Personal Data Protection Charter

In accordance with European Regulation 2016/679 of April 27, 2016
(called "General Data Protection Regulation" or GDPR)

This personal data protection charter (hereinafter: the "Charter") describes the commitment of the SNA Site - RCS Vannes No. 750 197 956 - 18 rue de Govéan - ZA Kerollaire Nord - 56370 Sarzeau - SIRET 75019795600014 - VAT No.: FR 74 750 197 956, as the data controller with regard to respecting privacy and protecting the personal data of its users. This Charter has been drafted to enable you to understand the practices and conditions under which SNA collects, uses, and stores your personal data (hereinafter: the "Data").

Here you will find the description of the different Data that we may collect and process or that you may provide to us when you access and/or use the site. https://www.sellerie-nautique.com (the "Site") on which our products are sold. The term "Site" refers only to the site https://www.sellerie-nautique.com.

Given the constant evolution of laws and regulations regarding technology and the protection of personal data, it is likely that this Charter will be updated. If you are a user of the Site, you will be informed of any changes by email.

If any of the clauses of this Charter were to be declared null or contrary to regulations, it shall be deemed unwritten but shall not result in the nullity of the other clauses of this Charter.

This Charter applies to the Data collected:

• By simply browsing the Site

• Through the emails exchanged between SNA and you or any other electronic messaging tool

• When you create a user account on the Site

• When you place an order on the Site

• When you sign up for the Website Newsletter (the "Newsletter")

It does not apply to information collected by any third parties or through sites managed by them, including via applications or content (including advertisements) redirecting the user to the Site. We thank you for carefully reading the Charter concerning the processing of your Data and inform you that browsing our Site necessarily implies acceptance of this Charter. If you do not agree with it, we invite you to leave our Site. It is your responsibility to ensure that the Data communicated to SNA is accurate. If necessary, you have the option to correct and update it from your "My Account" area.

Depending on the nature and purpose of your interaction with SNA (creating a user account, subscribing to the Newsletter, filling out contact forms, as well as during any possible telephone exchanges), we may collect the following Data:

• Your email address will necessarily be requested if you wish to create a user account, communicate with us via the contact forms, and/or receive our Newsletter.

• Data related to your identity such as your name, first names, email address, postal addresses, and phone numbers may be requested from you.

• The data related to your boat: manufacturer, model, name of the boat

• Navigation Data: this refers to Data related to how you use the Site, including: IP address, browser used, browsing duration, search history, operating system used, language, and pages viewed.

• Data concerning your visits to the Site, including traffic data, log files, and other data or communication resources that you use when accessing the Site.

• Order Data: your postal address is required for the issuance of invoices. Likewise, your bank details, or those of another financial partner, must be provided to process the payment of your order.

• Data related to the use of social networks when you use their features.

Data can be collected in different ways on the Site. Data may be collected directly when you provide it to us through contact forms, user account creation forms, newsletter subscription forms available on the Site, and/or when you contact us by phone. When you contact us through these various means, a copy of your exchanges with SNA, including email addresses, may be made and archived. SNA also collects certain Data indirectly through cookies/trackers. We invite you to review our Cookie Policy, designed to help you better understand these technologies and how we use them on the Site and within the scope of our services, applications, and tools.

If you are a regular user, we collect your Data for:

- To send you our Newsletter and/or personalized commercial offers if you have consented to it

- Manage orders and execute the contract

- Ensure the security and traceability of site purchases

- To provide you with information regarding your account (including purchase invoices, order history)

- Manage your requests submitted through the contact page

- Allow you to leave a review on the products and/or the Site

- To inform you about changes concerning the Site or our offer of products and services

- To respect our rights and obligations stipulated in the contracts concluded with users as well as for any other legal purpose.

We can also use cookies or trackers:

- To secure your browsing and enhance your user experience, particularly by recognizing the username and password you have already provided so that you do not have to enter them on each page of the Site where they are required. Refusal to do so will prevent any orders on the Site (Identification impossible).

- analyze traffic and data on the Site in order to measure the number of users of the Site, make it easier to use, and ensure its ability to respond quickly to your requests.

Failure to properly complete the form(s) on the Site may block access to certain pages, particularly those related to ordering products or services.

Your data is processed by the staff and collaborators of SNA responsible for:

- Site Management (Orders and Shipping)

- Support management, to answer all your questions

- Billing management.

Furthermore, as part of our activity, and for processing purposes, your Data may be shared with subcontractors, service providers, or other third parties, in particular:

- Bank: Banque Populaire Atlantique, Crédit Agricole

- The carriers (La Poste, Colissimo, GLS)

- Accounting services

- Tax services

- Google Analytics (Statistics)

Each of these actors respects a confidentiality agreement regarding the use and processing of personal data.

For payment management and to facilitate the experience of its users, SNA offers the following payment methods to make purchases on the Site:

- Online payment by Bank Card (Carte Bleue, Visa Card, Eurocard / Mastercard) managed by Banque Populaire Atlantique

- Payment by bank transfer

SNA has no access to your login details or bank card numbers. All transactions are secured using TLS encryption, guaranteeing both the identity of the payment organization and the confidentiality of the data.

All subcontractors, service providers, partners, or other aforementioned third parties are bound by contractual obligations to maintain the confidentiality and protection of the Data and to process it only for the purposes for which we provide it to them.

