1. Privacy and Personal Data Protection Policy

This privacy policy ("Privacy Policy") is intended to inform you about how the personal information you communicate to Poiray, on the Site, in our boutiques, or by any other means, is processed as well as the management of cookies and tracers implemented on the Site.

Poiray recognizes the importance of ensuring the protection and security of your privacy and your personal information, and has established this Privacy Policy in compliance with the regulations applicable on French territory.

As such, Poiray complies with the "Informatique & Libertés" law n°78-17 of January 6, 1978 as amended as well as , the Regulation (EU) n°2016/679 of the European Parliament and of the Council of April 25, 2016, known as the "RGPD" (together hereinafter referred to as the "Applicable Regulation").

The Privacy Policy is applicable to all users of the Site and/or customers of Poiray. We invite you to read its contents carefully. To exercise any of these rights, simply send a request online to the following address: contact@poiray.com or by post, stating your full name, address and, if possible, your customer reference to the following address so that the Company can ensure that the request is actually made by the person concerned: Poiray International - 8 place Vendôme, 75001 PARIS. The Company undertakes to process all requests as quickly as possible. The Customer also has the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL). 13.5 Subcontracting. In order to carry out the order placed on the Site, the Company may call upon the services of subcontractors. To this end, it undertakes to use subcontractors presenting sufficient guarantees as to the implementation of appropriate technical and organizational measures so that the processing of Personal Data meets the requirements laid down by the RGPD. Where applicable, the processing of Personal Data carried out by a processor is governed by a contract concluded between the latter and the Company and/or one of its Affiliates in compliance with Article 28 of the RGPD. In particular, the Company imposes on its subcontractors the same obligations and the same level of requirements as that to which it is subject in connection with the processing of Personal Data.

1.1 Information collected by Poiray

The information about you that may be collected and processed by Poiray is:

In the context of creating an account on the Site or if you complete our form in one of our boutiques, your identification and contact information, such as your name, gender, date of birth, address, email address, password and telephone number,

If you contact Poiray, a record of this correspondence, and the personal information about you contained therein, may be retained,

If you wish to receive communications from Poiray by subscribing to our newsletter, your email address will be collected,

Information relating to your purchases - whether made in our boutiques and/or on the Site - and uses of our services that you make such as your visits to our Site.

During your visit to one of our boutiques you may, for obvious security reasons, be filmed and consequently have your image captured by our video protection cameras.

1.2 Uses of the information

Poiray uses the personal information you provide to:

Create your account on the site and allow you access to this account, manage your orders (preparation, shipping, delivery, billing, collection, tafter-sales service) send you information, products and / or services you request or are likely to interest you, when you have consented to be contacted for this purpose, provided you are a Poiray customer, send you prospecting about similar products or services provided by us process your requests.

Poiray does not market or rent your personal information.

Poiray may nevertheless be required to transfer all or part of your personal information to companies belonging to its group, to its service providers or subcontractors in particular with a view to the performance of a contract to which you would be a party (such as the preparation and dispatch of an order) and/or compliance with a legal obligation to which Poiray would be bound.

Poiray may also be required to communicate this information to an administrative or judicial authority that has ordered it to do so.

1.3. Shelf life

Personal data collected on the Site is kept for a limited time and in a manner strictly necessary and proportional to the pursuit of the purposes identified in this Privacy Policy, namely : Connection data to our Site will be kept for a period of 180 days . Information relating to your account on our Site will be kept for 2 years following the last connection to the Site and/or the last contact with Poiray; Information relating to your purchases, both on our Site and in one of our boutiques, will be kept for as long as necessary to ensure customer service, from the date of purchase ; Information about you collected for accounting purposes will be kept for a period of 2 years in order for Poiray to comply with its legal obligations in this respect; Your image as captured by our video-protection cameras during your visit to the boutique will be kept for 30 days.

1.4. Security

Poiray employs all appropriate security measures to ensure the protection of your information, in accordance with this Privacy Policy and the requirements of the RGPD.

In particular, Poiray takes all precautions appropriate to the nature of the personal data communicated to it and the risks presented by their processing, in order to preserve their security and in particular to prevent them from being distorted, damaged, or accessed by unauthorized third parties.

.

1.5. Transfer of personal data

Poiray and/or its affiliates (i.e., any entity, company controlling, controlled by or under control with Poiray, control being defined by Articles L.233-1 and L.233-3 of the French Commercial Code) do not transfer any personal data to a country that is not a member of the European Union or the European Economic Area.

If one of the service providers or subcontractors to which Poiray is required to transfer all or part of your information declares to transfer said information outside the European Union, Poiray will ensure that the transfers present all appropriate guarantees (transfer to a country ensuring an adequate level of protection in accordance with an adequacy decision or ratification of standard contractual clauses of the European Commission or adoption of internal company rules) in order to guarantee the security of your personal information.

Poiray will inform you as soon as possible of any breach of your personal data that may result in a high risk to your rights and freedoms, in accordance with Articles 33 and 34 of the GDPR.

