DATA PROTECTION POLICY

In addition to this Confidentiality and Privacy Policy, the use of the odorescola.com Sites (or hereinafter "we") requires the acceptance by the Member or future Member (or hereinafter " you") of the T&Cs, as well as, where applicable in the event of the acquisition of product(s) and/or service(s), all or part of the T&Cs.

These documents formalize a contractual relationship between you and odorescola.com, serving in particular as the legal basis for the collection and processing of your Personal Data by odorescola.com under the conditions of this Confidentiality and Privacy Policy.

In addition, the execution of the (pre)contractual relations that bind us, on your initiative, require the performance of a certain number of processing operations, the purposes of which are detailed in paragraph II – 4. For what purposes your Personal Data are they used?

By using our Site, you agree to the terms of this Confidentiality and Privacy Policy. If you disagree with any of its terms, you are free to no longer use our Site and/or our Services, but also to modify your choices by clicking here.

As the controller of your Personal Data collected on the Sites it publishes, odorescola.com makes every effort to protect your privacy as best as possible during your visits to them. You can, at any time, contact our Personal Data Protection Officer, contact@odorescola.com

This section is dedicated to our Confidentiality and Privacy Policy. It allows you to find out more about the origin and use of the information and Personal Data collected and processed by us during your consultation of our Site, or the use of our Services and to inform you about your rights, in particular your Specific Rights. This Policy is therefore important for you who wish to have a positive and confident experience of our Services and for odorescola.com who wishes to answer your questions in a precise and complete manner about your consultation of our Site and the use of our Services and to take into account of your wishes.

We may freely modify this Privacy and Confidentiality Policy. Any modification will take effect immediately and will only apply to Members using the Site after said modification. Therefore, we invite you to refer to it each time you visit our Site in order to read its latest version, which is permanently available on the Site.

I – Glossary

For the purposes of this Confidentiality and Privacy Policy, including its preamble, capitalized terms, whether used in the singular or in the plural, and which are not defined in the one of our contractual documents listed above, have the following meaning:

"Intermediate Archiving": designates the isolation of Personal Data which still presents an administrative interest for odorescola.com (such as, for example, to meet our accounting obligations) by a logical separation ( management of access rights and authorizations limited to a specific service) and/or physical. This archiving is an intermediate step before the deletion or anonymization of your Personal Data concerned.

“Order”: refers to each acquisition of goods made by a Member on the Site under the conditions provided for in the GCS supplemented, where applicable, by special conditions.

“Cookies”: refers to tracers and/or equivalent technologies, namely in particular cookie, “Flash” cookie, result of the fingerprint calculation of your Terminal called “fingerprinting”, local web storage, invisible pixels, used alternatively or cumulatively to i) facilitate the Member's navigation (Browsing Cookies), ii) offer products and services adapted to the Member's centers of interest (Advertising Cookies), iii) allow the elaboration of statistics (Audience Cookies) and iv) allow the Member to access personalized products and services on the Site or via messages sent by odorescola.com (Personalization Cookies) and allow interaction with the Networks Social (Social Network Cookies), etc.

"Personal Data(s)" or "Data": means any information relating to an identified or identifiable natural person who can be identified, directly or indirectly, including by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to its physical, physiological, genetic, psychic, economic, cultural identity or social. Thus, the data we collect may include your strictly personal data, in that they allow you to be identified as a particular person. Conversely, some data does not allow us to identify you directly, such as your profession or your browsing data (type of browser, Terminal and operating system, path followed on the Site, etc.) but are still considered Personal Data because they are attached and/or attachable to the first.

"Third-Party Data": refers to the Data that we share, where applicable, with third parties under the conditions determined in particular in Article II-7.2 (Link to paragraph)< /p>

“Specific Rights”: means the rights granted to the Member by the Personal Data Regulations and in particular the rights of/from/to:

• access (article 15 GDPR),
• rectification (Article 16 GDPR),
• erasure (Article 17 of the GDPR),
• limitation of Processing (Article 18 of the GDPR),
• portability (article 20 of the GDPR),
• objection (Articles 21 and 22 of the GDPR),
• post-mortem directives (Law n°78-17 of January 6, 1978 relating to data processing, files and freedoms);

These Specific Rights and the means of exercising them are specified in paragraph III-Your rights (Link to the paragraph)

“Member(s)”: means any Internet user who has provided Personal Data on the Site registration form, accepted the T&Cs, such as the Privacy and Data Protection Policy. Privacy, and having, after receiving a confirmation email, definitively validated his odorescola.com account.

"Partner(s)": refers to various service providers of odorescola.com and/or the odorescola.com Group, whether for the processing of your Orders, the delivery of products, after-sales service, the provision of technological services, advertising, Social Networks (as defined below), etc., or even more specifically of our suppliers for the realization of the sale of products and/or services on the Site.

"Regulation on Personal Data": means together the GDPR, Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms, as amended, and any new law , decrees taken for its application.

“GDPR”: means the General Data Protection Regulation n°2016/679 of April 27, 2016 applicable from May 25, 2018 or, instead, any law that may come to be adopted in transposition of said Regulation.

“Services”: means the definition given in Article 3 of our TOS.

"Site(s)": refers to the websites published by odorescola.com in their web and mobile versions, as well as the corresponding mobile applications.

"Terminal(s)": means the hardware equipment (computer, tablet, smartphone, telephone, etc.) that you use to consult or view the Site and/or any other digital media published by a third party.

