This privacy policy gives you an overview of how Kadolis handles your data. It applies to all websites and apps, as well as to other services offered by Kadolis.

If you have any questions about this privacy policy or about data protection at Kadolis, you can contact our data protection team at [email protected]. Please also send an e-mail to our data protection team if you wish to exercise your right of access or your right to have your data deleted or any other right relating to data protection, including withdrawing your consent for marketing, unsubscribing from the newsletter, etc. Further information can be found in the sections "What are my data protection rights?" and "Contact persons".

How to read this privacy policy: We offer you several possibilities to read this privacy policy. In this section, you will first find some basic information. Then you will find the topics that are relevant to you in each chapter. If you are already a "pro", you can go directly from one chapter to another using the drop-down menu.

To which services and offers does this privacy policy apply?

The way Kadolis handles your data is the same for most of our offerings. This privacy policy therefore applies to all services and offerings we provide to our customers in North America, whether we do so on a website, app, marketplaces, over the phone, at events, or on social networks or other channels. For ease of reading, we use the generic term "services" for this "normal case".

However, for some services, we may exceptionally process your data in a different way or for a particular purpose. This may be due to the type of service or the requirements of a specific country. When we refer to these cases ("special cases"), we use the terms "service-specific" or "country-specific".

What this Privacy Policy tells you:

- What data is stored by Kadolis.

- What we do with that data and what we need it for.

- What your data protection rights are and what choices you have.

- What technologies and data we use to personalize and coordinate our services and content for a safe, simple, seamless and individual shopping experience.

- What technologies and data we use for advertising.

1. What data is processed by Kadolis?

Kadolis offers you various services that you can use in different ways. Depending on whether you contact us online, by phone, in person or in any other way and on the services you use, various data from different sources are provided. Much of the data we process is data that you provide to us when you use our services or when you contact us, for example when you register and provide your name, e-mail address or address for this purpose. We also receive technical data about your terminal and access data that we receive automatically when you interact with our services. This may include, for example, information about the device you are using.

When we refer to "your data", we are referring to personal data. This is any information that allows us to immediately identify you. Examples: your name, telephone number, customer number, order references or e-mail address. All information that does not allow us to identify you is non-personal information. Non-personal data is also known as anonymous data. When we combine your personal data with anonymous data, all the data in that dataset is considered personal data. When we remove personal data from an information or dataset about you, the remaining data in that dataset is no longer considered personal data. This process is called anonymization. In principle: If we ask you to provide certain personal information, you can of course refuse. You decide what information you provide to us. However, we may not be able to provide you with the services you require (or not in an optimal way). For example, we cannot deliver a package to you without your delivery address. If only certain information is required for the provision of a service (mandatory data), we will inform you of this expressly.

1.1 Profile data

Profile data is personal and demographic information about you (basic data) and your personal interests that you provide to us when you register for a customer account. Your profile data includes for example:

- your first and last name

- your contact details

- your preferences, e.g. regarding brands, product types or styles

- demographic information, such as your gender, age and location

Required information is generally your name, email address and the password you choose. Your email address and password will be your login information.

Profile data may also include other information about you and your interests. This information can be entered when you register for the service or can be added later. This is the case, for example, if you voluntarily add information to your profile at a later date or if you want to use your customer account to register for a service that requires other mandatory information.

Tip

If you are logged in to your customer account, you can view your profile data and change it directly in most cases, e.g. to update your address if you move.

1.2 Contact information

When you contact us, we enter your contact information. Depending on how you contact us (e.g., by phone or email), your contact information may include your name, mailing address, phone numbers, email address, social media profile details (e.g., we receive your Facebook ID if you contact us via Facebook), username and similar contact information.

1.3 Purchase Data

If you place an order with Kadolis, we capture your purchase data. Depending on the type of sale and the processing status, the purchase data may include the following information:

- Order reference

- Details of the items purchased (description, dimensions, color, price, etc.)

- indication of the payment method

- delivery and billing address

- notifications and information about the purchases (e.g., withdrawal statements, complaints and customer service notifications)

- delivery and payment status, e.g. "Completed" or "Sent

- Return status, e.g. "Closed

- Information from service providers involved in the execution of the contract (for distance sales, shipper tracking number)

Tip

In your customer account, you can view your most important purchase data at any time under "Order History", "Track My Returns" and "Addresses".

