken into account. Unless technically or legally justified otherwise, we remove the relevant materials from our own channels within 30 calendar days; for third-party platforms (e.g. social media), we initiate removal actions within the same timeframe and to the extent technically available.

2.10. Social and multiplayer features

The Application offers social features (leaderboards, airport-based clans, team challenges, friend lists, profiles viewable by other players). By their nature, these features make some of your data visible to other users. The table below sets out precisely what is visible and to whom.

Clan chat: the clan feed includes a free-text chat room, reserved for members of your clan, described in Article 2.12. There is no private messaging between players. Friend requests and clan invitations contain no message field. Do not share in the chat any information that could identify you or allow you to be found outside the game (name, address, school, phone number).

Username lookup: to enable friend requests, any authenticated user may check whether a username exists and send you a friend request. Your username is therefore a public identifier. We recommend that you do not include your real name or any information allowing you to be identified outside the game.

No geolocation data is shared with other users. Your clan is tied to an airport you choose, and the flag shown on your profile is self-declared: neither results from measuring your actual position. The recent-activity indicator has day-level granularity and does not allow real-time tracking.

The globe and the positions displayed. The multiplayer hub features a globe showing points and connections. These points represent airports, placed at their actual geographic coordinates. They do not represent players' positions. Where a player is associated with a point on the globe, they are shown at the location of the airport of the clan they themselves chose to join. This position reflects neither their actual position, nor an approximate position, nor their country of residence: a player living in Lisbon may have joined the Tokyo clan and will appear in Tokyo. The same applies to the flag shown on their profile, which is self-declared and not verified.

Your GPS geolocation is used exclusively for the aircraft identification described in Article 2.2. It is never transmitted to other users, displayed on the globe, or inferred from your clan membership.

Other users as recipients: when you use these features, other users of the Application are recipients of your data within the meaning of Article 13.1.e GDPR.

Data about you provided by another user. When another user sends you a friend request, a clan invitation, a scan donation, a Premium gift, or designates you as their referee under the referral program, your username and account identifier appear in that other user's data. This information comes from our own services and is not obtained from third parties outside the Application.

Minors: users aged 13 to 17 have access to social features under the same conditions as other users. Holders of parental authority are invited to take note of this and may request removal of a minor's account from the leaderboards directly from the Application ("Settings > Account > Hide from public leaderboards") or by writing to contact@scan-horizon.com for any other request regarding a minor's account.

2.11. Mandatory or optional nature of the data

Some data is necessary for the service itself to work. Other data is optional and only collected with your consent.

2.12. Clan chat

If you are a member of a clan, you can write in your clan's chat. We then process:

• the content of your messages and the date and time they were sent (our servers' time);
• your account identifier (UID), as well as your username, avatar and flag as they are at the time of sending, copied with the message so it can be displayed quickly;
• a technical identifier specific to each message, which prevents duplicate sends;
• if you block a player: the list of players you have blocked;
• if you report a message or one of your messages is reported: the chosen reason, the optional comment written by the reporting party (240 characters at most), and the message together with the five messages exchanged just before and just after it, copied for review. If you are the reporting party, your username is visible to the person reviewing the report, not to the reported player;
• if a measure is taken against you (warning, mute, ban, hiding or deletion of a message): its nature, duration and reason, the fact that you acknowledged a warning and, where applicable, the text of your complaint. These measures form your moderation history, consulted by the team and by the moderator handling a report concerning you;
• if a moderator proposes a measure concerning you to the team: the proposed measure and its comment.

We do not store your IP address, your location or your device identifier with your messages. Your IP address is only processed, transiently, to secure the connection to the chat (limiting the number of simultaneous connections), under the conditions of Article 2.3. The content of your messages is not used for advertising or to profile you, and is not passed on to any advertising partner.

If you become a moderator, we also process the date on which that role was entrusted to you, the date on which you accepted the Moderators' Charter, and the log of the moderation actions you carry out.

ARTICLE 3. PURPOSES AND LEGAL BASES

ARTICLE 4. DATA RECIPIENTS

As of the latest update of this policy, your data is not subject to sale in the usual sense. It is shared with our technical subprocessors for service delivery, and may also be shared with other recipients when necessary to provide the service, based on a valid legal basis and, where required, your consent:

