PRIVACY POLICY WWW.RYSES.COM

The trust you place in us is our priority. To continually improve your Ryses experience, we collect data about your browsing and use of the website Ryses.com. We guarantee the complete protection of this personal data and commit to complying with the applicable laws on privacy and personal data protection, particularly the European General Data Protection Regulation (GDPR) of April 27, 2016. Your shopping experience is and will remain completely safe. In accordance with applicable law, we would like to detail the collection and use of your data.

The purpose of this privacy policy (hereinafter "Privacy Policy") is therefore to:

• Allow you to communicate your personal information with full trust and confidentiality when you interact with Ryses/LaBoutiqueOfficielle, by any means, and notably when you use the website ryses.com (hereinafter "Website")
• Inform you of the purposes for which the data collected by Ryses/LaBoutiqueOfficielle is processed,
• Inform you of the measures taken to ensure the confidentiality and security of personal data
• In general, provide you with information about your rights regarding personal data.

1- Identity of the data controller

Ryses.com, SASU (Société par actions simplifiées à associé unique) with a capital of 62500 €, registered with the RCS of LYON under the number 451 876 783 (hereinafter "Ryses/LaBoutiqueOfficielle"), whose registered office is located at 84, route de la gare, Chaponost, 69630 (France).

2- Definition of personal data

Personal data refers to concrete or personal information related to a specific or identifiable individual (for example, your name, phone number, address, as well as all the basic data entered when creating your customer account).

Non-private data ("pseudonyms") refers to information about a person or a specific account that is not sufficient to identify that person.

3- Data collection

When you interact with Ryses/LaBoutiqueOfficielle, by any means, including when you visit the Website and use it, you may be required to provide a certain amount of personal data about yourself, meaning information that directly or indirectly allows for your identification.

We collect and record this data when you:

• Browse the Website
• Fill your shopping cart
• Create a customer account
• Place or return an order
• Subscribe to an alert or newsletter
• Write a product review
• Fill out a form
• Contact customer service
• Log out

The information required when opening a customer account is, unless otherwise stated, mandatory for processing an order.

4- Categories of collected data

Ryses/LaBoutiqueOfficielle may collect the following personal data from you:

For any other data collected elsewhere, the data collection form will describe the rules applicable to the data thus collected if they differ from the rules outlined in this policy.

5- Purpose of data collection

Throughout the relationship you have with Ryses/LaBoutiqueOfficielle, regardless of the nature of this relationship, Ryses/LaBoutiqueOfficielle may collect personal data from you for several reasons:

• Creation of your personal account and access to it
• Order and customer file management
• Payment of your orders: when you pay on the Website, your payments are secured. Ryses/LaBoutiqueOfficielle does not collect your payment data, but only a payment identifier and the last four digits of your card to help you recognize the card used for payment. Your full banking details are collected only by our certified and secure payment service providers Hipay and Paypal, which ensure the security of payments
• Management of customer refunds
• Management of customer returns
• Responding to your inquiries or requests for information regarding the products sold or your complaints
• Management of user reviews and comments on products
• Publishing personalized advertising content and product recommendations
• Sending marketing newsletters, solicitations, and promotional messages, with your consent, to keep you informed of new arrivals
• Conducting satisfaction and opinion surveys
• Complying with our legal and regulatory obligations
• Managing your requests related to your rights as described in Article 10

In general, the personal information you consent to provide allows you to place an order on Ryses.com and helps us deliver our online sales service, manage our platform, and improve our marketing policy.

The legal bases we rely on to process personal data include processing that:

• are necessary for the execution of the sales contract concluded between you and Ryses/LaBoutiqueOfficielle, such as: ensuring the monitoring, execution, and management of the contract (creating your personal account, payment, invoicing, managing overdue payments and any disputes, handling returns, responding to your complaints) in compliance with the applicable legal and regulatory conditions; delivering the products you ordered and responding to your requests;
• are necessary to comply with the legal and regulatory obligations that apply to Ryses/LaBoutiqueOfficielle, such as social and tax declarations and accounting obligations;
• are necessary to respect our legitimate interests, such as the development of Ryses/LaBoutiqueOfficielle’s activities, improving customer service, managing, maintaining, and enhancing the Website, combating fraud, managing your customer account;
• are based on the consent of our customers, which can be withdrawn at any time under the conditions set forth in Article 10 of this privacy policy, particularly to communicate with you about our services and provide you with information about our services.

