PERSONAL DATA PROTECTION POLICY

The purpose of this policy on the protection of personal data (hereinafter "Policy") is to inform visitors and users (hereinafter "You") of the operation of the website www.jardindacclimatation. fr (hereinafter "Website"), the manner in which Le Jardin d'Acclimatation, Société Anonyme, Bois de Boulogne 75116 Paris, France, registered with the Paris Trade and Companies Registry under number 582 110 995 (hereinafter referred to as "Le Jardin" or "We"), processes Your personal data (hereinafter referred to as the "Personal Data" or the "Data") and the rights that You have in this regard.

Le Jardin attaches the greatest importance and care to the protection of Personal Data.

Note: Le Jardin may have to modify the terms of this Policy, particularly in the event of the implementation of a new processing of Personal Data. You are invited to consult this page regularly to ensure that You agree with these modifications. In case of substantial changes, You will be informed of these changes either by a special mention on Our Website or by an e-mail notification.

1. What is "Personal Data"?

Personal Data means any information or set of information that allows You to be identified, either directly (e.g., last name, first name, e-mail address, home address, photograph(s), etc.) or indirectly (e.g., through pseudonymized Data such as a unique identification number, etc.). Unique identifiers may also be considered Personal Data, such as the IP address of your computer.

2. Who are the data processors responsible for protecting Your Personal Data?

A data controller is an organization that determines the purposes and means of processing Your Personal Data and that is responsible to You for compliance with the regulations applicable to the protection of Personal Data.

With respect to the management of the Website and communications related to information on the Website, Le Jardin is the data controller.

It can be reached:

* by using the contact form accessible by selecting 'personal data',

* by email to the following address: rgpd@jardindacclimatation.fr.

In the specific context of the processing of your ticket purchases, please note that some of Le Jardin's service providers who receive your Personal Data may act as Data Processors: this is notably the case for our payment management service provider (Adyen).

Indeed, payments are made via a secure payment platform, supplemented by control measures, including encryption measures of the details, in order to ensure the security of purchases made and to fight against fraud. Your bank details are therefore not accessible on Le Jardin's servers.

In this case, your Data will be processed in accordance with the personal data protection policy of this service provider, which is available on its website www.adyen.com. Similarly, the rights that You enjoy under the laws on the protection of personal data must be applied directly to this service provider.

3. How do we collect and why do we use the Personal Data we collect?

3.1 How do we collect Personal Data?

We collect Personal Data in the following ways:

* directly from You when You use our Website by filling in the various forms on it;

* automatically when You access or use the Website (technical data, IP address, information relating to your navigation, etc.).

3.2 What Personal Data are processed?

Le Jardin collects several types of Personal Data about You, including Your first name, last name, date of birth, email and login details, as well as Your contact information, in order to enable You to purchase a ticket to Le Jardin on Our Website.

You may be required to create an account on Our Website. You may be asked for additional information, such as Your address or telephone number.

Information about Your family and each of its members may also be requested so that You can benefit from special offers for each of them on Your birthdays and possibly during the year. You must ensure that You have the required rights to share information about another person.

We may also collect so-called Technical Data, i.e. information relating to the device You are using to connect and Your use of the Website (such as the version of the operating system, the type of browser used, the use or not of a proxy, the IP address, the access times, the pages visited and the link that allowed You to access the Website). All the information related to this collection can be found in Article 9.

4. Why do we use Data?

In accordance with the applicable regulations on the protection of personal data, We collect Personal Data only when We have a legal basis for doing so.

Some of Your Personal Data is necessary for the purchase of a ticket(s) to Le Jardin. These will be marked with an asterisk. Without this Data, We will not be able to process Your purchase request. The Data We collect is related to a specific transaction and as part of Our business relationship with You. For example, We need to collect Data to process Your order, to ensure its follow-up and invoicing, and to be able to respond to any post-sale request You may have.

Your Personal Data is collected on the basis of Your consent (Article 6, 1., a) of the GRPD) in order to allow You to receive information related to Le Jardin, in particular on its news and events (newsletters, invitations and other publications). If You are a minor under the age of 15, You must ensure that You have obtained the required authorizations from Your legal representatives for any consent to the processing of Your Data.

We may need to process Personal Data on the basis of our legitimate interest (Article 6, 1., f) of GDPR) to:

* ensure the defense of Our interests in the event of litigation or legal action,
* manage the cybersecurity of the Website, and
* prevent fraudulent conduct to ensure the security of Our assets and content.

Finally, We may also retain Personal Data when required by law or in order to enforce any rights We may have under the law.

The Data essential to Le Jardin to fulfill the purposes described above are indicated by an asterisk on the various pages of the Website. If You do not fill in these mandatory fields, Le Jardin will not be able to respond to Your requests and/or provide You with the products and services requested.

