SITE PRIVACY POLICY : Nuée de Paris

ARTICLE 1: PREAMBLE

This privacy policy applies to the Nuée de Paris website.

The purpose of this Privacy Policy is to provide users of the :

• How their personal data is collected and processed. All data that can identify a user must be considered as personal data. This includes the first and last name, age, postal address, e-mail address, location of the user or his IP address;
• What are the rights of the users regarding this data?
• Who is responsible for the processing of the personal data collected and treated ;
• To whom this data is transmitted;
• Eventually, the site's policy regarding "cookies" files.

This privacy policy complements the legal notice and the General Terms of Use that users can consult at the following address: https: //www.nuee-de-paris.com/

ARTICLE 2: GENERAL PRINCIPLES OF DATA COLLECTION AND PROCESSING

• In accordance with the provisions of Article 5 of the European Regulation 2016/679, the collection and processing of data of the users of the site respect the following principles:
  Lawfulness, fairness and transparency: data can only be collected and processed with the consent of the user who owns the data. Whenever personal data is collected, the user will be informed that his/her data is being collected, and for what purpose his/her data is being collected;
• Limited purposes: the collection and processing of data is carried out to meet one or more of the purposes set out in these terms and conditions of use;
• Minimization of data collection and processing: only the data necessary for the proper execution of the objectives pursued by the site are collected;
• Data retention reduced in time: the data is kept for a limited period of time, of which the user is informed. Where this information cannot be provided, the user is informed of the criteria used to determine the retention period;
• Integrity and confidentiality of collected and processed data: the data controller undertakes to guarantee the integrity and confidentiality of the data collected.

In order to be lawful, and in accordance with the requirements of Article 6 of the European Regulation 2016/679, the collection and processing of personal data may only take place if it complies with at least one of the conditions listed below:

The user has expressly consented to the processing ;

The processing is necessary for the proper performance of a contract;

• The processing responds to a legal obligation;
• The processing is necessary to safeguard the vital interests of the data subject or another natural person;
• The processing can be explained by a necessity linked to the execution of a mission of public interest or the exercise of public authority;
• The processing and collection of personal data is necessary for the purposes of the legitimate and private interests pursued by the controller or by a third party.

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED IN THE CONTEXT OF NAVIGATION ON THE SITE

A. DATA COLLECTED AND PROCESSED AND METHOD OF COLLECTION

The personal data collected on the Nuée de Paris website are the following:

first name, last name, billing and delivery addresses, email address, cell phone number, payment information, when you participate in a contest on our social networks, we may retain the personal data of the winners.

This data is collected when the user performs any of the following operations on the site:

• When the User makes a transaction on the site; - When the User fills out the contact form to send a request; - When the User uses the payment in several installments via Alma. Data relating to means of payment (credit card number, expiration date, authorization number, security code) are collected directly by our service providers Stripe and Alma. Nuée de Paris never has access to its customers' payment data.

In addition, during a payment on the site, it will be kept in the computer systems of the site editor a proof of the transaction including the order form and the invoice.

The data controller will keep in its computer systems of the site and in reasonable security conditions all the data collected for a period of : 3 years from the closing of the User's account or the last contact of the prospect concerned. Nevertheless, some Data may be archived beyond the periods provided for the needs of research, the establishment, and the prosecution of criminal offences with the sole aim of allowing, as necessary, the provision of these data to the judicial authority.
Archiving implies that these Data will be anonymized and will no longer be available online.

The collection and processing of data is for the following purposes:

• Management of orders and sales of products and provision of services; management of complaints, withdrawals and product returns; - Execution of transactions, including payment;
• Delivery of the ordered products;
• Administer the Sites, applications and fight against fraud;
• After-sales service: exchanges with customer service;
• Participation in special events (such as contests, games, sweepstakes, offers) and participation in the loyalty program excluding online gambling subject to approval by the French Gaming Regulatory Authority;
• To operate, evaluate and improve products and services and the user experience (including developing new products and services, analyzing the customer base; performing data analysis, accounting and auditing), profiling ;
• Send newsletters and special offers provided that the user checks the box expressing his acceptance, provided for this purpose, when registering for the Services;
• To analyze visits to the Sites and their frequency, audience measurements, studies, statistics, surveys (cookies) and to improve the User experience on the website and mobile applications;
• Fulfill the obligations arising from all contracts or agreements binding Nuée de Paris to its clients.