Your Data may be transferred to any buyer or other successor in the event of a merger, sale, restructuring, reorganization, dissolution, or other sale or transfer of part or all of SNA's assets due to insolvency, bankruptcy, liquidation, or other proceedings in which SNA user Data is included among the transferred assets.

Finally, we may also disclose your Data:

- to comply with any mandate required by applicable laws, including government and regulatory requests

- if we believe that disclosure is necessary or required to protect the rights, property, or safety of SNA, its clients, or other stakeholders.

This possible disclosure includes the exchange of information with other companies and organizations for the purposes of protection against fraud and counterfeiting.

The Site may contain links to various websites and social media platforms managed on third-party servers, by individuals or organizations over which SNA has no control. Therefore, we cannot be held responsible in any way for how your Data will be stored or used on the servers of these third parties. We advise you to review the applicable privacy policy regarding the protection of personal data for each third-party website you access via the Site in order to understand how your Data will be used.

SNA only retains your Data for the duration necessary for the purposes set out in Article 3. This retention period varies depending on the Data concerned, as the nature and purpose of the collection may affect this duration. Similarly, certain legal obligations require a specific retention period.

When you subscribe to the Newsletter, we keep your email address until you unsubscribe.

When you contact SNA using the contact form or communicate with us by phone, your data may be retained:

- up to three (3) years from the last contact if you do not have a customer account or have not placed an order on the Site.

- up to ten (10) years (Legal duration) from the date of the last order placed on the Site, if this information concerns that order.

- In all other cases, the retention period for this exchanged Data shall not exceed three (3) years.

Regarding your user account, all your billing data is retained for ten (10) years from the date of purchase, even if you have requested the deactivation of your user account.

If you make a request to delete Personal Data, your user account on the Site will be deactivated and anonymized, then completely deleted after the aforementioned periods starting from the day you made the request. Finally, regarding Data collected through cookies or trackers, they will be retained for up to six (6) months for cookies or trackers measuring audience and up to thirteen (13) months for others. Beyond the aforementioned retention periods, your Data will be anonymized to be kept for exclusively statistical purposes.

Your Data is stored on a secure server protected by a firewall and antivirus software. We have implemented technical and organizational measures designed to ensure the security and confidentiality of your Data against accidental loss and against any unauthorized access, use, modification, or disclosure. Given the inherent characteristics of the Internet, however, it is impossible for us to guarantee the optimal security of information exchanges over this network. We strive to protect your Data, but we cannot guarantee the absolute security of the information transmitted to the Site. You agree that you transmit your Data at your own risk. We cannot be held responsible for any failure to comply with the privacy settings or security measures in place on the Site. Accordingly, you agree that the security of your information is also your responsibility. For example, it is your responsibility to keep the password that allows you to access your user account confidential. Under no circumstances should you disclose it to third parties. Similarly, be cautious when sharing information in the public sections of the Site, as these can be viewed by any user of the Site.

You can choose how the Data you provide to us is used:

- You can browse the Site without providing Data. In such cases, you will not be able to use certain features of the Site, including making purchases (if you are a regular user) and/or downloading content from the Site.

- You may refuse to provide your bank or PayPal details and/or your postal addresses. In this case, you will not be able to make a purchase on the Site.

- You can choose to no longer receive the Newsletter as well as our personalized offers: simply log in to your user account on the Site or click on the link provided in the email sent to you.

In any case, you have the ability to access your user account at any time to view or update your Data and to unsubscribe from our Newsletter if you were subscribed. In accordance with the provisions of the applicable regulations on the protection of personal data, in particular the European Regulation 2016/679 on Data Protection (the "GDPR") as well as the law of January 6, 1978, No. 78-17 known as "Informatique et Libertés" and its amendments, you have the right to access and the right to rectify your Data.

Furthermore, subject to the conditions set forth by the aforementioned regulations for the exercise of these rights, you are entitled to:

- A right to the deletion of your Data (except for accounting data, which must be retained for 10 years as required by French law - Article L123-22 of the Commercial Code)

- A right to restriction of the processing of your Data

- A right to object to the processing of your Data on legitimate grounds, in accordance with Article 21 of the GDPR

- A right to data portability for the Data you have provided (for automated processing based on consent or the performance of a contract)

- The right to withdraw consent, when it has been requested from you. When the processing of your Data is based on your consent, you may withdraw it at any time.

You do, however, acknowledge that the processing carried out before the revocation of your consent remains fully valid. You also have the right to object without reason to SNA processing your Data for sharing them for marketing purposes.

However, in accordance with Article 12.6 of the GDPR, for the exercise of these rights, SNA, as the controller of this processing, reserves the right to ask you to prove your identity. We inform you that the data used to verify your identity will be deleted once we have responded to your request. You can exercise these rights by sending an email in French to contact@sellerie-nautique.com or at the following address:

SNA, 18 Govéan Street, Kerollaire Nord Industrial Zone, 56370 Sarzeau, France

We have a period of one month to respond to any request regarding the exercise of your rights. This period can be extended by two months due to the complexity or the large number of requests.

The data collected in connection with the use of the Site is stored exclusively on a server located in Europe (France), hosted by the company OVH - 2 rue Kellermann - 59100 Roubaix - France.