1. MAISON LEMESRE'S POLICY ON PERSONAL DATA PROTECTION

Maison Lemesre (hereinafter referred to as "Maison Lemesre" or "we", "our") places great importance on the protection of your privacy and data.

We are committed to offering high-quality products and services. Our existing or potential customers are of great value to us and we therefore seek to protect your personal data to the best of our ability.

Maison Lemesre's Policy on Personal Data Protection explains how Maison Lemesre collects, processes and protects your personal data when you visit our website maisonlemesre.com (hereinafter the "Site"), when you contact us or purchase our products via the Site, or when you provide us with your data during an in-store purchase (including to receive our newsletters and other commercial prospecting messages), as required by data protection laws in force in the countries where we operate, including the European General Data Protection Regulation (Regulation 2016/679, known as the "GDPR").

We have implemented a robust data protection compliance program, which includes:

• the adoption of internal policies and procedures aimed at ensuring compliance with laws and regulations concerning data protection;
• the implementation of appropriate technical and organizational measures to apply the principles of data protection.

2. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

The Site and sales (via the Site or in-store) are managed/performed by Maison Lemesre, which should be considered the data controller.

All marketing communications are also addressed to you by Maison Lemesre.

If you wish to contact us, please refer to the section titled "How to contact Maison Lemesre for any questions regarding data protection" below.

3. WHAT PERSONAL DATA DO WE COLLECT AND HOW?

Information you provide to us directly.

This refers to information collected online on the Site, for example when you fill out the "contact" section, when you make a purchase in the online store. It also includes information that you provide us when you wish to be part of our customer file following an in-store purchase and/or when you agree to be contacted by us to provide you with information about our events and collections.

Information about you that we obtain indirectly.

Other information about you is collected indirectly when you visit the Site. This information is necessary, technically speaking, for the proper functioning of the Site, to improve your browsing experience or to allow us to carry out analyses that will enable us to better serve you by personalizing the online services we offer you.

• Technical information, such as your IP address and cookies, related to your navigation on our Site, for the purpose of connecting and identifying your country/city by geolocation;
• Information about the data related to the use of the Site (for example: behavioral analysis through cookies and similar technologies, tracking your navigation on the Site, recording products placed in the shopping cart).

Information about children

The site is not intended for children and we do not intentionally solicit, collect or retain any personal data from children as defined by applicable local laws. If you believe that we may have personal data about or concerning children, please contact us at: info@maisonlemesre.com

4. WHY DO WE COLLECT YOUR PERSONAL DATA?

If you are an existing or potential customer of Maison Lemesre, we may use your personal data to:

• allow you to browse our Site;
• provide you with information about our products and services and answer any questions you may have about them, via our "Contact" section;
• allow you to purchase our products online (including processing your payments) and in our stores and to be part of our customer file;
• allow you to benefit from our services, including after-sales services, in our stores or on our Site;
• comply with our legal obligations, including, among others, combating money laundering, combating credit card fraud, and combating counterfeiting;
• establish statistics and conduct business studies;
• keep you informed of our latest collections, products, campaigns, shows, and other events, by sending you communications (by email, postal mail, or on your phone: calls, chat, SMS and MMS, and through third-party media platforms);
• allow us to better understand your interests and preferences in order to offer you personalized offers and other services that better correspond to your needs and desires.

5. HOW DO WE JUSTIFY THE PROCESSING OF YOUR PERSONAL DATA?

The processing of your personal data that we carry out is based on our obligation to comply with all applicable laws and regulations.

It is also based on the need to perform the sales contract concluded with you. We may also rely on our legitimate economic/commercial interest in providing you with an attractive Site, offering you adapted offers, better understanding your needs, responding to your requests, and fulfilling our commitment to offer you uninterrupted after-sales services and personalized highquality processing in the long term.

6. TO WHOM ARE WE LIKELY TO DISCLOSE YOUR PERSONAL DATA?

Within Maison Lemesre, your personal data will only be accessible to a limited number of people who need to be aware of it in the course of their activities (for example, the Customer Relationship Management team, the Sales and Communication team, and the IT Service) will have access to your personal data.
Outside of Maison Lemesre, your personal data will not be disclosed to third parties, except to other entities and/or affiliated companies of Maison Lemesre for the aforementioned purposes and to service providers acting on behalf of Maison Lemesre, based on secure contractual agreements that include strict obligations regarding data protection. We will in particular disclose your personal data to service providers or suppliers who help us operate the Site, conduct our activities, provide you with services or protect the security and integrity of our activities (including maintenance, security and IT support service providers, hosting providers, payment service providers, marketing and advertising partners).