The data processing carried out is based on the following legal bases:

• The execution of a contract concluded between the client and the professional ;
• Compliance with a legal obligation;
• The legitimate interest of the Data Controller in order to provide suitable offers and to ensure the security of its website;
• The execution of a contract concluded between the client and the professional (game rules);
• The legitimate interest of the Data Controller to offer privileged offers;
• The User's consent.

B. TRANSMISSION OF DATA TO THIRD PARTIES

The data may be transmitted to the following third party(ies):

• Stripe and Alma, payment providers;
• Any police or administrative authority within the framework of judicial requisitions concerning the fight against fraud;
• Customs services and providers in case of delivery abroad.

C. DATA HOSTING

The Nuée de Paris website is hosted by : Agence web Debord which rents dedicated servers from OVH, whose headquarters are located at the following address

25 rue du champ de foire - La Croisille-sur-Briance 87130

The host can be contacted at the following phone number: 06 95 96 45 91.

The data collected and processed by the site are exclusively hosted and processed in France.

ARTICLE 4: DATA CONTROLLER

A. THE DATA CONTROLLER

The person responsible for processing personal data is: Nuée de Paris. It can be contacted as follows:
nueedeparis@gmail.com

The data controller is responsible for determining the purposes and means of processing personal data.

B. OBLIGATIONS OF THE DATA CONTROLLER

The data controller undertakes to protect the personal data collected, not to transmit them to third parties without the user's knowledge and to respect the purposes for which the data were collected.

Furthermore, the data controller undertakes to notify the user in the event of rectification or deletion of the data, unless this would entail disproportionate formalities, costs and steps for him.

In the event that the integrity, confidentiality or security of the user's personal data is compromised, the data controller undertakes to inform the user by any means.

ARTICLE 5: USER'S RIGHTS

In accordance with the regulations concerning the processing of personal data, the user has the following rights

In order for the data controller to comply with the user's request, the user is required to provide the following information: first and last name and e-mail address.
The data controller is required to respond to the user within a maximum of 30 (thirty) days.

A. PRESENTATION OF THE USER'S RIGHTS REGARDING DATA COLLECTION AND PROCESSING

a. Right of access, rectification and deletion

The user can learn about, update, modify or request the deletion of data concerning him/her, by following the procedure below:

b. Right to data portability

The user has the right to request the portability of his personal data, held by the site, to another site, by complying with the procedure below:
. The user may exercise all of these rights by contacting the customer service department at info.nueedeparis@gmail.com or by simple mail to Nuée de Paris 6 Rue d'Orchampt - 75018 Paris, France.

The user will have to join to his request a proof of identity.

c. Right to limit and object to the processing of data

The user has the right to request the limitation or to oppose the processing of his/her data by the site, without the site being able to refuse, unless it can be shown that there are legitimate and compelling reasons, which can prevail over the interests and rights and freedoms of the user.

In order to request the limitation of the processing of his/her data or to formulate an objection to the processing of his/her data, the user must follow the following procedure:
. The user may exercise all of these rights by contacting the customer service department at info.nueedeparis@gmail.com or by simple mail to Nuée de Paris 6 Rue d'Orchampt - 75018 Paris, France.

The user will have to join to his request a proof of identity.

d. Right not to be subjected to a decision based exclusively on an automated process

In accordance with the provisions of Regulation 2016/679, the user has the right not to be subject to a decision based exclusively on an automated process if the decision produces legal effects concerning him or her, or significantly affects him or her in a similar way.

e. Right to determine the fate of data after death

The user is reminded that he/she can organize what should be the fate of his/her collected and processed data if he/she dies, according to the law n°2016-1321 of October 7, 2016.

f. Right to refer to the competent supervisory authority

In the event that the data controller decides not to respond to the user's request, and the user wishes to contest this decision, or if he/she believes that one of the rights listed above has been infringed, he/she is entitled to refer the matter to the CNIL (Commission Nationale de l'Informatique et des Libertés, https://www.cnil.fr) or to any competent judge.

