PRIVACY POLICY

The terms specified below have the following meanings:

▪ "Personal Data" (or "personal information"): means any information relating to
a natural person and which allows them to be identified, directly or indirectly.
Applicable Regulations": refers to any regulations or legislation applicable to the processing of personal data carried out in connection with the use of the Site, including Regulation (EU) 2016/679 of April 27, 2016 (the"GDPR"), as well as the French Data Protection Act of January 6, 1978 (hereinafter"LIL") in France and any new law or regulation that amends or replaces them, the decrees and orders issued for
their application, and all deliberations, opinions, and guidelines that have been adopted or will be adopted, where applicable, by the competent data protection authorities.


▪ "Processing" means any operation or set of operations performed on personal data, regardless of the process used (collection, recording, organization, storage, adaptation, modification, extraction, consultation,use, communication by transmission,dissemination or any other form of making available, alignment or interconnection, locking, erasure or destruction, etc.).


▪ "User": refers to any person who accesses and browses the Website.

The operation of the Website involves several categories of processing. This Privacy Policy concerns the processing carried out or implemented by Délifrance S.A., a public limited company registered in the Créteil Trade and Companies Register under number 313 167 173, whose registered office is located at 99, rue Mirabeau, 94200 Ivry Sur Seine, France
(hereinafter "DÉLIFRANCE"), in its capacity as data controller.

The role of DÉLIFRANCE's Data Protection Officer (hereinafter referred to as the "DPO") is to respond to Users' requests concerning their Personal Data, including any requests to exercise their rights.

Any User may contact them:

▪ Via this form.
▪ By mail to:
DÉLIFRANCE
Data Protection Officer (DPO)
99 rue Mirabeau
94200 Ivry-sur-Seine

DÉLIFRANCE may collect and process all or part of the following Personal Data:

▪ Identity data;
▪ Activity data on the Website; and
▪ Electronic identification data collected through cookies and other trackers.

Personal Data may be voluntarily provided to DÉLIFRANCE by the User.
Personal Data may also be collected on account creation forms and through cookies and other trackers on the Website.
In this regard, DÉLIFRANCE invites Users to consult our consent management platform for use. Cookies, Axeptio, on the icon located to the left of the browser.


The provision of certain features or services requires the collection of Personal Data for their execution. The User acknowledges that if this Personal Data is not provided, DÉLIFRANCE will not be able to respond to their request or provide the services requested. The Site includes features that allow for free exchange areas such as comment areas on the link "contact us" link.


Users are therefore asked to only provide information that is appropriate, relevant, and necessary in the context. They must not write excessive or insulting comments, nor communicate Personal Data considered sensitive under Article 9
of the GDPR (racial or ethnic origin, political, philosophical or religious opinions, trade union membership, data relating to health or sex life, offences, convictions, security measures).

Various Personal Data may be collected by DÉLIFRANCE for the purposes and on the legal bases detailed in the following table:

DÉLIFRANCE may also use this Personal Data to fulfill its legal or regulatory obligations (storage and archiving of invoices and contractual documents relating to the performance of services resulting from requests submitted by Users via the Website, etc.).

Certain Personal Data may also be retained for evidentiary purposes, to protect against potential litigation, in the legitimate interest of DÉLIFRANCE.

In any event, and for each defined purpose, DÉLIFRANCE will use all means at its disposal to ensure the security and confidentiality of the Personal Data entrusted to it, in accordance with the Applicable Regulations.

The Personal Data collected by DÉLIFRANCE is intended, depending on the circumstances and purposes, as described in the previous article, for authorized personnel within its internal departments (customer service, accounting, marketing, sales, media, legal, administrative, financial, etc.), within the limits of their responsibilities and as necessary for the purposes pursued.

DÉLIFRANCE may also disclose Personal Data to any service provider (subcontractors and subsequent subcontractors, where applicable) when necessary for the management of the Website and the services requested.

In particular, Personal Data may be disclosed to the following third parties:
▪ The Site's technical service providers (technical solution provider; audience measurement service providers; technical hosting providers; etc.);
▪ Potential business partners;
▪ Third parties that may place cookies or other trackers on the User's devices (subject to obtaining consent where required). For more information, Users are invited to consult our cookie consent management platform, Axeptio, by clicking on the icon on the left side of the browser.
▪ Where applicable, the relevant courts, mediators, accountants, auditors, lawyers, bailiffs, debt collection agencies, police or gendarmerie authorities in the event of theft or legal requisition.

Personal Data is kept for the period strictly necessary for the purposes described in this Privacy Policy. At the end of the periods determined by legal provisions and/or the proportionality of the storage in relation to the purposes pursued, Personal Data is either deleted or anonymized.

As an exception, particularly in the event of litigation or pre-litigation, all or some of the Personal Data may be retained for a longer period if necessary for the resolution of the dispute or litigation.

When browsing the Site, Users may click on links to DÉLIFRANCE's social media accounts. Social networks improve user-friendliness among Site Users and help promote the Site through sharing. When Users use these buttons, DÉLIFRANCE may have access to personal information that Users have indicated as public and accessible from their profiles on these social networks.