6- Data retention period

Throughout the relationship you have with Ryses/LaBoutiqueOfficielle, regardless of the nature of this relationship, Ryses/LaBoutiqueOfficielle may collect personal data from you as follows:

7- Fighting fraud

Ryses/LaBoutiqueOfficielle reserves the right to verify the personal data provided during the order process and to take all necessary measures to ensure that the account charged is indeed that of the person placing the order. To prevent fraudulent payments, proof of identity and/or address may be requested. Ryses/LaBoutiqueOfficielle reserves the right to cancel any order that does not satisfactorily meet this verification.

8- Data transmission to third-party organizations

We are the sole owners of the information collected on Ryses.com: your personal data will not be sold, exchanged, or transferred to another company without reason or your consent, outside of the usage framework defined below.

Your personal data will be shared with third parties only if you have consented beforehand or if the law allows it, and in the context of the execution of your order, its billing, or for marketing purposes specific to Ryses. In this regard, we may share your personal data with the following entities:

• authorized members of Ryses' staff in connection with the tasks resulting from the identified purposes above,
• service providers, particularly those performing certain functions on our behalf, namely:
• our hosting provider: Magic retail SARL

- our payment service providers: Hipay (www.hipay.com) and Paypal (www.paypal.com)
- our call center and customer relations provider: Satel (www.satel.fr)
- our transport providers: La Poste (www.laposte.fr) and Chronopost (www.chronopost.fr)
- our CRM and marketing providers: Salesforce (http://www.salesforce.com/)
- our e-commerce personalization providers: Nosto (www.nosto.com) and fitanalytics (www.fitanalytics.com)

The service providers we work with only receive the data necessary for the execution of your order or our contract. In this context, they may use this data solely to carry out their task. We only share your personal data with trusted partners who help us provide our services, as long as they agree to keep this information confidential.

• commercial partners: subject to your express prior consent, we may share your personal data with selected commercial partners so they can provide you with special offers and advertisements;
• legal auxiliaries and court officers in the context of their duties managing disputes and debt collection: in case of a dispute, we may share your personal data to defend our rights;
• administrations for social and tax declarations;
• third parties when you have given your consent for such sharing.

We also reserve the right to disclose your personal data to other parties in cases where the law, an applicable regulation, a court order, or a regulation requires or allows it, or if such disclosure is necessary in the context of an investigation or procedure, whether national or international.

Non-personal information, such as aggregated statistical data, may be shared with third parties for marketing, advertising, or other purposes.

9 - Measures for the Security of Personal Data

• We implement a variety of security measures to preserve the safety of your personal data. To prevent unauthorized access, use, modification, destruction, loss, damage, or disclosure, technical and organizational measures have been taken to protect the collected data. In particular, the security of your data is ensured: by using TLS (Transport Layer Security) and SSL (Secure Socket Layer) protocols to secure your data,
• through protection by username and password,
• through traceability measures, by keeping the computers and servers used to store identifiable personal data in a secure environment,
• by limiting access to your data to authorized employees who need it to perform specific tasks (e.g., billing or customer service).

To assist in protecting your data, it is recommended to avoid using obvious usernames or passwords, regularly change your password, and ensure you do not share your password with anyone.

Unfortunately, the transmission of information, particularly via the internet, is not completely secure. While Ryses/LaBoutiqueOfficielle is committed to doing everything possible to protect your personal data, it cannot fully guarantee the security of the data you transmit.

In the event of a personal data breach that poses a risk to the rights and freedoms of individuals, Ryses/LaBoutiqueOfficielle is obligated to notify the competent supervisory authority and inform you, as soon as possible, of any personal data breach that may result in a high risk to your rights and freedoms, allowing you to take the necessary measures.

10- Users' Rights

You have the right to access your personal data, modify it, delete it, be forgotten by Ryses/LaBoutiqueOfficielle, limit the processing of your data, receive the personal data concerning you, and request its portability.

This right may be exercised at any time:

• By email at the following address: contact@ryses.com
• By mail to Ryses/LaBoutiqueOfficielle, 84, route de la gare in Chaponost, 69630 (France).

To allow Ryses/LaBoutiqueOfficielle to respond quickly, we kindly ask that you provide your full name, email, address, and, if possible, your customer reference. Some requests to exercise your rights (right of access) will need to be accompanied by a photocopy of an ID bearing your signature to verify your identity and specify the address to which the response should be sent. You will then receive a response, unless there are exceptional circumstances, within one (1) month of receiving the request.