1.4 Payment data

We offer you the payment methods that are customary in the online trade, such as credit card payment or PayPal. For the processing of payments, we will enter the payment data you have provided. Credit checks may be carried out by the payment service provider. We only pass on the data necessary for the execution of the payment to our payment service providers. The payment data are for example:

- payment method

- billing addresses

- credit card data

Depending on your payment method, several companies may handle your payment and credit checks in connection with purchases in the Kadolis store.

In the section "To whom is my data transmitted?" you will find information on external financial service providers. You will also find specific information on the protection of the data that we provide to you on behalf of the payment service provider, if applicable.

1.5 Data of interest

When you interact with our services, the data generated provides us with information about content, topics, products, product types, brands. For example, we can infer from your purchase data, the content of your preference list and your age (if we have this data), as well as from comparisons with users with similar characteristics, the product categories that interest you. When you next search, we can then show you, first, the products you are most likely to be interested in.

1.6 Notifications, content of interviews

When you contact us or other users about products (e.g. customer reviews) and other topics by phone, mail, social networks, contact forms or in any other way, we will capture the content of your notifications.

If necessary, we will forward the notifications to the appropriate department, e.g. to partner companies or the manufacturer. In this case, we will only forward your question to the appropriate department without your personal information.

If you send us information for other users (e.g. customer reviews) via the function provided for this purpose, we may publish it within our services.

To communicate with customers and users, Kadolis also uses social networks, such as Facebook, Instagram or Pinterest. We use these popular platforms to offer you, in addition to our own communication channels, further contact and information possibilities. Please note, however, that we have no influence on the terms of use of the social networks and services that are available to you.

and that we have only limited influence on their data processing. We therefore ask you to carefully check the personal data you provide to us on social networks. We have no influence on the behavior of the operators of the social networks, other users and any third parties who cooperate with the operators of the social networks or who also use their services.

1.7 Social Network Data

Kadolis maintains profile pages (so-called "fanpages") in various social networks. In addition, the services offered by Kadolis may include social networking features. These may include messaging services, as well as login tools or social modules such as "Login with your Facebook account". If you interact with us through our social network profiles, or if you use social networking features built into our Services and are a member of the relevant social network, we may receive personally identifiable information from the social network operator. Typically, we may have the following data:

- Details from your public profile, stored by the social network in question (e.g. name, profile picture etc.)

- Details of the device you use to log in

- The account ID of your profile with the relevant network (such as the Facebook ID)

Please also refer to the information on the processing of data from social networks in the area of social networking functions in the chapters "Information on websites and apps" and "Information on social network fanpages".

Currently, Kadolis uses Facebook messaging services and social modules / social login tools for the following social networks:

- Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). Here is the link to Facebook's privacy policy: from Facebook.

- Pinterest Inc, 635 High Street, Palo Alto, CA, USA ("Pinterest"). Here is the link to Pinterest's privacy policy: Pinterest's Privacy Policy.

1.8 Geolocation Data

For specific purposes, we capture data about the current location of your device when you use our services.

We derive geolocation data derived from the IP address of your device. This data is used only to calculate the taxes of the user's country/province, and thus display prices in accordance with the user's country.

What are IP addresses?

Each terminal connected to the Internet is assigned a unique multi-digit number (e.g. 193.99.144.85). This is the IP address.

The first three digits of an IP address are usually assigned to a specific region or Internet provider. This means that the IP address can be used to determine the approximate location of the Internet connection.

1.9 Data provided in connection with actions

If you participate in one of the activities organized by Kadolis (e.g., a contest), we ask you for personal information. For example, in the case of a contest, we usually ask for your name and e-mail address so that we can inform you if you have won and to ensure that each participant only participates once.