"odorescola.com": refers to the publisher of the Site as designated in our legal notices.

II – Protection of your Personal Data

All information you provide to odorescola.com during your visits to our Site is strictly confidential.

II – 1. What legal basis for the processing carried out?

In accordance with the Personal Data Regulations, the processing referred to in this Privacy Policy and Protection of Privacy is supported by a specific legal basis.

II – 1.1 Consent of the Member to one or more specific purposes

odorescola.com has required your express consent to communicate some of your Personal Data to its Partners and to use your Personal Data to offer you promotional offers tailored to your browsing.

When browsing the Site, in particular from a dedicated mobile application, odorescola.com also requires your express consent to read the location data of your Terminal under the conditions and for the purposes set out in this Privacy Policy. Confidentiality and Protection of Privacy.

The details of these treatments are developed in paragraph II – 5. What is the point of seeing promotional offers adapted to your navigation?

You can withdraw your consent at any time by expressing your choices from paragraph VIII – Express your choices.

II – 1.2 Processing necessary for the performance of your contractual relationship with odorescola.com

In order to use the Site and benefit from the Services, you have accepted the T&Cs, as well as, where applicable in the event of the acquisition of product(s) and/or service(s), the T&Cs.</ p>

These documents formalize a contractual relationship between you and odorescola.com, serving in particular as a legal basis for the collection and processing of your Personal Data by odorescola.com.

These Data are necessary for the performance of a number of processing operations related to the performance of our contractual relationship and the purposes of which are detailed in paragraph II – 4. For what purposes are your Personal Data used?< /p>

II – 1.3 Processing necessary for compliance with a legal obligation to which odorescola.com is subject;

The processing we carry out may also be dictated by a legal obligation incumbent upon us, this is the case for example of Decree No. 2011-219 of February 25, 2011 relating to the retention and communication of data allowing us to 'identify anyone who contributed to the creation of any content posted.

II – 1.4 Processing necessary for the purposes of the legitimate interests pursued by odorescola.com

odorescola.com may have a legitimate interest justifying the processing of your Personal Data (example: the processing of your Data strictly necessary for the purposes of preventing fraud in accordance with paragraph II – 6 Fight against fraud for example )

In this case, odorescola.com ensures that the processing in question is indeed necessary to achieve its legitimate interests and assesses the consequences of this processing on the Member, in particular taking into account the nature of the Data processed, and the ways in which they are processed.

The purposes of the processing carried out by odorescola.com are detailed in paragraph II – 4. For what purposes are your Personal Data used? and II – 5. What is the point of seeing promotional offers adapted to your navigation?

odorescola.com spontaneously offers its Members to oppose certain processing of their Personal Data since paragraph VIII – Express your choices.

If a Member wishes to oppose the processing of his Personal Data for which a button has not been provided by odorescola.com, he can always exercise his right of opposition under the conditions of paragraph III – Your rights .

Indeed, we make sure not to disregard your interest or your fundamental rights and freedoms by allowing you, at any time, to object to all or part of the processing described in this Privacy and Data Protection Policy. Privacy, such as to implement your Specific Rights, under the conditions of paragraph III – Your rights.

II – 2. What Personal Data is collected?

odorescola.com collects the Data that you voluntarily declare to it from a collection form on the Site, in particular when you register as a Member or place an Order, including socio-professional information (your profile, know your name, username, first names, gender, date of birth, godfather and/or godchildren, delivery address, profession, for example) to which odorescola.com associates a Member number.

During an Order, our banking service providers also collect and process Personal Data concerning your means of payment (credit card number, expiry date of the credit card, visual cryptogram, the latter not being kept , etc.). As for us, we process the partial number of your bank card made up of the first six (6) numbers and the last four (4) numbers and the expiry date of your bank card as transmitted by your bank. This payment identifier therefore does not allow you to carry out a bank transaction and is kept for fifteen (15) months, unless you delete it from your Member account.

We also collect information relating to the transaction carried out (transaction number, purchase details, etc.), or relating to the payment of invoices issued from or via the Site (payment terms, discounts granted, receipts, balances and unpaid, or finally relating to the credits subscribed, amount and duration, name of the lending organization, etc.).

Some Data is mandatory and others optional, as indicated in the collection form on our Site.

odorescola.com collects and/or collects from its Partners and processes Data relating to the monitoring of the commercial relationship with you: product and/or service purchased, service or subscription taken out, quantity, amount, frequency, address(es) of delivery and/or invoicing, telephone number, digicode, as well as any other relevant information on the delivery (tracking numbers, status of the shipment, etc.) history of purchases and services, return of products, correspondence and/or telephone exchanges with you and our after-sales service, exchanges and comments from Members, person(s) in charge of customer relations, etc.

The Data necessary for i) the performance of loyalty, prospecting, study, survey, product test and promotion actions are also collected and processed, ii) the organization and processing of contests , lotteries and any promotional operation such as the date of participation, the responses given to contests and the nature of the prizes offered iii) Data relating to the contributions of Members who submit opinions on products, services, content, Services or the Site.

The Data necessary to memorize your preferences in terms of communications (channel, content, frequency) and the display of sales entered on the forms of the Site are also collected.

Furthermore, when you access the Site and/or an electronic medium published by a third party containing promotional campaigns distributed by odorescola.com, Cookies may be used and/or deposited, which record and/or read files on your Terminal, including by our Partners, in order to collect and process information relating to your interaction with our Services, and in particular your browsing and your behavior on the Site.</ p>

odorescola.com thus collects and processes Data relating to your browsing and your behavior on the Site, which are very numerous: your IP address, the pages visited, the brands that interest you, the purchases made, etc.

