Data protection policy

d’aucy France (hereinafter the Publisher) collects and processes data via the website
www.daucy-international.com.

The Publisher undertakes to ensure that the collection and processing of this data complies
with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with
regard to the processing of personal data (the GDPR) and the French Data Protection Act.
This policy may be updated at any time by the Publisher, particularly in order to comply with
any regulatory, case-law, editorial or technical changes. The User of the Website should refer
to the latest version of this policy before browsing.

Cookies
A cookie is a small computer file for tracking purposes, which is placed and read when
visiting a website, for example. These tools are used subject to your consent if they are not
strictly necessary to the operation of the website concerned.
Here is a list of the cookies used on the website:
Cookies Type Duration Description

viewed_cookie_policy Necessary

Stored for
395 days, i.e.
13 months

This cookie is defined by the GDPR
Cookie Consent plugin and is used to
record whether or not the user has
consented to the use of cookies. It does
not store any personal data.

_ga

Google
Analytics
statistics

Stored for 13
months

A set of cookies used to collect
information and generate reports on
website usage statistics without
personally identifying visitors on Google.
You may accept or reject the placement of cookies by using the settings module on the
Website. On the other hand, rejecting some cookies may worsen the user’s experience of the
Website.

Personal data
The data collected depends on the products, services and features used. Data collected vie the
Website may include:

– Identity-related data: first name and surname
– Contact data: email, postal address, country
– Cookies: some cookies may include personal data: google analytics

Personal data related to social media buttons: When the user clicks these buttons,
the Publisher may have access to the personal information that Users have marked
as public which is accessible from their social media profiles.
The Publisher wishes to point out that certain information you voluntarily provide in the free
comment area may relate to special categories of data within the meaning of the GDPR (i.e.
philosophical opinions, trade union membership, political opinions, religious opinions,
ethnicity or race, sex life or sexual orientation, health, genetic data and biometric data). This
data is provided under your sole liability and is supplied solely at your initiative. When you
tick the consent box, you expressly consent to the Publisher processing these special
categories of data.

Purposes
Data is only collected if strictly necessary to the intended purpose. The data is used,
processed or disclosed in order to respond to all your requests in the contact form.
Some personal data may be processed by virtue of a legal obligation, particularly in order to:
– process health alerts
– react to whistleblowers’ reports pursuant to the Sapin II Act
Lastly, some personal data may also be collected during statistical studies or analysis of the
website by the Publisher in order to improve the browsing experience on the Website or to
offer products and services tailored to Internet users’ preferences.

Legal basis for processing
Response to contact requests: the legal basis for processing is the performance of a contract
(see Article 6 (1) (b) of the European Data Protection Regulation).

Recipients
Personal Data is not transferred to business partners.
The Personal Data collected is intended for the Publisher, the Data Controller, the
subsidiaries of the Eureden Group, the assignee in the event of an assignment of funds or
transfer of assets, potential sub-processors for the sole purposes of operational or technical
subcontracting, the State, the national supervisory, administrative or judicial authorities, any
public body upon request to do so and to the extent permitted by the regulations, and certain
regulated professions, such as lawyers.

Data retention period
The Personal Data will be kept for the duration of the purpose pursued up to a maximum of 5
years, except in the case of legal or regulatory obligations requiring certain documents or
information to be stored for a specific period of time.

Exercising your rights
In accordance with the GDPR, Users of the Website have a right of access, rectification and
deletion, as well as a right to restrict the processing of their Personal Data. Within the limits
set out in the GDPR, Users may object to this processing and they have the right to data
portability.
These rights may be exercised (i) by emailing dpo-rgpd@eureden.com or (ii) by writing to
the following address: d’aucy France, Data Protection Officer, Kerlurec – ZA de St Leonard
Nord, 56450 THEIX NOYALO, FRANCE.
Users must prove their identity and indicate the context in which they have transmitted their
Personal Data (date of the complaint and/or reason).
In the event of a dispute over the conditions relating to the collection and processing of their
Personal Data, Users also have the right to lodge a complaint with the French National Data
Protection Authority (CNIL) (www.cnil.fr) in France.
Users may also give instructions on the storage, deletion and disclosure of their Personal Data
after their death. In the absence of instructions on their part, Users are informed that their
heirs have the right to object to the further processing of their Personal Data or to have it
updated.
If Users access Personal Data when visiting the website, they must refrain from collecting
and using such data without authorisation and not commit any act that may infringe the
privacy or reputation of other persons. The Publisher accepts no liability in this respect.