1.10 Terminal and Access Data

When using online and mobile services, it is inevitable that technical data will be generated which will be processed in order to provide and display on your device the functions and content offered. We refer to this as "device and access data". Device and access data are generated as soon as you use online or mobile services. It does not matter which provider is involved. Device and access data are generated, for example, when using :

- Internet sites

- Apps

- social network fanpages

- e-mail newsletters (when your interaction is recorded)

Kadolis collects device and access data for the online and mobile services that it offers itself (e.g. the Kadolis store). In addition, Kadolis may also receive device and access data from the online and mobile services of other companies insofar as they are social networking partners of Kadolis. Further information can be found in the chapters "How does Kadolis use my data for advertising purposes" and "Information on social network fan pages".

Device and access data includes the following categories:

- General device information, e.g., information about the type of device, operating system version, configuration settings (e.g., language, system permissions), information about the internet connection (e.g., mobile network name, connection difficulties), and about the app used (e.g., app name and version).

- Identification data (IDs), such as session IDs, cookie IDs, terminal identification numbers (e.g. Google Ad ID, Apple Ad ID), account IDs of third-party providers (if you use social plugins or social logins or pay via PayPal) and other common Internet technologies, in order to be able to recognize your browser, your terminal.

- Access data that is automatically transmitted to web servers and databases of web applications and browsers (as part of HTTP requests) whenever you go online. This includes standardized information about the requested content (such as the name and type of file accessed), as well as information about the access to the server (such as the volume of data transmitted and error codes), your terminal (e.g. type of terminal, operating system, software versions, terminal identifiers, IP address, the page accessed later and the time of access).

2. What does Kadolis use my data for?

Kadolis processes your data in compliance with all applicable data protection laws. In this respect, we naturally comply with the principles of data protection law applicable to the processing of personal data. Thus, we will, in principle, only process your data for the purposes indicated in this privacy policy or when you enter your data. This primarily concerns the processing of purchases and the provision, customization, development and security of our services. In addition, we use your data within the limits of the strict rules of Canadian and American data protection law, but also for other purposes, such as product development and market research, for optimizing business processes, tailoring our services to your needs, and personalized advertising.

In this chapter we tell you on which legal grounds we process data. Depending on the legal basis for the processing of your data, you may have other special data protection rights in addition to the rights you already have, such as the right of access. In some cases, you have the right to object to the processing of your data. Further information can be found in the section "What are my data protection rights?

2.1 Processing of purchases and provision of online, local and personalized services

We process your data to the extent necessary for the purpose of fulfilling the contract and for the provision and performance of any other services you have requested, as described in this privacy policy. The purposes of data processing thus depend on the purpose of the contract with you (including our general terms and conditions of sale and any service-specific terms and conditions or terms of use) or the services you have requested. The main purposes are:

- The provision, customization and adaptation of our services to the needs as the Kadolis store (including their website, apps and multi-terminal functions).

- The implementation of customer programs (e.g. loyalty, VIP sales).

- The execution of sales contracts and the provision of customer service, including the processing of shipments and payments, as well as the processing of returns, claims and warranty cases.

- The provision of messages, notifications, newsletters and other direct communications, if this is an integral part of our contractual services or the services you request.

Examples

If you have signed up for our newsletter, you will receive our regular Kadolis newsletter informing you of current promotional campaigns and Kadolis news.

- Ensuring the general security, operation and stability of our services, including blocking attacks.

- Non-advertising communication with you on technical, security, and contractual matters (e.g., warnings about fraud, account blocking, or contract changes).

- Issuance, redemption, and delivery of Kadolis vouchers.

Kadolis uses the services of external financial service providers for payment processing. You will find more information on external financial service providers in the section "To whom will my data be transmitted?

2.2 Personalization of shopping

We process your data in order to provide you with comfortable and useful services that best meet your needs and interests. Since the Kadolis store's offer includes multiple products, it is necessary for us to present our content and offers according to your needs, so that you can find the products that really interest you. This requires an analysis of the relevance of products and content for each user.

To personalize shopping in the Kadolis store, we use terminal and access data that we capture for usage analysis. In addition, we also use terminal and access data that we receive from our advertising partners during your visit to the Kadolis store. If you are logged into your customer account during your visit to the Kadolis store, we also use profile data, interest data and purchase data for shopping personalization. We call this form of shopping personalization on-site optimization. Only through such shopping personalization can we present you with results, tailored product suggestions, and other content that effectively matches your interests. Without this personalization, which many online stores use today, your product searches would be less comfortable and more time-consuming, and the benefits of our offers would be less. Of course, you still have access to all content despite shopping personalization. However, shopping personalization allows you to see the content you are interested in sooner.

