Personal data protection policy

By browsing the site, by making purchases on our site and by contacting us, you are obliged to provide us with personal information concerning you, in particular your name, surname, corporate name of the entity for which you intervene, email address, phone number, delivery and billing mailing address, password.

The required information is indicated by the presence of an asterisk (*). If you do not wish to disclose the required information on a mandatory basis, you will not be able to create use of our services and order our products.

As part of the use of the site and on the occasion of orders placed on our site, we also collect and maintain:

• the history of purchases made on the site: summary description of the products purchased, price, date;
• the history of bank transactions or payments made in respect of purchases made. In case of payment by cheque, we also know the name of your banking institution and your bank account number;
• the copy of the exchanges with us and in particular the data that you have provided us to inform us of any difficulties with the site and/or the products ordered.

We also automatically collect information about the devices that you use to access our services, such as your IP address, Internet browser types and versions, when browsing the site. terms of research used (see "cookies" below).

In order to accomplish the aforementioned purposes, the personal data are only accessible:

• within RightNao, to the personnel duly empowered according to the purpose of the treatment pursued;
• to our payment provider: LCL/PayPal Bank establishment to ensure the secure settlement of orders you pass on the site;
• to our suppliers ensuring the delivery of the products ordered on the site;
• to our it and technical providers involved in our information systems, servers, tools and software applications or providing data hosting.

Furthermore, we reserve the right to transmit your personal data in order to fulfil our legal obligations, in particular in the event that we are obliged to do so in the context of judicial, administrative or legal proceedings or on administrative, legal or judicial decisions or constraints.

In any event, your data is never transferred outside the European Union. If necessary, we will request your express consent and prior to the transfer of your data.

The personal data shall be kept by RightNao for a limited period of time which does not exceed the duration required for the purposes for which it is collected as specified above.

In particular:

• your data is kept for a period of five (5) years following your last order placed on the site;
• the data collected by means of cookies are stored for a period of thirteen (13) months.

Some data may be stored for a longer period of time in accordance with our legal obligations.

Beyond these retention periods, the data will be anonymized and will be kept for statistical purposes only. They will not give rise to any exploitation of any kind whatsoever by RightNao.

In accordance with the RGPD and the data protection act, and subject to proof of your identity (a copy of your identity document may be requested), you are entitled:

• access the personal information about you that is in our possession and obtain a copy of it;
• to rectify your personal data that would be erroneous or no longer up to date;
• to request the deletion of your personal data. However, we will retain certain data in order to comply with our legal and regulatory obligations and when we have a legitimate motive (for example: when your data is necessary to establish proof of proper execution legal, regulatory or contractual obligations or for security reasons);
• to oppose the processing of your personal data if you have legitimate motives;
• withdraw your consent in respect of treatments made exclusively on the basis of your consent;
• the right to limit the processing of your personal data. This right applies under the following assumptions: (I) you disagree with the accuracy of your personal data recorded by RightNao. We limit the processing of your data by the time necessary to carry out the required verifications; (ii) you oppose the processing of your data. The time to verify the legitimate motives you invoke, we restrict the processing of your data; (iii) you consider that the processing of your data is unlawful but does not solicit their deletion;
• of the right to the portability of your data, that is, to receive a copy of your personal data in our possession in a structured format and the right to transmit it to another entity responsible for processing.

To exercise your rights, you can contact us:

• an e-mail to the following address: contact@right-nao.com
• or a postal mail to the following address: RightNao – 27 rue des chestnut 44300 Nantes.

We will endeavour to respond to your request within a reasonable time. We also reserve the right to decline any request that appears unreasonable by its repetitive or systematic nature or that would jeopardize the security of our servers, files, systems and data.

You also have the right to submit a complaint to the National Commission for information and freedoms (CNIL) If you feel that your rights have not been respected:

3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07 - https://www.cnil.fr/fr/plaintes

It is your responsibility to ensure the confidentiality and security of your personal data and information by ensuring that no one is able to access your personal space and more generally to your device (computer, Smartphone or Tablet).

Despite the actions taken by RightNao, the transmission of information over the Internet is not entirely secure. The transmission of your data therefore takes place at your own risk.

Once the data is received, we undertake to implement the organisational, technical, software and physical security measures to try to protect your personal data from alterations, destruction or access unauthorized data. These are especially hosted on a dedicated and secure server located in France (OVH – 2 rue Kellermann – 59100 Roubaix – France).

We also require any subcontractor to provide appropriate safeguards to ensure the security, protection and confidentiality of personal data. This requirement goes through the establishment of contracts, which include for the subcontractor the obligation to comply with the requirements of the regulations stemming from the data protection act and the European regulation for the personnel (RGPD).

We will undertake to notify the CNIL of any violation of personal data as soon as we have read the report.

A cookie is a text file saved and/or by your browser and deposited by the websites to which you access. Cookies may be permanent or temporary. Permanent cookies are stored on your device for a period not exceeding 13 months. Temporary cookies disappear at each end of the navigation.

As part of your browsing on our site, we collect, subject to your consent, via cookies the following information:

• information related to your device (computer, Tablet, etc.), including the IP address, type of access provider, hardware configuration, software configuration – including name and version number of your browser);
• information related to the operations you perform on our website: log and connection history.

These cookies are used by RightNao (I) to improve the proper functioning of the site, (ii) to facilitate your browsing of the site, in particular by memorizing your login data and (iii) allowing us to compile statistics (including measures and improve our services.

You can oppose the registration of cookies by setting up your Internet browser. You will find below the links detailing the means to configure your browser:

Firefox: https: //support.mozilla.org/fr/kb/activer-desactiver-cookies-preferences?redirectlocale=fr&redirectslug=activer-desactiver-cookies
Safari: https: //support.apple.com/kb/PH19214?locale=fr_FR&viewlocale=fr_FR
Google Chrome: https: //support.google.com/accounts/answer/61416?hl=fr
Internet Explorer: https: //support.microsoft.com/fr-fr/help/17442/windows-internet-explorer-delete-manage-cookies

You can also consult the CNIL website to obtain the instructions for setting up the most used browsers at the following address: http://www.cnil.fr/vos-droits/vos-traces/les-cookies/conseils-aux-internautes/ou consult the "help" section of the browser it uses.

If you refuse to register cookies on your device from your Internet browser, you will still be able to browse the site, but some services may not work properly.

The site may occasionally contain links to other Web sites. These websites have their own privacy policy and we disclaim all responsibility for the use made by these sites of the information collected when you click on these links.

We invite you to read the privacy policies of these sites before transmitting your personal data to them.

This privacy policy is likely to evolve at any time, especially since we will be processing new personal data. If necessary, you will be informed of any changes that would be made.

In any event, the current version of our privacy policy is available on our site. We invite you to consult it regularly.