PRIVACY POLICY

BED REPUBLIC

1. INTRODUCTION

We are committed to protecting your privacy and processing your personal data in a transparent, secure and lawful manner.

BED REPUBLIC (hereinafter, “ BED REPUBLIC ”, the “ Company ”, “ we ”, “ us ” or “ our ”) will process your personal data when you visit and use the services provided on the sites www.bedrepublic.eu , www. dormi-et-tradition.fr , www.h-republic.eu and www.leonis-literie.com (hereinafter the “ Website(s) ”) or otherwise interact with us as indicated herein.

Below you will find information about the type of personal data we process, why we do it, what this data is used for and how we may share it, and what your rights are as a Data Subject.

BED REPUBLIC, which is the publisher of the Website, is a company with capital of €4,000 registered with the Paris RCS under number 83853307300014, publisher of the Sites, whose head office is located at 8 bis Rue Abel 75012 PARIS, identified with the Intracommunity VAT number FR67838533073.

BED REPUBLIC can be contacted at +33 (0)7 56 92 00 36 and by email at help@bedrepublic.fr .

Respect for your privacy and your personal data is a priority for the Company which undertakes to process your data in accordance with the Data Protection Act No. 78-17 of January 6, 1978 as amended, and the General Regulations on the Protection of Data (EU) 2016/679 of April 27, 2016 (hereinafter “ GDPR ”) and the related standards and recommendations issued by the Commission Nationale de l’Informatique et des Libertés (the “ CNIL ”) or the European Committee for Data Protection. Data Protection or other competent authorities whose decisions, guidelines or standards apply on French territory (together, the “ Applicable Regulations ”).

The Company is the data controller for all processing of your personal data, unless otherwise stated in this privacy policy (hereinafter “ Privacy Policy ”).

We only use your personal data for the purposes, legal grounds and retention periods specified below.

The Company acts as a data controller for all data collected through the Website, by any other means, or when you enter into a contractual relationship with the Company.

If you wish to exercise any of your rights under the Applicable Regulations and as mentioned in section 8 of this Privacy Policy, you can contact the Company by one of the means provided below, specifying your identity and the precise purpose of your request (you may be asked to provide proof of your identity if we are unsure).

For any questions relating to the use of your personal data and your related rights, you can contact the Company by one of the following means:

- by email to the following address: help@bedrepublic.fr

- by post to the following address: 8 bis Rue Abel 75012 PARIS

2. WHAT IS PERSONAL DATA?

Personal data is any information that is directly or indirectly linked to a natural person (“ Data Subject ”), i.e. any type of information that can be associated with an individual. This may be, for example, names, email addresses or telephone numbers if they can be associated with a particular living natural person, but also, for example, a photo in which the person can be recognized.

3. WHAT DOES “PROCESSING” OF PERSONAL DATA MEAN?

In principle, the term “ Processing ” includes all types of actions that it is possible to undertake with personal data. The definition is very broad and includes all forms of data processing, from collection, recording, retention/storage and adaptation to use, sharing and even deletion of personal data.

4. WHAT PERSONAL DATA DO WE PROCESS, FOR WHAT PURPOSES AND ON WHAT LEGAL BASES?

We process personal data in order to perform or enter into an agreement with you in the following circumstances:

• Purchase of products and creation of a user account. If you purchase products from us, we will process your personal data in order to fulfill our contractual obligations to you. Relevant personal data are first and last name, delivery address/billing address, telephone number, email address, order information, payment information, payment history, credit card information and payment reference number .

 

However, some processing may take place on the basis of our legitimate interests, where your consent is not obtained or where we do not prepare to conclude or execute an agreement directly with the Data Subject or where the purpose is not is not directly related to this preparation or execution of an agreement.

We will process personal data based on our legitimate interests:

 

• Customer service . If you request customer service from us via our support channels, we will process your personal data in order to assist you with the relevant matter (i.e. your name, email address and other contact details, details of the order, the purchase amount, the purchase history, the invoice, the payment method, our correspondence with you, technical information about the devices and operating systems used ).

• Questions and complaints . If you have contacted us with questions or complaints regarding our products (not based on an agreement with you), you may have provided us with personal data such as your name, address, email address and telephone number . We use this data to answer your questions, investigate product problems, compensate you where necessary, and prevent fraudulent behavior, for example through unfounded complaints and claims for compensation.

• You contact us on your own initiative . If you choose to contact us following our general invitation or on your own initiative via one of our general email addresses, you provide us with personal data that we use to respond to and evaluate the content of your email or if you are applying for a job with us.

• If this is necessary to protect our rights, because we have a legitimate interest in establishing, exercising and defending legal claims.

