Legal Notice

> We use the data collected to communicate with you and to tailor these communications individually. For example, we can contact you by email to remind you that you have merchandise in your virtual basket, to help you complete your order, to communicate the current status of your requests, orders or complaints, to obtain data. additional essentials to these requests, orders or complaints or to inform you of what you must do to keep your account active.

> Improved services . We use personal data to constantly improve our services and systems, in particular to add new functions and also to make balanced decisions based on aggregate analyzes and business intelligence systems, all based on our legitimate interest which derives from freedom of business and which is based on the need to improve the services offered in a competitive economy.To ensure sufficient protection of your rights and interests, personal data collected for the purpose of improving services is used in an anonymous form

> Protection, security and dispute resolution . We may also process your data in the context of a legitimate interest which is to ensure the protection and security of our systems and our customers, to detect and prevent scams, to handle disputes and to put our agreements in place to reason of legitimate interest.

> Newsletter

• Commercial information
• We send you commercial information (emailing) on ​​products similar to those you have already purchased.
• You are always entitled to refuse to receive this commercial information by using the link in every e-mail which allows you to unsubscribe.
• If you unsubscribe from marketing communications, we will no longer use your electronic contact data for these purposes. We'll start using them again if you subscribe again or explicitly request it.
• The marketing offers that are communicated to you are chosen based on the information we have collected over time based on your purchasing habits, your favorite items and data on the use of our products or our websites (cookies, IP address, data provided by your browsers, data on your various clicks, data on commercial communications, products viewed). We do not carry out fully automated processing which would have legal effects for you.
• You are entitled to object to such processing at any time and free of charge. Contact details are provided at the end of this document.

> Processing of cookies

• If you have enabled cookies in your browser, we process behavior records from cookies located on the website in order to improve the functioning of the site Internet. You will find more information on this subject in the chapter of this document which is specifically devoted to cookies.

1.3. Communication of personal data to third parties

Your personal data will be handed over to a third party or otherwise transferred only if this is necessary for the execution of a purchase contract, on the basis of a legitimate interest or if you have previously given your consent.These third parties can be:

• sister companies and other processing companies in the execution of a purchase contract in order to carry out internal processes and procedures ;
• companies issuing credit cards, payment service providers in the context of payment processing, and banks in accordance with your orders and the fulfillment of purchase contracts;
• carriers so that ordered products, services and complaints can be delivered to you, including contract termination;
• our partners, in the loyalty schemes you connect to;
• other service providers, third parties involved in data processing;
• third parties, such as representatives, courts to collect a debt or enter into any contract with you;
• public authorities (eg the police);
• third parties conducting customer surveys.

If a third party uses this data for its legitimate interest, the administrator will not be responsible for the processing. This process is then governed by the principles of processing the personal data of companies and persons concerned.

2. Customer account

• To make purchases on our site, you will be asked to create a customer account.
• You can modify your customer account at any time from the website.
• You can request the export or deletion of your data at any time if you do not have an order in progress (see chapter " Rights of data subjects" )

3. Security of personal data and retention period

3.1. Security of personal data

• Your personal information is transmitted to us in encrypted form. We use the SSL ("secure socket layer") encoding system. We secure our website and other systems by taking technical and organizational measures to prevent the loss and destruction of your personal data and to prevent unauthorized persons from accessing, modifying and distributing it.
• All companies that process the data we have collected must prove that their systems comply with GDPR guidelines.
• Access to your customer account is only possible after entering your personal password. In this regard, we would like to warn you that it is essential not to communicate your access data to a third person and to always close your browser window when you have finished your activities on your customer account, especially when you share the computer with several other users. Exertier assumes no responsibility for the misuse of passwords, unless Exertier is the cause of the situation.

3.2.Processing time

We process and store personal data:

• For the duration necessary to ensure all the rights and obligations related to the purchase contracts, that is to say for the duration of the order, then during warranty periods
• During the entire period during which Exertier, as administrator, is required to keep them in accordance with the regulations in force. In accordance with the law, accounting documents, such as invoices from the company Exertier, are kept for a period of 10 years from their establishment.
• The agreement to send marketing offers is valid for 4 years or until terminated.
• In other cases, the processing time depends on the purpose of the processing or it is determined by the regulations on the protection of personal data.

4. Rights of data subjects

• If we process your personal data, you can request to be informed at any time free of charge about your personal data being processed.
• If you have the feeling that the way in which we process personal data is in contradiction with the principles of personal data protection and with the legal conditions of data protection personal data, you can ask for explanations, demand that we remove the situation thus arisen and in particular request that your personal data be corrected, completed, deleted or blocked.
• If you wish to exercise your rights, contact the data protection officer at the e-mail address info@exertier.com . You can also contact the National Commission for Informatics and Freedoms.
• You can terminate your agreement to process personal data at any time. If you withdraw your consent to the processing of personal data, your personal data will be erased or made anonymous. However, this does not apply to personal data that Exertier needs to fulfill its legal obligations (for example to process back orders) or to protect its legitimate interests. There is also deletion of personal data in the event that said personal data is no longer necessary for the established purpose or if the recording of your personal data is no longer authorized due to legal reasons.

5. Measures in the event of personal data leaks

If, despite everything, personal data constituting a risk with regard to the privacy of the persons concerned is leaked, we undertake to:

• Notify the people concerned within 72 hours
• Notify the CNIL

6.

6.1. Cookie files