More information

You can find out more about how shopping personalization works on the Kadolis websites and apps in the "Shopping Personalization" section.

You can find more information about Kadolis' personalized services in the "Personalized Services" section.

2.3 Prevention of fraud, choice of payment methods and credit check

Prevention of fraud

In order to prevent any risk of data security breaches, user data is transmitted encrypted to the payment services. This applies to both your orders and the registration with the customer account. For this purpose, we use the SSL (secure socket layer) encryption system. Thanks to the encryption, the data is not accessible to third parties. In order to protect ourselves against external attacks, we use special security technologies that continuously monitor our systems and recognize and display any irregularities directly. In addition, we secure our systems with technical and organizational measures against loss, destruction, access, modification or distribution of customer data by unauthorized persons. In this way, we want to reduce the risk of unauthorized access as much as possible, as we consider the protection of your data to be of central importance. At the same time, we cannot guarantee absolute protection, just like any other company.

We use technical and manual procedures for the prevention of fraud to protect our users and ourselves against the violation of your data, especially by fraudulent orders. To this end, we may reverse orders or disable accounts to minimize the risk of fraudulent orders and to protect users whose accounts may have been hacked.

If our security system detects an attempted fraud or a high risk of fraud, the transaction in question is forwarded to the appropriate Kadolis team for manual review. In view of the risk of fraud, appropriate preventive measures are taken (e.g. temporary blocking of the customer account or restriction of the payment methods offered).

Choice of payment methods

In deciding which payment methods will be offered, the total cost of the specific payment method to Kadolis and the availability of the payment method in the country concerned are also taken into account.

2.4 Advertising and market research, data analysis

We use your data for advertising and market research purposes, including in the context of data analyses. In particular, we pursue the following objectives:

- The division into various target groups or user groups for market research purposes (user segmentation).

- Advertising to loyal customers.

- Direct advertising, e.g. in the form of newsletters.

- Findings on how our services are used (usage analysis).

Info

Depending on the purpose, we use the data stored with us to perform data analyses. For example, for analyses of the purchasing habits of our users, we use summary, statistical profile data as well as purchase data, in order to be able to understand and analyze the purchasing processes by means of data analyses. In this way, we obtain information about the general usage patterns of our users.

We process your data on the basis of a balancing of interests in order to safeguard our legitimate interests. The legitimate interests of Kadolis in the processing of data result from the respective purposes. In the absence of any provisions to the contrary, they are of a competitive and economic nature.

2.5 Product and Technology Development

We use your data for product and technological development, including the development and improvement of personalized services. In this respect, we use abbreviated, pseudonymized or anonymized data. The processing of data for the purposes of product and technology development includes the following purposes

- The development and improvement of personalized services and technologies for data analysis and personalized online shopping.

- The development of technologies and concepts for the improvement of IT security, the prevention of fraud and the improvement of data protection, e.g. through pseudonymization, encryption and anonymization techniques.

- The development and testing of software solutions for the optimization of necessary business and logistical processes.

2.6 On the basis of your consent

If you have consented to the processing of personal data, your consent is primarily the legal basis for our processing of your data. The data we process on the basis of your consent depends on the purpose of your consent. Typical purposes are for example:

- Subscription to a newsletter.

Withdrawal

You can change and withdraw your consent to receive newsletters by e-mail.

Further information can be found in the section "What are my data protection rights?

2.7 Other purposes

If permitted by data protection law, we may use your data without your consent for other purposes, for example to perform data analysis and to develop our services and content. This assumes that these new purposes for which the data is to be used did not exist at the time the data was collected or could not be foreseen, and that the new purposes are consistent with the purposes for which the data was originally collected. For example, legal or technical developments, as well as new business models and services, may require new processing purposes.

3. Customized services

The development and provision of personalized features and services is important to us. Regardless of the location, time and terminal used, we offer you an individual shopping experience and an offer that is perfectly tailored to your personal interests. Therefore, the processing of your data for the purpose of personalizing our services is an integral part of the services offered by Kadolis.

