Politique de confidentialité

CHARTER FOR THE USE OF PERSONAL DATA

Terms beginning with a capital letter have the meaning given to them by the CGU/CGV and/or the Legal Notices.

This charter details the policy of the company BOXIS, a limited liability company, with capital of 1,000 euros, whose head office is at SAINT-BONNET-DE-MURE (69720) 3, allée de l'Église, registered in the Register of Commerce and Companies of LYON under number 918 387 84, publishing company of the site https://BOXIS.com/ (hereinafter “the Site”), in terms of use, processing, collection and protection personal data in the context of the use of its website.

The BOXIS company may use and collect your personal data. As such, it attaches particular importance to the protection and confidentiality of this data. This is the reason why it is committed to a process of compliance with European and French regulations regarding the protection of personal data.

Personal data is protected by the provisions of Law No. 78-17 of January 6, 1978 relating to data processing, files and freedoms (hereinafter “Informatics and Freedoms Act”) as well as by the provisions of the European Regulation of Data Protection 2016/679 of April 27, 2016 (hereinafter “GDPR”) relating to the protection of individuals with regard to the processing of personal data and the free movement of this data.

Some of the links on the BOXIS company website may redirect you to websites that do not belong to it. They have their own confidentiality policies or their own personal data protection charters, which may be different from ours, and it is up to you to read them.

ARTICLE 1 – DEFINITIONS

Personal data / Personal data: Article 4 of the GDPR provides that personal data constitutes “any information relating to an identified or identifiable natural person; is deemed to be an identifiable natural person a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to one's physical, psychological, genetic, psychological, economic, cultural or social identity",

Processing of personal data: Article 4 of the GDPR provides that it may be “any operation or set of operations carried out or not using automated processes and applied to data or sets of data to be personal nature, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form provision, rapprochement or interconnection, limitation or destruction”.

ARTICLE 2 – COMMITMENTS OF BOXIS – PURPOSE OF THE CHARTER

BOXIS, concerned with protecting the rights of individuals, is committed to protecting the privacy of Users.

This charge for the use of Personal Data is intended to present to Users how Personal Data is collected and used on the Site, in what ways they are used, with whom they can be shared and how BOXIS provides implement the protection of their security and confidentiality.

For any additional information, BOXIS invites Users either to contact the person responsible for processing Personal Data via the contact form on the Site, or to consult the CNIL website: https://www.cnil. Fr/. https://www.cnil.fr/.

ARTICLE 3 – RESPONSIBLE FOR PROCESSING PERSONAL DATA

NB: the data controller is the person who determines the means and purposes of the processing.

BOXIS is responsible for processing the Personal Data of Users collected as part of the creation and management of their account on the Site, their navigation on the Site and their use of the Site's functionalities.

In addition, BOXIS acts as co-responsible for processing with the Service Providers present on the Site in relation to the Personal Data collected as part of the provision of the Services.

ARTICLE 4 – COLLECTION OF PERSONAL DATA

4.1 – Personal data provided directly by Users

the pages visited on the Site, the page of origin.

This concerns Personal Data provided as part of the creation of the use of the functionalities of the Site, namely:

- the identity of the User (first name, last name),
- the User's contact details (address, email address and telephone number),
- Products purchased via the Site, including the place of delivery of the Products,
- the User's preferences for receiving commercial information from BOXIS,

4.2 - Personal data collected indirectly by BOXIS

BOXIS may collect Personal Data during the User's use of the Site, including their IP address or other browsing data (including browser, operating system, device model) , through Cookies or similar technologies placed on the User's terminal.

BOXIS may also have possible social networks. The use of social networks and the services of the company BOXIS in connection with these social networks is also likely to result in the collection and exchange of certain data between the social networks and BOXIS.

As such, the User is invited to consult the personal data protection policies of the social networks in order to be aware of the information which is collected by the social networks and which may be transmitted to BOXIS.

