LA BOUCHE ROUGE , simplified joint stock company, registered in the Paris Trade and Companies Register under number 825 073 091, whose head office is located at 10, rue de la Paix, 75002 Paris (“ La Bouche Rouge ” or “ we ), offers cosmetic and makeup products for sale (the “ Services ”). La Bouche Rouge sells its products on its online store accessible at this URL address: https://www.laboucherougeparis.com/fr/ and in various points of sale.

1. Why a data protection policy?

2. Who is responsible for processing your data?

3. Who has access to your data?

4. You are a user of the website

5. You are an online customer

6. You are a customer of the points of sale

7. You are a candidate for employment with us

8. You are a co-contractor

9. What is our cookies policy?

10. What are your rights?

11. Do we transfer your data outside the European Economic Area?

12. How do we protect your data?

13. Who should you contact regarding the processing of your data or the exercise of your rights?

14. Privacy Policy Update

It is essential for us that personal data is protected. This policy sets out the way in which we process your data as well as the rights you have with regard to this data in application of the legislation relating to data protection and in particular, the provisions provided for by law no. 78-17 known as the “ Data Protection Act ” and the General Data Protection Regulation No. 2016/679, known as “ GDPR ”.

La Bouche Rouge is the data controller for all processing described in this personal data protection policy. This personal data protection policy only applies to the processing for which we are responsible.

For the purposes of processing your data as described in this policy, we may share it with the following categories of recipients, only if they need access to it:

. Employees of Bouche Rouge

. Host ;

. IT suppliers;

. Providers of IT solutions for data processing;

. External consultants;

. Recruitment firms;

. Accounting firms;

. Partners.

In accordance with article 28 of the GDPR, relations between La Bouche Rouge and its subcontractor are governed by contracts, which bind the subcontractor to the data controller, define the purpose and duration of the processing, the nature and the purpose of the processing, the type of personal data and the categories of data subjects, as well as the obligations and rights of the controller and the processor.

We process your personal data when:

. You are browsing the La Bouche Rouge website; in which case our cookie policy will apply to you (see section “ 8. What is our cookie policy? ”);

. You subscribe to the La Bouche Rouge newsletter on its website.

We process the following categories of data:

. Email address ;

. Browsing data (see section “ 8. What is our cookie policy? ”).

We process your personal data from your subscription to the newsletter in order to send you information on La Bouche Rouge products and/or services. This processing is established on the legal basis of your consent.

La Bouche Rouge does not communicate your email address to third parties.

We will retain your data until you withdraw your consent or the processing changes significantly and we are required by applicable law to collect your consent again.

You can use our Services either by registering as a guest or by creating a personal account.

a) You order as a guest on the site

We process your personal data when you choose to order from the La Bouche Rouge online store, as a guest.

We process the following categories of data:

. Email address ;

. Identification data (first and last name);

. Physical address for delivery;

. Billing address ;

. Telephone number;

. Payment data.

We process your personal data to provide you with our Services, in accordance with La Bouche Rouge's general conditions of sale. The execution of the contract constitutes the legal basis for this processing.

We also process your email address to send you targeted communications relating to our products. This processing is justified by the legitimate interest of La Bouche Rouge to keep you informed of our products and services.

We will retain your personal data for a period of five years from the end of the contractual relationship between you and La Bouche Rouge, unless we are subject to a legal obligation to retain it for a longer period.

La Bouche Rouge may transfer your personal data to its partners only after obtaining your express consent for such transfers.

b) You create a personal account

We process your personal data when you choose to create a personal account on the La Bouche Rouge online store.

We process the following categories of data:

. Email address ;

. Identification data (first and last name);

. Physical address for delivery;

. Billing address ;

. Telephone number;

. Payment data;

. Date of birth.

We process your personal data to provide you with a personalized account, which allows you to facilitate the ordering process and access your order history. This processing is established on the legal basis of your consent.

We also process your email address to send you targeted communications relating to our products. This processing is justified by the legitimate interest of La Bouche Rouge to keep you informed of our products and services.

La Bouche Rouge may transfer your personal data to its partners only after obtaining your express consent for such transfers.

We retain all your personal data for the period that your personal account remains active. You can close your personal account by contacting customer service.

If you close your personal account, La Bouche Rouge will keep some of your personal data for a period of five years on the basis of its legitimate interest in demonstrating that it has performed its contractual obligations with you. All other personal data will be deleted except for those for which we have a legal retention obligation.

If your personal account remains inactive for more than three years, La Bouche Rouge will close your account and delete all remaining personal data, except for data that we are legally required to retain.

We process your personal data when you fill out a form at one of our points of sale.

We process the following categories of data:

. Identification data;

. Email address and telephone number;

. Birthday.

