PRIVACY POLICY

DECOCLIM

DECOCLIM attaches particular importance to the protection of personal data, collected and processed in compliance with applicable laws and regulations. This is in particular the Data Protection Act of January 6, 1978 as amended and European Regulation (EU) 2016/679 of April 27, 2016 relating to the protection of individuals with regard to the processing of personal data and to the free movement of such data (the “ GDPR ”) (together the “ GDPR Legal Framework ”).

This privacy policy (the " Privacy Policy ") presents and summarizes DECOCLIM's commitments with regard to the protection of personal data, it being specified that the GDPR Legal Framework is applicable to any processing of personal data, understood as any operation on a or more information (surname and first name, telephone number, email, date of birth, etc.) allowing the direct or indirect identification of a natural person (“ personal data ” “ data subject ”).

1. Data controller

The data controller is the company DECOCLIM, SARL with a capital of €25,500, registered with the RCS of FREJUS under number 790 646 988, whose registered office is at 21 AVENUE SAINT EXUPERY 83120 SAINTE-MAXIME, intra-community VAT number FR73790646988 (“ DECOCLIM ”).

2. Personal data processed and sources of collection

The personal data processed by DECOCLIM, by the “decoclim.fr” website (the “ Site ”) and/or by any other means, are as follows:

• Identification: surname, first name, date of birth,

• Contact details: postal address, e-mail address, telephone number,

• payment data,

• Any other personal data that may be transmitted spontaneously by the persons concerned, in particular in the body of the messages via the forms on the Site and/or when making contact.

This personal data is collected by the following means:

• Cookies: when browsing the Site, cookies may be installed on the data subject's terminal (see the Cookies Annex below for more information),

• Chat and forms for creating an account / contact on the Site,

• When making contact.

If applicable, the mandatory or optional nature of data provision is indicated during collection by an asterisk (*) . The requirement of mandatory provision of data (i) has a regulatory or contractual nature or (ii) conditions the processing of the request, including the conclusion and performance of the contract where applicable. Failure to provide this data will result in the impossibility of processing the request and/or concluding/executing the contract. By voluntarily providing data, including optional data, data subjects expressly agree to their processing in accordance with the purpose indicated at the time of collection and under the terms of the Privacy Policy.

We may also collect personal data about you indirectly when you share content, comment or respond to our social media posts or announcements.

3. Purposes pursued by the processing of personal data

The processing of personal data by DECOCLIM has the following purposes :

• Communication with the persons concerned to respond to their requests for information and/or quotes,

• The creation of a customer file and the management of the customer relationship,

• The conclusion of the contract, the execution, processing, management, invoicing and payment,

• The processing of applications sent spontaneously, communication with the candidate and, if necessary, the creation of a candidate file,

• The processing of requests for guarantees / complaints,

• The provision by third parties of technical, logistical or other functions on its behalf (in particular electronic payment solution, transport, accounting etc.),

• Improving the offer, by inviting customers to participate in surveys, studies and satisfaction surveys,

• The development of trade statistics,

• Commercial prospecting,

• Sending newsletters,

• Management of the exercise of their rights by the persons concerned,

• The protection of its legitimate interests (in particular debt recovery and the exercise of any legal rights),

• The performance of its legal and regulatory obligations (such as the retention of documents and accounting and/or tax obligations).

Cookies: the purposes of each cookie implemented on the Site can be consulted on the consent management platform.

If the personal data of the person concerned were to be processed for different purposes, DECOCLIM undertakes to inform them and, when the GDPR legal framework requires it, to obtain their prior consent.

4. Legal bases for the processing of personal data

The processing of personal data is carried out by DECOCLIM in accordance with the regulations in force, and in particular the GDPR Legal Framework. As such, they are based on one or more of the following legal bases:

• The free, specific, informed and unequivocal consent of the persons concerned,

• When this is necessary for the performance of DECOCLIM's contractual obligations towards the persons concerned or the pre-contractual measures taken at their request,

• When necessary to comply with DECOCLIM's legal and regulatory obligations (such as the fight against fraud),

• When necessary for the legitimate interests of DECOCLIM (such as carrying out satisfaction studies with a view to improving its offers),

• When it is necessary for the exercise or defense of a legal right of DECOCLIM (such as debt collection, civil or criminal action for liability, etc.).

Cookies: to find out more, please see the Cookies Annex.

5. Personal data retention periods

In accordance with the regulations in force, and in particular the GDPR Legal Framework, the retention periods for personal data depend on the purpose pursued by the processing concerned. Consequently, personal data is kept for a period that does not exceed the period necessary for the purposes for which they are processed, and in any event, for a period that does not exceed the maximum legal periods.

