Privacy policy

Last updated: 04/04/2026

This privacy policy applies to the LOLAGRE / JEFFPROD websites and applications.

Article 1: Data Controller and Preamble

LOLAGRE SASU is the data controller of your personal data within the meaning of the General Data Protection Regulation (GDPR) and applicable data protection laws. Contact details for the data controller:

Company: LOLAGRE SASU — SIREN 915238935
Representative: J-F. GAZET
Address: 40 Boulevard Jacques Tête, 95300 PONTOISE, France
Data controller contact email: contact@lolagre.com

The purpose of this privacy policy is to inform users:

How their personal data is collected. Personal data means any information that identifies a user, including names, age, postal or email address, location, or IP address (non-exhaustive list);
Of the rights they have regarding this data;
Of the identity of the controller of collected and processed personal data;
Of the recipients of this personal data;
Of the website's cookie policy.

This policy supplements the terms of use and terms of sale available to users.

Article 2: Principles Governing the Collection and Processing of Personal Data

In accordance with Article 5 of European Regulation 2016/679, personal data shall be:

Processed lawfully, fairly and in a transparent manner in relation to the data subject;
Collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;
Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed;
Processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

Processing shall be lawful only if, and to the extent that, at least one of the following conditions is met:

The data subject has given consent to the processing of their personal data for one or more specific purposes;
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
Processing is necessary for compliance with a legal obligation to which the controller is subject;
Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Article 3: Personal Data Collected and Processed

Our websites do not track visitors: no cookies, no advertising, no traffic analytics tools.

Our mobile applications that display advertisements use the Google AdMob network. In compliance with the General Data Protection Regulation (GDPR), consent for the display of targeted or non-personalised ads is obtained within our applications by the provider SFBX, whose Consent Management Platform (CMP) is certified by Google. Parents, guardians and those responsible for children are informed that we do not knowingly collect personal information from children.

We may collect and use unique identifiers associated with your mobile device, such as the Device ID, Advertising ID, or similar identifiers. This data may be used to:

Display personalised or non-personalised ads via advertising networks;
Analyse application usage to improve its operation;
Detect and prevent fraudulent or abusive activity.

This data is retained for the period strictly necessary for the purposes described above, and for a maximum duration equal to the length of the relationship with the user plus three (3) years.

Article 3a: Transfers of Data Outside the European Union

In connection with the use of Google AdMob, certain data (advertising identifiers, usage data) may be transferred to servers located in the United States and operated by Google LLC. These transfers are governed by the standard contractual clauses approved by the European Commission, in accordance with Article 46 of the GDPR. For more information, please consult Google's privacy policy.

Article 4: Your Rights

In accordance with the GDPR and applicable data protection law, you have the following rights over your personal data:

The right to be informed;
The right of access;
The right to rectification;
The right to erasure ("right to be forgotten");
The right to restrict processing;
The right to data portability;
The right to object;
Rights relating to automated decision-making and profiling;
The right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, contact the data controller: contact@lolagre.com

You also have the right to lodge a complaint with the relevant supervisory authority. In France: the Commission Nationale de l'Informatique et des Libertés (CNIL) at www.cnil.fr — 3 Place de Fontenoy, 75007 Paris.

Article 4b: Rights of California Residents (CCPA / CPRA)

If you reside in California, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you specific rights. These laws use particular definitions that are important to understand.

Definition of "sell": California law uses a broad definition. A "sale" includes not only transfers of data for monetary payment, but also any disclosure of personal information to a third party in exchange for valuable consideration. Sharing advertising identifiers with Google AdMob for the purpose of displaying targeted ads may constitute a "sale" under the CCPA.

Definition of "share": The CPRA introduced a concept distinct from "sale". "Sharing" refers specifically to disclosing personal information to third parties for cross-context behavioral advertising — that is, targeting ads based on a user's behaviour across different websites, services, or applications. Sharing advertising identifiers with third-party networks (e.g. Google AdMob) for ad targeting purposes falls within this definition.

Our practices: LOLAGRE does not sell your personal data in the traditional sense. However, sharing advertising identifiers with Google AdMob may qualify as a "sale" or "share" under the CCPA/CPRA.

As a California resident, you have the following rights:

Right to know: learn what categories of personal data are collected, the purposes of processing, and whether they are sold or shared with third parties;
Right to opt out of sale: refuse the sale of your personal data to third parties;
Right to opt out of sharing: refuse the sharing of your personal data for cross-context behavioral advertising purposes;
Right to deletion: request erasure of your personal data;
Right to correction: request rectification of inaccurate data;
Right to limit use of sensitive personal information;
Right to non-discrimination: you will not be penalised for exercising these rights.

How to opt out of sale and sharing:

Email us at contact@lolagre.com with the subject line "Do Not Sell or Share My Personal Information";
Opt out of personalised advertising from your device settings: iOS › Settings › Privacy & Security › Apple Advertising › Disable Personalised Ads; Android › Settings › Google › Ads › Opt out of Ads Personalisation;
Withdraw your consent to personalised ads in the application settings.

We will respond to your request within 45 days.

Article 4c: Rights of Virginia Residents (VCDPA)

If you reside in Virginia (USA), the Virginia Consumer Data Protection Act (VCDPA), in effect since 1 January 2023, grants you the following rights:

Right to confirm and access: know whether LOLAGRE is processing your personal data and obtain a copy;
Right to correction: request rectification of inaccurate data;
Right to deletion: request erasure of your personal data;
Right to data portability: obtain your data in a portable, machine-readable format;
Right to opt out of processing for targeted advertising, sale of personal data, or profiling that produces legal or similarly significant effects.

To exercise these rights, contact us at contact@lolagre.com. We will respond within 45 days (extendable by a further 45 days if needed). If your request is refused, you may appeal to us; if the appeal is rejected, you may lodge a complaint with the Virginia Attorney General.

Article 5: Consent

Upon first use of our applications, we ask for your explicit consent to the collection and processing of personal data, including device identifiers, in accordance with applicable law. You may withdraw this consent at any time from the application settings or by contacting us at contact@lolagre.com.

Article 6: Changes to This Privacy Policy

LOLAGRE reserves the right to modify this Policy at any time in order to ensure its compliance with applicable law.

In the event of a material change affecting users' rights, users will be notified by any appropriate means (in-app notification, email if available) before the changes take effect. For minor changes, users are encouraged to review this Policy each time they use our services.

This policy, first published on 01/08/2022, was last updated on 04/04/2026.