In this context, subject to your agreement (see articles VII and VIII below) which can also be expressed by the configuration of your Terminal, odorescola.com may also collect and process all or part of the following Data:

Ø Information related to the Terminal you are using:

• The type of Terminal you are using (Smartphone, tablet, computer, etc.);
• The operating system of your Terminal (Mac Os, iOS, Android, Windows, BlackBerry etc.);
• Your Terminal plugin categories and versions;
• Your Internet service provider (Orange, SFR, Bouygues, Free, etc.);
• The browser used (Safari, Chrome, Internet Explorer, etc.);
  The advertising identifier linked to the operating system of your Terminal;
• The IP address of your Terminal;
• The geolocation data of your Terminal;
• Your language preferences.

Ø Information about our browsing and your behavior on the Site

• Statistics on the consultation of the various pages of our Site (such as the category of goods or services presented on the pages you visit, the time you spend on them, their timestamp, etc.);</ li>
• The full URL path to, through and from our Site;
• Confirmation of receipt and reading of commercial, prospecting or information e-mails that we may send you, subject, where applicable, to your prior consent.

Ø   Information on the sales areas and/or promotional banners that you access on the Site, such as on third-party media, the promotional announcements that are delivered to you and, where applicable, who have been issued:

• The URL and/or subject of the website and/or mobile application where you (have) browsed and where the promotional advertisement is likely to be delivered to you and, if applicable, you has been issued;
• Details of the advertisement(s) which is/are to you and, where applicable, has/have been delivered to you (identity of the advertiser, type of advertisement, etc.) .);
• Your behavior towards this/these ad(s) (the time spent on the ad, your possible clicks, etc.);
• Your behavior after clicking on the ad(s) (downloading an application, answering a questionnaire, etc.);
• The number of times you received the promotional ad(s) delivered.

Ø   Information about you (age or age group, sex, declared and/or presumed socio-professional category, presumed centers of interest, etc.) related to your activity on the Internet and/or on the Site (depending on the pages viewed, products viewed, searches performed, etc.).

We may allow you to share information relating to our Services on the websites (in their fixed or mobile version, including the corresponding applications) of social networks (Facebook, Twitter, etc.) of our Partners (here - after designated the "Social Networks"), in particular through the sharing buttons, to use the said Social Networks, in particular to facilitate the creation of your Member account or to associate your Member account with your personal account on the Networks Social, in accordance with article VI below.

odorescola.com collects and processes Data resulting from the configuration of your Member account, such as in particular the frequency and/or time of receipt of announcements of our sales, our newsletters, our alerts, etc.</p >

Finally, odorescola.com may combine all or part of this Data, which is likely to generate new Personal Data even if it is strictly of interpretative origin. You can exercise your right of access to this Data at any time under the terms and conditions of paragraph III – 2. How to exercise your rights?

II – 3. How long is your Personal Data kept by odorescola.com?

Your Personal Data concerning your Member profile as you have declared and/or completed it on the Site, as well as those concerning your navigation and/or your behavior on the Site and the promotional advertisements which are broadcast to you on the Site, the Personal Data communicated to us by the said Partners and/or those of the odorescola.com Group, are kept, on an active basis, for a period of three (3) years from your last activity on the Site or on a electronic communication medium (in particular an electronic mail) of the odorescola.com Group as a Member. At the end of this period, your Member profile is considered "inactive" and will be automatically deactivated. It will therefore be up to you to create a new one for any new Order.

On the other hand, audience measurement statistics and your raw Website traffic data are not kept for more than thirteen (13) months.

In addition, the location data of your Terminal, read subject to your express and prior consent for the purposes set out in Article II – 4 below, are not kept.

Your Personal Data in connection with an Order on the Site (surname, first name, product or service, delivery address, billing, etc.) is kept for a period of three (3) years from an Order . They remain accessible by you and for us, in particular from your Member account, in order to allow you and us to have a complete history of your Orders. We can delete them at any time upon simple request from you.

However, at the end of these aforementioned deadlines, including as necessary from your request for deletion, your Personal Data may be subject to intermediate Archiving in order to meet our legal obligations. , accounting and tax (such as the obligation to keep invoices for a period of ten (10) years set out in Article L.123-22 of the Commercial Code) and/or at least during the applicable limitation period (such as the common law limitation period of five (5) years enshrined in article 2224 of the Civil Code), but also in order to prevent possible illicit behavior after the deletion of your Member account (reuse of your old account by a third party, for example) or in order to respond to your requests after the closure of your Member account, including concerning Orders, etc.

In the event of litigation, including only concerning odorescola.com, for example with regard to the administration, the aforementioned Personal Data as well as any information, documents and documents containing Personal Data tending to establish the facts likely of being accused or concerning the identification of the defendants, the victims, the witnesses and the legal assistants (name, usual name, first names, sex, date and place of birth, nationality, address, telephone numbers and fax, e-mail address) may be kept for the duration of the procedure, including for a period longer than those indicated above.

II – 4. For what purposes are your Personal Data used?

The operations set out below are not used to conduct the establishment of profiles likely to reveal so-called sensitive Personal Data such as racial or ethnic origins, philosophical, political, trade union, religious opinions, sex life or health .

