REasy PRIVACY POLICY

REasy ("REasy", "our", "we" and "our") and our partners respect your privacy. We ask you to kindly read this privacy policy carefully to understand how your personal data is collected, processed, and stored when you use the REasy website, accessible via the URL www.reasy.fr. The term "personal data" refers to any information relating to an identified or identifiable natural person, directly or indirectly, from a single piece of data or by combining a set of data. All personal data collected on this website is processed under the responsibility of the company REasy, SAS with a share capital of €1000, registered with the Nanterre Trade and Companies Register under number 978522738, and having its registered office at 6 Rue des Bateliers, bureau 3, 92110 Clichy, France, in compliance with Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms, in its current version, as well as Regulation (EU) 2016/679 of April 27, 2016 relating to the protection of individuals with regard to the processing of personal data and on the free movement of such data. For the purposes of the applicable personal data regulations, REasy is therefore the data controller.
‍
This privacy policy describes:
1. How REasy uses your personal data
2. How REasy shares your personal data
3. How REasy protects your personal data
4. Where REasy hosts and transfers your personal data
5. How you can exercise your rights regarding your personal data
6. Updates to the privacy policy
7. How to contact us
‍
I. How REasy uses your personal data REasy may use your personal data for the following purposes: (1) Carrying out actions necessary for contract management, invoicing, and customer relationship management (2) Publishing and managing your reviews and/or comments left on the website (3) Sending you our newsletter, if you are subscribed (4) Responding to your contact request made through our website (5) Establishing a loyalty program (6) Offering you advertisements and tailored content (7) Creating a file of users, prospects, and customers (8) Compiling commercial and attendance statistics (9) Managing any outstanding payments and disputes (10) Complying with our legal obligations The processing of your personal data is carried out in a pre-contractual contact approach, and this processing is based on your consent to be contacted in order to discuss our offers and obtain a quote. You can withdraw this consent at any time and request that we delete your information and stop contacting you. When you voluntarily provide us with personal data, the collection of your personal data is based on the following legitimate interest: better responding to your information requests. However, the processing of your personal data to send you our newsletter is based solely on your consent to receive our newsletter, which you can withdraw at any time. If you do not consent to receiving the newsletter, please note that this will not prevent you from creating your customer account and placing orders on our website.
‍
II. How REasy shares your personal data Within REasy, and with regard to each processing purpose, the personal data concerning you is collected, processed, and stored by authorized REasy personnel, only within the scope of their respective competencies, including the customer service department, the marketing department, and the IT department. We do not share personal data with other companies, organizations, and individuals, unless one of the following circumstances applies: (1) Sharing with prior consent: after obtaining your consent, REasy will share the information you have authorized with the third parties or specific categories of third parties indicated when you gave your consent. (2) Sharing with our service providers: REasy may also disclose your information to companies that provide services for us or on our behalf. These service providers include companies that provide IT services such as our hosting provider or email delivery provider, delivery services for our products, or marketing activities on our behalf. These service providers may use your information only for the purpose of providing services on behalf of REasy. (3) In compliance with legal obligations, sharing in accordance with laws and regulations: REasy may share your information as required by laws and regulations, to resolve legal disputes, or as required by judicial or administrative authorities under the law. REasy will ensure the legality of any sharing of personal data through data processing agreements with the companies with which your personal data is shared, requiring them to comply with this privacy policy and to take appropriate security and confidentiality measures when processing personal data.
‍
III. How REasy protects your personal data REasy attaches great importance to the security of your personal data and has adopted common industry practices to protect your personal data and prevent unauthorized access, disclosure, use, modification, damage, or loss of this information. We have also taken necessary precautions, through our hosting provider, to ensure the security and confidentiality of data, including preventing them from being distorted, damaged, or communicated to unauthorized persons. REasy also adopts the following organizational measures: (1) We adopt reasonable and feasible measures to ensure that the personal data collected is minimal and relevant to what is necessary, given the purposes for which they are processed. (2) We retain your personal data for the duration that is strictly necessary in light of the processing purpose unless the retention of your data is required or permitted by law. For example, we retain data related to the execution of your orders for the duration required by law for accounting record-keeping, namely up to a maximum of 10 years from the relevant financial year. (3) We deploy access control mechanisms to ensure that only authorized personnel can access your personal data. In case of personal data breach, REasy will comply with the legal and regulatory requirements applicable to the notification of personal data breaches to the competent supervisory authorities and/or the data subjects.