The User can directly configure access and confidentiality of their data on social networks.

ARTICLE 5 – PROCESSING OF PERSONAL DATA AND STORAGE DURATION

5.1 – Legal basis for processing

The legal basis for the processing of personal data may be, depending on the context in which they are collected and the defined purpose:

- User consent: the User accepts the processing of personal data by means of express consent. He may withdraw this consent at any time.

- Contractual relations: the processing of personal data is necessary for the execution of the contract/CGV to which the User has consented.

- A legal obligation: the processing of personal data is made compulsory by law.

- Legitimate interest: the BOXIS company has a commercial interest in processing data which is justified, balanced and does not infringe on your privacy.

5.2 – Processing of personal data

Depending on the context, personal data may be used as follows:

- Use of the Site: the data collected during use of the site allows the User to browse the Site. The data concerned are connection data, IP address and Coolies and have the legal basis of the legitimate interest of BOXIS,

- Purchase of a Product by the User: the data collected allows the User to place an order for a Product on the Site. The data concerned are identity data, contact details and transaction data. Their legal basis is their necessity for the execution of the General Conditions of Sale,

- Customer relationship management: the data collected allows BOXIS to manage its community of Users, make promotional offers and inform Users of the Site about new features.

5.3 – Duration of retention of personal data

In accordance with Article 5 of the GDPR, personal data are kept in a form allowing the identification of the persons concerned for a period not exceeding that necessary for the purposes for which they are processed. As such, the User's personal data is kept by BOXIS for a period not exceeding the authorized legal retention period.

ARTICLE 6 – SHARING OF PERSONAL DATA

6.1 – Data recipient

BOXIS does not sell or rent Users’ personal data.

The BOXIS company may nevertheless transfer and disclose your data to several people, in particular to any employees of the company, in order to ensure the proper functioning of its Services.

6.2 - Transmission of personal data to third parties

Users of the BOXIS Company Site may communicate some of your data, such as customer profiles, or possible social networks.

BOXIS will share Users' Personal Data with third parties but only to the extent necessary to provide the services reserved by Users on the Site. In this context, BOXIS has implemented the necessary measures to ensure that third parties comply with the applicable regulations in this area.

The BOXIS company may also be legally required to transmit certain of your personal data to comply with an applicable law, or to respond to a judicial requisition or a court decision.

6.3 - Data transfers abroad

The recipients of your data may be located abroad, including outside the European Economic Area. In such a case, prior to transfers abroad, the BOXIS company will then take all precautions and contractual guarantees to protect your personal data, in accordance with the applicable regulations, in order to protect them as much as possible.

6.4 - Data of minors

The Products and services offered by the company BOXIS are not specifically intended for minors. Consequently, the BOXIS company does not process data specifically concerning minors.

It is up to parents or any person exercising parental authority to decide whether their minor child is authorized to use the BOXIS Website.

ARTICLE 7 – MARKETING COMMUNICATIONS

With the User's express prior consent, obtained by providing their email address in order to subscribe to the newsletter on the Site, BOXIS may send the User information on the Site's services.

ARTICLE 8 – COOKIES

By browsing the Site, Cookies from BOXIS and/or third-party companies may be placed on the User's terminal.

When you first browse the Site, an explanatory banner on the use of Cookies will appear. The User may or may not accept the use of said Cookies.

ARTICLE 9 – EXERCISE OF RIGHTS

The User has rights over personal data concerning him:

- The right of access: The User can access the data concerning him, in particular to know for what purposes they are processed or to request their erasure (when possible),

- The right of rectification: The User may request the modification and/or correction of his data,

- The right of opposition: The User has a right of opposition and a right to limit the processing of his data (He is invited to go to the CNIL website, via the link below - below, for more information on your rights).

To exercise your rights or for any questions about the processing of your data, subject to the provision of proof of identity, you can write a letter to the following address:

contact@boxisguitars.com

If the User considers, after contacting BOXIS, that their rights are not respected or that the processing of data does not comply with data protection rules, they can send a complaint online to the CNIL or by post .

