PRIVACY POLICY

This privacy policy (the “Policy”) applies to the website available at www.extimejcdecauxairport.com (the “Site”).

In this context, Extime Media (“Extime Media”) is required to process personal data concerning users of the Website (“you”) in its capacity as data controller.

The purpose of the Privacy Policy is to inform you about how Extime Media processes your personal data and your rights.

Extime Media undertakes to process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (“GDPR”) “) and the French Data Protection Act No. 78-17 of January 6, 1978 (together the ”Regulations").

1- WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

The Data Controller is Extime Media, registered with the Nanterre Trade and Companies Register under number 533 165 692, whose registered office is located at 17 rue Soyer – Neuilly Sur Seine (92200) – France.

2- WHAT PROCESSING IS CARRIED OUT BY EXTIME MEDIA?

The processing of your personal data by Extime Media (what personal data is processed, for what purposes, on what legal basis, and for how long) is described below:

Creating and managing user accounts (logged-in mode):

Data processed: First name, last name, email address, phone number, password, company name, wishlist content, and message sent to Extime Media.

Purposes:

-Creating a user account and managing passwords

-Selecting and saving products in “wishlists”

-Contact with a dedicated Extime Media sales representative

Legal basis: Consent

Retention period: Until your user account is deleted or 3 years from the last contact with Extime Media and you.

Contact form management (offline mode):

Data processed: First name, last name, email address, phone number, company name, wishlist content, and message sent to Extime Media.

Purposes:

-Selection of products in “wishlists”

-Contact with a dedicated Extime Media sales representative

Legal basis: Legitimate interest

Retention period: 3 years from the last contact between Extime Media and you

Cookie management:

For information about the data processed, the purposes and the retention periods associated with cookies, please refer to the cookie policy.

Legal basis: Legitimate interest and consent

In the forms on the Website, information marked with an asterisk is mandatory. Without this information, we will be unable to create your user account or contact you to respond to your requests. Other information is optional and will not affect these purposes.

3- WHO ARE THE RECEIVERS OF YOUR PERSONAL DATA?

Extime Media only shares your personal data with duly authorized and designated recipients, in accordance with the Regulations. In the context of the processing operations mentioned above, your personal data may be transmitted to the following recipients:

a) Authorized members of Extime Media's sales teams who need to access it for the purposes described above.

b) To external entities in the following cases:

- Third-party service providers who perform services on behalf of Extime Media, in particular the company WITH DIGITAL ORCHESTRATION, which maintains and hosts the Website. These third-party service providers act as “subcontractors” of Extime Media, solely on its instructions and within the framework of a contract governing their obligations and responsibilities, particularly in terms of security. They only have access to your personal data for the purposes described above.

- Public authorities and bodies to whom Extime Media may be required to disclose some of your personal data in order to comply with legal obligations;

- To the competent authorities (judicial or administrative) in response to proceedings of any kind.

4- ARE YOUR PERSONAL DATA TRANSFERRED OUTSIDE THE EUROPEAN UNION?

Your personal data is hosted exclusively within the European Union and Extime Media does not transfer your data directly outside the European Union. However, some of our third-party service providers may transfer data to countries outside the European Union. We ensure that these transfers are strictly limited to the needs of the services provided by these service providers (in particular, 24/7 technical support needs) and that said service providers have put in place the appropriate safeguards to ensure that these transfers are carried out in accordance with the Regulations.

5- WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

In accordance with the Regulations, you have the following rights regarding your personal data:

  • Information: You have the right to be informed in a concise, transparent, understandable, and easily accessible manner about how your personal data is processed.
  • Access: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, where it is, to obtain a copy of it.
  • Rectification: You have the right to obtain the rectification of your personal data if it is inaccurate, incomplete, or no longer up to date.
  • Deletion (“right to be forgotten”): in certain cases, you may request the deletion of your personal data. However, this right is not absolute, and Extime Media may have legal or legitimate reasons for retaining such data.
  • Withdrawal of consent: if the processing of your data is based on your consent, you may withdraw it at any time.
  • Objection: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data when it is based on the legitimate interest of Extime Media. Extime Media may nevertheless invoke legitimate and compelling reasons requiring the processing to continue.
  • Restriction of processing: In certain cases, you have the right to obtain restriction of the processing of your personal data.
  • Portability: You may request to retrieve your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller without Extime Media obstructing this. This right only applies when the processing of your personal data is based on your consent or on the performance of a contract and when said processing is carried out using automated processes.
  • Directives in the event of death: you can provide directives regarding the storage, deletion, and disclosure of your personal data after your death.

You can exercise your rights by contacting Extime Media at the following addresses:

- By email: [email protected]

- By post:

Extime Media

DPO Department

17 Soyer Street

92200

Neuilly-Sur-Seine

In order for Extime Media to respond quickly to your request to exercise your rights, your request must include your last name, first name, email address, and specify the address (email or postal) to which the response should be sent. If necessary to verify your identity, you may be asked to provide a copy of proof of identity.

If, after contacting Extime Media, you feel that your rights have not been respected, you can submit a complaint to the French Data Protection Authority (Commission Nationale de l’Informatique et des Libertés, CNIL) at the following address:

CNIL - 3 place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07

Or on the website: https://www.cnil.fr/fr/plaintes

6. HOW IS YOUR DATA PROTECTED?

Extime Media implements appropriate technical and organizational measures to ensure the security of your data and protect it against unauthorized access, use, alteration, or disclosure. Extime Media also ensures that the subcontractors it uses provide sufficient guarantees to ensure the security of your personal data.

7. HOW TO CONTACT EXTIME MEDIA?

For any inquiries regarding this Policy, please contact the Data Protection Officer at the following address:

Extime Media

DPO Department

17 Soyer Street

92200

Neuilly-Sur-Seine

or by email : [email protected]

8. POLICY CHANGES

Extime Media may update this Policy at any time. Any new version will be published on the Site.