We may also be required to transfer personal data to third parties if authorized authorities request it, in accordance with applicable laws and regulations. We may also be required to transfer personal data to another legal entity in the event of collaboration, joint venture, restructuring, change of legal status, or any similar event. In the event of a merger or sale, your personal data will be transferred permanently to our successor.

7. TRANSFER OF DATA ABROAD

Legal and regulatory requirements are taken into account before any transfer of your data abroad. You may receive relevant parts of the aforementioned document request, as required by applicable law.

8. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

Alongside our commitment to providing high-quality products and services, we believe that our products should entitle you to personalized customer treatment and unparalleled after-sales services that may last a lifetime for some products. To that end, and to ensure that you receive such services, we may need to keep your personal data for as long as necessary to provide such services. In particular, your personal data will be kept until your last use or purchase of our products or services (i.e., for the duration of the commercial relationship), and usually for up to five years thereafter, in accordance with the applicable statute of limitations.

Cookies managed by Maison Lemesre are kept for up to twelve months.

Maison Lemesre complies with the retention periods imposed by applicable laws and regulations. If your data is no longer needed to provide a service (including the aforementioned after-sales service) or if you no longer wish to be on our distribution list for newsletters/prospecting messages, your data will be deleted or archived in an anonymous or pseudonymized form in order to comply with applicable regulations.

9. WHAT ARE YOUR RIGHTS?

• Right of access and information: you have the right to be informed in a concise, transparent, understandable, and easily accessible manner of how your personal data is processed. You also have the right to obtain (i) confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, (ii) access to such personal data and a copy thereof.
• Right to rectification: you have the right to obtain rectification of your personal data. You also have the right to request that your incomplete personal data be completed.
• Right to erasure: in certain cases, you have the right to obtain erasure of your personal data. However, this is not an absolute right, and we may have legal or legitimate reasons for retaining this data.
• Right to limitation of processing: in some cases, you have the right to obtain a limitation of the processing of your personal data.
• Right to data portability: you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us. This right applies only if the processing of your personal data is based on your consent or on the performance of a contract and such processing is carried out by automated means.
• Right to object to processing: you have the right to object to the processing of your personal data when such processing is based on our legitimate interest. However, we may invoke compelling legitimate grounds requiring further processing.
  You also have the right to object at any time to the processing of your personal data for direct marketing purposes.

To exercise the above-mentioned rights, please contact us using the channels indicated below and provide us with the following information: first name, last name, email address, or any other information necessary to confirm your identity and allow us to process your request (such as your postal address, for example).

You also have the right to unsubscribe from our newsletters and other commercial prospecting messages at any time:

• by contacting us by email explaining the reason for your contact. This can be done at the following address: info@maisonlemesre.com

Finally, you have the right to lodge a complaint with the competent supervisory authorities in case of violation of the laws and regulations relating to data protection in force, including the GDPR, but also any other national or regional law relating to data protection that concerns you.

10. WHAT COOKIES DO WE USE AND HOW CAN YOU OBJECT TO THEM?

Cookies are pieces of information that a website can transfer to your browser and are then stored on your computer system. For example, depositing cookies improves your online experience by allowing us to save your preferences.

We use cookies to:

• establish statistics and determine traffic volumes to improve the relevance and user-friendliness of the services offered to you;
• provide you with personalized services and navigation;
• communicate information to other websites, media partners, and social networks in order to offer you relevant promotional and advertising messages corresponding to your interests (third-party cookies).

We may also collect your IP address in an abbreviated and non-readable form that does not allow us to identify you.

11. HOW TO CONTACT MAISON LEMESRE FOR ANY QUESTIONS REGARDING DATA PROTECTION

To exercise your rights, please send your request to:

• by email: toinfo@maisonlemesre.com;

For any other requests regarding this policy, please send your request to:

• by email: toinfo@maisonlemesre.com;

This data protection policy was last updated on 13/06/2019. Regarding any changes that may be made to this Policy, we invite you to regularly consult the "Personal Data" section of our website. In case of substantial modifications, we will inform you by appropriate means.