Your Personal Data is necessary to enable you to access, use and improve our Services, and to enable us to/d:

• carry out operations relating to our commercial relationship, i.e. concerning your registration for the Services (in particular the verification of the veracity of your email), Orders, deliveries, invoices, accounting, monitoring the "customer relationship" with a Member, such as carrying out satisfaction surveys, managing complaints and after-sales service, refunds, specific commercial gestures, returning Orders, exercising your right of withdrawal, etc ;
• select Members to carry out studies, surveys and product tests, as well as loyalty, prospecting and promotion actions;
• perform operations relating to prospecting, i.e. the management of technical prospecting operations (which notably includes technical operations such as standardization, enrichment and deduplication);
• carrying out commercial solicitation operations;
• preparing trade statistics; analysis and marketing tools (including classification, score, etc.);
• the organization of contests, lotteries or any promotional operation, excluding online gambling and games of chance subject to the approval of the Online Gaming Regulatory Authority;</li >
• the management of requests to exercise the Specific Rights referred to in Article III below;
• management of outstanding payments and disputes;
• the management of your comments on the Site and/or on the web pages published by us and hosted on the websites of our Social Networks;
• the fight against fraud and in particular reducing the triggering of the 3D Secure protocol when paying Members according to the evaluation of the Terminals, verification of transactions and Order returns, (see II-6 below ).

More specifically, the Personal Data collected from the Cookies that we and/or the odorescola.com Group, like our Partners, deposit on your Terminal under the conditions of article VII below allow us:

• to establish statistics and volumes of visits and use of the various elements making up our Site (headings and content visited, routes), allowing us to improve the interest and ergonomics of our Services;</li >
• to adapt the presentation of our Site to the display preferences of your Terminal (language used, display resolution, operating system used, etc.) during your visits to our Site, depending on the equipment and viewing or reading software that your Terminal contains;
• to store information relating to a form that you have completed on our Site (registration or access to your account) or to Orders (subscribed service, contents of an order basket, etc.);
• to allow you to access reserved and personal areas of our Site, such as your account, using identifiers or Data that you may have previously entrusted to us;
• to implement security measures, for example when you are asked to log in again to content or a Service after a certain period of time;
  to count the number of views and activations of our sales areas and/or promotional offers, including on electronic media published by third parties and/or Partners, to identify this content and these media, to determine the number of users who clicked on each content;
• to calculate any sums due to our Partners in the advertising distribution chain (communication agency, advertising agency, site/distribution medium) and to establish statistics;

Finally, subject to your express and prior consent, the location data of your Terminal may be read by odorescola.com, when you browse one of the Sites, more particularly from a dedicated mobile application, and precisely to allow us to /d:

• you offer commercial offers close to your geographical location, in particular within the framework of the so-called "Around me" offers, or even through the "Pick up in Store" service;
• make it easier for you to enter your delivery address when placing an Order;
• fight against fraud, in particular by reducing the triggering of the 3D Secure protocol at the time of your payment, according to the evaluation of the Terminal.

The combination of your Data is also useful in order to facilitate, specify, anticipate, the processing operations, the purposes of which are recalled above and below.

II – 5. What is the point of seeing promotional offers adapted to your navigation?

Subject to your consent, your Personal Data is also required to enable us to/d:

• to offer you offers from Partners and/or the odorescola.com Group according to your choices;
• personalize our Services, in particular by personalizing the Site according to your observed and/or declared and/or suggested preferences and your needs;
• personalize our communication to you, in particular by information e-mails, according to your observed and/or declared and/or suggested preferences, your needs and your choices;
• More specifically, the Personal Data collected from the Cookies that we and/or the odorescola.com Group, like our Partners, deposit on your Terminal under the conditions of article VII below allow us:
• to adapt the presentation of the Site to which one of our sales areas and/or promotional offers leads:
• depending on the display preferences of your Terminal (language used, display resolution, operating system used, etc.) during your visits to our Site and according to the viewing or reading hardware and software that your Terminal contains,
• according to the Location Data (longitude and latitude) transmitted to us (or to our Partners) by your Terminal with your prior consent.
• according to your customer profile.
• to follow the subsequent browsing performed by your Terminal on our Site and/or electronic media published by Partners.

Finally, subject to your consent under the conditions of Article II – 7, all this Data also allows us to provide you on third-party and/or Partner media with relevant and personalized advertisements for products or services that would be that may be of interest to you, in particular based on your browsing behavior. The Data collected in this last case may also be used for reporting purposes on the performance of the promotional operations implemented.

Our goal is to present you with the most relevant offers possible, whether on our Site or, where applicable, on third-party media. To this end, Cookie technology makes it possible to determine in real time which offer to display on a Terminal, based on your recent browsing on the Internet.

You probably prefer to see offers of products and services that correspond to what interests you rather than offers that have no interest for you.

However, in the opposite case, you can always exercise your right of opposition from paragraph VIII – Express your choices

II – 6 Fight against fraud

odorescola.com is convinced of the need to take measures to combat fraud that endangers consumers and their confidence in online commerce.

In order to ensure the security of payments during transactions on our Site, to avoid fraud and thus to protect consumers in the context of distance selling, odorescola.com may carry out automated processing of Data whose purpose is to control and/or have its Partners control the Orders and to verify the regularity of the information transmitted to it during these. This verification involves the processing of Personal Data collected through the Site.

