PRIVACY POLICY - RGPD

In accordance with Regulation (EU) 2016/679 of April 27, 2016 (RGPD) and the amended "Informatique et Libertés" law, this policy describes how personal data is collected and processed by
D'YRSANresponsible for processing.

1. Collected data

Personal data collected may include :

• Identity: surname, first name, company name
• Contact details: postal address, e-mail address, telephone
• Ordering, billing and payment information
• Technical browsing data (cookies, IP address)

2. Purposes of processing

Data is processed for :

• Manage orders and contractual relations,
• Invoicing and delivery,
• Meet legal and tax obligations,
• Manage customer accounts and after-sales service,
• Send commercial communications if the Customer has consented.

3. Legal basis for processing

• Performance of the contract (article 6.1.b RGPD)
• Legal obligation (article 6.1.c)
• Legitimate interest of the controller (article 6.1.f)
• Consent (article 6.1.a), in particular for commercial prospecting

4. Recipients

The data is intended exclusively for :

• To authorized Vendor personnel,
• To its contractual subcontractors (logistics providers, payment, host),
• To the competent authorities if required by law.

5. Shelf life

• Customer data: 3 years after the end of the business relationship
• Billing data: 10 years from the end of the accounting period
• Cookies: according to the duration specified in the cookie management banner

6. Rights of persons concerned

You have the following rights: access, rectification, deletion, limitation, opposition, portability.
To exercise your rights, please write to :
rgpd@dyrsan.fr or by post to D'YRSAN (Bureau 562), 78 Avenue des Champs-Elysées, 75008 Paris, France.

You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

7. Security

The Seller implements appropriate technical and organizational measures to guarantee security,
confidentiality and integrity of personal data.