This privacy policy is intended to help you understand how your personal data is collected, processed and stored by MOISMONT via the Site.

MOISMONT understands that data protection and privacy are an issue for all users visiting the Site.

MOISMONT undertakes, in accordance with GDPR regulations, to respect your privacy and protect your personal data, i.e. data likely to identify you directly or indirectly as a person.

The purpose of this privacy policy is to present to you MOISMONT's commitments in this area.

I. DEFINITION

When you use our Site, we may ask you to provide us with personal data about you.

The term " personal data " refers to all data that allows an individual to be identified, which corresponds in particular to your surname, first names, pseudonym, photograph, postal and email address, your job title, telephone numbers, date of birth, data relating to your transactions on the Site, details of your purchases, bank card numbers, SIRET, intra-community VAT number, IP address, as well as any other information that you choose to communicate to us about yourself.

II. PURPOSE

The purpose of this charter (hereinafter the “Charter”) is to inform you about the means we use to collect your personal data, in the strictest respect of your rights.

We inform you in this regard that we comply, in the collection and management of your personal data, with Law No. 78-17 of January 6, 1978 relating to information technology, files and freedoms, in its current version (hereinafter: the "Information Technology and Freedoms Law"), as well as Regulation (EU) 2016/679 of April 27, 2016 relating to the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter: the "GDPR").

III. DATA COLLECTION RESPONSIBLE

The person responsible for collecting your personal data is the company MOISMONT, a simplified joint stock company with a share capital of 165,300 euros, registered with the RCS of Amiens under number 789 532 025, whose head office is located at Domaine de Moismont – 80120 Vron - France (hereinafter referred to as: “MOISMONT”).

IV. COLLECTION OF PERSONAL DATA

The legal basis for our collection of your personal data is as follows:

- this collection is necessary in order to execute the contract concluded when you use our services on our Site;

- legitimate interest when you voluntarily provide us with personal data during your visit to our Site, the data then being collected to enable us to better respond to your requests for information on our services.

Your personal data is collected to meet one or more of the following purposes:

- Manage your access to certain services accessible on the Site and their use,

- Carry out operations relating to Customer management concerning contracts, invoices, monitoring of the relationship with Customers,

- Create a file of users, customers and prospects,

- Send newsletters, solicitations and promotional messages. In case you do not wish this, we give you the option to express your refusal on this subject when collecting your data,

- Develop commercial and traffic statistics for our services,

- Organize competitions, lotteries and all promotional operations excluding online games of chance and gambling subject to the approval of the Online Gaming Regulatory Authority

- Manage the management of people's opinions on products, services or content,

- Manage unpaid amounts and any disputes regarding the use of our products and services,

- Personalize responses to your requests for information,

- Comply with our legal and regulatory obligations. We inform you, when collecting your personal data, whether certain data must be provided or whether they are optional (by asterisks visible on the Site).

Why do we collect your personal data?

- We collect your personal data in order to identify you when using our site and in order to send you messages related to the proper administration of our site (e.g.: confirmation of registration, modification of the site or conditions of use, etc.)

- We collect your personal data in order to deliver your order.

- We collect your personal data in order to improve and optimize our site, for example by studying your behavior during your visit and drawing conclusions from it in order to make changes in terms of ergonomics and user experience.

- We collect your personal data in order to understand your preferences and offer you commercial offers corresponding to services/products similar to those already ordered.

What are the categories of personal data that we collect to respond to the collection listed above?

- Identification data;

- Connection data;

- Identification data;

- Usage and consumption data.

What is the legal basis allowing us to collect your personal data for the purposes listed above?

- This processing has as its legal basis the execution of the contract binding us when you accept our general conditions at the time of creating your account.

- This processing has as its legal basis the execution of the contract binding us when you accept our general conditions at the time of creating your account.

- This processing has as its legal basis our legitimate interest in providing and improving the user experience of our visitors and members of our site.

- This processing has as its legal basis our legitimate interest in providing and improving the user experience of our visitors and members of our site.

We inform you, when collecting your personal data, whether certain data must be provided or whether it is optional.

V. RECIPIENT OF PERSONAL DATA

The following will have access to your personal data:

- The staff of our company;

- The services responsible for control (lawyer, accountant in particular);

- Our subcontractors (communication providers, productivity software providers, data hosting providers, payment service providers, billing providers, analysis and audience measurement providers, customer relationship management providers);

- Your personal data may also be received by public bodies, exclusively to meet our legal obligations, legal assistants, ministerial offficers and bodies responsible for debt recovery.

VI. DURATION OF STORAGE OF PERSONAL DATA

Regarding data relating to the management of customers and prospects:

Your personal data will not be kept beyond the period strictly necessary for the management of our commercial relationship with you.

However, data enabling proof of a right or contract to be established, which must be kept in order to comply with a legal obligation, will be kept for the period provided for by the law in force.

Regarding possible prospecting operations aimed at customers, their data may be kept for a period of three (3) years from the end of the commercial relationship.

Personal data relating to a prospect, non-customer, may be kept for a period of three (3) years from their collection or from the last contact from the prospect.

At the end of this three (3) year period, we may contact you again to find out if you wish to continue receiving commercial solicitations.

In the event of exercising the right of access or rectification, data relating to identity documents may be retained for the period provided for in Article 9 of the Code of Criminal Procedure, i.e. one (1) year. In the event of exercising the right of opposition, this data may be archived for the limitation period provided for in Article 8 of the Code of Criminal Procedure, i.e. three (3) years.

