1. Introduction

This Privacy Policy (hereinafter referred to as the "Policy") aims to inform you about how Graines de Sol - Kavacode (hereinafter referred to as "we", "our", or "Provider") collects, uses, processes, and protects the personal information of professionals in the restaurant industry when they use the Grignotin Pro (hereinafter referred to as the "Platform").

2. Collection and Use of Personal Data

When professionals use the Platform, we may collect and process the following types of personal data:

• Professional identification information: Name of the establishment, professional email address, postal address of the establishment, professional phone number, etc.
• Billing information: Payment details, professional credit card information, etc.
• Transaction data: Information on orders, sales, financial transactions, etc.
• Product data: Information on offered products, images, descriptions, prices, etc.

3. Data Retention

We implement technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. The data is stored on secure servers and is regularly backed up to prevent information loss.

4. Sharing of Personal Data

We may share your personal data with the following third parties, under the circumstances specified below:

• Third-party service providers: We may share your information with third-party service providers who help us manage and improve the Platform.
• Legal requirements: We may disclose your personal data in response to a legal request or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect your vital interests, or exercise our legal rights.

5. User Rights

You have the following rights concerning your personal data:

• Right of access: You have the right to request a copy of your personal data that we hold.
• Right to rectification: You can request the correction of inaccurate or incomplete personal data.
• Right to erasure: You can request the deletion of your personal data under certain circumstances.
• Right to restriction of processing: You can request the restriction of processing of your personal data under certain circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: If the processing of your personal data is based on consent, you may withdraw this consent at any time.

To exercise your rights regarding your personal data, you can directly contact the data controller, Mr. MALTER, at the following email address:

contact(@)grignotin.com

6. Cookies and Similar Technologies

The Platform may use cookies and similar technologies for the purpose of enhancing functionalities and analyzing the usage of the Platform. You can configure your browser to refuse cookies, but this may limit some functionalities of the Platform.

7. Changes to the Policy

We may periodically update this Privacy Policy to reflect changes in our information management practices. The changes will take effect as soon as they are published on the Platform.

8. Contact

For any questions or concerns regarding this Privacy Policy, please contact us at the following email address: contact(@)grignotin.com.

Last update: 15/02/2024

By using the Platform, you agree to the terms and conditions of this Privacy Policy.

1. Introduction

1.1 Purpose and Scope

This Privacy Policy (hereinafter referred to as the "Policy") aims to inform you about how Graines de Sol - Kavacode (hereinafter referred to as "we", "our", or "Provider") collects, uses, processes, and protects the personal information of professionals in the restaurant industry when they use the Grignotin Pro (hereinafter referred to as the "Platform").

1.2 Legal Basis for Processing

We collect and process your personal data based on several legal grounds, including:

• Your consent: When you give us your explicit consent to collect and process your personal data for a specific purpose.
• The execution of a contract: When the processing of your personal data is necessary for the execution of a contract between you and us, such as managing your orders.
• Compliance with a legal obligation: When we are required to process your personal data under a legal obligation, such as combating fraud.
• Our legitimate interests: When we have a legitimate interest in processing your personal data, such as improving our services or protecting our rights.

1.3 Data Protection Officer (DPO)

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing the processing of your personal data. You can contact our DPO at the following address:

M. Malter
contact(@)grignotin.com

2. Collection and Use of Personal Data

2.1 Types of Personal Data Collected

When you use the Application, we may collect and process the following types of personal data:

• Identification information: Name, first name, email address, phone number, etc.
• Location data: Geolocation information to facilitate the search for professionals nearby.
• Transaction data: Information on orders, purchases, financial transactions, etc.
• Preference data: Product preferences, favorite types of cuisine, etc.
• Application usage data: Information on how you use the Application, such as the pages you visit, the features you use, and the searches you perform.
• Technical data: IP address, device type, operating system, etc.

2.2 Purposes of Processing

We use your personal data for the following purposes:

• Management of your orders and user account: We use your identification information, transaction data, and contact data to process your orders, manage your user account, and provide you with customer service.
• Personalization of your experience: We use your preference data and application usage data to offer you personalized products and services.
• Improvement of the Application: We use your application usage data and technical data to enhance the Application's features and offer you a better user experience.
• Marketing and advertising: We use your identification data, contact data, and preference data to send you information about our products and services, promotional offers, and personalized advertisements.
• Statistics and analysis: We use your data in an anonymized form to perform statistics and analyses on the usage of the Application.