Therefore, if an Order does not present, or does not appear to present, all the guarantees necessary to ensure compliant and secure payment, odorescola.com reserves the right to cancel the Order. odorescola.com and/or its Partner(s), if it/they deem it necessary, may ask you for additional information and documents in order to finalize the Order.

In the event of non-regularization of the Order within the time limit, odorescola.com may be forced to cancel the Order and to register some of your Personal Data in a “payment incidents” file. If this were to be the case, the Member concerned would be informed by e-mail when the incident resulting in his registration on this file would occur. This e-mail will specify in particular the reasons and consequences of this registration and the procedures for exercising the Specific Rights. As soon as a regularization on the part of the Member has reached the Collection Service of odorescola.com, his Personal Data will be deleted from the aforementioned file and his Orders process will be reactivated. In the meantime, the Personal Data contained in the "payment incidents" file (in particular the IP addresses used by the Member) will be shared as necessary with the odorescola.com Group in order to prevent any new Orders and this, up to two (2) years after the event giving rise to the suspension, unless the incident at the origin of the report is closed, subject to additional storage in Intermediate Archiving.

More generally, any fraudulent behavior by a Member on the Site, in particular with regard to these GCS, may give rise to the suspension, including as a precaution, of the Member's Account and to proceed with the registration of some of his Personal Data in a corresponding file. If this were to be the case, the Member concerned would be notified by any means, as well as the procedures for exercising the Specific Rights

As soon as a regularization of the Member has reached the Service concerned of odorescola.com, his Personal Data will be deleted from the aforementioned file and his Member account reactivated. In the meantime, the Personal Data contained in the "precautionary suspension" file (in particular the IP addresses used by the Member) will be shared as necessary with the odorescola.com Group in order to prevent the creation of any new Account and this, up to three (3) years after the event giving rise to the suspension, unless the incident at the origin of the report is closed, subject to additional storage in Intermediate Archiving.

II – 7 What information do we share with third parties?

All your Personal Data that has been collected by odorescola.com and/or the odorescola.com Group is strictly confidential.

odorescola.com will never transmit your Personal Data to any third party likely to use them for their own purposes and in particular for commercial purposes and/or direct advertising, without your express consent.

However, odorescola.com may communicate your Personal Data to respond to an order from the legal authorities.

II-7.1 odorescola.com may be required to temporarily and securely transfer to third parties (Partners, odorescola.com Group), certain Personal Data which is necessary in particular for the operation, animation, maintenance of our Site, in particular to ensure the sending of emails that you have chosen to receive, and/or the accomplishment of tasks necessary for the execution of the Services, of your Order, to ensure the delivery of goods, the performance of services, and/or the reservation of certain goods in store, to fight against fraud and more generally any criminally reprehensible activity, for certain aspects of after-sales service, and to carry out satisfaction surveys, etc.

In fact, some Data relating to our sales dedicated to the world of charm for example, or to products or services reserved for adults, is collected. However, odorescola.com does not communicate to its Partners the Data declared during a purchase on these specific sales and strictly necessary for the realization of the sale and its delivery, as well as, if necessary, for the after-sales service.< /p>

Browsing and/or behavioral data relating to this type of sale are not communicated.

Our Partners concerned and/or (the) entity(ies) of the odorescola.com Group concerned which may have access to your Data process it on our behalf, according to our instructions, in the compliance with both this Confidentiality and Privacy Policy and any appropriate security and confidentiality measures.

As such, when these Partners are located outside the European Union, or in a country that does not have adequate regulations within the meaning of the Personal Data Regulations (https://www.cnil. fr/fr/la-protection-des-donnees-dans-le-monde ), we regulate our contractual relationship with this Partner by adopting an appropriate contractual mechanism (see II-8).

II – 8. Hosting of your Personal Data

The Internet is a globally accessible, publicly accessible computer network made up of millions of networks, both public and private, through which information passes. Consequently, even before arriving on our servers in France, the Data from your Terminal has already transited from servers located throughout the world, independently of any action by odorescola.com.

III – Your rights

odorescola.com is concerned about respecting your rights and has appointed a data protection officer, registered as such with the CNIL and reachable at contact@odorescola.com

III – 1. What are your rights?

In accordance with the Personal Data Regulations, you have the following Specific Rights from/to/to:

• access (article 15 GDPR),
• rectification (Article 16 GDPR),
• erasure (Article 17 of the GDPR),
• limitation of Processing (Article 18 of the GDPR),
• portability (article 20 of the GDPR),
• objection (Articles 21 and 22 of the GDPR),
• post-mortem directives (Law n°78-17 of January 6, 1978 relating to data processing, files and freedoms);

III – 1.1 Access rights

You have the option of obtaining from odorescola.com confirmation that the Data concerning you is or is not being processed and, when it is, access to said Data as well as the following information:

• the purposes of the processing;
• categories of Data;
• the recipients or categories of recipients to whom the Data have been or will be communicated;
• where possible, the envisaged Data retention period or, where this is not possible, the criteria used to determine this period;
• the existence of the right to request from odorescola.com the rectification or erasure of Data, or a limitation of the processing of your Data, or the right to oppose this processing;
  the right to lodge a complaint with the CNIL;
• where Data is not collected from you, any available information as to its source;
• the existence of automated decision-making, including profiling, and, at least in such cases, meaningful information about the underlying logic, as well as the significance and intended consequences of such processing for you.
• When the Data is transferred to a third country or to an international organization, you have the right to be informed of the appropriate guarantees, with regard to this transfer.

odorescola.com provides a copy of the Data being processed.

odorescola.com may charge a reasonable fee based on administrative costs for any additional copies requested by the Member

When you submit your request electronically, the information is provided in a commonly used electronic form, unless the Member requests otherwise.