However, DÉLIFRANCE does not create or use any databases from these social networks and does not exploit any data relating to the privacy of Users in this way.
In order to limit third-party access to Personal Data appearing on social networks, Users may configure their profile and/or the visibility of their posts via the dedicated areas on the social networks concerned in order to control accessibility and audience.

DÉLIFRANCE uses the Google reCAPTCHA module provided by Google Inc. This feature allows website publishers to automatically differentiate between human Users and robots, thereby protecting themselves against various types of abuse.

When using Google reCAPTCHA, your personal data may be transferred to Google companies in countries outside the European Economic Area where an adequate level of data protection is not guaranteed and where your rights under European data protection legislation may not apply.

For more information about Google's data protection rules and settings options, please visit https://policies.google.com/privacy and https://support.google.com/recaptcha/.

The Website and related services are not intended for minors. Under no circumstances does DÉLIFRANCE intend to collect Personal Data from minors under the age of fifteen(15).
The processing of Personal Data of a child under the age of fifteen (15) is only lawful if consent has been given by the holder of parental authority.

Any parent or guardian who believes that their child has provided Personal Data to DÉLIFRANCE without their consent should contact DÉLIFRANCEusing the form available at this link or by mail at the following address:

DÉLIFRANCE
Data Protection Officer (DPO) 99 rue
Mirabeau
94200 Ivry-sur-Seine

In accordance with the Applicable Regulations, all Users have the following rights:


▪ Right to withdraw consent at any time (Article 7 of the GDPR);

▪ Right of access (Article 15 of the GDPR);

▪ Right to rectification (Article 16 of the GDPR), including by updating Personal Data;

▪ Right to erasure of Personal Data when it is no longer necessary for the purposes for which it was collected or processed; in the event of withdrawal of consent if this constitutes the legal basis for processing; in the event of opposition to processing under Article 21; in the event of unlawful processing; or to comply with a legal obligation (Article 17 of the GDPR);

▪ Right to restriction of processing if the accuracy of the Personal Data is contested; in the event of unlawful processing; if the data controller no longer needs the Personal Data but it must be retained to enable the User to exercise their rights; or if the User has objected to the processing pursuant to Article 21, for the period of time during which the verification of whether the legitimate grounds of the data controller override those
of the User is ongoing (Article 18 GDPR); of the data controller override those of the User (Article 18 GDPR);

▪ Right to portability of Personal Data provided, when Personal Data is subject to automated processing (Article 20 GDPR) automated processing (Article 20 of the GDPR)

▪ Right to object to processing (Article 21 GDPR);

▪ Right to determine the fate of Personal Data after death and to designate (or not) a person to carry out these instructions (Article 85 of the French Data Protection Act). In the event of death and in the absence of instructions from the User, DÉLIFRANCE undertakes to delete Personal Data, with the exception of data necessary to meet its legal obligations or for evidentiary purposes.


These rights may be exercised, or for any questions relating to the processing of Personal Data, by contacting DÉLIFRANCE's Data Protection Officer:

▪ Via the dedicated form available at this link.
▪ By mail to:

DÉLIFRANCE
Data Protection Officer (DPO)
99 rue Mirabeau
94200 Ivry-sur-Seine

DÉLIFRANCE uses connection data (date, time, Internet address, visitor's computer protocol, page viewed) and cookies (small files stored on Users' devices (tablet, computer, etc.)) on its Website to identify Users, remember the pages they have viewed, and provide them with audience measurement and statistics. etc.) that enable, where applicable, the identification of Users, the memorization of the pages viewed, and the use of measures and statistics relating to the Website's audience.

Depending on the purpose, Users may consent to, refuse, or choose to accept certain types of cookies on their devices. A cookie allows the recording of browsing data and data relating to online behavior.
The storage of these files on the User's device requires their prior consent, unless the cookies in question are strictly necessary for the proper functioning of the Site, or they are exempt due to their nature.

In this regard, DÉLIFRANCE invites Users to consult our cookie consent management platform, Axeptio, by clicking on the icon on the left of the browser.

As a matter of principle, DÉLIFRANCE processes and stores Personal Data exclusively within the European Union, or in a territory recognized by the European Commission as providing an adequate level of protection equivalent to that provided by the Applicable Regulations.

In the event of a transfer of Personal Data to a country not recognized as providing an adequate level of protection, DÉLIFRANCE undertakes to provide all appropriate safeguards in accordance with the Applicable Regulations.

In particular, DÉLIFRANCE may use the standard clauses adopted by the European Commission on June 4, 2021, intended to regulate the transfer of personal data outside the European Union.

In the event of a transfer of Personal Data to a third country outside the European Union, or not benefiting from an
adequacy decision, any User may request a copy or access to the appropriate and adapted safeguards that will be
implemented.

DÉLIFRANCE undertakes to implement all technical and organizational measures to ensure the security of processing and the confidentiality of Personal Data, in particular to prevent it from being distorted, damaged, or accessed by unauthorized third parties.

To this end, DÉLIFRANCE implements the necessary measures to secure browsing on the Website, as well as any processing carried out, through physical, electronic, and administrative procedures (physical protection of premises; user authentication process via login details; connection logging; encryption of certain data where applicable; etc.).

This Privacy Policy is subject to change, in particular in line with various developments.
legislative and regulatory changes or in the event of changes to the Site's features. Updates may be viewed directly on the Site.