• Google Cloud / Firebase (Ireland): Authentication (Firebase Auth), database (Firestore), analytics (Firebase Analytics), crash reporting (Crashlytics), notifications (FCM), remote configuration (Remote Config), app integrity checks (App Check), and device integrity attestation (Google Play Integrity, Android only).
• Google Sign-In (Google LLC, USA): Authentication via Google account.
• Railway (Netherlands): Backend application hosting with server located in Amsterdam. Railway also hosts the Redis cache used for anti-abuse security, as well as the clan chat service (real-time server and message database, EU West region).
• PlaneFinder (UK): flight data provider. The aeronautical data feed is received by our servers, which locally extract the relevant aircraft. No data about you, and in particular no geolocation coordinates, is transmitted to this provider.
• RevenueCat (USA): Mobile subscription management.
• Resend (USA): Transactional emails related to account lifecycle (e.g. deletion confirmation).
• Google AdMob (USA): Advertising network and mediation layer (only if you accepted tracking). When you consent, an age bracket may be transmitted to AdMob for ad configuration, minor-safety compliance, and performance measurement.
• Unity Ads (Unity Technologies ApS, Denmark): Advertising network (ad delivery, performance measurement and anti-fraud signals, subject to consent).
• Pangle (ByteDance group): Advertising network (ad delivery, performance measurement and anti-fraud signals, subject to consent).
• Mintegral (Mobvista group): Advertising network (ad delivery, performance measurement and anti-fraud signals, subject to consent).
• Cloudflare, Inc. (USA): Content delivery network and storage of the Application's graphic assets (aircraft images, avatars).
• CARTO (CARTO / CartoDB Inc.): Provision of the map backgrounds displayed in the Application. CARTO therefore receives your device IP address and the coordinates of the map tiles viewed.
• Other users of the Application: within the limits described in Article 2.10.
• Volunteer player moderators: to handle a report, a moderator may view, only for a clan other than their own, the reported message and the surrounding messages, their authors' usernames and avatars, and the reporting party's username and any comment they added. To assess the situation, they may also view the moderation measures already taken against the reported player and the messages that player posted over the last thirty days. They have access neither to your email address nor to the other data in your profile. They act under the Publisher's authority, after accepting a confidentiality charter; their actions, and each viewing of past messages, are logged.
• Meta Audience Network (USA): Advertising delivery and performance measurement (subject to consent).
• Sentry (EU/USA depending on configuration): Technical monitoring, error logging, and crash reporting (only if you provided your consent).
• Google Forms (USA): Hosting and processing of account deletion requests submitted via our data deletion request form.

ARTICLE 5. TRANSFERS OUTSIDE THE EU

Some data may be processed outside the European Union, notably through Google (Firebase Auth, Firestore, Analytics, Crashlytics, FCM, Remote Config, AdMob, Google Sign-In), RevenueCat, Resend, Cloudflare, CARTO, Sentry and, depending on aeronautical data flows, our flight data providers.

Clan chat data is stored in the European Union (Railway, EU West region). As Railway is a company established in the United States, access to this data from the United States by this provider remains possible; it is governed by the mechanisms described in this article. Chat authentication relies on Firebase, already mentioned above.

The use of international advertising networks may involve transfers to third countries, including outside the European Economic Area. Depending on the partner concerned, destination countries may include the United States (Google AdMob, Meta Audience Network, Unity Ads) as well as countries in Asia, including the People's Republic of China (Pangle, ByteDance group; Mintegral, Mobvista group). Such transfers only occur after your consent to advertising trackers has been collected, and only for the partners actually enabled at the relevant time.

Any transfer actually carried out is governed by an appropriate safeguard within the meaning of Chapter V GDPR: European Commission Standard Contractual Clauses, or Data Privacy Framework participation where the partner is certified under it.

With respect specifically to transfers to the People's Republic of China (Pangle, Mintegral), the Publisher has carried out an assessment of safeguards following the methodology of the European Data Protection Board (EDPB) Recommendations 01/2020. This assessment finds that the data actually transmitted to these two partners is limited to a mobile advertising identifier and technical bidding and measurement signals, excluding any identity, email address, ScanHorizon account identifier, or precise geolocation; that users aged 13 to 17 only receive non-personalized advertising from these partners, regardless of their individual consent; and that this transfer only occurs after your prior consent has been collected, which you may withdraw at any time. These elements constitute the supplementary measures adopted within the meaning of the EDPB 01/2020 Recommendations. Detailed information on the processing carried out by each advertising partner, together with their respective privacy policies, is accessible from our consent management platform.

ARTICLE 6. COOKIES AND MOBILE SDKs

The Application does not use classic web cookies, but software development kits (SDKs) and mobile identifiers. The use of advertising and analytics trackers is subject to your prior consent, collected at first launch via our consent management platform integrated into the Application. You can change this choice at any time in the Application's settings, under "Manage my choices".

If you accept trackers via the CMP, we may also store an age bracket (e.g. 15-17, 18-24, 25-34, etc.) for personalization, audience measurement, and content adaptation, and transmit it to Google AdMob for ad configuration, minor-safety compliance, and performance measurement. We do not store your full date of birth for this purpose. Without consent, this data is neither collected nor transmitted through advertising or analytics trackers.

The scan-horizon.com website, for its part, does not deposit any tracker: it contains no audience-measurement cookie, no advertising cookie, and no tracking pixel. No consent is therefore required there, and no consent management platform is needed there.