Examples

- If you create a list of favorite products on Kadolis, you will be able to consult and process it later on the Kadolis website.

- If you are a subscriber to our newsletter, we can show you products that match your current orders.

- We also take your previous orders into account when recommending new products that may match your purchasing preferences.

3.1 What are personalized services?

With personalized services, we can offer you better, more convenient and safer services. In this regard, we use the data we have about you to identify your needs and interests. On this basis, we can offer you content that better matches your needs and interests. Of course, you always have access to all content. Thanks to personalization, you will see the content that interests you the most at an earlier stage, or this content will be presented to you in particular (e.g. as individual product suggestions).

3.2 What is the purpose of the customer account?

Most of our personalized services require the creation of a customer account so that we can store the data we collect about you in one place.

3.3 What data is stored in my customer account?

The data we collect about you, as well as your customer ID, is stored in your customer account. The customer ID does not contain any personal data. Your data will be cross-referenced with your customer ID so that it can be assigned to your customer account.

3.4 What data is used for personalization?

The selection of personalized content is in principle based on data stored in your customer account or data. Geolocation data is used to display the prices with the applicable taxes in the country/province.

3.5 Your options

In your customer account, you can view most of the data we have stored in your customer account at any time. If necessary, you can change these data at any time.

4. Information about the websites

We use your data to provide the websites. In addition to the terminal data and access data generated during each use of these services, the type of data processed, as well as the purposes of the data processing, depend on how you use the functions and services available via our services. In addition, we use the data generated during the use of our services to determine how our online offer is used. We use this information for such purposes as shopping personalization to improve our services and to provide personalized advertising.

4.1 Supplier

KADOLIS CANADA Inc

1084 de l'Eglise Street

Montreal, Quebec, H4G 2N5

4.2 What data is collected?

In principle, we save all data that you transmit to us directly via our services.

Terminal and access data

Terminal and access data is generated and stored in server log files whenever our servers and databases are accessed. The IP address is anonymized within a short period of time after access, as soon as storage is no longer necessary for the continued operation of the respective website.

Login

For users who register for a customer account or other service, we provide a personal password-protected access. If you do not log out after logging in with your access data, you will automatically remain logged in to most of our services. Depending on the type of service, a cookie or comparable technology is used. This feature allows you to use some of our services without having to log in again. For security reasons, however, you will be prompted to re-enter your password, for example if you wish to change your profile data or place an order. You will find more information in the "Personalized Kadolis Services" section.

Social Logins

In some of our services, we may offer you the possibility of registering with us directly via your social network account. If you wish to use this function, you will first be redirected to the offer of the social network concerned. You will be asked to register with your user name and password. Of course, we do not know your registration data. If you are already logged in, this step will be skipped. The social network concerned will then tell you which data will be transferred to us (e.g. public profile, list of friends, e-mail address and current address) and ask you to confirm this. We use the data you provide to create your customer account, but we do not, of course, store your list of friends. There is no permanent connection between your customer account and your account with the social network. In addition, the providers of the relevant social networks provide us with social network data.

4.3 Online Advertising/Retargeting

Our website contains cookies and tracking technologies from advertising partners who operate an online advertising network. Thus, our advertising partners can also capture your terminal and access data and present you with personalized advertisements on other websites, even those operated by other providers, tailored to your interests (e.g. advertisements based on the products you have viewed in the Kadolis store).

You will find more information in the paragraph "How is my data used by Kadolis for advertising purposes?"

4.4 Usage Analysis

In all our services, we use standard tracking technologies to analyze terminal and access data. This enables us to find out how our offer is generally used by our users. For this purpose, identification cookies and comparable identifiers are used. In this way, we learn, for example, which content and topics are particularly popular, when our services are most frequently used, in which regions our services are used and which browsers and devices our users generally use.

You will find the tracking tools used on our website in the section "Information about the individual websites".

5. Information on social network fanpages

Kadolis maintains profile pages (called "fanpages") in the social networks Facebook Pinterest and Instagram. We regularly publish and share content, offers and product recommendations on our fanpages. The operators of the social networks record your usage behavior by means of cookies, and similar technologies, with each interaction you have on our fanpages or on other pages of Facebook Pinterest or Instagram. Fanpage managers have access to general statistical data about the interests and demographics of the users visiting a fanpage (e.g. age, gender, region etc.). When you use social networks, the operators primarily determine the type, scope and purpose of the data processing that is collected there.