‍
IV. Where REasy hosts and transfers your personal data Your personal data will be hosted within the hosting infrastructure of our hosting provider, AWS, located in France. Some third parties to whom we communicate your personal data are located in third countries outside the European Union, including Africa, Asia. When products available for sale on the website are delivered by resources located in third countries outside the European Union, we will transfer your personal data to these countries. It may also happen that service providers access your data on our behalf to provide us with a specific service and are located in third countries outside the European Union. When such transfers occur, we ensure that these transfers of personal data are framed in accordance with applicable regulations to ensure an adequate level of data protection, either by a decision of adequacy of the European Commission or through legal instruments such as data transfer agreements incorporating the European Commission's Standard Contractual Clauses. For any request regarding the recipients and transfers of data that we make outside the European Union, please contact us at the addresses indicated in the "How to contact us" section below.
V. How you can manage your rights regarding your personal data You have the right to access, rectify, erase, restrict, object to the processing of your personal data, as well as the right to define directives regarding the fate of your data after your death and the right to data portability. The CNIL defines personal data as "any information relating to an identified or identifiable natural person. But because they concern people, they must retain control over them." You also have a right of recourse to the French National Commission on Informatics and Liberty (CNIL) and to a competent supervisory authority in any other Member State according to your habitual residence, place of work, or the place where the breach of your rights occurred if you believe that the processing of your data does not comply with the applicable texts. This recourse may be exercised without prejudice to any other recourse before an administrative or judicial authority, which is also a right you have. You can contact us at any time at the addresses indicated in the "How to contact us" section below to exercise your rights regarding personal data in accordance with the applicable regulations. You must indicate which right you intend to exercise as well as all the necessary details for us to respond to your request. These rights are exercised in accordance with the applicable regulations. - The right of access means that you can ask us at any time to inform you whether we are processing personal data concerning you and, if so, to indicate which personal data is concerned and the characteristics of the processing or processes carried out. - The right to rectification means that you can ask us to rectify your personal data when it is inaccurate. You can also request that your personal data, if incomplete, be completed to the extent that it is relevant to the processing purpose in question. - The right to erasure means that you can request the erasure of your personal data especially when:
(i) their retention is no longer necessary for the purposes for which they were collected;
(ii) Your personal data is processed on the basis of your consent, you wish to withdraw this consent, and there is no other legal basis justifying the processing;
(iii) You have objected to the processing of your personal data and consequently wish for them to be erased;
(iv) Your personal data has been unlawfully processed;
(v) Your personal data must be erased to comply with a legal obligation provided for either by EU law or French law. - The right to restriction means that you can ask us to restrict the processing of your personal data:
(i) When you dispute the accuracy of your personal data for a period allowing us to verify the accuracy thereof;
(ii) When, following processing deemed non-compliant, you prefer the restriction of processing to the complete erasure of your personal data;
(iii) When we no longer need your personal data for the processing purposes but you still need them for the establishment, exercise or defense of legal claims;
(iv) When you have objected to the processing of your personal data and you wish for the processing to be restricted for a period allowing us to verify whether the legitimate grounds you invoke justify it. Restriction of processing means that the processing of your personal data will then only consist of storing the corresponding personal data. We will then no longer carry out any other operation on the personal data concerned. - The right to object means that you can object to the processing of your personal data, when this processing is based on the pursuit of REasy's legitimate interest. The right to object is subject to you demonstrating a legitimate reason related to your particular situation. We will then cease the processing in question unless there are compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. - The right to define directives regarding the fate of your data after your death allows you to specify your instructions concerning the conservation, erasure, and communication of your personal data after your death. - The right to data portability means that you can ask us, under the conditions laid down by applicable regulations, to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to you, or to ask us to transmit it directly to a third party of your choice when this is legally and technically possible. When we process your personal data based on your consent, you also have the right to withdraw your consent at any time by contacting us at the addresses indicated in the "How to contact us" section or by clicking on the unsubscribe link present in each of our communications. However, the withdrawal of your consent does not affect the validity of the processing carried out before such withdrawal.

VI. Updates to this privacy policy REasy reserves the right to modify or update, in whole or in part, this privacy policy at any time, due to changes in the applicable regulations regarding the protection of personal data or the processing of data. Any substantial modification of the privacy policy will be notified to you by email when you have provided us with a valid email address and will be published on the website. We recommend that you regularly review this privacy policy to have a perfect understanding of our commitments regarding the security and protection of your personal data.
‍
VII. How to contact us If you have any questions, comments, or suggestions, please contact us by visiting the contact us page or by submitting them to contact@reasy.fr. Or by postal mail at 6 Rue des Bateliers, bureau 3, 92110 Clichy, France. If you are not satisfied with the response provided by REasy to a request to exercise rights in accordance with Article V above, or if you wish to report a breach of applicable data protection regulations, you have the right to lodge a complaint with the CNIL by mail (CNIL - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07) or on its website (www.cnil.fr), or with the data protection authority of the country in which you habitually reside or work.