In accordance with the provisions of Law No. 78-17 of January 6, 1978, as amended by Law No. 2018-493 of June 20, 2018, the processing of your personal data collected from the website accessible at www.gramme7.fr (hereinafter the "Site") is implemented under the terms of this privacy policy (hereinafter the "Privacy Policy").

Any term not defined in this Privacy Policy, but whose first letter is capitalized, shall be understood as defined in Article 1 of the General Terms and Conditions of Sale.

"Personal data" means any information that can directly or indirectly identify an individual.

"Personal data processing" means any operation or set of operations performed on personal data.

1. DATA CONTROLLER

The company Saneon (hereinafter the "Company"), acting as data controller, undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of April 27, 2016, on the protection of personal data.

The User and/or Client of the Site (hereinafter the "Client") is informed that certain personal data must be collected by the Company in order to process orders placed by the Client. If the Client does not wish to provide this data, the Company will not be able to process said orders.

2. PERSONAL DATA PROCESSED

The Company processes the Client's personal data, either directly, notably via order forms or newsletter subscription forms on the Site, or indirectly, in response to requests made by the Client.

Collected personal data is marked with an asterisk next to the relevant field when it is essential for processing the order, sending the newsletter, or complying with a legal obligation.

The personal data processed are as follows:

• Identification data (e.g., last name, first name, date of birth, email address, postal address, phone number).
• Connection data.
• Commercial data (e.g., purchase history, product list, data necessary for conducting satisfaction surveys, customer reviews, statistics, and promotional operations).
• Data relating to customer or user relationship management (e.g., written exchanges concerning order tracking and processing, delivery, product-related questions).

3. PURSUED PURPOSES AND LEGAL BASES

The purposes and legal bases for the personal data processing implemented by The Company are as follows:

Purpose of processing	Applicable legal basis
Order processing	Contract between you and The Company
Customer relationship management	Contract between you and The Company
Sending commercial communications	User or Client consent
Organization of contests or promotional offers	User or Client consent
Managing User or Client requests	User or Client consent
Processing customer reviews	User or Client consent
Operating, evaluating, and improving products and services	Legitimate interest of The Company
Website visit analysis and audience measurements	Legitimate interest of The Company
Fulfilling contractual obligations	Legitimate interest of The Company

4. RETENTION PERIOD

Your personal data is kept only for the period strictly necessary to fulfill the purposes for which it was collected and processed, particularly for managing the commercial relationship.

In some cases, your data may be stored for a longer period due to legal and regulatory obligations.

5. SERVICE PROVIDERS WITH ACCESS TO PERSONAL DATA

The collected personal data is transmitted to the Company's service providers, who may process it on behalf of the Company (subcontractors) or on their own behalf (data recipients), depending on the processing performed and within the limits of their responsibilities.

The data recipients are the service providers chosen by the Company to manage product delivery, manage the website, conduct advertising campaigns, etc.

Your personal data is not transferred to a country outside the European Union. In the event of a transfer, we commit to ensuring that it is carried out in accordance with applicable regulations and at an adequate level of protection.

6. YOUR RIGHTS REGARDING YOUR PERSONAL DATA AND HOW TO EXERCISE THEM

Your personal data rights are as follows:

• Right of access
• Right to rectification
• Right to erasure (provided it does not prevent the performance of the contract or compliance with legal obligations)
• Right to restriction of processing
• Right to withdraw consent at any time
• Right to object to processing, particularly for commercial prospecting
• Right to data portability

You can also define general and/or specific directives regarding the fate of your data after your death. In the event of your death being brought to our attention, your personal data will be deleted, unless legal retention is required.

To exercise your rights, you can contact us by email at: contact@gramme7.fr

In case of dissatisfaction, you can contact the CNIL: 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07; Tel: 01 53 73 22 22.

7. SECURITY MEASURES

As data controller, we take all appropriate measures to preserve the security and confidentiality of data, preventing any unauthorized access. We implement technical and organizational measures adapted to the risks. We also ensure that our subcontractors comply with personal data protection rules.

8. UPDATE OF THIS POLICY

This policy may change. In case of substantial modifications, you will be informed.