Your right to obtain a copy of your Data must not infringe the rights and freedoms of others.

III – 1.2 Right of rectification

You have the possibility of obtaining from odorescola.com, as soon as possible, the rectification of Data concerning you which is inaccurate. You also have the option of having incomplete Data completed, including by providing a supplementary declaration.

III – 1.3 Rights to erasure

You have the possibility of obtaining from odorescola.com the erasure, as soon as possible, of Data concerning you when one of the following reasons applies:

• the Data is no longer necessary for the purposes for which it was collected or otherwise processed by odorescola.com;
• you have withdrawn your consent to the processing of this Data and there is no other legal basis for the processing;
• you exercise your right of opposition under the conditions set out below and there is no overriding legitimate reason for the processing;
• the Data has been unlawfully processed;
• Data must be erased to comply with a legal obligation;
• Data was collected from a child.

III – 1.4 Rights to limitation

You have the option of obtaining from odorescola.com the limitation of the processing of your Data when one of the following reasons applies:

• odorescola.com verifies the accuracy of the Data following your contestation of the accuracy of the Data,
• the processing is unlawful and you oppose the erasure of the Data and request the limitation of their use instead;
• odorescola.com no longer needs the Data for the purposes of the processing, but they are still necessary for you to establish, exercise or defend legal rights;
• You have objected to the processing under the conditions set out below and odorescola.com checks whether the legitimate reasons pursued prevail over your alleged reasons.

III – 1.5 Right to Data Portability

You have the possibility to receive from odorescola.com the Data concerning you, in a structured, commonly used and machine-readable format when the processing of the Data is based on consent, or on a contract and the processing is carried out at using automated processes. When you exercise your right to portability, you have the right to have the Data transmitted directly by odorescola.com to a data controller that you designate when technically possible.

Your right to the portability of your Data must not infringe the rights and freedoms of others.

III – 1.6 Right to object

You have the right to object at any time, for reasons relating to your particular situation, to the processing of Data concerning you based on the legitimate interest of odorescola.com. odorescola.com will then no longer process the Data, unless it demonstrates that there are legitimate and compelling reasons for the processing which prevail over your interests and your rights and freedoms, or may keep them for the observation, the exercise or defense of legal rights.

When the Data is processed for prospecting purposes, you can object at any time to the processing of this Data from paragraph VIII – Express your choices.

If a Member wishes to oppose the processing of his Personal Data for which a button has not been provided by odorescola.com, he can always exercise his right of opposition under the conditions of paragraph III – Your rights .

III – 1.7 Post Mortem Guidelines

You have the possibility to communicate to us directives relating to the conservation, the erasure and the communication of your Personal Data after your death, which directives can also be registered with "a certified digital trusted third party" . These directives, or a kind of "digital will", can designate a person in charge of their execution; failing this, your heirs will be designated.

In the absence of any instructions, your heirs can contact odorescola.com in order to:

access Data processing allowing "the organization and settlement of the estate of the deceased";
receive communication of "digital goods" or "data resembling family memories, transmissible to heirs";
close your Member account on the Site and oppose the further processing of your Personal Data.
In any case, you have the possibility to tell us, at any time, that you do not wish, in the event of death, that your Personal Data be communicated to a third party.

III – 2. How to exercise your Specific Rights?

To exercise your Specific Rights to the attention of odorescola.com and/or, where applicable, obtain an oral reading of this Policy, you may choose to send your request:

• By e-mail to our Data Protection Officer contact@odorescola.com
• By post by contacting our data protection officer at the following address:

Odore Scola SAS
IBMM University of Montpellier CC17-03
Place Eugène Bataillon
34090 MONTPELLIER

An answer will be sent to you within a maximum of one (1) month following the date of receipt of your request.

If necessary, this period may be extended by two months by odorescola.com, which will alert you, taking into account the complexity and/or the number of requests.

In the event of a request for the deletion of your Data and/or in the event of the exercise of your right to request the deletion of your Data, we may however keep them in the form of Intermediate Archiving, for the necessary duration. to meet our legal, accounting and tax obligations and in particular, to prevent any illicit behavior after the deletion of your account (reuse of your old account by a third party) and this, in accordance with Article II-3 of the this Confidentiality and Privacy Policy.

It is specified as necessary that the request to delete your Member account from the Site is not interpreted by odorescola.com as an express request to exercise your right of opposition, limitation or deletion for legitimate reasons. Your Member account is therefore rendered inactive and the Data concerning you is subject to intermediate Archiving under the conditions and durations indicated above.

You can also choose the types of emails you want to receive or not, by going to the "My communications" section. This will allow you to unsubscribe, permanently or temporarily, from each category or from all of the emails.

An unsubscribe link is also included in each email that odorescola.com sends you.

You can also ask us at any time to stop receiving advertisements or prospecting adapted to the navigation information of your Terminal, by contacting us directly and free of charge, or by means of the unsubscribe link included in any prospecting that we would be likely to contact you by e-mail. Where applicable, the advertisements that you may continue to receive, unless you object to us, will no longer be adapted to the navigation of your Terminal.

You can, at any time, file a complaint with the competent supervisory authority (in France, the CNIL: www.cnil.fr)

IV – Security of Internet browsing

IV – 1. Integrity of your Data on the Internet

We implement effective means to ensure that your Data is secure. This is why we use technical, physical and procedural control measures that are implemented during the collection, processing and transfer of your Data.

