Allure - GDPR

This privacy policy (the "Policy") aims to formalize our commitment to respecting the privacy of users of the website www.allure.fr (the "Site") operated by Allure.

The Policy and the General Terms of the Site form a contractual set. All capitalized terms not defined in this Policy are defined in the General Terms available here: https://allure.fr/en/content/3-GDPR

As part of providing our Site, we process your personal data in accordance with the General Data Protection Regulation 2016/679 of April 27, 2016 ("GDPR") and under the conditions set out below.

Personal data refers to any information relating to an identified or identifiable natural person. We collect and process personal data as part of providing our Services or communication about these Services exclusively, in strict compliance with the GDPR.

We collect only adequate, relevant, and limited personal data necessary for the purposes for which they are processed. Thus, you will never be asked to provide personal data considered "sensitive," such as your racial or ethnic origins, political, philosophical, or religious opinions.

By registering on the Site, you authorize us to process your personal data in accordance with the Policy. If you refuse the terms of this Policy, please refrain from using the Site and the Services.

1. Data collection

We may collect and store your personal data, especially when you:

· Browse the Site

· Subscribe to a newsletter

· Contact us

We use your personal data to enable the implementation and management of the company's Services and respond to your specific requests. We also use your personal data to operate and improve our Services and our approach. This information is used exclusively by us and allows us to better tailor our Services to your expectations.

If you have decided to receive emails and messages from us, you will receive electronic and alphanumeric messages about our services. We will use the personal data you provided during your registration. You can unsubscribe from these emails at any time.

1.1. Browsing the site

Connection data:

Each time you connect to our Site, we collect personal data such as your IP address and the MAC address of your computer, the date and time of connection, and information about the browser you use.

Navigation data:

We also collect information that identifies how you access the Site, what pages are viewed, and for how long. In this context, we may use Cookies as specified in paragraph 5 below.

1.2. Subscription to our Newsletter

When creating your Account, you can give your prior consent to receive our newsletters about news, new products, services, and promotions as part of the Services.

You can also directly consent to receive our newsletters by providing your email address in the designated places on the Site.

In any case, you have the right to withdraw your consent to receive such newsletters at any time and at no cost under the conditions provided in paragraph 6 of the Policy.

1.3. Contacts

To follow up on requests you may make to our Services and to confirm information about you, we may use your name, first name, email address, and phone number.

2. PROTECTION OF YOUR PERSONAL DATA?

We have implemented technical and organizational security measures to ensure the security, integrity, and confidentiality of all your personal data, to prevent it from being distorted, damaged, or accessed by unauthorized third parties. We ensure an appropriate level of security, considering the state of knowledge, implementation costs, and the nature, scope, context, and purposes of the processing as well as the risks and their likelihood.

However, it is specified that no security measure is infallible, and we are unable to guarantee absolute security for your personal data.

3. SHARING OF YOUR PERSONAL DATA?

3.1. Sharing your personal data with third-party companies

During your browsing on the Site, your personal data may be transmitted to external service providers. These third parties provide a service on our behalf and for our account to enable the proper functioning of credit card payments and other Services.

Personal data may be transferred to countries outside the European Union.

In accordance with the GDPR, all transfers of personal data to a country outside the European Union and/or not offering a sufficient level of protection as considered by the European Commission have been subject to cross-border flow agreements compliant with the standard contractual clauses issued by the European Commission.

Except where a third party asks you to accept its own privacy policy and terms of use, the third-party companies that have received communication of your personal data have committed to processing your personal data only for implementing our Services.

We will never share your personal data with third-party companies for marketing and/or commercial purposes without obtaining your prior consent.

3.2. Sharing with authorities

We may be required to disclose your personal data to administrative or judicial authorities when their disclosure is necessary for identifying, apprehending, or prosecuting any individual likely to harm our rights, any other user, or a third party. We may also be legally obliged to disclose your personal data and cannot oppose it.

4. DURATION OF RETENTION OF YOUR PERSONAL DATA?

We will retain your personal data only for the duration of your registration on the Site to ensure your identification when you connect to your Account and to enable the provision of Services.

Thus, if you unsubscribe from the Site, your personal data will be deleted and retained only in the form of an archive for establishing proof of a right or contract.

In any case, we will retain your personal data for a duration not exceeding that necessary for the purposes for which it is processed, as described in this Policy and in compliance with laws and regulations.

5. COOKIES

5.1. What is a cookie?

A cookie is a text file that may be placed on a terminal during the consultation of an online service with a browser. A cookie file allows its issuer to recognize the terminal concerned during its validity period each time this terminal accesses digital content containing cookies from the same issuer.

