(Version updated on: 19.05.2021)

The protection of your personal data (hereinafter "DCP") is an important concern for our company. We treat the personal data that you communicate to us confidentially and in accordance with all the other requirements arising from the applicable legal provisions.

Below, we tell you which personal data we may need to process depending on the relationship between our company and you, what is the legal basis for this processing and what is the period during which we keep these personal data.

1. Data controller

Lépine Group

Postal address: 175, rue Jacquard CS50307 69727 Genay Cedex

Phone: +33 472330295, Fax: +33 472359650

Email: info@groupe-lepine.com

2. Responsible for the protection of personal data

If you have any questions regarding the protection of personal data, please contact our data protection officer via the contact form on the website, by email at privacy@groupe-lepine.com, or by mail at above with the addition "responsible for the protection of personal data".

3. Processing of personal data

We only collect, process and use your personal data if we have a legal basis for this or if you have given us your consent separately. We adhere to the principles of economy and minimization of the collection of personal data by collecting them only when necessary.

4. Your rights

In accordance with the legal and regulatory provisions in force, you have the following rights over your personal data:

- Permission to access.

- Right of rectification, in order to correct inaccurate or incomplete personal data concerning you.

- Right to erasure, subject to compliance with our legal obligations and the public interest.

- Right to object to the processing of your personal data, if the processing is based on legitimate interest.

- Right to portability, when the processing is based on your consent, or on a contract to which you are a party.

- Right to limitation, according to the specific provisions provided for by the General Data Protection Regulation (GDPR).

- The right to revoke your consent at any time.

You can exercise these rights by contacting the data protection officer using the means described in 2. As part of your request, we may need to verify your identity, and if necessary ask you for a copy of your document. identity.

5. Disclosure of personal data

We only pass on your personal data to other controllers if this is necessary for the performance of the contract or if you have given your consent. If necessary, we send your DCP to the following recipients:

- Affiliates of Groupe Lépine and their internal departments responsible for processing your request, transfer or application,

- Tax, audit or other authorities, if the law or any other regulation requires us to disclose this information,

- External service providers as well as IT service providers and external storage providers, if there is a corresponding processing contract (or a comparable title).

We will not pass your DCP on to third parties for advertising purposes.

6. Retention period of personal data

In principle, we keep your personal data for as long as this is necessary to achieve the purpose of the processing. Their subsequent archiving is carried out only in the cases where we must continue to keep them to fulfill legal or regulatory obligations.

7. Information specific to each category of data subject

• For customers / suppliers / service providers

We collect and process personal data from our customers, service providers and suppliers which are necessary for the performance of the contract, i.e. in particular contact details such as names of contact persons, telephone numbers and professional e-mail addresses, but also banking and contractual data.

The following categories of personal data are covered:

- Communication data (e.g. name, telephone, e-mail, address)

- Basic contract data (contractual relationship, product or contractual interest)

- History of the commercial relationship

- Contract billing and payment data

- Information (from third parties, e.g. credit agencies or public directories)

We use these DCPs in order to:

- Process and manage orders (including order finalization, payment and delivery)

- Manage customer relations

- Manage any dispute relating to an order

- Manage the follow-up of our products (traceability)

- Evaluate satisfaction

The collection of these personal data is based on the following legal bases:

- The execution of a contract to provide the service

- The legitimate interest of the Lépine Group in ensuring its protection against possible fraudulent transactions and payment default

- In addition to the execution of the contract, the processing may be based on the legitimate interests of our company or on your consent

We keep these personal data for the duration of the contractual relationship and, after the end of it, archive or delete them within the applicable legal or regulatory limitation period.

These personal data are used within the internal services of the Lépine Group. They may also be sent to companies with which we are in contact, such as those responsible for the execution and processing of payment for the order, and for its delivery.

No transfer of personal data to a third country is foreseen.