For more information on the subject, Users can consult the CNIL website: https://www.cnil.fr/.

ARTICLE 10 – MODIFICATIONS TO THE CHARTER

This charter reflects the current practices of BOXIS and may be modified and updated due to developments in the technological solution used, the services and Services offered on the Site or the applicable rules.

Any substantial modification of this charter will be the subject (i) either of an e-mail to Users at the address provided on their account (ii) or by means of a notice of modification at the beginning of this charter and on the home page of the Site.

CHARTER FOR THE USE OF PERSONAL DATA

Terms beginning with a capital letter have the meaning given to them by the CGU/CGV and/or the Legal Notices.

The BOXIS company may use and collect your personal data. As such, it attaches particular importance to the protection and confidentiality of this data. This is the reason why it is committed to a process of compliance with European and French regulations regarding the protection of personal data.

Some of the links on the BOXIS company website may redirect you to websites that do not belong to it. They have their own confidentiality policies or their own personal data protection charters, which may be different from ours, and it is up to you to read them.

ARTICLE 1 – DEFINITIONS

ARTICLE 2 – COMMITMENTS OF BOXIS – PURPOSE OF THE CHARTER

BOXIS, concerned with protecting the rights of individuals, is committed to protecting the privacy of Users.

This charge for the use of Personal Data is intended to present to Users how Personal Data is collected and used on the Site, in what ways they are used, with whom they can be shared and how BOXIS provides implement the protection of their security and confidentiality.

For any additional information, BOXIS invites Users either to contact the person responsible for processing Personal Data via the contact form on the Site, or to consult the CNIL website: https://www.cnil. Fr/. https://www.cnil.fr/.

ARTICLE 3 – RESPONSIBLE FOR PROCESSING PERSONAL DATA

NB: the data controller is the person who determines the means and purposes of the processing.

BOXIS is responsible for processing the Personal Data of Users collected as part of the creation and management of their account on the Site, their navigation on the Site and their use of the Site's functionalities.

In addition, BOXIS acts as co-responsible for processing with the Service Providers present on the Site in relation to the Personal Data collected as part of the provision of the Services.

ARTICLE 4 – COLLECTION OF PERSONAL DATA

​ 4.1 – Personal data provided directly by Users

the pages visited on the Site, the page of origin.

This concerns Personal Data provided as part of the creation of the use of the functionalities of the Site, namely:

- the identity of the User (first name, last name),

- the User's contact details (address, email address and telephone number),

- Products purchased via the Site, including the place of delivery of the Products,

- the User's preferences for receiving commercial information from BOXIS,

​ 4.2 - Personal data collected indirectly by BOXIS

BOXIS may collect Personal Data during the User's use of the Site, including their IP address or other browsing data (including browser, operating system, device model) , through Cookies or similar technologies placed on the User's terminal.

BOXIS may also have possible social networks. The use of social networks and the services of the company BOXIS in connection with these social networks is also likely to result in the collection and exchange of certain data between the social networks and BOXIS.

As such, the User is invited to consult the personal data protection policies of the social networks in order to be aware of the information which is collected by the social networks and which may be transmitted to BOXIS.

The User can directly configure access and confidentiality of their data on social networks.

ARTICLE 5 – PROCESSING OF PERSONAL DATA AND STORAGE DURATION

​ 5.1 – Legal basis for processing

The legal basis for the processing of personal data may be, depending on the context in which they are collected and the defined purpose:

- User consent: the User accepts the processing of personal data by means of express consent. He may withdraw this consent at any time.

- Contractual relations: the processing of personal data is necessary for the execution of the contract/CGV to which the User has consented.

- A legal obligation: the processing of personal data is made compulsory by law.

- Legitimate interest: the BOXIS company has a commercial interest in processing data which is justified, balanced and does not infringe on your privacy.

