Our Company takes the protection and privacy of individuals' personal data very seriously. We are committed to respecting your privacy and protecting access to your personal data (hereinafter referred to as “DCP”) by collecting and using them exclusively in compliance with the legal provisions in force.

Through this Policy, we wish to inform you, in complete transparency, about the types of data we collect and the way in which we collect, use and protect your personal data.

Our website www.petitfaune.com (hereinafter “Our Site”), allows you to easily access the consultation of Our Data Protection Policy. We strive to update it according to regulatory and legislative developments and in compliance with best practices and recommendations issued by the Commission Nationale Informatique et Libertés (CNIL). Also, we invite you to visit this page regularly to ensure that you accept all the conditions.

1. Who are we?

Our Company PETIT FAUNE SAS (Simplified Joint Stock Company) with capital of €39,999, having its registered office at 55 rue de Babylone, 75007 PARIS, registered with the Paris Trade and Companies Register under number 750525081, Represented by Adeline Cochin in her capacity as president designated in this document "Our Company", is responsible for the collection, processing and use of the data that you communicate to us.

Our Company is not subject to the obligation to appoint a Data Protection Officer within the meaning of the regulations in force. Nevertheless, relays are appointed within the company to ensure compliance with these regulations at all times and the implementation and regular updating of “best practices” in terms of personal data protection.

2. What data do we collect and use?

The data that the Petit Faune brand collects about you is limited to the information you provide in the context of the services offered and interactions with the brand:

- Account creation and billing information

Your surnames, first names and postal address, your telephone number, your date of birth and the data necessary for payment processing, identifiers and passwords (encrypted and only stored in order to recognize your authentication on the site), persons to whom purchases must be shipped)

- Financial information related to transactions

Credit card number and expiration date, name and address of cardholder

- Information related to browsing habits (Google Analytics)

Cookie identifier, pages visited, actions performed on the site and recurrence + demographic and geographical data

- Information related to shopping habits (Shopify)

Purchase history, habits and preferences

3. How are they collected?

With your prior consent, this data is collected when you communicate it to us following an order process, when opening a customer account or when subscribing to our newsletter. They are used to process your orders, including any warranties, our services and the technical administration of Our Site.

4. For what purposes do we use your data and on what legal bases?

We assure you that the personal data you provide to us will only be used for explicit and legitimate purposes. They allow us to:

• Process your orders, your payments, the delivery of goods and the provision of services you provide.
• Managing our customers
• Send you newsletters or invitations to events
• To facilitate and streamline the processing of your order as much as possible
• Improving our service to you
• Seek to avoid all forms of fraud and risk of non-payment
• Handle and resolve your complaints or questions

5. Who do we share your data with? (Who are the recipients of your data?)

We are likely to transmit your information to third parties such as service providers of Our Company, our partners or even affiliated companies or subsidiaries of our group (“Group Companies”) in particular for the purpose of processing your order, sending our newsletters or in order to facilitate and optimize our services to you.

We assure you that all your personal data is confidential, access to it is limited to employees of Our Company, service providers and agents of Our Company who need it in the context of the performance of their mission. We guarantee that all of our employees with access to your personal data are bound by an obligation of confidentiality and are exposed to disciplinary measures and/or other sanctions in the event of non-compliance with these obligations.

To process payments, we pass on your payment data to the following commissioned service providers: CIC, Stripe. You will also find further information on the data protection they apply on the websites of these service providers.

Furthermore, we do not share, sell or communicate your data (customer files) to third parties unrelated to Our Company.

6. Is your personal data transferred?

In the event of access to the Site from a country that is not a member of the European Union, whose legislation relating to the collection, use and transfer of data differs from those of the European Union, Our Site being governed by French law, the corresponding terms of use and this Policy, You consent to your Personal Data being transferred to the European Union.

We may also transmit your data to Group Companies which may be located outside the European Union, always for the purposes set out above. When this is the case, we ensure, before transferring them, that these entities offer an adequate level of protection, in accordance with the applicable legislation.

Your personal data will under no circumstances be transferred outside of countries that are part of the European Economic Area or already considered, on the date of transfer, by the European Commission as guaranteeing citizens an adequate level of protection.

You can consult the list of these countries at the following address: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/ adequacy-protection-personal-data-non-eu-countries_en)

7. For what purposes do we use Cookies, targeting, social plugins?

Our Company uses small text files (also called cookies) placed on your hard drive when you visit Our Site.They save information, for example the language preference, the duration of the visit and the pages consulted These cookies allow us to increase the fluidity of navigation on Our Site, and to analyze the frequentation and the use of our users and thus produce statistics to enable us to improve the presentation of our products and our communication.