Personal data collected through general inquiries that do not lead to a business relationship will be deleted after a period of two years. The personal data collected for the management of requests allow us to:

- Respond to your requests

- If necessary, put you in touch with the appropriate service to manage your request

This treatment is based on:

- Consent to process your request

- The legitimate interest for the Lépine Group to better understand the expectations of its customers and partners in order to improve its service and its products

• For subscribers to the newsletter

We collect and process personal data from people who subscribe to the newsletter or have expressed an interest in receiving information from our company. In particular, this concerns contact details such as names of contact persons, telephone numbers and e-mail addresses.

We use these DCP to send you commercial communications, to inform you about our products and our news.

We keep these DCPs as long as the newsletter is issued. Or when the subscriber withdraws their consent and activates the unsubscribe procedure.

A transfer of these DCPs to a third country is not foreseen.

The collection of these personal data is based on the following legal bases:

- Consent: you have given your consent to receive our newsletter

• For candidates for recruitment offers

We process the personal data that you send us as part of your application (in particular the CV, cover letter, and letters of recommendation) in order to verify your suitability for the position, or any other vacant position in our company. And, to have the information necessary for the selection of candidates in order to successfully complete the recruitment procedure.

The collection of these personal data is based on the legitimate interest of the Lépine Group in selecting candidates, in order to meet its recruitment needs for qualified personnel.

Personal data relating to candidates are intended solely for the internal services of the Lépine Group (Human Resources in particular). And will not be transferred to third parties, or to third countries.

If you have obtained a job at the end of the recruitment procedure, the personal data collected for this purpose will be transferred to our personnel management processing.

If you have not obtained a job at the end of the recruitment procedure, the personal data collected for this purpose will be deleted after a period of six (6) months following the date of effective recruitment.

• For site visitors

If you contact us by e-mail or via a contact form, the personal data you provide us (your e-mail address, your first and last name and your telephone number) will be stored by us in order to respond to your questions. We will delete the personal data thus collected as soon as storage is no longer necessary, or we will limit the processing if legal retention obligations exist.

A transfer of these DCPs to a third country is not foreseen.

When you use the website for informational purposes only, that is, if you do not register or provide us with information, we only collect DCPs that your browser transmits to our server. If you would like to view our website, we collect the following data, which is technically necessary for us to present our website to you and to ensure stability and security:

- IP adress

- the date and time of the request

- Content of the request (specific page)

Using script libraries (GoogleFonts)

In order to present our content correctly and graphically appealing on all browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) on this website. Google web fonts are transferred to your browser's cache memory to avoid multiple loads. If your browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font. The privacy policy of the operator of the Google library can be found here: https://www.google.com/policies/privacy/

8. Use of cookies

Cookies and similar technologies are small text files that are sent to your devices when you visit a website or application. They are widely used to make websites and applications work, or work more efficiently, as well as to provide information to the owners of the website and / or application.

Cookies on websites and apps do a lot of different things, like letting you navigate between pages efficiently, storing your preferences (such as login details, default language, font size, user settings, etc.) 'additional displays, etc.

In accordance with applicable law, your express prior consent to the use of cookies is not always required. In particular, such consent is not necessary for "technical cookies", ie those used for the sole purpose of carrying out the transmission of a communication over an electronic communications network, or as strictly necessary to provide a service explicitly requested by the user. In other words, cookies that are essential for the operation of a website or the performance of tasks requested by the user.

Internal cookies necessary for the site to function.

These cookies allow the site to function optimally. You can object and delete them using your browser settings, however your user experience may be degraded.

Audience measurement cookies

In order to adapt the site to the demands of its visitors, we measure the number of visits, the number of pages viewed as well as the activity of visitors to the site and their frequency of return.

As such, we use Analytics as a statistical tool

We also collect your IP address, in order to determine the city from which you are connecting. This is immediately anonymized after use. We can therefore under no circumstances use this data to identify a natural person.

You can choose to refuse cookies and statistical analysis of your browsing data.

To make this choice, go to the Cookie management page.

9. Changes to the information on the protection of personal data

We reserve the right to adapt our information on the protection of personal data according to the evolution of legal and regulatory requirements.