​ 5.2 – Processing of personal data

Depending on the context, personal data may be used as follows:

- Use of the Site: the data collected during use of the site allows the User to browse the Site. The data concerned are connection data, IP address and Coolies and have the legal basis of the legitimate interest of BOXIS,

- Purchase of a Product by the User: the data collected allows the User to place an order for a Product on the Site. The data concerned are identity data, contact details and transaction data. Their legal basis is their necessity for the execution of the General Conditions of Sale,

- Customer relationship management: the data collected allows BOXIS to manage its community of Users, make promotional offers and inform Users of the Site about new features.

​ 5.3 – Duration of retention of personal data

ARTICLE 6 – SHARING OF PERSONAL DATA

​ 6.1 – Data recipient

BOXIS does not sell or rent Users’ personal data. The BOXIS company may nevertheless transfer and disclose your data to several people, in particular to any employees of the company, in order to ensure the proper functioning of its Services.

​ 6.2 - Transmission of personal data to third parties

Users of the BOXIS Company Site may communicate some of your data, such as customer profiles, or possible social networks.

BOXIS will share Users' Personal Data with third parties but only to the extent necessary to provide the services reserved by Users on the Site. In this context, BOXIS has implemented the necessary measures to ensure that third parties comply with the applicable regulations in this area.

The BOXIS company may also be legally required to transmit certain of your personal data to comply with an applicable law, or to respond to a judicial requisition or a court decision.

​ 6.3 - Data transfers abroad

​ 6.4 - Data of minors

The Products and services offered by the company BOXIS are not specifically intended for minors. Consequently, the BOXIS company does not process data specifically concerning minors.

It is up to parents or any person exercising parental authority to decide whether their minor child is authorized to use the BOXIS Website.

ARTICLE 7 – MARKETING COMMUNICATIONS

With the User's express prior consent, obtained by providing their email address in order to subscribe to the newsletter on the Site, BOXIS may send the User information on the Site's services.

ARTICLE 8 – COOKIES

By browsing the Site, Cookies from BOXIS and/or third-party companies may be placed on the User's terminal.

When you first browse the Site, an explanatory banner on the use of Cookies will appear. The User may or may not accept the use of said Cookies.

ARTICLE 9 – EXERCISE OF RIGHTS

The User has rights over personal data concerning him:

- The right of access: The User can access the data concerning him, in particular to know for what purposes they are processed or to request their erasure (when possible),

- The right of rectification: The User may request the modification and/or correction of his data,

- The right of opposition: The User has a right of opposition and a right to limit the processing of his data (He is invited to go to the CNIL website, via the link below - below, for more information on your rights).

To exercise your rights or for any questions about the processing of your data, subject to the provision of proof of identity, you can write a letter to the following address:

contact@boxisguitars.com

If the User considers, after contacting BOXIS, that their rights are not respected or that the processing of data does not comply with data protection rules, they can send a complaint online to the CNIL or by post .

For more information on the subject, Users can consult the CNIL website: https://www.cnil.fr/.

ARTICLE 10 – MODIFICATIONS TO THE CHARTER

This charter reflects the current practices of BOXIS and may be modified and updated due to developments in the technological solution used, the services and Services offered on the Site or the applicable rules.

Any substantial modification of this charter will be the subject (i) either of an e-mail to Users at the address provided on their account (ii) or by means of a notice of modification at the beginning of this charter and on the home page of the Site.

4.1 – Personal data provided directly by Users

4.2 - Personal data collected indirectly by BOXIS

5.1 – Legal basis for processing

5.2 – Processing of personal data

5.3 – Duration of retention of personal data

6.1 – Data recipient

BOXIS does not sell or rent Users’ personal data.

The BOXIS company may nevertheless transfer and disclose your data to several people, in particular to any employees of the company, in order to ensure the proper functioning of its Services.

6.2 - Transmission of personal data to third parties

6.3 - Data transfers abroad

6.4 - Data of minors