2.3 Data Retention Period

We retain your personal data for as long as necessary to achieve the purposes for which they were collected, in accordance with current legal requirements.

2.4 Sharing of Personal Data

We may share your personal data with the following third parties:

• Registered professionals: We share your information with professionals to facilitate the ordering and delivery of products.
• Third-party service providers: We may share your information with third-party service providers who help us manage and improve the Application, such as payment service providers, web hosting services, and marketing agencies.
• Legal authorities: We may disclose your personal data in response to a legal request or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect your vital interests, or exercise our legal rights.

3. Data Retention

3.1 Security Measures

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Data encryption: We use encryption to protect your personal data during transmission and storage.
• Access control: We restrict access to your personal data to employees and third-party service providers who need to access it for the purposes described in this Policy.
• Security procedures: We have established security procedures to detect and respond to security incidents.

3.2 Data Retention Period

We retain your personal data for as long as necessary to fulfill the purposes for which they were collected, in accordance with current legal requirements. Here are some examples of retention periods:

• Identification and contact data: Retained for the duration of your relationship with us and for 5 years after the end of the relationship.
• Transaction data: Retained for 10 years for accounting and tax purposes.
• Application login and usage data: Retained for 2 years.

3.3 Suppression des Données

Vous pouvez à tout moment demander la suppression de vos données personnelles. Nous supprimerons vos données personnelles dans les meilleurs délais, sauf si nous sommes tenus de les conserver pour des raisons légales ou pour protéger nos droits.

4. Sharing of Personal Data

4.1 Sharing with Third Parties

We may share your personal data with the following third parties:

• Registered professionals: We share your information with professionals to facilitate the ordering and delivery of products.
• Third-party service providers: We may share your information with third-party service providers who help us manage and improve the Application, such as payment service providers, web hosting services, and marketing agencies.
• Legal authorities: We may disclose your personal data in response to a legal request or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect your vital interests, or exercise our legal rights.

4.2 Data Transfers Outside the EU

If we share your personal data with third parties located outside the European Union, we will ensure that these third parties adhere to an adequate level of data protection. Specifically, we use the European Commission's standard contractual clauses for data transfers to third countries.

5. Cookies and Similar Technologies

5.1 Use of Cookies

The Application uses cookies and similar technologies to:

• Improve your user experience by remembering your preferences and settings.
• Analyze the use of the Application and enhance its performance.
• Offer you personalized advertisements.

5.2 Types of Cookies

We use different types of cookies:

• Necessary cookies: These cookies are essential for the operation of the Application.
• Performance cookies: These cookies collect information about how you use the Application to help us improve its performance.
• Functionality cookies: These cookies enable us to offer you personalized features, such as remembering your preferences.
• Targeting cookies: These cookies are used to offer you personalized advertisements.

5.3 Cookies Management

You can choose to disable cookies in your device settings. However, this may limit certain functionalities of the Application.

5.4 More Information

For more information about cookies, you can visit the CNIL website: https://cnil.fr/fr

6. Users Rights

6.1 Your Rights

You have several rights concerning your personal data, including:

• Right of access: You have the right to request a copy of your personal data that we hold.
• Right to rectification: You can request the correction of inaccurate or incomplete personal data.
• Right to erasure: You can request the deletion of your personal data under certain circumstances.
• Right to restriction of processing: You can request the limitation of the processing of your personal data under certain circumstances.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You can object to the processing of your personal data for reasons related to your particular situation.
• Right to withdraw your consent: If the processing of your personal data is based on consent, you can withdraw this consent at any time.

6.2 Exercising Your Rights

To exercise your rights, you can contact us at the following address:

contact(@)grignotin.com

7. Changes to the Policy

We may periodically update this Privacy Policy to reflect changes in our information management practices. The changes will take effect as soon as they are published on the Platform.

8. Contact

For any questions or concerns regarding this Privacy Policy, please contact us at the following email address: contact(@)grignotin.com.

Last update: 15/02/2024

By using the Platform, you agree to the terms and conditions of this Privacy Policy.