ARTICLE 7. RETENTION PERIOD

• Account and usage data: Guest (anonymous) accounts: after 30 days without activity, the account and its associated data are automatically deleted. Registered accounts (Google, Apple, email): data is retained for as long as the account stays active. Each year, we review accounts with no login for more than 2 years and delete those whose inactivity is confirmed, under the conditions of Article 9, unless otherwise required by a legal retention obligation. You may request deletion of your account at any time, without waiting for this period.
• Retention after a deletion request: When you request deletion of your account, it is immediately deactivated and stops being visible to other users. Your data is then retained for 30 days before permanent deletion, solely so you can recover an accidentally deleted account by logging back in before that period ends. After that, deletion is final and irreversible. You may request early deletion by writing to contact@scan-horizon.com.
• Technical logs retained under a legal obligation: Pursuant to obligations placed on providers of online public communication services, data allowing identification of the author of content is retained for one year from recording, then deleted. This data is accessible only to authorized judicial authorities, upon requisition.
• Reports and moderation decisions, outside the chat: Reports received, restriction decisions taken, and their grounds are retained for six months from notification of the decision, matching the complaint period under Article 11.5.8 of our Terms. They are then deleted or anonymized, unless a complaint or proceeding is under way.
• Clan chat messages: a message that drops out of your clan's last 100 messages is deleted 7 days later, and every message is deleted no later than 3 months after it was sent. A message you delete is hidden immediately and follows the same rules. An automatic purge runs every day.
• Reported or moderated messages: a reported message, with the context messages copied for review, is kept for at least 3 months after the report. If a measure is taken on that message or against its author, it is kept until the later of the following dates: 3 months after the end of the measure; 6 months after its date (complaint period). For a warning, which has no duration, only the second date applies. A measure with no end (permanent ban) keeps it for as long as the measure is active, then 3 months after it is lifted. It is never deleted while a complaint is pending.
• Log of moderation actions and sanctions, including warnings: 12 months. It contains the identifiers of the persons concerned, the nature, date and reason of each action and, where applicable, the text of complaints; it does not reproduce the content of chat messages. It also records each time a moderator views a reported player's past messages. A player's moderation history is drawn from this log and therefore does not go back more than 12 months. The log is anonymized when your account is deleted, unless a chat ban is still active.
• Blocks: until you unblock the player concerned, and at the latest until your account is deleted.
• Moderator role: for as long as the role is held; the actions carried out remain in the moderation log for its 12-month duration.
• Content sent to authorities: for as long as the proceedings require, beyond the periods above (Article 11.5.10 of the Terms and Conditions).
• Gift codes and Premium gifts: a purchased gift code and its associated purchase receipt are kept until the code is redeemed or expires, then for at most twelve (12) months from purchase to allow it to be reissued (Article 6 ter.4 of the Terms and Conditions), then deleted. A Premium gift invitation sent to another player expires and is deleted after seven (7) days if it has not been accepted.
• Consent records: Retained as compliance evidence for the period required by applicable legal obligations.
• Security and anti-abuse data: Retained for a limited period proportionate to service protection, then deleted or anonymized.
• Analytics data: Usage data is retained for 14 months in Firebase Analytics, then exported to our analytics warehouse (Google BigQuery) where it is retained for 14 months before automatic deletion. There, it is linked to a technical installation identifier of a pseudonymous nature, which is not connected to your account for the vast majority of events. Where an account identifier is present, it is erased upon request.
• Advertising and error-monitoring data: Retained according to your consent choices and the settings of the platforms concerned.
• Social data: Clan, friendship, invitation, scan donation and challenge participation data is retained for the duration of account activity and for as long as you use the relevant feature. Structured clan feed messages remain visible to clan members for as long as your account stays active; they cannot be deleted individually by their author, but are deleted along with the rest of your social data when your account is deleted (Article 9).
• Leaderboards: The weekly leaderboard is reset each week. The all-time leaderboard reflects the account's cumulative activity for as long as the account is active.
• Data subject to specific legal obligations: Retained for the duration required by applicable regulation.

ARTICLE 8. SECURITY AND BREACH NOTIFICATION

We implement appropriate technical and organizational security measures (encryption in transit, access controls, anti-abuse mechanisms, security logging, monitoring). For the clan chat: encrypted connections (wss and HTTPS), a database reachable only through the host's private network, no message content in technical logs, and reading of messages by the team and by moderators restricted to handling reports and complaints (reported messages and, to assess the situation, the reported player's messages from the last thirty days, each viewing being logged). Some automated protective measures (e.g. temporary limitation of certain actions) may be applied in case of detected anomaly or abuse; these measures are proportionate and may be reviewed upon request at contact@scan-horizon.com. In accordance with GDPR Article 33, in case of a data breach presenting a risk to your rights, the Publisher commits to notifying the CNIL within 72 hours and, if necessary, informing affected users.

