Privacy and Data Protection Policy

1. Identity of the Data Controller and Exercise of Your Rights

The data controller for your personal data is:

Breya (sole proprietorship)
SIRET: 948 495 254 00013
Registered office address: 226 Rue La Fayette, 75010 Paris, France
Website: www.breyashop.com
Contact email: contact@breyashop.com

In accordance with data protection regulations, you have the following rights:

• Right of access: Obtain confirmation as to whether or not your data is being processed, and, where applicable, access to it.
• Right to rectification: Request the correction of inaccurate or incomplete data concerning you.
• Right to erasure ("right to be forgotten"): Request the deletion of your data under certain conditions.
• Right to object: Object to the processing of your data for reasons relating to your particular situation, or object to the processing of your data for prospecting purposes.
• Right to restriction of processing: Request the temporary suspension of the processing of your data.
• Right to data portability: Receive the data you have provided to us in a structured, commonly used, and machine-readable format, and transmit it to another data controller.
• Right to withdraw your consent: Withdraw your consent at any time, when processing is based on it.

To exercise any of these rights, you can send your request:

• By email to: contact@breyashop.com
• By mail to: Breya, 226 Rue La Fayette, 75010 Paris, France

To facilitate the processing of your request, we invite you to provide us with your last name, first name, email address, and, in case of reasonable doubt about your identity, a copy of a valid identity document may be requested. We commit to responding to you as soon as possible and, in any case, within one month of receiving your request.

You also have the right to lodge a complaint with the competent supervisory authority (the CNIL in France: www.cnil.fr).

2. Definition of Personal Data

Personal data means any information relating to an identified or identifiable natural person. An "identifiable natural person" is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

"Pseudonymized" or "anonymized" data may, depending on the context, be considered personal data if they allow re-identification of the individual.

3. Collection of Personal Data

We collect and record personal data about you when you interact with breyashop.com, particularly when you:

• Browse our website.
• Add items to your cart.
• Create a customer account.
• Place an order or initiate a return.
• Subscribe to our newsletters or alerts.
• Write a product review.
• Fill out a form (e.g., contact, survey).
• Contact our customer service.

This data is collected, among other things, through cookies and other trackers, for which we obtain your consent in accordance with our Cookie Policy.

The information collected may include, depending on your use of the site:

• Your last name, first name, email address, postal address, and phone number.
• Your purchase and browsing history on the site.
• Technical information related to your device and browser (device type, operating system, IP address, referral URL).

The information requested during the creation of a customer account or an order is, unless otherwise indicated, mandatory for the processing of your order and the execution of the sales contract.

4. Purposes of Data Use

The personal data we collect is used for the following specific purposes:

• Order and customer account management: Processing, execution, and tracking of your orders, management of returns and refunds, administration of your customer account.
• Improving user experience: Personalizing your browsing, remembering your preferences, improving the ergonomics and functionalities of the site.
Communications and marketing: Sending newsletters, personalized promotional offers (subject to your consent), information on new products and changes to your orders.
• Customer service: Managing your requests, providing assistance, and resolving problems.
• Fraud prevention and security: Detecting and preventing fraudulent activities, protecting our systems and our users.
• Analysis and statistics: Conducting marketing studies, satisfaction and opinion surveys, analyzing website usage for optimizing our services and offerings.

5. Fight Against Fraud

Breya reserves the right to verify personal data provided when placing an order to prevent fraud and ensure transaction security. For this purpose, proof of identity and/or address may be requested. Breya reserves the right to cancel any order that does not satisfactorily meet the required verifications for fraud prevention.

