PERSONAL DATA

The www.bastidedeco.fr website is published by the company ONETOUCH360 SAS.

ONETOUCH360 SAS is concerned about compliance with the rules relating to the protection of personal data. Thus, ONETOUCH360 SAS has complied with the General Data Protection Regulation No. 2016/679 (hereinafter referred to as the "GDPR") and the so-called "Data Protection Act" of 6 January 1978 in its latest version.

ONETOUCH360 SAS undertakes to ensure that personal data is collected in a lawful, fair and transparent manner.

1. Responsible for the processing implemented on the site?

For the purposes of the GDPR, the controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing.

The person responsible for the processing of Personal Data is the company ONETOUCH360 SAS, whose registered office is located at RUE DE LA CITADELLE, 47300 PUJOLS.

ONETOUCH360 SAS may use subcontractors.

The processor is a person who processes personal data on behalf of the controller. It acts under the authority of the controller and on the instructions of the controller.

Thus, subcontractors may have access to the data collected from users as part of their contract with ONETOUCH360 SAS. In this case, ONETOUCH360 SAS takes care to supervise the contracts that bind it to its subcontractors, in accordance with the legal and regulatory provisions.

2. Why is your data collected?

The processing of personal data implemented is legally based on consent, where applicable on the performance of a contract and the legal obligations incumbent on the company ONETOUCH360 SAS.

The user has the right to withdraw consent at any time where the processing is based on consent.

If the user does not wish to fill in the fields marked with an asterisk, the user may not be able to access certain services on our website and ONETOUCH360 SAS may be unable to respond to his request.

The user's personal data is collected for the purposes of:

· Carrying out operations relating to the management of clients concerning:

·        Contracts

·        Orders

·        Retractions

·        Deliveries

·        invoices

·        Accounting

·        Accounts receivable management

·        The loyalty program

·        monitoring of customer relations such as carrying out satisfaction surveys, managing complaints and after-sales service

· Carrying out operations relating to prospecting:

·        Management of technical prospecting operations (including technical operations such as standardization, enrichment and deduplication)

·        Selection of people to carry out loyalty, prospecting, surveying, product testing and promotional actions. Unless the consent of the persons concerned is obtained under the conditions provided for in Article 6, these operations must not lead to the establishment of profiles likely to reveal sensitive data

·        Carrying out solicitation operations, including personalized solicitations

· Compilation of trade statistics

· transfer, rental or exchange of its customer files and prospect files

· Updating of its prospecting files by the body in charge of managing the list of opposition to telephone canvassing, in accordance with the provisions of the Consumer Code

· organisation of competitions, lotteries or any promotional operation with the exception of online gambling subject to the approval of the Online Gaming Regulatory Authority

· Management of requests for the right of access, rectification, opposition, limitation, portability, deletion

· management of unpaid invoices and litigation, provided that it does not relate to infringements and/or does not lead to the exclusion of the person from the benefit of a right, service or contract

· Management of people's opinions on products, services or content

3. Who are the recipients of your data?

The User's personal data is transmitted to ONETOUCH360 SAS, as data controller, as well as to the other brands of the ONETOUCH360 SAS Group if you have expressly accepted it. In addition, in order to be able to provide the expected service and fulfill the orders made, the necessary data is transmitted to the carriers in charge of deliveries and to the secure payment platform. They are also sent to the body in charge of managing the list of opposition to telephone canvassing when the telephone number is collected, to the bodies, court officers and ministerial officers, as part of their debt collection and litigation mission.

The personal data collected by www.bastidedeco.fr is hosted and secured in France.

4. How long is your data stored?

PERSONAL DATA

The data collected by ONETOUCH360 SAS for commercial prospecting purposes is kept for a period of three years from its collection or, where applicable, from the Prospect's last contact.

When a contract is concluded ONETOUCH360 SAS keeps the data collected throughout the performance of the contract and until the expiry of the statute of limitations or the time allowed to comply with its legal and regulatory obligations.

5. What are your rights?

In accordance with the regulations in force on the protection of personal data, the user has the right to access, rectify and delete personal data concerning him/her, as well as the right to limit processing and the right to object, the right to the portability of his/her data (if applicable) and the right to define storage guidelines, the deletion and communication of his personal data after his death.

The user may exercise these rights by sending a letter to ONETOUCH360 SAS – DPO –

RUE DE LA CITADELLE, 47300 PUJOLS

or by contacting the Data Protection Officer at the following address: contact@bastidedeco.fr

In order to enable us to respond quickly and efficiently to your request, please provide us with the following details:

· Surname, first name(s)

· Email used for identification on the site

· VIP card number if applicable

· The precise purpose of the request (access to personal data, modification of data, deletion of data, unsubscription of VIP program, unsubscription newsletter, etc.)

In addition, and in accordance with the amended Data Protection Act (2018-493 of 20 June 2018, art. 39), any request to consult, modify or delete personal data must be accompanied by a copy of a signed and valid identity document, in order to avoid the capture of information or malicious actions. We will respond to you within one (1) month of the date we receive your request.

Remarks:

· For requests to unsubscribe/unsubscribe from the Newsletter ONETOUCH360 SAS, the procedure presented above is not necessary. All you have to do is click on the "Unsubscribe" link at the top and end of the newsletter, and confirm the action on the web page that appears.

· For requests for access to personal data related to the customer account registered on the www.bastidedeco.fr site or the deletion of your customer account registered on www.bastidedeco.fr, simply log in to your account and then click on the "Account Information" link on the right side of the page. You can then click on the "MANAGE MY DATA" button at the bottom of the page (§ "Manage my personal data"). You then have the choice to download the personal data relating to your customer account or to delete your account directly via the links provided.

· In the event of a request to delete your data, ONETOUCH360 SAS may nevertheless keep it in the form of interim archiving, for the time necessary to meet its legal, accounting and tax obligations.

The user is informed of the existence of the "Bloctel" telephone canvassing opposition list, on which he can register: https://conso.bloctel.fr/.

In the event of a complaint, the user has the right to refer the matter to the CNIL.

6. How can I ensure the security and confidentiality of my data?

ONETOUCH360 SAS undertakes to put in place all the physical security measures (security of access to the premises, management of authorisations, security of equipment, etc.) and logical security measures (antivirus, security of passwords, security of flows, anonymisation, encryption, data traceability, etc.) necessary to ensure the security and confidentiality of the personal data processed.

7. What are cookies and why do we use them?

Cookies are trackers that are stored and read when you visit our website and mobile application. Cookies allow the user to better browse, and to access all the features of our website or mobile application.

They also allow us to carry out audience measurements and personalise advertising banners in order to provide you with targeted offers based on your interests.

You have the option to set the cookies we use and to change your preferences by clicking on this link.