Privacy Policy

The Debongout company (as defined in article 1 below), carrying out its activities under the Debongout brand, offers decorative items and accessories for sale on its website www.debongout-paris.com, on its future mobile applications and soon in its physical stores. In order to offer for sale, sell and deliver its products, Debongout collects personal data from users of its website, its mobile applications and its customers during purchases made at physical points of sale. The purpose of this privacy policy is to inform users of the means implemented to collect, consult, process and store users' personal data. Debongout, as data controller, undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of April 27, 2016 relating to the protection of personal data. The client is informed that certain data must be collected by Debongout in order to be able to perform its services. If the client does not wish to communicate this data, Debongout will not be able to perform its services. This privacy policy (“Policy”) may be modified at any time by Debongout, in particular to comply with any regulatory, jurisprudential, editorial or technical developments. The user must refer before any navigation to the latest version of the Policy.

1. The Data Controller
The data controller, who collects personal data and implements data processing is: Debongout, a simplified joint-stock company with capital of €1,000, registered with the Paris Trade and Companies Register under number 843 975 061 , whose registered office is at 44, rue des Vinaigriers in Paris (75010), France.

2. Collection of personal data
Debongout is required to collect the personal data of users on the website www.debongout-paris.com, on its mobile applications and during purchases in Debongout stores. The personal data likely to be collected are as follows: - user account data: namely the data that the User provides when creating an account by completing the registration form (first name, last name, billing and delivery postal addresses, email address, mobile phone number, password for logging into the customer account);
- personal data of the user when the latter registers them in his customer account: date of birth;
- transaction data: refers to the data that the user provides when making purchases, information relating to orders made and returns such as his telephone number, address, email address and information relating to his means of payment;
- exchanges carried out with customer service;
- data relating to navigation: refers to the data that the Publisher collects during the User's navigation on the Site and the applications such as in particular the date, the time of the connection and/or navigation, the type of browser , browser language, IP address, location data and geolocation. Data relating to means of payment (credit card number, expiry date, authorization number, security code) are collected directly by our service providers Shopify and Paypal. Third-party providers of applications, tools, gadgets and plug-ins on our website and mobile applications, as well as the

buckets on which we publish editorial and promotional content (such as Facebook and Instagram) may also use automated means, related to centers of interest and context, to collect user data (interactions with functions and profiling of the online activity). This data is collected directly by these service providers and/or third parties and is subject to their policy. To the extent permitted by applicable law, Debongout is not responsible for the practices of such providers and third parties. Some services may be altered or inaccessible in the absence of consent to the collection of data mentioned in this Privacy Policy.

3. Purposes of collecting personal data
The Data collected in the context of the use of the application site or in the physical stores are processed in order to meet the purposes described in the table below. The regulations in force protect the privacy of users and require any data controller to be able to justify a legitimate basis for said processing. The regulations thus provide among the legal bases for processing:
- the performance of a contract to which the data subject is a party, such as a sales contract. Thus certain personal data of the customer are necessary to deliver the goods, manage the customer account and make returns;
- the respect of a legal obligation, in particular accounting by the conservation of invoices;
- the prior consent of the data subject;
- the legitimate interest of the controller, respecting the rights and freedoms of users. Thus, improving the customer experience or preventing fraud may justify data collection.

Purposes of processing

Data usage

Legal bases for processing

Management of orders and sales of products and provision of services; management of complaints, withdrawals and product returns

Use of data to provide products and services (shopping cart and orders; sale, return and refund of purchased products)

The execution of a contract concluded between the client and the professional

Carrying out transactions, in particular payment

Our payment providers (Shopify and Paypal) use the information relating to the means of payment when making payment for each order. This data can also be used for the prevention of fraud during the payment of the order and/or management of unpaid bills after order

The execution of a contract concluded between the client and the professional

Creation and management of the customer account

The personal data of a customer registered on the website is used (email address, password)

- The execution of a contract concluded between the client and the professional - Compliance with a legal obligation

Deliveries of ordered products

Personal data (contact details, email address) are used to ensure deliveries

The execution of a contract concluded between the client and the professional

Administer the website and fight against fraud

Personal data (cookies) to update and enrich our Website and to fight against internet fraud.

 

After-sales service: exchanges with customer service

Personal data is used to interact with customers. As such, exchanges between customer service and the customer made by telephone or chat can be recorded in order to improve the quality of service. The customer can oppose it at any time

The execution of a contract concluded between the client and the professional

Participation in special events (such as contests, games, prize draws, offers) and participation in the loyalty program excluding online gambling and games of chance subject to the approval of the Regulatory Authority for Online games

Personal data is used, including purchase information, to administer participation in various special events, as well as the loyalty program.

- The execution of a contract concluded between the client and the professional (rules of the game) - The legitimate interest of the data controller in order to propose privileged offers.

Operate, evaluate and improve products and services and the user experience (in particular in order to develop new products and services, analyze the customer base; perform data analysis, accounting and auditing), profiling.

Personal data is used to evaluate and improve products and services, and to improve the customer experience, products and services offered by Debongout, through statistical operations and analysis of anonymized customer behavior, and measurement of website and mobile application traffic

The legitimate interest of the data controller in order to offer products and services adapted to the needs of customers

Send newsletters and privileged offers on the condition that the user ticks the box expressing his acceptance, provided for this purpose, when registering for the Services.

Personal data is used to inform customers of our products and services and to personalize the products offered on social networks.

The legitimate interest of the data controller in order to offer products and services adapted to the needs of customers.

Fulfill the obligations arising from any contracts or agreements binding Debongout to its customers.