In any case, the cookies deposited on your browsing terminal with your agreement are destroyed 13 months after their deposit on your terminal.

5.2. What are the cookies used on our Site for?

The cookies we issue allow us to:

· Establish statistics and volumes of traffic and use of the various elements composing our Site (sections and content visited, routes), allowing us to improve the interest and ergonomics of the Site and, where applicable, our products and services

· Adapt the presentation of our Site to the display preferences of your terminal (language used, display resolution, operating system used, etc.) during your visits to our Site, according to the hardware and software used for viewing or reading that your terminal includes

· Memorize information relating to a form you have filled out on our Site (registration or access to your account) or to products, services, or information you have chosen on our Site (subscribed service, content of an order basket, etc.)

During your browsing on the Site, social media cookies may be generated, notably through share buttons that collect personal data.

During your first visit to the Site, a cookie banner will appear on the homepage. A clickable link provides more information about the purpose and operation of cookies and refers to this Policy. Continuing to browse another page of the site or selecting an element of the Site (notably: image, text, link, etc.) constitutes your acceptance of the deposit of the cookies in question on your computer.

5.3. How can you control the cookies used?

You can configure your browser software at any time so that cookies are stored on your terminal or, conversely, that they are rejected (either systematically or according to their issuer). You can also configure your browser software so that the acceptance or refusal of cookies is proposed to you punctually, before a cookie can be recorded on your terminal.

Please note: Any configuration may modify your browsing on the Internet and your conditions of access to certain services requiring the use of cookies. We decline any responsibility for the consequences related to the degraded operation of our services resulting from the inability to record or consult the necessary cookies you have refused or deleted. Such would be the case when we (or our providers) could not recognize, for technical compatibility purposes, the type of browser used by your terminal, its language and display settings, or the country from which your terminal appears to be connected to the Internet.

5.4. How to configure your browser?

For managing cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, which will allow you to know how to modify your wishes regarding cookies. Below are some details for the main browsers.

· Google Chrome

o Access Settings via the button to the right of the URL bar or via the browser menu (Chrome > Preferences).

o Select Advanced Settings

o Click on Content Settings and then on Cookies.

· Safari

o Access Settings via the browser menu (Safari > Preferences)

o Click on Privacy.

· Internet Explorer / Edge

o In Internet Explorer, click on the Tools button, then on Internet Options.

o Under the General tab, under Browsing history, click on Settings. Click the View files button.

· Firefox

o Go to the Tools tab of the browser then select the Options menu

o In the window that appears, choose Privacy and click on Show cookies

For more information on cookies, you can visit the CNIL website.

6. YOUR RIGHTS

You alone have communicated the data in our possession to us, through the Site. You have rights over your personal data. In accordance with the regulations on personal data protection, particularly Articles 15 to 22 of the GDPR, and after having justified your identity, you have the right to ask us for access to personal data concerning you, rectification, or deletion of these.

In addition, within the limits set by law, you also have the right to object to the processing, to limit it, to decide on the post-mortem fate of your data, to withdraw your consent at any time, and the right to the portability of the personal data provided.

You can contact our Services to exercise your rights at the following address:

· contact@allure.fr

or at the following postal address:

· Allure – 50 avenue des Champs-Elysées – 75 008 Paris

Including with your request a copy of an identity document.

In addition, you can unsubscribe from our newsletter at any time by clicking on the unsubscribe link at the bottom of each email. You can also unsubscribe by sending a message to the following address: contact@allure.fr

7. MODIFICATION OF THE REGULATION

We reserve the right to modify the General Data Protection Regulation at any time. It is therefore recommended to consult it regularly. In the event of modification, we will publish these changes on this page and in the places we deem appropriate depending on the purpose and significance of the changes made.

Your use of the Site after any modification means that you accept these changes. If you do not accept certain substantial changes made to this Policy, you must stop using the Site.

For any questions regarding your personal data or if you wish to delete your Account, please contact us at the following address:

· Allure – 50 avenue des Champs-Elysées – 75 008 Paris

Indicating "Privacy - Data Protection"

· By email at contact@allure.fr.

8. THE NATIONAL COMMISSION FOR INFORMATICS AND LIBERTIES

We remind you that you can contact the CNIL:

· Directly on the CNIL website

· By mail to the following address:

Commission Nationale de l'Informatique et des Libertés (CNIL)

3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX 07

PREAMBLE