Site security is the daily work of teams dedicated to this specific subject.

In order to provide our Members with the necessary security while maintaining the usual comfort of navigation, several devices are in place today.

Connection to our Site is via a secure connection using SSL (Secure Socket Layer) technology. It can only be accessed by entering your Member ID and password which are personal to you.

IV – 2. Malicious uses

Nevertheless, you must protect your account password and not share it with anyone.

To do this, your password must be composed of at least 8 characters and one special character, not be composed of the name, first name or email address used for your registration. After four unsuccessful attempts, the account will be blocked.

You must also be careful and use good judgment when using any of our community spaces, including those managed by our Partners, such as social networks: no odorescola.com employee will ask you for your password.< /p>

We also recommend that you never disclose any information that could identify you or any third party. If you do so, we cannot be held liable for this. In addition, odorescola.com asks that you contact us immediately if you become aware of any unauthorized or suspicious use of your Data in connection with odorescola.com by writing to us at contact@odorescola.com

Your password as well as the connection links to the Site sent in our e-mails are information for your sole attention and are confidential.

The emails received from odorescola.com, the connection links they contain and your passwords should never be transmitted to other people to avoid any risk of identity theft.

Independently from odorescola.com, to whom you have voluntarily sent your Data and in particular your e-mail address and given the nature of the Internet network, other operators, unrelated to odorescola.com, are able to capture those- ci without your consent, in particular when browsing the Internet. Consequently, we recommend that you install anti-virus and "anti-spyware" software on your computer and update them regularly.

Indeed, although the odorescola.com infrastructures are protected from malicious software known as “malware” (viruses, trojans, worms, spyware, etc.), the security of your Terminal and your network remains your responsibility. We recommend that you have an up-to-date antivirus on your Terminal, that you do not allow anyone to access your wired or Wifi home network and that you check that your communications with the Internet are legitimate. You can also install a firewall on your computer.

IV – 3. Impersonation/ Phishing/ Phishing

Because odorescola.com does everything possible to offer you perfectly secure navigation on the Site, you will never be asked for your username and password. odorescola.com will never solicit you by e-mail to obtain Personal Data or financial information. You should only provide your account information after logging into the Site directly through your browser.

If you receive an e-mail from odorescola.com that you think is fraudulent, let us know by forwarding it to the address: contact@odorescola.com. Know that we work with the relevant authorities to apprehend and prosecute fraudsters and identity thieves.

If you suspect that your odorescola.com account has been usurped, contact our Member Relations Department as soon as possible, Monday to Friday from 9 a.m. to 5 p.m. from France, on 04 11 93 72 40

In case of fraud on your payment card, please contact your bank.

V – Security of Online Payments

The Site is subject to one of the most efficient security systems at present. odorescola.com has not only adopted the SSL (Secure Socket Layer) encryption process but also reinforced all of the scrambling and encryption processes in order to protect as effectively as possible all so-called "sensitive" Data related to means of payment.

For transaction security, odorescola.com has used Stripe (https://stripe.com/docs/security#additional-security-considerations)

When paying on the Site, your bank details are encrypted on your Terminal, then transmitted in unintelligible form to servers that are the only ones capable of decrypting them. Authorizations and data are then checked with your bank to prevent abuse and fraud.

This process is based on the HTTPS protocol (implementation of SSLv3 or TLSv1 over HTTP), one of the most robust today.

During transfers via the Internet, it is therefore impossible to read them: nothing is transmitted in the clear on the Internet or mobile telecommunications networks.

During your payment, you have the option of saving your payment card details in order to facilitate your future purchases on our Site. We collect your express consent for this purpose, in accordance with the recommendations of the CNIL in this area.

This information is thus collected, recorded and secured only by our Partners subject to the security standard known as “PCI-DSS” (Payment Card Industry Data Security Standard).

The rules for the use of bank cards impose on banks domiciled in France the obligation to cover the risk of fraudulent use of your card.

We remind you that you must notify your bank or card-issuing institution of any fraudulent transaction as soon as possible.

Express payment

Stripe has been chosen by odorescola.com from whom you make your purchase on the Site so that, if you wish, your bank card data can be stored securely and used for future payments on our Site .

Stripe the Data relating to your credit card (card number and expiry date) in order to facilitate your future payments on our Site. This Data is not intended to be used for commercial prospecting purposes. They may be communicated to us, as necessary, with regard to the purpose mentioned above.

The data transfers made necessary take place under conditions and under guarantees specific to ensuring the protection of your Personal Data.

You have the same Specific Rights as those mentioned in article III above. These Specific Rights can be exercised, by mail, with odorescola.com who will pass on your request to the banking establishments concerned, responsible for processing your Data, at the following address: odorescola.com – IBMM Université de Montpellier CC 17-03 , Place Eugène Bataillon, 34090 MONTPELLIER or by email at contact@odorescola.com

VI – Social networks

odorescola.com is present on Social Networks. In particular, we have our Internet pages Facebook, Twitter, YouTube, Instagram, etc. be it fan pages or dedicated apps. We remind you that access to these Social Networks requires your acceptance of their contractual conditions containing provisions relating to the Personal Data Regulations for the processing carried out by them, independently of our pages on the said Social Networks.

To find out more about the protection of your Personal Data when browsing these Social Networks, we invite you to consult their respective privacy policies.