We process your personal data for the purpose of sending you personal invitations and personalized newsletters and/or La Bouche Rouge advertisements.

This processing is established on the legal basis of your consent.

La Bouche Rouge may transfer your personal data to its partners only after obtaining your express consent for such transfers.

We will retain your data until you withdraw your consent or the processing changes significantly and we are required by applicable law to collect your consent again.

We process your personal data when:

. You apply for a job offer directly to La Bouche Rouge;

. You apply for a job offer through one of the recruitment firms, which we use and which are co-processors of your data;

. You send us a spontaneous application.

The purpose of this processing is the management and monitoring of applications, whether for salaried positions, temporary workers, work-study students or interns.

We process the following categories of data:

. Identification data;

. Data relating to personal life;

. Data on professional life;

. Economic and financial data.

The processing is based on the legitimate interest of La Bouche Rouge in using these personal data to implement the recruitment process for employees, temporary workers, work-study students and interns.

For the purposes of processing your data, it may be transferred to the following categories of recipients:

. The human resources department of La Bouche Rouge, staff and consultants interested in recruitment, such as managers and directors concerned by the position concerned;

. Recruitment firms.

We will keep your data for a period of two years from the last interaction we had with you, following your application, unless you inform us of your refusal, duly notified.

We process your data as part of your contractual relationship with La Bouche Rouge, for the purposes of managing and monitoring the services you provide and/or the execution of the contract.

We process the following data:

. Identification data;

. Economic and financial data

We process your data on the legal basis of the contract concluded between you and La Bouche Rouge.

For the purposes of processing your data, it may be transferred to the following categories of recipients:

. The concerned managers and employees of La Bouche Rouge;

. Certain other consultants or external service providers of La Bouche Rouge, who are concerned by the partnership we have with you;

. Accounting firms.

We will retain your personal data for a period of five years after the end of the contractual relationship between you and La Bouche Rouge.

Each time you visit the La Bouche Rouge website, we collect data about your visit and your navigation under the conditions described below.

Different technologies can be used to collect this data. We refer to them under the generic term “cookies”.

The cookies are as follows:

. Essential cookies : Essential trackers are necessary for the operation of our site. They allow you to browse our site and use its services and features.

. Preference cookies : Preference trackers allow us to store information about your choices, settings and preferences. They are not essential to the functioning of our site.

. Analytical cookies : Analytical trackers collect or use information about your use of our site, which helps us improve our site.

We process your data from essential cookies on the legal basis of La Bouche Rouge's legitimate interest in operating its website.

We process data from preference cookies and analytical cookies with the consent of the relevant users of our website.

We process your personal data from cookies for the following purposes:

. Optimize navigation on the La Bouche Rouge website by studying your browsing habits and adapting the technical characteristics of our website to your terminal;

. To operate our website.

We keep data from cookies for a maximum period of 18 months. After this period, the data is automatically deleted.

You can, at any time, modify your choices relating to cookies here.

In accordance with applicable law, you have rights when your personal data is processed. Subject to the conditions applicable to the exercise of these rights, you have:

. Right of access : you have the right to obtain confirmation from the controller that personal data is being processed and, where applicable, to receive a copy of all data that the controller holds about you. .

. Right to portability of personal data : you can receive from the data controller, personal data concerning you in a structured format commonly used and machine readable, with a view to their transmission to a third party. Where technically possible, you also have the right to have your personal data transmitted directly to this third party.

. Right to rectification : you have the right to ask the data controller to rectify the personal data as soon as possible, if the data is incomplete or incorrect.

. Right to restrict processing : you have the right to request the data controller to restrict the processing of your personal data.

. Right to erasure : subject to certain conditions detailed in Article 17 of the GDPR, you have the right to ask the data controller to erase the personal data concerning you.

You are informed that when exercising your rights, you may be asked to prove your identity. You may be asked to provide proof of identity or any other document to verify the veracity of your request, in order to protect against any fraudulent request.

As part of its activities, La Bouche Rouge may transfer your data outside the European Economic Area (EEA).

If we transfer your data outside the European Economic Area, we implement at least one of the following two protection measures:

. We transfer your data to countries that have been recognized by the European Commission as offering an adequate level of data protection according to EEA standards.

. We take steps to ensure that the recipient is bound by the European Commission's Standard Contractual Clauses, to protect your personal data.

We implement appropriate technical and organizational measures to ensure the security, integrity, confidentiality and authenticity of your personal data.

For any questions relating to the processing of your data, or to exercise your rights in this regard, please contact our data protection officer at the following email address: privacy@laboucherougeparis.com .

Finally, you have the right to lodge a complaint with the supervisory authority of your country of residence, for France, the CNIL: https://www.cnil.fr/ .

To ensure compliance with current regulations, La Bouche Rouge reserves the right to modify this confidentiality policy at any time.