You can customize the setting of these cookies in your browser. If you wish to prevent them from being stored on your hard drive, you can select "Refuse cookies" in your browser settings.

Certain features of Our Site (content sharing on social networks, direct video playback) rely on services offered by third-party sites. These functionalities deposit cookies allowing them in particular to trace your browsing and thus analyze your browsing habits, measure the audience of Our Site, your centers of interest and offer you targeted offers. These cookies are only placed if you give your consent. It is possible for you to inform yourself about the nature of the cookies deposited, to accept or refuse them either globally for the entire Site and all the services, or service by service.

In addition, you can also, at any time, delete the cookies already placed on your computer. However, in this case, when you browse Our Site, certain features will no longer be accessible and operation will no longer be optimal. We disclaim all responsibility.

Our Site uses social network plugins Facebook, Instagram, whatsapp. If you do not want Facebook or Instagram to assign the data collected via Our Site directly to your profile, we invite you to disconnect from the corresponding service before visiting Our Site. You can also completely prevent the loading of the plugin with add-ons for your browser, for example with the script blocker “NoScript” (http://www.noscript.net/).

8. Our Newsletter and advertising actions

If you have given your consent for this purpose, you will receive our newsletter as well as regular information on the commercial actions and products of Our Company.

We would also like to inform you about the service we use to send you newsletters. This is the mailchimp service.

Your data allows us to communicate with you in the context of marketing campaigns (by email or post) and to keep you informed of news or new products from our Company that may be of interest to you.

9. How long are your data kept?

Our Company does not store your Personal Data for longer than necessary for the purposes for which they are collected. The retention period is thus limited according to the purpose of the processing and within the framework of the applicable legislation.

Thus, the data relating to our customers are kept for the entire duration of the commercial relationship, increased by 3 years for the purposes of animation and prospecting, without prejudice to the retention obligations or the limitation periods applicable as the case may be. applicable.

Data relating to prospects is kept for a period of 3 years from the last incoming contact with Our Company.

10. How secure do we give your data?

Our Company protects and secures personal data collected.We assure you of their confidentiality and prevent them from being distorted, damaged, destroyed or disclosed to unauthorized third parties

We have therefore taken appropriate physical, electronic and organizational protection measures to prevent any loss, misuse, unauthorized access or dissemination, alteration or possible destruction of your personal data.

Among these protective measures, we integrate technologies specially designed to protect your personal data during their transfer. However, despite the efforts made, Our Company cannot guarantee the infallibility of this protection due to the inevitable risks that may arise during the transmission of data in general. This is why we advise you to exercise caution in order to prevent any unauthorized access to your personal data. In particular, in order to avoid intrusions into your personal data, do not forget to close your session as soon as the use of your computer can be shared. Indeed, we would like to remind you that you are responsible for the confidentiality of your password and the information contained in your account.

Your credit card payment is secured with a device allowing double identification of the cardholder. The validation of the payment by your bank can only take place after entering your secure code. Under no circumstances does Petit Faune keep your bank details. Transmissions to banks are encrypted and secure.

11. What are your rights?

You can at any time (when creating your customer account, when placing an order or, in your personal account settings on Our Site) access your personal data, modify them, update them or request their deletion .

You can also, without having to justify the reason and free of charge, exercise your rights of access, modification, update or deletion of your data by sending your request in writing to our head office: Petit Faune - Service CRM, 55 rue de Babylone 75007 Paris.

In order for us to satisfy your request, you will need to send us a copy of your identity document. The processing time for these requests will be a maximum of one month.

You can also revoke the consent you have given us for the collection and use of your data at any time, always without having to justify a reason for the solicitation of advertising or the receipt of our newsletters by clicking on the hypertext link present at the bottom of our correspondence.

12. Who to contact in case of conflict?

In case of difficulties, Our Customer Service is there to answer your questions and will do everything possible to provide you with a satisfactory answer.

You can also, (under the Data Protection Act of January 6, 1978 as amended and the General European Data Protection Regulation No. 2016/679) at any time submit any complaint to the CNIL , the supervisory authority in France, by email, telephone or post to the following address:

Mail: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

Internet: https://www.cnil.fr/fr/plaintes,

Telephone: 01 53 73 22 22

You also have the option of turning to another equivalent supervisory authority in the EU Member State in which you are domiciled, the list of which can be accessed by following the following link:

http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm

.