ARTICLE 8 BIS. PROFILING AND AUTOMATED MEASURES

What we do. To preserve game fairness and leaderboard integrity, we automatically analyze certain characteristics of your interactions with the Application, in particular the regularity of intervals between actions, the consistency of touch-contact coordinates, and the consistency of sensor data. This analysis is solely intended to distinguish human use from use driven by automation software.

What this can trigger. Where the analysis produces a high score, the Application may present you with a simple verification step, consisting of an interaction that only a human user can reliably perform. Failing this step carries no penalty: the scan attempt concerned is not counted and you may retry immediately. In the event of repeated, clear-cut anomalies, restriction measures provided for in our Terms may be applied, after human review.

Your rights. No decision producing legal effects concerning you is taken solely on the basis of this automated processing. You may at any time request human intervention, express your point of view, and contest any measure applied to you, by writing to contact@scan-horizon.com.

Legal basis: legitimate interest (Article 6.1.f GDPR).

ARTICLE 9. YOUR RIGHTS AND ACCOUNT DELETION

Under the GDPR, you have the right to access, rectify, erase, port, restrict the processing of, and object to the processing of your personal data.

We respond to your request within one month of receiving it. This period may be extended by a further two months given the complexity or number of requests; in that case, we will inform you within one month of receiving your request, stating our reasons. For certain requests, reasonable identity verification may be required.

When processing is based on your consent (e.g. advertising / analytics / crash reporting trackers), you may withdraw consent at any time, without affecting processing already carried out before withdrawal.

You may also object at any time to the use of your public profile data for marketing purposes, or withdraw previously given consent, by contacting contact@scan-horizon.com.

Objection to leaderboard publication: You may object at any time to the display of your username and statistics on the public leaderboards, directly from the Application ("Settings > Account > Hide from public leaderboards") or by writing to contact@scan-horizon.com. Your account and progression are preserved; only the public display ceases.

How your account deletion works. Deletion takes place in two stages.

• 1. Immediate deactivation. As soon as we receive your request, your account is deactivated: it stops appearing in leaderboards, clan member lists, and username searches. A confirmation email is sent to you.
• 2. Permanent deletion after 30 days. Your data is retained for thirty days, solely so you can recover an accidentally deleted account by logging back in. After this period, deletion is final and irreversible.

What is deleted. Permanent deletion erases your account data, scan history, and collection, as well as your social data: clan membership, friendships, invitations, structured clan feed messages you authored, challenge participations, and removal from leaderboards. Your clan chat messages are dissociated from your profile: their content is erased and your username and avatar are replaced by a notice indicating that the player has been deleted. Reported messages and their context remain stored for the period set out in Article 7. The blocks and reports you made are deleted. Your subscriber status is also removed with our subscription management provider. During the 30 days before permanent deletion, you can no longer connect to the chat.

Copy of your messages. You may request a copy of all your clan chat messages, in JSON format, by writing to contact@scan-horizon.com. It is provided to you within the one-month period stated above.

What may remain. Certain technical traces no longer containing any identifier relating to you may remain in anonymized form. Data we are legally required to retain is kept for the period set out in Article 7.

A note on your subscription. Deleting your ScanHorizon account does not cancel an ongoing subscription, which is billed by the App Store or Google Play. You must cancel it separately, under Article 6 bis.5 of our Terms.

How to delete your data?

• In the App: Via "Settings > Privacy > Delete my account".
• On the Web (no app): Via our dedicated deletion form accessible on this page.
• By Email: Write to contact@scan-horizon.com.

You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr, or with your local supervisory authority where applicable.

ARTICLE 10. USERS RESIDING IN CALIFORNIA

Given its size and volume of activity, SAS SCAN HORIZON does not, as of the last update of this policy, meet the applicability thresholds of the California Consumer Privacy Act as amended by the California Privacy Rights Act.

We nonetheless apply to users residing in California the same safeguards as to European users: the right to access, rectify, erase, and port your data under Article 9, and prior collection of your consent before any advertising tracker is deployed.

We do not sell your personal data. When you consent to advertising trackers, your mobile advertising identifier is transmitted to our ad-network partners for personalized advertising purposes, which may constitute a "share" under California law. You may at any time refuse or withdraw this consent from the Application's settings, under "Manage my choices", which ends this sharing.

Should our situation evolve beyond the applicable thresholds, we would put in place all required mechanisms and update this section.

ARTICLE 11. CONTACT

For any questions about this policy, or to exercise your rights, you may write to us:
SAS SCAN HORIZON
"Data Protection" contact point
10 impasse du Pegan, 01210 Ferney-Voltaire, France
Email: contact@scan-horizon.com

You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.