Thus :

• Contact / prospect data: for the time necessary to process the request, then for a maximum of three years from the collection or the last contact on the initiative of the person concerned,

• Customer data: for the duration of the relationship, then until a deletion request is sent or after a certain period of inactivity, set at a maximum of 3 years,

• Payment data: only for the duration necessary for the execution of the transaction,

• Supplier / partner data: for the duration of the commercial relationship, then for the applicable limitation period.

Finally, it is specified that certain personal data is kept longer, to ensure (i) compliance with applicable legal and regulatory obligations (such as document retention, invoicing or the fight against fraud), and/or (ii) the recognition, exercise or defense of DECOCLIM's legal rights during the applicable limitation period.

6. Measures applicable to the processing of personal data - Transfers outside the EU

All the necessary measures are put in place to guarantee the confidentiality, integrity and security of personal data, including with regard to subcontractors, with regard to the risks involved, in order to prevent personal data are not distorted, damaged or accessed by unauthorized third parties.

Personal data is stored in the European Union. However, in the context of the transmission of personal data to certain recipients, their transfer outside the European Union is possible. In this case, the appropriate measures resulting from the GDPR Legal Framework are taken to ensure that the recipients concerned provide a level of security comparable to that resulting from compliance with the GDPR Legal Framework and present the guarantees required in this respect.

7. Recipients of personal data

Personal data is processed internally.

However, personal data may be transmitted to external recipients only for the purposes mentioned above and to the extent strictly necessary for the performance of the tasks entrusted to them and/or legislative and regulatory provisions.

These include:

• Subcontractors, in particular of the following categories: carrier, accounting firm, technical service providers of the Site and information systems.

• Cookie publishers / partners (on this point, please consult the Cookies Annex),

• Banking institutions and electronic payment service providers,

• Social and fiscal bodies.

If necessary, personal data may be communicated to third parties authorized by laws and regulations, within the framework of an express and reasoned request from the judicial authorities.

8. Rights of data subjects

Under the GDPR Legal Framework, data subjects have the following rights: rights of access , query , rectification , erasure , restriction and withdrawal of consent processing and opposition to processing for legitimate reasons and at any time in the context of commercial prospecting, as well as the rights to the portability of personal data and to define post-mortem directives relating to the fate of personal data.

These rights can be exercised at the following addresses:

The request must contain the surnames, first names, e-mail address or postal address, to identify the person concerned and send him a response. For security reasons and in order to avoid any fraudulent request, proof of identity may be requested if these elements are insufficient. In accordance with the law, except in justified special circumstances, this request will receive a response within one month of receipt of the request.

Finally, the persons concerned have the right to lodge a complaint with the CNIL or any other competent supervisory authority in their State of residence .

This complaint can be made to the French CNIL at the following addresses:

Annex cookies

1. What are cookies " ?

The Site uses tracking technologies that perform write and/or read operations on the user's terminal and collect data. For ease of language, the term "cookies" refers to all tracking technologies that may be used.

There are several categories of cookies, which serve different purposes:

• Technical cookies: these cookies help make the Site usable by enabling basic functions such as page navigation. The Site cannot function properly without these cookies,

• Audience measurement cookies: these cookies help to measure the number of visitors, to understand their interaction with the Site and to improve it.

• Social network cookies: these cookies are linked to services provided by third-party sites, such as the “Like” or “Share” application buttons or multimedia content players. The social network providing such an application button is likely to identify the user thanks to this button, even without the user using the button when consulting the Site.

• Advertising cookies: these cookies are used to present advertisements that may correspond to the user's centers of interest, by personalizing the advertising and the content of the Site.

Cookies may be placed by DECOCLIM or by third parties. In the latter case, if the user is informed and their consent is obtained prior to their deposit on the Site, DECOCLIM does not however have direct control over these cookies. The user is invited to refer to the privacy policies of third-party cookie publishers.

2. Rights regarding cookies

1. Consent to the deposit of cookies

In accordance with the applicable provisions as well as the recommendations of the CNIL, no cookie is deposited if the user has not previously consented to this deposit (except for strictly necessary cookies). Express consent is collected by a device informing the user of the cookies used, their processing managers, their purpose, how to accept or refuse them, the consequences of their refusal or acceptance, and the existence of the right to withdraw consent.

The period of validity of the user's consent to cookies is a maximum of 13 months, and at the end of this period consent is requested again.

Some cookies are considered strictly necessary for the provision of the service and are exempt from consent, in particular:

• Those retaining the choice expressed by users on the deposit of cookies

• Those intended for authentication with a service,

• Those allowing the balancing of the load of the equipment contributing to a communication service,

• Certain audience measurement cookies (if they meet certain conditions).

2. Opposition to the deposit of cookies

In any case, the user can withdraw his consent at any time by opposing the deposit of cookies.

3. Details of the cookies used on the Site

To find out more about the cookies used, their data controllers, their purpose, how to accept or refuse them, please click here