11- Data Transfers Outside the European Union

As a general rule, the personal data collected is not intended to be transferred outside the European Union. This personal data is hosted on a server located within the European Union.

If, however, your data is transferred for the purposes mentioned earlier to companies located outside the European Union, Ryses/LaBoutiqueOfficielle will take all necessary measures and safeguards before such a transfer to ensure its security and will ensure that the transfer is covered by one of the following:

- A decision of adequacy by the European Commission under Article 45 of the European Data Protection Regulation,

- The standard contractual clauses issued by the European Commission or a supervisory authority under Article 46 of the European Data Protection Regulation,

- Binding corporate rules approved by a competent supervisory authority under Article 47 of the European Data Protection Regulation.

If a transfer of data to countries not recognized by the European Commission as having an adequate level of protection needs to be considered, Ryses/LaBoutiqueOfficielle will inform you.

12- Newsletter and Alerts

After creating your account and provided you have consented, you may receive newsletters and personalized alerts via email, push notifications, or SMS. These emails keep you informed about Ryses/LaBoutiqueOfficielle ' news and any benefits you may be eligible for. We track the open rates of our email campaigns to better tailor them to your needs. If you no longer wish to receive promotional messages, you can unsubscribe at any time in the "My Subscriptions" section of your Account or by clicking the unsubscribe link at the bottom of each promotional email or SMS. Unsubscribing from promotional messages will not stop service communications (order status, etc.).

13- Advertisements

To keep you updated on new products and offers that might interest you, we use the data collected during your visit to display ads on other websites you visit. This data processing typically occurs via cookies, pixels, or web beacons. The goal is to make our advertising more personalized and relevant based on products you have shown interest in previously. In this context, we only use pseudonymous data: no personal data is stored in the cookies (see article 15).

14- Market Research, Satisfaction Surveys, and Opinion Polls

The data used in studies and surveys, collected on the site or sent through a form, is not used for advertising purposes. It is not shared with third parties or published. If you participate in a survey, you will be informed about the processing and use of your information. You can at any time object, in whole or in part, to the processing of this information by contacting Ryses/LaBoutiqueOfficielle using the contact details provided at the beginning of this page.

15- Cookies

Cookies are small files saved on your device (computer, tablet, phone) that collect various data to facilitate interactions with our system through your web browser.

Cookies make it easier to navigate (for example, by pre-filling your login information or saving your cart from page to page), improve data processing security, and offer a better, more personalized shopping experience (recommendations based on your history, etc.).

When you visit the Website, a banner informs you about the presence of cookies and their purposes, and invites you to choose your preferences. If you oppose the use of these cookies and other tracking technologies, you can disable them by following the instructions provided in the "Customize" link in the banner.

Additionally, you can at any time obtain clear and explicit information about the purposes for which cookies are used, details on how to oppose the use of cookies, and manage the use of each cookie, by clicking the link in the aforementioned banner.

We draw your attention to the fact that refusing cookies may prevent you from accessing certain features of the Website. You can set your browser to request permission before accepting cookies (refer to your browser's help guide for instructions). If you only wish to reject cookies from our service providers and partners, you can select "block third-party cookies" in your browser settings. If the systematic deactivation of cookies in your browser prevents you from using certain services or features provided by Ryses/LaBoutiqueOfficielle, such dysfunction shall not constitute a damage that entitles you to compensation.

Cookies allow our system to recognize regular visitors when they access the site, but no personal information is stored in these files. They only record pseudonymous data and communicate securely with the Website.

Like most websites, the Website uses cookies which can be classified into three categories:

Type of Cookie	Purpose	Retention Period
Strictly Necessary	These cookies are essential for you to navigate our Website and use its features. The information collected by these cookies is related to the operation of our Website, such as the site's scripting language and security tokens that ensure the security of specific areas on our Website.	8 hours
Statistics	These cookies collect anonymous information about your use of our Website, such as which pages you visit most often, whether you encounter error messages, and how you arrived at our Website. The information collected by these cookies is used solely to improve your experience on our Website and is never used to identify you. Sometimes, these cookies are placed by third-party web traffic analytics providers, such as Google Analytics.	13 months
Personalization Cookie	These cookies are used to track visitors across websites. The aim is to display advertisements that are relevant and interesting to the individual user, thus more valuable for publishers and third-party advertisers.	13 months