6. Sharing and Transmission of Data to Third-Party Organizations

Your personal information is treated with the utmost confidentiality. It will only be transmitted to third parties in the following cases:

• Execution of your order and our services: We share strictly necessary data with our trusted service providers (carriers, payment solutions, hosts, technical services) so that they can perform their duties as part of your order or our contract. These service providers are obligated to respect the confidentiality of your data and to process it only for the purposes entrusted to them.
• Marketing purposes (with your consent): Subject to your prior consent, your data may be used for Breya's own marketing purposes.
• Legal obligation or official request: Your personal data may be disclosed to authorized bodies if required by law or if a judicial or administrative authority compels us to do so (for example, in the context of investigations relating to illegal activities, fraud, or for the protection of anyone's safety).

Breya is the sole owner of the information collected on breyashop.com. Your personal data will under no circumstances be sold, exchanged, or rented to other companies without your consent, outside the scope of use defined in this policy.

Non-directly identifiable information (pseudonymized or aggregated) may be transmitted to third parties for analysis, marketing, or statistical purposes.

7. Promotional Communications (Newsletters and Alerts)

When you subscribe to our newsletters or alerts, we send you personalized promotional communications by email or SMS.

You have the option to unsubscribe from these promotional messages at any time:

• By going to the "My Subscriptions" section of your customer account.
• By clicking on the unsubscribe link at the bottom of each promotional email.
• By following the unsubscribe instructions in each promotional SMS.

Please note that unsubscribing from promotional communications does not affect the receipt of essential service communications (e.g., order confirmations, shipping notifications).

8. Targeted Advertising and Display of Advertising Banners

In order to offer you products and offers that may be of interest to you, we use the data collected during your visit to our site to display advertising banners on other sites you visit.

The processing of this data is generally carried out through cookies, pixels, or web beacons. Our goal is to make our advertising offer more relevant and personalized based on your interests and the products you have previously viewed.

In this context, we mainly use pseudonymized data, and no directly identifiable personal data is stored in these trackers for this purpose. For more information on cookies and their management, please consult our Cookie Policy.

9. Market Studies, Satisfaction and Opinion Surveys

The data collected during market studies, satisfaction, and opinion surveys, whether via the website or external forms, is not used for advertising purposes. It is neither transmitted to third parties nor published.

If you participate in a survey, the specific purposes of processing and using your information will be clearly communicated to you. You can at any time object, in whole or in part, to the processing of this information by contacting Breya at contact@breyashop.com.

10. Cookies and Other Trackers

For detailed information on what cookies are, the types we use, their purpose, and how to manage them, please consult our Cookie Policy.

11. Data Security and Protection

We implement rigorous technical and organizational security measures to ensure the confidentiality, integrity, and availability of your personal data. These measures are designed to protect your information against loss, destruction, unauthorized access, alteration, or disclosure.

We use advanced encryption technologies, such as TLS (Transport Layer Security) and SSL (Secure Socket Layer) protocols, to secure the transmission of sensitive data online, particularly during your connections to your customer account and during transactions.

Access to your personal information is strictly limited to employees who need it to perform their specific tasks (e.g., invoicing, customer service). The computer systems and servers used to store personal data are kept in a secure and controlled environment.

12. Log Files

Any access to the breyashop.com website results in the transmission of usage data by your browser, which is recorded in server log files (commonly referred to as "logs"). This data includes: the date and time of access, the name of the accessed site, the IP address, the referral URL (link by which you arrived at our site), the volume of data transferred, as well as the product and information about the version of the browser used.

We analyze this data for legitimate purposes of:

• Maintenance and optimization of our servers.
• Continuous improvement of the site and associated services.
• Detection and correction of technical errors.
• Prevention of denial-of-service (DDoS) attacks and other security threats.

13. Secure Data Transmission

Your personal information is systematically encrypted before being transmitted to our service providers and when you log in to your customer account. We use recognized security protocols such as TLS and SSL to ensure the confidentiality and integrity of your data during transfer.

14. Applicable Law and Jurisdiction

This Privacy and Personal Data Protection Policy is governed by and interpreted in accordance with French law. In the event of a dispute not resolved amicably, the competent French courts will be seized.