• If we sell or otherwise dispose of parts of our business and/or assets.

Legal requirements and claims and public interest:

We may process your personal data in order to meet legal requirements (for example, record keeping requirements or as part of our response to a request from you to exercise your individual rights) and by order of courts or public authorities (for example, for tax reasons). We may also be required by law or compelled by the public interest to process personal data relating to product issues. We may also process your personal data, such as bank account information or your identity, in order to determine, enforce or defend legal claims.

Furthermore, we may process your personal data based on your consent:

In this case, we will obtain your consent in advance for a specific purpose and we will ensure that it is provided voluntarily, specifically, knowingly, expressly and unambiguously. You have the right to withdraw your consent given at any time; you can contact our service at help@bedrepublic.fr or refer to the contact details below.

Note that withdrawal of consent will not apply retroactively to processing that has already been implemented.

• Subscription to our newsletter . If you subscribe to our newsletter, we will process your personal data based on your consent. The relevant personal data is the email address .

• Cookies and similar technologies . If you visit the Website and accept our cookies, we may collect personal data, for example:
  • In the form of IP address information, user-generated data from cookies (e.g. clicks, page viewed, page visits, time spent on page, products viewed and clicked, orders, average order value, how you access and leave the Website, etc.), geographic location (country only), correspondence and feedback regarding our products and services, technical data (e.g. device type, browser settings, time zone, operating system, platform).

However, with respect to strictly necessary cookies, our processing is necessary for our legitimate interest in being able to provide you with a functional Website when you visit and use the services provided on the Website

5. WHO ARE THE RECIPIENTS OF PERSONAL DATA?

Only parties who need to process personal data for the purposes mentioned above will have access to your personal data.

We may also work with partners in many countries, both inside and outside the EEA, and therefore may also need to share personal data, for example with service providers and advisors legal entities that are not based in the EEA.

This means that your personal data may be transferred outside the EEA. Where possible, these transfers will be based on decisions of the European Commission regarding adequate security levels and, otherwise, primarily on the execution of an agreement between us. In other cases, any transfer of your personal data to third countries will depend on adequate safeguards such as standard contractual clauses. In exceptional cases, we may also make such transfers based on your explicit consent, important reasons of public interest, the handling of legal claims or in order to protect your vital interests or those of another person.

The Company enters into data processing agreements with third parties who have access to personal data or process it on our behalf, whether through their services or our collaboration. We therefore ensure that the third parties we work with process data in the same legal and secure manner as we do. More specifically, personal data is shared with the following categories of service providers who process this data on our behalf:

• Payment and Website management service provider:

Shopify Inc. (151 O'Connor St., Ground Floor Ottawa, ON K2P 2L8 Canada).

• Accounting :

8 bis Rue Abel 75012 PARIS

help@bedrepublic.fr .

• Delivery :

8 bis Rue Abel 75012 PARIS

help@bedrepublic.fr .

• Sending email marketing:

8 bis Rue Abel 75012 PARIS

Contact@bedrepublic.fr .

We also share your personal data with other data controllers. These Data Controllers may be authorities (Police, tax authorities or other authorities) with whom we are required to share data by law or following suspected criminal activity, payment providers and banks to facilitate transactions, external advisors (attorneys and auditors) and courts to protect our rights, companies that purchase all or part of our operations/assets, and shipping companies to handle and deliver your order.

Where your personal data is shared with other Data Controllers, they will be responsible for your personal data and we refer to them for more information on how they process your personal data.

Under no circumstances does the Company sell or rent your personal data to third parties for their own activities.

6. HOW LONG IS PERSONAL DATA KEPT?

 

When we process personal data, it is on the basis of a contract.

We keep your personal data for the duration of the contract and delete it when the contract ends. However, the following exceptions apply:

• If we are required by law to retain or disclose some of your personal data after the end of the contract, we will retain the data for as long and to the extent required by law (for example, up to five years from of the end of the contractual relationship under the general regime of legal limitation) or according to the instructions of a court or a public authority.
• If necessary for the establishment, exercise or defense of legal claims, we will retain relevant personal data until it is no longer necessary for this purpose.
• For purchase contracts or use of the service on the Website , we will process your personal data for the contractual duration of our agreement (or for the space on the Website, until the deletion of your account) and then during the general legal limitation period. We will then delete your personal data, provided that no other exceptions described above apply.

We will process personal data based on our legitimate interests and consent:

• Newsletter : We will retain your personal data for as long as you are registered or express interest in our newsletters. You can stop receiving our news updates at any time by unsubscribing or opting out of receiving our marketing subscriptions. We will stop processing your data after three (3) years following our last contact.