VII – “Cookies” or connection witness

A "cookie" is a connection cookie which designates a text file that may be saved, subject to your choices, in a dedicated space on the hard drive of your Terminal, when consulting the Site. A cookie file allows its issuer to identify the Terminal in which it is registered, during the period of validity or registration of the cookie and must therefore be considered as Personal Data.

When consulting our Site, the information indicated in Article I-2 may be saved in cookie files installed on your Terminal, subject to the choices you have made regarding Cookies and that you can modify at any time.

VII – 1. What are Cookies used for on our Site?

Only the issuer of a Cookie is likely to read or modify the information contained therein.

Cookies that we issue on our Site

When you connect to our Site, we may, subject to your choices, install various Cookies in your Terminal allowing the browser of your Terminal to be recognized during the period of validity of the Cookie concerned. The Cookies that we issue are used for the purposes described above in Article II-4, subject to your choices, which result from the settings of your browser software used during your visit to our Site.

In accordance with article I-2 above, odorescola.com deposits one or more Cookies on our Site, which one(s) have a lifespan of thirteen (13) months.< /p>

Cookies issued on the Site by our Partners.

Due to third-party applications integrated into our Site, some Cookies may be issued by our Partners and the issuance and use of Cookies by these Partners are subject to the privacy protection policies of these Partners. We inform you of the purpose of the Cookies of which we are aware and the means at your disposal to make choices with regard to these Cookies.

We are likely to include on our Site, computer applications from Partners, which allow you to share content from our Site with other people or to make known to these other people your consultation or your opinion concerning a content of our Site. This is particularly the case of the "Share", "Like" buttons, from Social Networks such as "Facebook", "Twitter", etc.

We have no control over the process used by these Partners to collect information relating to your browsing on our Site and associated with the Personal Data they have. We invite you to consult the privacy protection policies of these Social Networks in order to learn about the purposes of use, in particular advertising, of the browsing information that they may collect through these application buttons. These protection policies must in particular allow you to exercise your choices with these Social Networks, in particular by setting up your user accounts for each of these Networks.

The full list of Cookies present on the Site is available here.

VII – 2. Your choices regarding Cookies

Several options are available to you for managing Cookies. Any configuration that you can undertake will be likely to modify your browsing on the Internet and your conditions of access to certain services requiring the use of Cookies.

You can choose at any time to express and modify your wishes in terms of Cookies, by the means described below.

VII – 2.1 The choices offered to you by odorescola.com

In accordance with the Personal Data Regulations, odorescola.com obtains your consent, in particular via a cookie banner, before allowing the registration of Cookies on your Terminal.

The aforementioned cookie banner provides in particular the possibility for you to configure the various Cookies, such as Advertising Cookies, Audience-related Cookies, Services Personalization Cookies and Social Network Cookies.

You can modify your choices at any time and, if necessary, deactivate these Cookies (with the exception of the navigation Cookies essential to the use of our Site).

We will then store a Cookie in your Terminal whose sole purpose is to deactivate the deposit of these Cookies on your Terminal. This Cookie will be valid for thirteen (13) months.

Attention, the taking into account of your wish relies on a Cookie. If you delete all the Cookies stored in your Terminal (via your browser), we – or our Partners – will no longer know that you have chosen this option.

VII – 2.2 The choices offered to you by your browser software

You can configure your browser software for each Terminal so that Cookies are saved in your Terminal or, on the contrary, that they are rejected, either systematically or according to their issuer. You can also configure your browser software for each Terminal so that the acceptance or refusal of Cookies is offered to you from time to time, before a Cookie is likely to be saved in your Terminal. For more information, see "How do you exercise your choices, depending on which browser you use?" below.

(a) Cookies Agreement

The registration of a Cookie in a Terminal is essentially subject to the will of the user of the Terminal, which the latter can express and modify at any time and free of charge through the choices offered to him by his software. navigation of said Terminal.

If you have accepted in your browser software of each Terminal the registration of Cookies on each Terminal, the Cookies integrated in the pages and contents that you have consulted may be stored temporarily – without being able to exceed thirteen (13) months – in a dedicated area of your Terminal. They will be readable there only by their sender.

(b) Opting out of Cookies

If you refuse the registration of Cookies in each Terminal, or if you delete those which are registered there, you will no longer be able to benefit from a certain number of functionalities which are nevertheless necessary to navigate in certain areas of our Site. This would be the case if you tried to access our content or Services that require you to identify yourself. This would also be the case when we – and/or our Partners – could not recognize, for technical compatibility purposes, the type of browser used by your Terminal, its language and display settings or the country from which your Terminal seems connected to the internet.

Where applicable, we decline all responsibility for the consequences related to the degraded functioning of our Services resulting from the impossibility for us to record or consult the Cookies necessary for their functioning and that you would have refused or deleted.</ p>

(c) How to exercise your choices, depending on the browser you use?

For the management of Cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, which will allow you to know how to modify your wishes in terms of Cookies.

• For Internet Explorer™: http://windows.microsoft .com/fr-FR/windows-vista/Block-or-allow-cookies ,
• For Safari™: http://docs. info.apple.com/article.html?path=Safari/3.0/en/9277.html,
• For Chrome™: http:// support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647,
• For Firefox™: http://support.mozilla.org /en/kb/Activating%20and%20d%C3%A9sactivating%20the%20cookies
• For Opera™: http://help.opera.com/Windows /10.20/fr/cookies.html , etc.