Legal notice, Terms & privacy

Panieer SAS's network of automated lockers lets the end Recipient collect orders placed with Merchant Partners in Réunion Island. Panieer acts exclusively as an operator of local logistics infrastructure.

• Access code: collection is done using a unique code (OTP) or QR code sent to the Recipient by SMS or email. This code is strictly personal and confidential.
• Holding period: the parcel remains available for the notified duration (72 hours by default). After this period, the locker is released and the parcel is returned to the Merchant.

Any claim regarding the contents, condition or loss of the product must be addressed directly to the selling Merchant. For any technical issue opening the locker, contact support@panieer.re.

Panieer guarantees strict separation between end-consumer (Recipient) data and technical infrastructure data:

Panieer also publishes the list of its sub-processors, by service category:

For telematics maintenance and historical archiving of the lockers, certain technical data and courier identifiers are processed by our hardware and IoT sub-processor on application servers located in the Asia-Pacific (APAC) region; this sub-processor does not disclose a specific country or location within that region. This transfer will be governed by Standard Contractual Clauses (SCC) approved by the European Commission, currently being prepared with this sub-processor.

Only pseudonymized technical identifiers (UUIDs, meaningless on their own) and equipment telemetry metadata are transferred outside the EU — excluding any directly identifying data (name, phone number, email address), which remains hosted 100% within the European Union (AWS eu-west-1).

When a courier account is deactivated or deleted on the Panieer platform, their access credentials with our hardware sub-processor are immediately revoked and their account is disabled there. As of today, this sub-processor does not offer automated permanent deletion of this data through an API — only a logical deactivation is possible on its side; a request for genuine deletion is in progress with them. The associated security logs are retained for a maximum of 12 months, in accordance with our retention policy.

Data collected

Name, first name, phone number, email, tracking number and locker-opening timestamps.

Legal basis

Performance of the delivery contract (Art. 6.1.b GDPR) and legitimate interest in auditing and proof of opening (Art. 6.1.f GDPR).

Proof of delivery & opening logs

13 months (statutory limitation period, Art. L.133-6 of the French Commercial Code).

Access logs, locker events & transactions

12 months, with automatic archiving (standard storage then cold storage) and automated purge on expiry.

Exercising your rights — In accordance with Articles 15 to 22 of the GDPR, you have the right to access, rectify and erase your data. To exercise these rights or for any question about your personal data, contact our GDPR point of contact:

Email: dpo@panieer.re
Postal address: Panieer SAS – Data Protection Officer, Réunion Island.

Recourse: you have the right to lodge a complaint with the CNIL (www.cnil.fr).

In accordance with Regulation (EU) 2024/2847 on cyber resilience, Panieer publishes a dedicated point of contact for reporting vulnerabilities affecting the Solution:

Email: dev@panieer.re

Panieer commits to maintaining the availability of security patches for the Solution for a minimum period of five (5) years.