5.1. Supplier / Responsible Party

Kadolis, the company acting as the responsible provider of a fanpage, is listed in the legal notice of the fanpage in question.

The social networks Facebook and Instagram are both maintained by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The social network Pinterest is maintained by Pinterest Inc, 635 High Street, Palo Alto, CA, USA ("Pinterest").

To the extent that you communicate directly with us through our fanpages or share content with us, Kadolis is responsible for processing your data. An exception applies to the processing of data for the purpose of usage analysis ("Page Insights"), a situation described below. In this case, we are jointly responsible with Facebook.

Processing of your data by Facebook

Please note that Facebook also processes your data when you use our fanpages for purposes that are specific to Facebook, which is not covered by this privacy policy. We have no influence on these data processing operations of Facebook or Pinterest. In this regard, we refer to the privacy policies of the respective social networks:

- Facebook privacy policy

- Privacy policy of Instagram

- Privacy policy of Pinterest.

5.2. What data is collected?

When you visit our fanpages, Kadolis collects all of the communications, content, and other information that you provide to us directly, such as when you post something on a fanpage or send us a private message. Of course, if you have an account with a social network, we may also see your public information, such as your username and public profile information, as well as the content you share with the public. However, Kadolis does not in any way collect this data electronically for further use.

Analysis of usage ("Page Insights")

Whenever you interact with fanpages, Facebook and Pinterest use cookies and other similar technologies to track your user behavior when you visit a fanpage. Based on the information collected, the operators of fanpages obtain statistical data relating to site visits. This data is referred to as "Page Insights". Page Insights" contain only anonymized statistical information about the persons who visit the fanpage, i.e. the data cannot be traced back to individual persons. We do not have access to the personal data that Facebook uses to obtain its Page Insights ("Page Insights Data"). The selection and processing of Page Insights Data is done exclusively by Facebook and Pinterest.

Page Insights provide us with information about how our fanpages are used, what our fanpage visitors are interested in, and which topics and content are particularly popular with users. This allows us to optimize the activities we carry out on our fanpages, for example by planning and selecting content in such a way that it is better aligned with the interests and uses of our target audience.

Kadolis, Pinterest and Facebook have a joint responsibility to process your data for the purpose of obtaining 'Page Insights'. For this reason, we have entered into an agreement with Facebook to determine which of the companies will comply with the data protection obligations regarding the processing of data for the statistical evaluation of user behavior.

To learn more about Page Insights, you can read the agreement with Facebook here: https://www.facebook.com/legal/terms/page_controller_addendum

Facebook has summarized the key aspects of this agreement (including a list of Page Insights data) for you to review here: https://www.facebook.com/legal/terms/information_about_page_insights_data

5.3. What are my data protection rights?

Of course, your rights to privacy as set out in the section "What are my data protection rights?" also apply to the processing of your data in connection with our fanpages.

For the processing of your 'Page Insights' data on Facebook, we have agreed with Facebook that the latter will bear the primary responsibility for providing you with information about your 'Page Insights' data and for enabling you to exercise your privacy rights (e.g. the right of objection). You can find more information about your data protection rights in connection with Page Insights, and how you can exercise those rights with respect to Facebook, here: https://www.facebook.com/legal/terms/information_about_page_insights_data

6. Newsletter

We offer a newsletter service. When you subscribe to the newsletter, you will receive information about the topics covered in the newsletter. We use a third party company to send our newsletters. When our newsletters are accessed, we also collect terminal and access data.

6.1 How do I sign up?

We use the single opt-in method to send our newsletters that require registration (such as the Kadolis store newsletter). This means that we will only send you a newsletter if you have expressly agreed to activate the newsletter service.

6.2 Unsubscribing

If you do not wish to receive newsletters in the future, you can opt out at any time without paying any costs other than the basic transmission costs. All you need to do is send a written message (e.g. e-mail, letter) to the Kadolis company responsible for the newsletter. Of course, you will find an unsubscribe link in each newsletter.

