Legal notice

This privacy policy is made by the company kheoos, a simplified joint-stock company with capital of €224,720 whose head office is located at 67 bd Denfert-Rochereau – 38500 Voiron, France, France, registered at GRENOBLE Trade and Companies Register under number 838 448 181. VAT identification number: FR 16 838 448 181, in accordance with the provisions of Law No. 78-17 of 6 January 1978 revised (known as the “Data Protection Act” or “LIL”) and the General Data Protection Regulation (“GDPR”) n°2016/679.

This policy concerns the personal data that kheoos is required to collect when you create a user account on the website www.my.kheoos.com and other kheoos platforms requiring the creation of a user account and when making purchases.

SECTION 1 – Data and its use

We collect your personal data in certain situations, and all of this data is provided by the user.

1. 1. Cookies: When you browse our site, we deposit a number of cookies, those that you have accepted in our banner. Cookies allow us to better understand you, and thus improve your user experience on our website.

1. 1. Contact form: When you send us a completed contact form, we collect the personal information you give us, such as your name, email address, and we use this information only for the purpose of respond to your contact request.

1. 1. The creation of a user account and online orders made from this account: postal address and billing address, telephone number, surname/first name, email, VAT number, role in company (administrator or account user), order history.

1. 1. Satisfaction surveys and sending promotions of kheoos items.

1. 1. Newsletter: When you subscribe to our newsletter, you provide us with your email address so that we can send you our newsletter;

SECTION 2 – The legal basis for processing your personal data

We collect and process your personal data in accordance with the regulations and only within the framework of the following legal bases:

• • When you provide us with personal information via the forms on our website, you consent, by sending this data, to our collecting and using it only for the reasons detailed in section 1 .

• • When necessary to ensure our legitimate interests: Development of a commercial profile based on your navigation on the site, and allows us to fulfill our Customer Relationship Management. This profile will be created using your personal data and information from your browsing, such as the products viewed or added to the basket, the sections of the site visited, the country from which you visit our site, etc., in order to evaluate your preferences and/or your personal interests with the aim of offering you content, offers, services and products adapted to your profile. The management of all actions and surveys aimed at knowing your degree of satisfaction in order to create and improve our services.

• • The contract with customers: management of online buying and selling. We use your personal information for the purpose of processing and sending your order, as well as to inform you of the progress of your order by e-mail. Management and issuance of documents attesting to the sale, management of your registration on the site as well as the management and sending of information on exclusive promotions and the latest news adapted to your profile by e-mail.

SECTION 3 – Disclosure

Your personal data is not communicated outside the various departments of kheoos and Hubspot, which is in charge of managing our customer relations, whose servers are based in the European Union. kheoos does not sell or rent your personal data to third parties under any circumstances and there is no transfer of data outside the European Union.

SECTION 4 – Retention of personal data

We retain your personal data only for as long as is reasonably necessary:

1. 1. Tracking and monitoring of user browsing: the duration being up to a maximum of 8 months or until the withdrawal of consent if it occurs before 8 months;

1. 1. Newsletter: unsubscribe by clicking on the link at the bottom of it;

1. 1. Contact form: The data is kept for 2 years and then deleted;

SECTION 5 – Your rights and your contact

We guarantee you the right to access the personal information we hold about you, to request that this information be rectified, restricted or deleted (only for certain data). You can also request a copy of your personal data or oppose the processing thereof.

We have appointed a data protection officer whom you can contact for any questions relating to the processing of your personal data and to exercise your rights at the following addresses.

You can exercise these rights by contacting kheoos:

• • Either by email: gdpr@kheoos.com

• • Either by post:

The Data Protection Officer – kheoos

67 Boulevard Denfert Rochereau – 38 500 Voiron, France

The request must indicate your first and last name, and we will contact you to obtain further information and possibly proof of identity according to your request (the latter will be destroyed as soon as the right is exercised). It is imperative to indicate precisely the right you wish to exercise, as well as your e-mail or postal address in order to contact you. We will respond to your request within one month, unless there is a particular difficulty.

SECTION 6 – Complaints

You retain the right to lodge a complaint with the supervisory authority (CNIL), on its website, via the following link: www.cnil.fr/fr/plaintes or by postal address: Service des Plaintes – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07.

CHANGES TO PRIVACY POLICY

kheoos reserves the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect as soon as they are posted on the website. For any question relating to this privacy policy, you can contact us by sending us an email: gdpr@kheoos.com.