B. PERSONAL DATA OF MINORS

In accordance with the provisions of Article 8 of the European Regulation 2016/679 and the French Data Protection Act, only minors aged 15 years or older may consent to the processing of their personal data.

If the user is a minor under 15 years of age, the consent of a legal representative will be required in order for personal data to be collected and processed.

The editor of the site reserves the right to verify by any means that the user is over 15 years old, or that he has obtained the agreement of a legal representative before browsing the site.

ARTICLE 6: USE OF "COOKIES" FILES

The site may use "cookie" techniques.

A "cookie" is a small file (less than 4 kb), stored by the site on the user's hard drive, containing information about the user's browsing habits.

These files enable it to process statistics and information on traffic, to facilitate navigation and to improve the service for the user's comfort.

For the use of "cookies" files involving the storage and analysis of personal data, the user's consent is necessarily requested.

This consent of the user is considered valid for a maximum period of 6 (six) months. At the end of this period, the site will again request the user's permission to save "cookies" files on his or her hard drive.

a. Opposition of the user to the use of "cookies" by the site

Cookies that are not essential to the operation of the site are only deposited on the user's terminal after having obtained his consent. The user can withdraw his consent at any time, in the following manner:

• When connecting to the Sites, the User is informed by the appearance of a banner that cookies may be automatically installed on his or her browsing software during visits to the Sites, as well as their purpose, the possibility of accepting or refusing them and of modifying the parameters by clicking on the link "configure cookies". He can also modify his preferences through the navigation software used.

In a more general way, the user is informed that he can oppose the recording of these files "cookies" by configuring his browser.

For information, the user can find at the following addresses the steps to follow in order to configure his navigation software to oppose the recording of "cookies" files:

• Chrome: https: //support.google.com/accounts/answer/61416?hl=fr
• Firefox: https: //support.mozilla.org/fr/kb/enable-and-disable-cookies-website-preferences
• Safari: http: //www.apple.com/legal/privacy/fr-ww/
• Internet Explorer : https://support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete manage-cookies
• Opera: http: //www.opera.com/help/tutorials/security/cookies/

In the case where the user decides to deactivate the "cookies" files, he will be able to continue his navigation on the site. However, any dysfunction of the site caused by this manipulation could not be considered as being due to the editor of the site.

b. Description of the "cookie" files used by the site

The editor of the site draws the attention of the user to the fact that the following cookies are used during his navigation:

• Session management cookies
• Cookies for audience measurement (statistical cookies)
• Cookies required for certain optional features
• Cookies related to targeted advertising
• Cookies from social networks generated in particular by their sharing buttons when they collect personal data

While browsing the site, the user is informed that third-party "cookies" may be stored.

Specifically, these are the following third parties:

Nuée de Paris uses the services of the company Axeptio to collect and manage the consent of the Users of its Internet Sites.
In addition, the site integrates social network buttons, allowing the user to share his activity on the site. Cookies from these social networks may be stored on the user's computer when using these features.

The user's attention is drawn to the fact that these sites have their own privacy policies and general terms of use that may differ from the site. The site editor invites users to consult the privacy policies and general conditions of use of these sites.

SECTION 7: CONDITIONS FOR CHANGING THE PRIVACY POLICY

This privacy policy can be viewed at any time at the following address:
https://www.nuee-de-paris.com

The editor of the site reserves the right to modify it in order to guarantee its conformity with the law in force.

Therefore, the user is invited to consult this privacy policy regularly in order to be informed of the latest changes.

The user is informed that this privacy policy was last updated on: 23/03/ 2023.

ARTICLE 8: USER'S ACCEPTANCE OF THE PRIVACY POLICY

By browsing the site, the user certifies that he/she has read and understood the present privacy policy and accepts its conditions, particularly with regard to the collection and processing of his/her personal data, as well as the use of "cookies" files.