6.3 What data is collected?

When you subscribe to a newsletter, we automatically record your IP address and the time of subscription. This allows us to prove that you have actually subscribed and to detect any fraudulent use of your e-mail address.

When sending newsletters, we communicate the e-mail addresses subscribed to the newsletter to our partner Spread who is responsible for relaying the newsletter to them. Spread is a company specialized in this kind of service, we have an agreement with them on the confidentiality of the data we send them. Here is their page explaining how they respect the rules in force on the personal data:

GDPR and Spread

We capture terminal data and access data generated when you interact with a newsletter. For this purpose, newsletters contain references to graphic files stored on our web server. When you open a newsletter, your email program downloads these graphics files to our web server. This way, we know if, when and which newsletters you have opened. The links in the newsletters also contain your newsletter ID so that we can capture the content that interests you. This shopping personalization is an integral part of the Kadolis Shop newsletter.

Of course, you will find an unsubscribe link in every newsletter. You can find more information in the section "What are my rights regarding data protection?

You can also deactivate the display of images in your e-mail program. In this case, the newsletter cannot be displayed in full.

7. Individual product suggestions by e-mail

In connection with our services, we present you with information and offers from Kadolis based on your interests. You will receive these personal product suggestions even if you have not subscribed to our newsletter. To select the individual product suggestions, we first use your current shopping cart and profile data in accordance with the law.

8. Gift vouchers

We use the data provided when ordering Kadolis gift certificates to verify and process the order, as well as to send and validate the gift certificate. This also includes the recording and processing of data relating to the use of the voucher, including the prevention of fraud.

For this purpose, we also store the following data

- date of issue

- value of the voucher

- voucher code

- Personalization data (if you specify it)

- name of the recipient (for personal vouchers)

- time of voucher validation

- name of the person validating the voucher and ID of the customer account used for the validation.

9. To whom will my data be transmitted?

Kadolis will only share your data if authorized by Canadian or U.S. data protection laws. We work very closely with certain service providers, with technical service providers (e.g. server hosts) or with logistics companies (e.g. postal operators). These service providers may in principle only process your data on our behalf under certain conditions. If they are our subcontractors, they will only have access to your data to the extent and for the period necessary to provide the service concerned.

9.1 Shippers

For the delivery of orders, we work with external carriers (e.g. Purolator). We provide the carriers with the following data for the purpose of performing their duties:

- your name

- your delivery address

- your telephone number, if applicable

- your e-mail address, if any

9.2 Technical service providers

We work with technical service providers in order to be able to provide you with our services. Net-Concept (a French company) is our hosting provider and therefore owns the rights to our server. Kadolis ensures that our provider guarantees a legally sufficient level of confidentiality by contract or in any other way.

9.3 Financial Service Providers

Kadolis offers various payment methods, such as prepayment, credit card payment, and payment by PayPal. For this purpose, payment data may be transmitted to financial service providers with whom we work. For more information on the processing of your personal data by financial service providers, please see their privacy policy:

- PayPal (Canada) PayPal Canada Co, MaRS Centre, West Tower, 661 University Avenue, Toronto, ON M5M 1G1.

More information can be found in PayPal's privacy policy.

9.4 Authorities and Other Third Parties

If we are required to do so by an authority or court order or for the purpose of legal or criminal proceedings, we will provide your data to prosecuting authorities or other third parties.

10. What are my data protection rights?

You have the following data protection rights: right of access, right of deletion, right of rectification, right to restrict data processing, right to data portability, right of objection to a data protection supervisory authority, right of withdrawal of consent, as well as right of withdrawal from certain data processing measures. If you wish to exercise your data protection rights, you can contact our data protection team at any time at [email protected]. Further information can be found in the section "Contact persons".

Important notes:

- To ensure that your data is not passed on to third parties when making inquiries, please enclose sufficient proof of your identity with your inquiry by e-mail or post.

Advice

As a rule, it is sufficient to send us your request using the e-mail address registered in your customer account.

- You can change most of your data in your customer account yourself. For all other cases, please contact our customer service.

- The jurisdiction of the data protection authorities depends on the head office of the competent body. However, you can decide to contact the data protection authority of your place of residence, which will then forward your complaint to the competent authority.