Financial transactions relating to the payment of purchases and fees via the Site are entrusted to a payment service provider who ensures their smooth running and security.

For the purposes of the services, this payment service provider may be required to receive your personal data relating to your bank card numbers, which it collects and stores in our name and on our behalf. We do not have access to this data.

To enable you to make regular purchases or pay related fees on the Site, your bank card details are kept for the duration of your registration on the Site and at the very least until you make your last transaction.

Data relating to the visual cryptogram or CVV2, written on your bank card, is not stored.

If you refuse to have your personal data relating to your bank card numbers stored under the conditions specified above, we will not keep this data beyond the time necessary to allow the transaction to be completed.

In any event, the data relating to these may be kept, for the purpose of proof in the event of a possible dispute over the transaction, in intermediate archives, for the period provided for by Article L 133-24 of the Monetary and Financial Code, in this case thirteen (13) months following the debit date. This period may be extended to fifteen (15) months in order to take into account the possibility of using deferred debit payment cards.

Regarding the management of lists of opposition to receive prospecting:

The information allowing your right of opposition to be taken into account is kept for a minimum of three (3) years from the exercise of the right of opposition.

Regarding audience measurement statistics:

The information stored in the users' terminal or any other element used to identify users and allowing their traceability or attendance will not be kept beyond thirteen (13) months.

VII. SECURITY

We inform you that we will take all useful precautions, appropriate organizational and technical measures to preserve the security, integrity and confidentiality of your personal data and in particular, prevent them from being distorted, damaged or accessed by unauthorized third parties. We will also use secure payment systems that comply with the state of the art and applicable regulations.

VIII. ACCOMMODATION

We inform you that your data is kept and stored, for the entire duration of its conservation on the servers of the company MOISMONT, located in the European Union.

IX. TRANSFER OUTSIDE THE EUROPEAN UNION

Your data may be transferred outside the European Union as part of the tools we use and our relationships with our subcontractors.

This transfer is secured using the following tools:

- Either this data is transferred to a country which has been deemed to offer an adequate level of protection by a decision of the European Commission;

- Either we have concluded a specific contract with our subcontractors governing the transfers of your data outside the European Union, on the basis of the standard contractual clauses between a data controller and a subcontractor approved by the European Commission.

X. ACCESS, RECTIFICATION, LIMITATION AND ERASURE OF YOUR PERSONAL DATA

In accordance with European regulations on the protection of personal data, you benefit from the following rights:

- A right of access allowing you at any time to know whether or not your personal data is processed by our services and when it is, to have access to said personal data and to the information required by law concerning the methods of processing this data,

- A right of rectification allowing you to request that any inaccuracy concerning your personal data be corrected as soon as possible,

- A right to erasure, allowing you to request as soon as possible that your personal data be erased, provided that this erasure request complies with the conditions required by applicable law,

- A right to limit the processing of your personal data, provided that this request for limitation complies with the conditions required by applicable law,

- A right to portability allowing you to receive your personal data in a structured, commonly used and machine-readable format, or to request that this personal data be transmitted to another data controller, provided that this portability request complies with the conditions required by applicable law,

- A right to object to the processing of your personal data for reasons relating to your particular situation, provided that this objection complies with the conditions required by applicable law,

- The right to withdraw at any time the specific consent given to the collection of your personal data, in particular when the processing of your personal data is used for commercial prospecting purposes,

- The right to define guidelines relating to the retention, deletion and communication of your personal data after your death.

You have the right to obtain the limitation of the processing of your personal data, in the cases defined in Article 18 of the GDPR:

- During the verification period that we implement, when you contest the accuracy of your personal data,

- When the processing of this data is unlawful, and you wish to limit this processing rather than delete your data,

- When we no longer need your personal data, but you wish to retain them to exercise your rights,

- During the period of verification of legitimate grounds, when you have objected to the processing of your personal data.

Individuals whose data is collected on the basis of our legitimate interest are reminded that they may object to the processing of their data at any time. However, we may continue processing if there are legitimate grounds for the processing that override your rights and freedoms or if the processing is necessary to establish, exercise or defend our legal rights.

You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive our administrative messages.

XI. PORTABILITY OF YOUR PERSONAL DATA

You have the right to the portability of the personal data that you have provided to us, understood as the data that you have actively and consciously declared in the context of accessing and using the services, as well as the data generated by your activity in the context of using the services.

We remind you that this right does not apply to data collected and processed on a legal basis other than consent or the execution of the contract binding us.

This right may be exercised free of charge, at any time, and in particular when closing your account on the Site, in order to recover and retain your personal data.

In this context, we will send you your personal data, by any means deemed useful, in a standard open format commonly used and readable by computer, in accordance with the state of the art.

XII. COMPLAINT BEFORE A SUPERVISORY AUTHORITY

You are also informed that you have the right to lodge a complaint with a competent supervisory authority (the National Commission for Information Technology and Civil Liberties for France), in the Member State in which you habitually reside, your place of work or the place where the violation of your rights was committed, if you consider that the processing of your personal data subject to this charter constitutes a violation of the applicable texts.

This appeal may be exercised without prejudice to any other appeal before an administrative or judicial court. Indeed, you also have the right to an effective administrative or judicial appeal if you consider that the processing of your personal data subject to this charter constitutes a violation of the applicable texts.

XIII. AMENDMENTS

We reserve the right, at our sole discretion, to modify this Charter in whole or in part at any time.

These changes will come into effect upon publication of the new charter.