• Questions and complaints regarding products : We will process personal data for the time necessary for the purpose after receiving it, in order to carry out statistical analyzes of questions and complaints, to investigate, monitor, control and improve our customer service, to pay compensation and to prevent fraudulent behavior (e.g. unfounded claims for compensation).

• Website Visitors : We will process your personal data for a maximum period of 13 months following the collection of cookies on our Website, subject to your prior express consent.

- Spontaneous application for a job: If you have spontaneously applied for a job with us, we will retain your personal data for six (6) months from the date of application in order to contact you if a suitable position arises. If you applied for a particular position with us but did not get the job, we will delete your application materials as soon as we notify you that you did not get the job, unless we agree otherwise.

Please note that the above retention periods do not apply to the extent that the Company is required to retain your personal data (partially or completely) in accordance with applicable mandatory law (e.g. accounting legislation) or for the period of legal requirement relating to any requirement of or applicable to you.

7. WHAT ARE YOUR RIGHTS AS A CONCERNED PERSON?

Subject to the conditions of the applicable regulations, you have the following legal rights:

- Right of access: At any time, you can request access to your personal data. Upon request, we will provide you with a copy of your personal data in a commonly used electronic format.

- Right of rectification: You have the right to have incorrect personal data corrected and to have incomplete personal data completed.

- Right to erasure: In certain circumstances (including processing based on your consent), you can ask us to erase your personal data. Please note that this is not an unconditional right. Therefore, an attempt to exercise this right may not result in action by us.

- Right of opposition: At any time, subject to the conditions provided for by the GDPR, you can object to any processing by us of your personal data. We will then only process your personal data if it can be demonstrated that there are definitive legitimate reasons why the data needs to be processed, which override your interests, rights and freedoms or if the processing takes place to establish, exercise or defend legal claims. You always have the right to object to your personal data being used for direct marketing purposes, including profiling. This objection can be made at any time.

- Right to withdraw your consent to the processing of your data (when the processing of your data is based on your consent).

- Right to restriction of processing: In certain circumstances, you can request that we restrict the processing of your personal data. Please note that this is not an unconditional right. Therefore, an attempt to exercise this right may not result in action by us.

- Right to data portability: You have the right to obtain the personal data you have provided to us (or to have such personal data transferred directly to another controller, if technically possible) in a structured, generally used and machine-readable format, in cases where the processing of your personal data is based on consent or in order to execute an agreement with you.

- Right to define the fate of your data after your death and to designate the people to whom the Company will communicate your data, if you wish (article 85 of law no. 78-17 of January 6, 1978 as amended relating to information technology, to files and freedoms).

If you have any questions or wish to exercise one of your rights, please contact our Company at help@bedrepublic.fr specifying your identity and the precise subject of your request (proof of identity may be requested) .

For any questions relating to the use of your data and your rights, you can contact the Company by one of the following means:

- by email to the address: help@bedrepublic.fr

- by post to the following address: 8 bis Rue Abel 75012 PARIS

For the management of cookies and other tracking tools, the Company invites you to consult article 8 below.

The Company undertakes to respond to you as soon as possible, and in any event within one (1) month of receipt of your request. If necessary, this period may be extended by (2) two months, taking into account the complexity and number of requests addressed to the Company. In this case, you will be informed of this extension and the reasons for this delay.

If your request is submitted electronically, the information will also be provided electronically wherever possible, unless you specifically request otherwise.

If the company is unable to respond to your request, you will be informed of the reasons for this inability.

You will always have the option to file a complaint with a supervisory authority and/or seek legal recourse. In particular, if after contacting the Company and despite the Company's efforts, you believe that your rights have not been respected, you can file a complaint with the competent supervisory authority. In France, this is the Commission Nationale Informatique et Libertés (the “ CNIL ”): https://www.cnil.fr/fr/plaintes .

8. COOKIES

As part of our way of providing personalized services on our Website, we use cookies to store and sometimes track information about you. A cookie is a small data file that is sent to your browser from a web server, is stored on your hard drive and allows easier access the next time you visit the same page. Their main purpose is to improve the consultation of the Website and to allow the sending of personalized services. We only store and access cookies (which are not absolutely necessary on your hard drive) if you have expressly consented to this.

Some of these navigation tracking tools are only used for purposes strictly necessary for the operation of the Website and are, therefore, exempt from consent, as they are necessary to guarantee access and stable operation of the Website. Others are subject to your express prior consent.

On the computer, cookies are managed by the Internet browser. These cookies can be session cookies (in this case the cookie will be automatically deleted when the browser is closed) or persistent cookies (in this case the cookie will remain stored on the terminal until its expiration date).