- If you have given your consent to the processing of your data, you may withdraw it at any time. The right of your data to be processed prior to your withdrawal remains unaffected by the withdrawal.

- You may object at any time and without giving any reason to the processing of your data for advertising purposes, including direct advertising (also in the form of data analysis).

- If the processing of your data is based on a balancing of interests (e.g. the notification of creditworthiness data to an external information agency), you can object to the processing of the data. If you object, we ask you to state the reasons for your objection. If your objection is justified, we will examine the facts either before suspending or adjusting the data processing or before informing you of our compelling and legitimate reasons for the continued processing of your data.

11. When will my data be deleted?

Your personal data will be stored for as long as is necessary for the purposes of this privacy policy, in particular for the fulfilment of our contractual and legal obligations. Where applicable, we also store your personal data for other purposes, if and as long as we are permitted by law to store it for a specific purpose, including the defence of a right.

If you close your customer account, we will delete all stored data about you. If complete deletion of your data is not possible or not necessary for legal reasons, the data concerned will be blocked for further processing.

What does blocking mean?

If data is blocked, access rights are restricted and other technical and organizational measures are taken to ensure that only a few employees have access to the data concerned. These employees can only use the blocked data for the defined purposes (e.g. to submit it to the tax office in case of a tax audit).

For example, data is blocked in the following cases:

- Your order and payment data, as well as any other data, are generally subject to various legal storage obligations, e.g., under the Commercial Code and the Tax Code. We are legally obliged to keep this data for ten years for tax inspections and audits. We can only permanently delete the data concerned at the end of this period.

- Even if your data is not subject to any legal retention obligation, we may, in cases provided for by law, dispense with immediate deletion and first block it. This applies in particular in cases where we require the data concerned for the continued performance of the contract or for the purposes of legal proceedings or the defence of rights (e.g. in the case of complaints). The statutory limitation periods are the decisive criteria for determining the duration of the blocking. Once the statute of limitations has expired, the data concerned will be permanently deleted.

The deletion of data can be waived in the cases provided for by law if the data are anonymous or pseudonymous and if the deletion makes processing for scientific research or statistical purposes impossible or seriously impairs it.

12. How is my data protected by Kadolis?

We transmit your personal data in encrypted form. This applies to your order and your customer login. To this end, we use the SSL (Secure Socket Layer) encryption system. In addition, we secure our websites and other systems with technical and organizational measures against the loss, destruction, access, modification or distribution of your data by any unauthorized person.

13. Changes to this Privacy Policy

As we continue to develop our websites and apps, and as we implement new technologies to improve our service to you, changes to this Privacy Policy may be necessary. Therefore, we recommend that you review this Privacy Policy from time to time.

14. Contact Information

At [email protected], you can contact our data protection team at any time for general questions about data protection and the exercise of your rights.

To contact our data protection officer directly, please send a letter to the address below, mentioning on the envelope "For the attention of the data protection officer. Kadolis Canada Inc., 1084 de l'Eglise Street. Montreal, Quebec, H4G 2 N5" E-mail: [email protected]

15. Information relating to each service

Our data processing may differ from one service to another. Here you can learn about the specific differences between each service.

Google Maps

Our website uses Google Maps services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA ("Google"). This service allows Kadolis customers to find the nearest collection point for their orders from their location. In order for Google Maps to enable this feature, your browser must establish a connection with a server operated by Google that is likely to be in the United States. Google is subject to the EU-US Privacy Shield in the event that personal data is transferred to the United States. Thus, Google receives the information that the page of our website on the collection points was accessed by the IP address of your terminal.

If you visit the Google mapping service on our website while logged into your Google profile, Google may associate this event with your Google profile. If you do not want this assignment to your Google profile, you must log out of Google before opening our contact page. Google stores your data and uses it for advertising, market research and to personalize the display of Google Maps. You can object to this data collection with Google.

Further information can be found in the Google privacy policy and the additional terms of use of Google Maps.

16. Country-specific information

Our data processing may differ from country to country. You can find out about the country-specific differences here.

17. Information about cookies

Here you can find out about the cookies we use. Here you will find an overview of all the cookies we use https://www.kadolis.com/fr/content/12-cookies