Personal data is used to inform customers of our products and services and to personalize the products offered on social networks.

The legitimate interest of the data controller in order to offer products and services adapted to the needs of customers and consent (check box).

Analyze visits to the website and their frequencies, audience measurements, studies, statistics, surveys (cookies) and improve the user experience on the website and mobile applications.

Personal data, including cookies, is collected to understand the use of the Website and its mobile applications.

The legitimate interest of the data controller in order to offer products and services adapted to the needs of customers.

Debongout does not share any personal data for commercial purposes with third parties. The user has the option of modifying his personal data and withdrawing his consent at any time by logging into his customer account.

4. Service providers with access to users' personal data
The personal data collected is transmitted to Debongout service providers, who may process on behalf of Debongout (subcontractors) and/or their own account (data recipients). The recipients of the data are:
- Shopify and Paypal, payment providers
- any police or administrative authority in the context of legal requisitions concerning the fight against fraud
- customs services and service providers in the event of delivery abroad. Debongout's subcontractors may have access to the data collected to:
- preparing, shipping orders and returning products
- improving the content of sites and mobile applications
- the technical maintenance and development operations of Debongout's website, mobile applications and internal applications, including entities that execute orders and provide web hosting, information storage, email service providers, as well as analysis services, tag management, such as Google Analytics. To obtain more details on these analysis services and the methods of opposition, we invite you to consult the following site:
* Google Analytics: https://support.google.com/analytics/answer/6004245?hl=fr Debongout may also share the personal data of customers with a customer account in its physical stores. Their access is limited to orders placed by the customer.

5. Rights of users over their personal data
In accordance with Articles 14 to 22 of Regulation 2016/679 of April 27, 2016, any natural person using the Debongout website (www.debongout-paris.com) or mobile applications has the right to exercise the following rights:
- A right of access, rectification and deletion of the data collected,
- A right of opposition to the processing of his data
- A right to limit processing,
- A right to the portability of the data collected
- May formulate directives relating to the storage, erasure and communication of his personal data after his death in accordance with article 40-1 of law 78-17 of January 6, 1978 Finally, if Debongout detects a breach of personal data likely to create a high risk for the rights and freedoms of its users, it undertakes to inform the users concerned as soon as possible. The user can exercise all of these rights by logging into their customer area, by contacting customer service at dataprivacy@debongout-paris.com or by simple mail to Debongout – Service Client, 4 rue Martel, building C left, 75010 Paris France. The user must attach proof of identity to his request. In the event of no response or an unsatisfactory response, the user may contact the supervisory authority of his country of residence, for France, the CNIL: https://www.cnil.fr/

6. Transfer of personal data outside the European Union
The personal data of Debongout customers may be transferred to foreign subsidiaries of Debongout SAS so that these customers can benefit from the same experience in future Debongout stores or websites located abroad. This transfer will take place within the framework of the standard contractual clauses of the European Commission.

7. Duration of data retention
User data will not be kept beyond the time strictly necessary for the purposes pursued as set out herein, in accordance with applicable regulations and laws. In this respect, the data used for prospecting purposes may be kept for a maximum period of 3 years from the closing of the user's account or the last contact of the prospect concerned. User data is deleted when the retention periods expire. Nevertheless, the data may be archived beyond the durations provided for the purposes of research, observation, and the prosecution of criminal offenses for the sole purpose of allowing, as needed, the provision of this data to the judicial authority. Archiving implies that this data will be anonymized and will no longer be available online but will be extracted and stored on an autonomous and secure medium.

8. Security measures for personal data collected
As data controller, Debongout undertakes to take all necessary precautions to preserve the security and confidentiality of the data and in particular to prevent them from being altered, deformed or accessed by unauthorized third parties. . Debongout has concluded service contracts with partners benefiting from a certain expertise in the field of data protection. All data is hosted in France or in the European Union.

payment provider
Payment for purchases on the website and on our mobile applications is made either via Paypal or via the secure platform of our payment provider Shopify. Debongout does not have access to customer payment data.
However, the user can choose to save his payment card data in his customer account. This data is not stored with Debongout, but with Shopify and/or Paypal. The user can modify or delete these bank details at any time by logging into their customer account.

9. Cookies, TAGS and trackers
When browsing our website and mobile applications, information relating to the browsing of the user's terminal (computer, tablet, smartphone, etc.) may be recorded through files called "Cookies". The cookie makes it possible to carry out a follow-up of the navigation or an analysis of the behavior of the user, and in particular:
- to measure the frequentation of our website and our application, as well as their content;
- save information relating to the customer account when the user is connected to it;
- save the shopping cart;
- customize the display of content accessible to the user. The user can modify his preferences in terms of cookies, through the browser software used: The user can modify his preferences in terms of cookies, through the browser software used:
- Safari: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html ,
- Chrome: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647,
- Firefox: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies,
- Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies,
- iOS: https://support.apple.com/fr-fr/HT201265
- Android: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DAndroid&hl=fr The user can also oppose the deposit of cookies by the website http://www. youronlinechoices.com/fr/controler-ses-cookies/.

10. Social networks
Debongout's official Facebook and Instagram accounts may allow users to post their content. The user is informed that the content published on these social networks can be seen by any third party, and that increased vigilance is required of users when they provide certain personal data on these sites or applications such as financial data, an address or any sensitive data. Debongout is in no way responsible for any damages caused by third parties due to or resulting from the publication of their personal data by users.

11. Links to Third Party Sites
The Website and Mobile Applications may provide links to non-Debongout sites, applications and services which may be operated by third party companies. Debongout is not responsible for the processing of personal data by these third-party sites. The user should consult the personal data protection policies.