Follow the links below for instructions on how to change your browser settings from some of the most common browser providers (note that these are links to third-party websites where we do not we have no control):

Microsoft Internet Explorer

Safari

Firefox

Google Chrome

By restricting cookies, you may not be able to access all parts of our Website, as certain features of the Website rely on cookies.

For the sake of transparency, we have summarized the cookies used on our Website below.

By clicking on cookie settings you will find a detailed list of cookies we use on our Website. We classify cookies into the following categories:

- Absolutely necessary cookies - These cookies are necessary to help you use the features and services we offer on our Website. These cookies do not collect information about you that can be used to identify you, and they do not track or remember where you have been on the Internet. An example of absolutely necessary cookies are cookies that allow our Website to hold your items in your shopping cart while you shop online. They are generally set in response to actions you take that correspond to a request for services, such as setting your privacy preferences.

- Preference cookies - also called "functionality cookies" allow the Website to remember choices you have made previously, your preferred language or your username and password so that you can log in automatically (in case we offer a login function). They may be installed by us or by a third party provider whose services we have added to our Website. If you do not allow these cookies, some or all of these services may stop working properly.

- Statistics cookies - also called "performance cookies" - collect information about how you use the Website, such as the pages you visited and the links you clicked on. This information cannot be used to identify you. All data and information is aggregated and therefore anonymized. The purpose of these cookies is to improve the functionality of the Website and if you disable these cookies we will not receive information about when you visited our Website and therefore will not be able to verify the performance of the Website.

- Marketing cookies - These cookies track your online activity to help us and our advertisers provide you with more relevant advertisements or to limit how often you see an advertisement. These cookies may be set via our Website by our advertising partners. These cookies may be used by these companies to create a profile of your interests, in order to show you relevant adverts on other websites. They do not directly store personal data but are based on the identification of your browser and internet device. If you do not allow these cookies, you will see fewer targeted ads/ads.

If you have consented to all cookies, you can withdraw your consent (except for essential cookies) by going to our cookie settings.

With the exception of essential cookies, blocking the installation of cookies will not prevent you from using the Website effectively.

The retention period of the user's choice is six (6) months. The period during which trackers can collect data if accepted by the user is a maximum of thirteen (13) months.

The cookies used on our Website are as follows:

Cookie name	Purposes
Bing.com	User ID tracking cookie (user recognition) used by Microsoft Bing Ads to help us count valid clicks for targeted advertising.
C.bing.com	Cookies to create a profile of your interests and show relevant adverts on other sites.
C.clarity.ms	Microsoft Clarity cookie Set this cookie to synchronize the MUID between Microsoft domains.
Conversionbear.com	Allows you to set up a cookie banner
Doubleclick.net	Used by Google DoubleClick to record and report the Site user's actions after viewing or clicking on one of the advertiser's advertisements in order to measure effectiveness and present targeted advertisements to the user. user.
Google.com	Audience analysis
Website (brand) myshopify.com	Processing of traffic and customer data for order processing.
www.clarity.ms	Microsoft Clarity has set this cookie to store information about how you interact with the Site. The cookie makes it possible to provide an analysis report. The data collected includes the number of visitors, where they visit the Website and the pages visited.

Other cookies are functional cookies necessary for the operation of the Website.

9. UPDATED PRIVACY POLICY

 

The Company reserves the right to modify or update the Privacy Policy at any time. Any modification or update will come into force as soon as it is published on the Website or, in the case of a contractual relationship, by any means, including electronic mail, to inform the Data Subject. In the event that these changes are material/impact your obligations, the Company will notify you and request your consent.

 

10. DATA SECURITY

 

We take appropriate technical and organizational measures, including security and integrity measures, to protect your personal data against loss and to prevent unauthorized persons from accessing it. The appropriate security measures we have taken include implementing secure private connections, traceability, restoration of lost data and access restrictions.

 

11. OTHER

 

This privacy policy is governed by French law, subject to the provisions of the law of any other country in which you may reside.

In the event of a dispute and if an amicable agreement cannot be found, the competent court will be that determined according to the applicable procedural rules.

We would like to have the opportunity to resolve any complaints you may have, but you also have the right to lodge a complaint with the supervisory body responsible for data protection at any time, as set out above.

To do this, you can contact the French Privacy Protection Authority. You will find further information on its website: https://www.cnil.fr/fr/plaintes .

If you have any questions about our processing of your personal data or our use of cookies, or if you would like to exercise any of your rights under applicable privacy laws, contact our Privacy Representative data to the following address: help@bedrepublic.fr