5. To whom do We transmit Your Personal Data?

Some of Your Data may also be made accessible to third parties, namely :

(i) Our subcontractors and service providers involved for technical and logistical reasons (hosting, security and maintenance providers of the Website, fraud management providers, technical providers in charge of sending e-mails, anti-spam and anti-robot service providers);
(ii) Our subcontractors, service providers, and/or communication agency(ies);
(iv) any authority, court or other third party where such disclosure is required by law, regulation or court order, or where such disclosure is necessary for the protection and defense of Our rights.

6. Data transfer outside the European Union

The Data is processed in France by Le Jardin.

We may use certain service providers located abroad or who themselves use subcontractors located abroad, including outside the European Economic Area (EEA) in countries whose regulations on the protection of personal data differ from those applicable within the EEA.

Any transfer of Your Data outside the EEA will be made with appropriate safeguards that comply with applicable data protection regulations. We will provide You with a copy of the applicable safeguards upon request.

7. How long do We keep the Data?

The Data is kept for as long as necessary for the purposes described in Article 4 of this Policy for which it was collected and, in any case, will be destroyed or anonymized at the end of this period.

Please refer to the table below for more details on the duration of the retention of Your Data.

8. What are Your rights?

8.1 Access, rectification and portability

In accordance with the regulations in force, You have the right to access the Data. You also have the possibility to request the modification of Your Personal Data that would be inaccurate and, depending on the purpose of the processing, to request that incomplete Personal Data be completed.

In order to comply with Your request, We may ask You to provide proof of identity or to communicate additional information or proof. We will do our best to respond to Your request as soon as possible.

If You have a customer area on the Jardin website, You can modify Your Data directly via this area. You may, within the limits provided for by law, exercise Your right to the portability of Your Data allowing You to recover, in an interoperable format, the Personal Data that You have communicated to Us.

8.2 Right to erasure of Data and limitation of Data processing

You may request the deletion of Your Personal Data in the following cases:
* You consider that the processing of Your Personal Data by Us is no longer necessary for the purposes set out in this Policy,
* You consider that the processing is unlawful or dispute the accuracy of the Data that We process concerning You,
* You have withdrawn your consent to the processing of Your Data.

It is also possible for You, within the limits provided by law, to request the limitation of the processing of Your Data.

Please note that despite the exercise of Your right to erasure of Data or limitation of processing, We may retain some of Your Personal Data when required by law or in order to exercise or defend Our rights.

8.3 Right to establish instructions for the management of Your Personal Data after Your death

For France and where required by local law, You may determine how You want Us to handle Your Personal Data after Your death.

8.4 How to exercise Your rights regarding the protection of Your Data

The person in charge of the processing of Personal Data will be Your contact for any question related to the processing of Data.

He will be reachable :
* by using the contact form by selecting 'personal data',
* by email to the following address: rgpd@jardindacclimatation.fr.

When the processing of your Data is based on Your consent, You can withdraw it at any time, without justification. This right can be exercised by modifying Your options relating to subscriptions to Our newsletters by clicking on the link provided for this purpose in each e-mail that We send You.

9. How is the security of Personal Data ensured?

Le Jardin implements technical and organizational measures that comply with applicable French and European legal and regulatory requirements, which ensure the security and confidentiality of the Data.

Le Jardin requires its service providers and subcontractors, under the terms of written commitments, to present guarantees and implement sufficient security measures to ensure the protection of the Personal Data they have undertaken to process, in accordance with the requirements of the applicable regulations on the protection of personal data.

However, Le Jardin does not control all the risks related to the operation of the Internet and draws Your attention to the existence of risks inherent in the use of any website.

10. Cookies

We use purely technical cookies to ensure the proper functioning of the Website. You have the possibility of managing the deposit of cookies using the settings of Your browser. This setting is likely to modify your navigation on the Internet and your conditions of access to certain services requiring the use of cookies.

11. Third-party websites

The Website may contain links to third party websites (such as, for example, the websites of LVMH Group subsidiaries) that We do not control and that are governed by their own privacy and data protection policies. This Policy does not apply to such third party sites. We invite You to consult the confidentiality and personal data protection policies of these third party sites that You visit to find out how they process Your Data. Le Jardin d'Acclimatation declines all responsibility for the use of the Data by these third parties.

12. Contact details of the Data Protection Officer (DPO) and right to lodge a complaint

If You have any questions about this Policy or if you have any requests or complaints about your Personal Data, You can contact the person responsible for processing Personal Data at Le Jardin, who will be Your contact for any questions relating to the processing of the Data. He can be reached:

* by using the contact form by selecting 'personal data',
* by email to the following address: rgpd@jardindacclimatation.fr.

In the event of a complaint about the way in which We process Your Data, You also have the right to contact the Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, Tel: 01 53 73 22 22, www.cnil.fr.