1.6. Violation of personal data

Poiray will inform you as soon as possible of any breach of your personal data that may result in a high risk to your rights and freedoms, in accordance with Articles 33 and 34 of the GDPR.

1.7 Subcontracting

Poiray undertakes to use subcontractors with sufficient guarantees regarding the implementation of appropriate technical and organizational measures so that the processing of personal data meets the requirements laid down by the RGPD. Where applicable, the processing of personal data carried out by a processor is governed by a contract concluded between the latter and Poiray and/or one of its affiliated companies (i.e. any entity, company controlling, controlled by or under the control of the Company, control being defined by Articles L.233-1 and L.233-3 of the French Commercial Code), in accordance with Article 28 of the RGPD.

1.8. Cookies

A cookie is a data file placed on your computer or other device when you use it to visit the Site. Poiray uses cookies to find out which pages of the Site are visited and how often, in order to make it more efficient and to offer you tailored and personalized services the next time you visit the Site.You are informed by the appearance of a banner that a cookie may be automatically installed on your browser software during your visits to the Site, as well as their purpose, the possibility of objecting to them and changing the settings by clicking on the link "Learn more and configure cookies". The choices available to you are as follows:You can accept all cookies;- Refuse all cookies, in which case only those strictly necessary for the operation of the Site will be installed; Configure cookies, in order to select the categories of cookies that you do or do not wish to have installed on your browsing terminal. In this way, you can configure your browser to accept all cookies, reject all cookies, inform you when a cookie is issued, its validity period and content, allow you to refuse its storage on your terminal, and delete your cookies periodically. By using the Site and choosing not to block or disable cookies when you have the opportunity to do so, you consent to the use of personal information in connection with the technologies as described in this Privacy Policy.The cookies used by the Site associate themselves only with anonymous users and their computers and do not provide references from which personal data about users can be deduced.Certain cookies are used by third parties (e.g. Google) to transmit data to Poiray about the effectiveness of its promotions. The cookies used on the Site are, in any case, of a temporary nature, with the sole aim of making subsequent transmission more efficient. No cookie used on the Site will have a retention period of more than twenty-five months - except in specific cases where the retention period may not exceed 13 months. The Site uses four types of cookies:Technical cookies: These enable the user to navigate the Site and use functionalities such as the shopping cart,Analysis cookies: The Site uses Google Analytics cookies to quantify the number of users visiting the Site. These cookies make it possible to measure and analyze how users navigate the Site. This information enables the Company to continually improve its services and facilitate the purchasing process for Site users. For more information on this subject, please consult the Google Analytics privacy page: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage,Cookies personalization cookies: When users browse or buy on the Site, the Site remembers their preferences (for example, their tastes or preferred language). Thanks to these cookies, it is possible to offer a simpler, faster and more personalized browsing experience for users,- Advertising cookies: These cookies are used to display ads that are important to users. In addition, they limit the number of times each user views an ad and help the Company measure the effectiveness of its advertising campaigns. By browsing the Site, the user accepts that the Company may download this type of cookie to the user's device and make consultations when the user visits the Site in the future. To deactivate cookies, we invite you to click on the "help" tab of your browser or read the information provided with your browser software. Here's how you can disable cookies:

For Mozilla firefox users: - Select the "Tools" menu, then "Options", - Locate the "Cookie" menu and select the options you require. For Microsoft Internet Explorer users:- Select the "Tools" menu, then "Internet Options",Use the cursor to select the desired level.For Google Chrome users:- Click on the wrench icon in the browser toolbar,- Select "Settings",- In the "Privacy" section, click on the "Content settings" button,- In the "Cookies" section, select the options you require. You can also set your browser to send a code telling websites that you do not wish to be tracked ("Do No Track" option).Please find below links explaining how to set your browser to "Do No Track", for:Firefox: https://support.mozilla.org/fr/kb/comment-activer-option-ne-pas-pister

1.9. Rights

In accordance with Applicable Regulations, you have the right to access, rectify, and delete your personal data. In addition, you have the right to object to the processing of your personal data, for reasons relating to your particular situation, as well as the right to request the limitation of the processing of personal data carried out by the Company.

When data concerning you is collected after having obtained your consent or with a view to the performance of a contract or pre-contractual measures and is processed using an automated process you also have the right to the portability of your personal data. This right thus allows you to retrieve your data in a structured, commonly used and machine-readable format and to transfer it to another data controller.

You may furthermore, and in addition to the rights referred to above, assert your right to the limitation of the processing of your data. In this case, Poiray will retain your data but will no longer be able to process it.

To exercise any of these rights, simply send a request online to the following address: contact@poiray.com or by post indicating, to enable Poiray to ensure that the request is actually made by the person concerned, your full name, address and, if possible, your customer reference to the following address: Poiray International - 8 place Vendôme - 75001 Paris.

Poiray undertakes to deal with all requests as quickly as possible.

You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL).