LEGAL INFORMATION

PRIVACY POLICY

Welcome to our website www.algotherm.com (hereinafter the “Site”) published by LABORATOIRES CINQ MONDES, domiciled at 6 square de l’Opéra-Louis Jouvet, 75009 Paris (hereinafter “we” or “our”).

We are required to collect information concerning users of the Site, participants and winners of competitions that we organize or that are organized by our partners, buyers (professional or not) of products that are sold on our Site, beneficiaries of gift vouchers, but also our suppliers and service providers (hereinafter "you"). Some of this information allows you to be identified (hereinafter the "Personal Data").

We can assure you that the Personal Data that we collect via the Site are processed in compliance with the provisions of the applicable legislation relating to the protection of Personal Data.

As data controller and publisher of the Site, we are committed to informing you in a clear and transparent manner about how your Personal Data is collected, stored and processed. We therefore invite you to carefully read this privacy policy (hereinafter the "Policy"), which supplements the General Terms and Conditions of Sale and the General Terms and Conditions of Use of the Site.

We have also appointed a Data Protection Officer (hereinafter “DPO”) who ensures the compliance of our processing and works in conjunction with the CNIL, the competent authority for the protection of Personal Data, which you can contact at the following address: [email protected].

Personal data: what is it?

For your full understanding, it is important that you know what the concept of Personal Data covers. Personal Data is information that allows you to be identified, whether directly or indirectly, whether professional or personal. This may include your name, first name, postal and email address, telephone number, but also the IP address of your computer, as well as information related to your browsing on our Site.

How do we collect your personal data?

We may collect your Personal Data indirectly in the following cases:

• When you receive a gift voucher, we collect your Personal Data through the person or company that offers you the gift voucher,
• When you win a competition organized by one of our partners, we collect Personal Data through this partner.

Why do we use your personal data and how long do we keep it?

In order to simplify the presentation of the characteristics of the processing implemented, we present in the table below the reasons why we process your Personal Data (purposes), our justifications for the processing (legal bases) as well as the period during which we use them (retention period).

Purposes	Legal bases	Retention periods
When you use the Site
Managing your user account if applicable	Contractual execution	Until you delete your account, or, if you no longer use it, once it is considered inactive (after a period of two years of inactivity), unless you object
Distribution of our newsletter	Your consent	Until you unsubscribe from the newsletter, or 3 years from your last contact with us
Management of our commercial prospecting and loyalty operations	Your consent	Until you withdraw your consent, or 3 years from your last contact with us
Managing your contact requests	Our legitimate interest in responding to your requests and solicitations	Duration required to respond to your request. We then archive your Personal Data for a period of 2 years in order to prevent any litigation
When you participate in a competition
Management and organization of competitions	Contractual performance, Our legitimate interest in contacting the winner of a competition to send them their winnings	Participants’ Data is kept for the duration of the competition. Data of competition winners is kept for 3 months from the sending of the prize
Management of our commercial prospecting	Your consent	Until you withdraw your consent, or 3 years from your last contact with us
When you purchase one of our products or book a treatment at one of our spas
Managing your order or reservation	Contractual and pre-contractual execution	Duration of the contractual relationship
After-sales service management	Contractual and pre-contractual execution	Duration of the contractual relationship
Management of our commercial prospecting and loyalty operations	Our legitimate interest in communicating to you information about products similar to those you have already purchased	3 years from your last contact with us
Conducting satisfaction surveys	Our legitimate interest in improving our products and services	Time required to achieve the objective of the investigation
Management of our accounting obligations	Legal obligation	Duration in accordance with legal obligations or deadlines provided by law
Litigation management	Our legitimate interest in providing evidence in the event of litigation	Duration of the legal limitation period
When you receive a gift voucher
Managing your gift voucher and simplifying your appointment booking	Our legitimate interest in identifying individuals receiving gift vouchers	Until you use your gift voucher to book a treatment, or during the validity period of the gift voucher
When you have a treatment in one of our spas
Personalization of your treatment	Your consent	Duration of 2 years from the completion of the treatment
When you are one of our suppliers or service providers
Management of our commercial relations	Contractual execution	Duration of the contractual relationship, then archiving for 5 years

What personal data do we collect?

Categories of personal data that may be collected
When you use the website	- When you create an account: your first and last name, title, email address, postal address, date of birth, telephone number, username and password. - When you browse the Site: browsing data collected by cookies (e.g. IP address) and location data if you use the Google Maps service integrated on the Site. - When you contact us: your first and last name, email address, postal address, telephone number, professional category, any personal data that you communicate to us in your messages. - When you subscribe to the newsletter: your name and email address.
When you participate in a competition	- When you register for the competition: your first and last name, date of birth and email address. - When you win a competition: your first and last names and your postal address.
When you purchase one of our products and/or as part of our after-sales service	- When you are not a professional customer: your first and last name, title, email address, customer ID, date of birth, postal address, telephone number, invoices, order history. - When you are a professional customer: your first and last name, title, professional email address, customer ID, your company's postal address, company name, professional telephone number, invoices, order history.
When you receive a gift voucher	First and last name
When you have a treatment in one of our spas	Name, first name, health data, care preferences
When you receive a gift voucher	First and last name
When you are one of our suppliers or service providers	Name, first name, professional contact details

The data relating to your payments made on the Site are directly collected by our payment service provider via a dedicated interface that you can access from our Site. The data relating to your payments will be processed by our service provider in accordance with the strictest security and confidentiality rules applicable in the e-commerce sector.

Who are the recipients of your personal data?

Your Personal Data is transmitted within our various administrative and commercial departments, only to persons authorized, by their position, to process it.

They are also transmitted to our external service providers (such as our logistics provider, our web service provider, etc.), acting in our name and on our behalf, only when they need this information in the context of the execution of their service, in particular for the purpose of providing you with the services offered on the Site. We ensure that the latter provide the necessary guarantees to respect the security and confidentiality of your Personal Data.

We may also be required, by virtue of a legal obligation, to transmit your Personal Data to an administrative authority or an authorized public body (e.g. tax administration).

Is your personal data transferred outside the European Union?

In principle, we only process your Personal Data within the territory of the European Union.

However, we may be required to transfer your Personal Data to external recipients who may be located in countries offering different levels of protection of Personal Data. Where applicable, we undertake to ensure that appropriate guarantees are put in place, such as the signature of the standard contractual clauses adopted by the European Commission, accompanied if necessary by additional measures to ensure their effectiveness.

You can request more information on the guarantees put in place by sending us an email to the address indicated below.

What are your rights over your personal data?

In accordance with the regulations in force, you have the right to access, rectify or request the deletion of your Personal Data. You can also request the limitation of their processing, or object to it.

In addition, you can withdraw your consent to the sending of commercial communications by electronic means at any time.

In certain circumstances, you also have the right to the portability of your Personal Data. The right to portability allows you, when the processing of your Personal Data is based on your consent or on a contract and is carried out using automated processes, to obtain from us that your Personal Data be provided to you in a structured, commonly used and machine-readable format. The Personal Data thus obtained may then be transmitted to another data controller without us hindering it.

You also have the right to define general or specific directives relating to the fate of your Personal Data after your death. Specific directives can be registered directly with us. The general guidelines may be registered with a trusted third party certified by the CNIL. You have the possibility to modify or delete these guidelines at any time.

You can exercise your rights by contacting us at the following email address: [email protected]

In the event that you consider that we do not respect our obligations or your rights over your Personal Data, you can file a complaint with the CNIL, in accordance with the applicable regulations.

In order to ensure confidentiality and protection of your Personal Data, we will need to identify you in order to respond to your request. To do this, in the event of reasonable doubts about your identity, you may be asked to attach a copy of an identity document to support your request.

Additional information

We reserve the right to modify this Policy at any time, taking into account the provisions in force regarding the protection of Personal Data.

If you wish to receive additional information on our management of your Personal Data, you can send us your questions by sending us an email to the following email address: [email protected]

Date of last update of the Policy: 10/16/2023