PRIVACY POLICY

In the context of the use of its services and in particular the services accessible on its website, mobile site, and eventual future channels (online store, mobile applications…), MANDATRIX in its capacity as data controller, may collect and process personal data concerning you. We are committed to respecting the rules for the protection of the privacy of prospects and visitors to our websites, mobile sites, and other channels such as online stores and mobile applications. All personal data processing implemented in the context of the accessible services complies with the local regulations applicable to the protection of personal data and in particular the provisions of the General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Digital Rights (LOPDGDD).

1 – WHAT ARE OUR COMMITMENTS IN TERMS OF PERSONAL DATA PROTECTION?

MANDATRIX undertakes to guarantee a high level of protection of the personal data of its customers, prospects, users of its websites, mobile sites, online stores and mobile applications and of any other person whose personal data it processes. MANDATRIX undertakes to comply with the regulations applicable to all the processing of personal data that it implements:

- Your personal data is processed in a lawful, fair and transparent manner;

- Your personal data is collected for specified, explicit and legitimate purposes, and is not further processed in a manner incompatible with these purposes;

- Your personal data is stored in an adequate, relevant manner and is limited to what is necessary in relation to the purposes for which it is processed;

- Your personal data is accurate, kept up to date and all reasonable steps are taken to ensure that inaccurate data, having regard to the purposes for which it is processed, is erased or rectified without delay.

MANDATRIX implements appropriate technical and organizational measures to guarantee a level of security appropriate to the inherent risk of its processing operations, to meet regulatory requirements and to protect the rights and data of the persons concerned from the design of the processing operations. In addition, MANDATRIX contractually imposes the same level of protection of personal data on its subcontractors (service providers, suppliers, etc).

2 – WHAT PERSONAL DATA DO WE COLLECT?

The personal data we collect varies depending on the purpose of the collection and the Service we provide to you. Generally, we may collect the following categories of personal data directly:

- Personal contact details, such as your name, surname, email address, postal address and telephone number(s);

- The credentials used to access your online account, i.e., the username and password. This is necessary for us to create a personal user account;

- Browsing histories, such as the pages visited, the date of the visit, the location at the time of the visit, or the IP address;

- Updating histories, such as the date on which product information has been uploaded or updated on the online account;

- Payment information when a purchase is made on one of our sites, online stores, or applications. Generally, the invoice is issued in your name, your billing address and payment details such as your credit card or bank account.

We may also collect personal data about you indirectly when you share content on social networks, websites, stores or applications relating to our products and services, or responding to our posts and promotional announcements on social networks.

3 – HOW IS PERSONAL DATA COLLECTED?

A – Ways of collecting your data

As part of our relationship, you may communicate your personal data to us by various means and in particular on our websites: website, mobile site, online store and mobile applications when you browse the internet, make purchases, fill in the various forms, subscribe to the e-newsletter, create an account, when you submit an application, when you post comments on our social media pages, when you establish contact with us or when you otherwise provide us with your personal data.

B – IP address

The IP address is a series of numbers that is automatically assigned to your computer by your Internet Service Provider each time you connect. Each time you request a visit to the site, our servers record a record of your visit. We collect IP addresses for the purpose of analyzing trends on the site. We do not transmit any information that can be used to identify you, which means that your session will be recorded, but will remain anonymous to us. We may use your IP address in cooperation with your internet service provider to identify you in the event that we need to enforce the Terms of Use to protect our services, customers or to comply with applicable laws.

C – Cookies

In order to constantly improve the quality of the services offered on our websites: website, mobile site, online store and mobile application and their adequacy with your expectations, MANDATRIX may use "cookies", text files used to identify your device when you connect to one of our services. The deposit of cookies or tracers on your terminal (computer, tablet, smartphone, etc.) allows MANDATRIX to collect information and personal data, according to your choice of configuration of your terminal.

Types of cookies used:

- Cookies that are essential for the use of the website. They allow you to use the main features of the site, such as purchasing services for example. By disabling the use of cookies, you will no longer be able to benefit from these features. The information stored may not be used for commercial purposes.

- Site performance cookies. Performance cookies allow us to optimise our website and detect any technical problems you may encounter. They allow us to collect information about how you use the site, including the number of visits per page, the number of error messages displayed, the time spent on a page, or the number of clicks on an area of the site. The information stored may not be used for commercial purposes.

- Functionality cookies. These cookies allow the site to remember choices you have made (such as your username, language chosen or the region you are in) and provide more accurate and personal characteristics.

- Cookies from third-party websites and social networks. Our website contains links and/or content to other websites and social networks, and we do not know which cookies are used by them. To find out more, please see the information provided by these third-party sites and social networks about their own cookies.

D – Respect for your privacy

We are committed to protecting your privacy and respect the following 2 principles:

- We do not associate your cookies with any information that can directly and personally identify you. Cookies do not allow us to know your address, date of birth, telephone number or any other information that could identify you.

- We do not provide any personal information to advertisers or third-party sites.

If your computer or mobile device is used by several people, or if it has several browser software, it is possible that the content displayed to other users corresponds to your preferences. If you wish, you can change your browser settings.

E – Links to Third-Party Sites

Our websites, mobile sites, online stores and mobile applications may contain links to third-party websites. We are not responsible for the collection, use, management, sharing, or disclosure of data and information by these third parties. The provision of information on third-party sites is governed by the privacy policy and terms of use of those sites. We recommend that you read the privacy policies of these websites before submitting any personal information.

4 – WHAT IS THE PURPOSE OF THE DATA THAT MAY BE COLLECTED?

Your data is mainly used for purchase purposes (provision of services, specific services and products), prospecting, loyalty, animation, commercial information, satisfaction surveys, organization of competitions, new services and products intended to improve your customer experience, statistical studies, recruitment, after-sales service, processing of your requests and/or complaints. In addition to the cases where your consent has been obtained (in particular to provide you with personalized offers), the processing of your data for the various purposes mentioned above is necessary:

- To ensure the performance of the service contract;

- To comply with a legal obligation;

- For the purposes of the legitimate interests pursued by MANDATRIX (in particular to develop new services and offers, to improve customer service, etc).

More specifically, your data is used:

- To allow you to benefit from all the services available on our website, mobile site, store and mobile applications: creation of a user account, e-newsletter, management of purchases, assistance and complaints, management of loyalty programs, etc);

- To enable you to browse our websites;

- To enable you to have access to your online account in order to update technical documentation

- To best match our information, notices, offers, and other forms of services to your interests;

- To facilitate the completion of administrative formalities relating to purchases.

5 – HOW LONG IS YOUR DATA KEPT?

MANDATRIX undertakes to keep your personal data for a period not exceeding that necessary for the purposes for which they are processed. The retention periods are defined according to the processing purposes implemented by MANDATRIX and take into account in particular the applicable legal provisions imposing a precise retention period for certain categories of data and any limitation periods applicable.

6 – WHO IS LIKELY TO HAVE ACCESS TO YOUR PERSONAL DATA?

Recipients of your data

The data collected on our website, mobile site, online store and mobile applications may be communicated to our internal staff, or to its additional service providers (subcontractors, service providers, banks), in the context of the performance of all or part of the services referred to above. We remind you that in this context, MANDATRIX asks its service providers to put in place strict confidentiality and protection measures for this data.

7 – HOW TO EXERCISE YOUR RIGHTS?

In accordance with the applicable regulations on the protection of personal data, you may, at any time, exercise your rights of access, rectification and deletion of data concerning you as well as your rights to limit and object to the processing and portability of your personal data.

In addition, you have the legal right to define guidelines relating to the fate of your personal data post-mortem.

In addition, any person who is a minor at the time of collection of his or her personal data may obtain the deletion of his or her personal data as soon as possible.

These rights can be exercised by mail to the following address:

MANDATRIX, S.L.

Av. Diagonal 534, Entresuelo 08006 Barcelona Spain

Mail : contact@mandatrix.com

In this context, we kindly ask you to accompany your request with the elements necessary for your identification (surname, first name, e-mail) as well as any other information necessary to confirm your identity. You also have the right to recourse in the event of a violation of the applicable regulations on the protection of Personal Data and in particular the GDPR.

8 – IT SECURITY / TRANSACTION SECURITY

Ensuring the security and confidentiality of the personal data you entrust to us is a priority for MANDATRIX. We therefore implement all necessary technical and organisational measures, with regard to the nature, scope and context of the personal data that you communicate to us and the risks presented by their processing, to preserve the security of your personal data and, in particular, to prevent any destruction, loss, alteration, disclosure, intrusion or unauthorised access to this data, in an accidental or unlawful manner.

MANDATRIX strives to combat identity theft practices on the Internet. The security and confidentiality of personal data are based on the best practices of each individual. This is why we invite you not to communicate your passwords to third parties, to systematically log out of your profile and to close your browser window at the end of your work session, especially if you access the Internet from a computer shared with other people. This will prevent other users from accessing your personal information.

9 – CONTACT US

If you have any further questions about this policy or the way in which your personal data is processed, please contact us at the following address: contact@mandatrix.com