This charter (the "Charter") details the policy of byLI/VY SAS (hereinafter "we", "our", "Livy") regarding personal data and cookies. This Charter aims to inform you of the conditions under which Livy collects your personal data, the reasons for which this data is collected, the use made of it and your respective rights. It applies to all information provided by you or collected by Livy during your interaction(s) with us.
Livy, as data controller, attaches great importance to the protection and respect of your privacy. Given that this is an important subject, we invite you to read the Charter carefully in its entirety to know and understand our practices regarding the processing of your personal data. This Charter sets out the rules relating to the personal data of all our customers and prospects, regardless of the channel through which this data is collected. When we refer to our Platform, we mean one of the digital and/or physical channels and/or means that you may use to interact with us via the website, www.li-vy.com (the "Site"), the mobile application, Livy's physical stores, by mail or by telephone. When using our Platform, Livy may process personal data about you, which we have collected from you or which you have provided to us.

By using our Platform, you are bound by the then-current Charter and signify your acceptance of the latter. Since we may modify our Charter at any time under the conditions set out in Article 6, we invite you to check it before each use of our Platform.

1. GENERAL INFORMATION

The controller of your personal data is:
- BYLI/VY, Simplified joint-stock company, having its registered office at 50 Rue d'Aguesseau 92100 Boulogne-Billancourt, France.
Registered with the Nanterre Trade and Companies Register under number 822 683 595


This is how we have established guidelines and we ensure the processing and protection of your personal data. Through our Platform, you may be asked to provide Livy with personal data, for example, when creating a customer account, ordering products, or subscribing to the newsletter. Livy may also collect certain information relating to your browsing on the Site, under the conditions more fully described in the "Cookies" section below.

2. DATA CONCERNED

The data we collect and use varies depending on the products, services, or features you choose. The personal data we collect or that you choose to provide to us includes, in particular:
- identification data, such as your first name, last name, telephone numbers, your home address for delivering your order, email address for sending you the newsletter, photographs that you communicate or images when you visit our stores equipped with video surveillance systems;

- economic and payment data, such as payment card data, data relating to your purchases, orders or returns;

- electronic identification data available on or from your computer (such as "cookies" or "IP addresses"). Your electronic identification data makes it possible to identify or geolocate (without being more precise than the city) your connection terminal or the pages consulted on the Site during your navigation and are generally insufficient on their own to identify you by name. For more information on the browsing information collected, please consult Article 5 relating to cookies and connection witnesses;

- data relating to your online or in-store purchases (for example the type, quantity and price of products purchased);

- data about your tastes and preferences, such as your preferences for our collections, your color preferences, your habits and your size.

When you apply for a job opening at Livy, you may be asked to provide us with data such as your first name, last name, gender, address, email address, education, as well as your professional qualifications and experience.

3. YOUR RIGHTS

In accordance with current regulations, you have various rights regarding your personal data. These rights can be exercised directly and at any time by contacting us at privacy@li-vy.com or Livy, Customer Service, 50 rue d'Aguesseau 92100 Boulogne-Billancourt, simply stating the reason for your request and the right you wish to exercise. If there is any doubt about your identity, we may ask you for a copy of your identity document or other supporting documentation. Your rights are as follows:

-The right of access: The right to request a copy of the personal data we hold about you. If your request is unjustified or abusive, we may charge you a fee for this request.

-The right of rectification: The right to request the correction of erroneous personal data that we have about you. We would like to remind you that if you have a customer account, you have the possibility to access the section corresponding to your personal data in order to modify or update them. You must ensure that this data is true and accurate. Likewise, you agree to notify us of any changes or modifications to this data. We also remind you that in principle you should only communicate your own personal data and not those of a third party. Any damage or loss caused as a result of the communication of inaccurate or incomplete information in our data collection forms is the exclusive responsibility of the user of our Platform.

- The right to erasure: The right to request the deletion of your data, when one of the following conditions is met:
- your personal data are no longer necessary for the purposes,
- you have withdrawn your consent and there is no other legal basis to continue processing your personal data,
- you have validly exercised your right to object,
- the processing of your data is not legal,
- or your personal data must be erased to comply with a legal obligation.


There are, however, cases where you cannot exercise your right to erasure, even if one of the said conditions is met (in particular when the processing of your data is necessary for freedom of expression and information, compliance with a legal obligation, the contestation/exercise/defense of a right in court or for statistical purposes, archiving in the public interest, scientific or historical research). To delete your customer account, simply send us your request to privacy@li-vy.com or Livy, Customer Service, 50 rue d'Aguesseau 92100 Boulogne-Billancourt. We would nevertheless like to inform you that this deletion will automatically lead to the loss of any points you may have accumulated if you joined our loyalty program.

- The right to object: The right to object, for reasons relating to your particular situation, to the processing of your personal data based on our legitimate interest. In this case, we will cease processing your data, unless we have a legitimate reason to continue processing your data. If your data is used for commercial prospecting purposes, you have the right to object without having to justify yourself.

- The right to limit processing: The right to request, in certain cases, the temporary suspension of the processing of some of your data or the retention, if you need it, for a period longer than necessary.

- The right to portability: If the processing of your personal data is based on your consent or the execution of the contract and if the processing is carried out by automated means, you will have the right to request receipt of the data concerning you in a structured, commonly used and machine-readable format, in order to be able to transfer them to another entity, provided that this is technically feasible.

- The right to define guidelines regarding the fate of your personal data in the event of death. You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you constitutes a violation of the applicable regulations. In France, the supervisory authority is: Commission Nationale de l'Informatique et des Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, Tel: 01 53 73 22 22 You also have the right to withdraw your consent, at any time, for any processing that is based on consent. To simply unsubscribe from our newsletter, simply click on the unsubscribe link in each email.

4. MANAGEMENT OF PERSONAL DATA BY LIVY

4.1 Purposes and legal bases for data collection.

The following table allows you to understand how Livy uses your personal data (the “purpose”) and the legal basis (the “legal basis”):

PURPOSE: WHY DO WE PROCESS YOUR DATA? LEGAL BASIS: WHAT IS THE BASIS FOR THIS PROCESSING? To execute and track your product orders placed on the Site MORE DETAILS

Execution of the contract

To execute the purchase or service contract you have entered into with us, issue invoices, manage payment for the products you purchase, deliver them to you, and handle any returns after purchase. When you purchase products through our Try at Home service. Please read Article 16 "Try at Home Service Terms and Conditions" of our Terms and Conditions for more information. In connection with the purchase, management, and use of the gift card. Please read our Terms and Conditions for more information.

Consent

Certain processing of your personal data associated with the purchasing process, such as the storage of your payment card data for future purchases, is only activated when you accept it.

Legitimate interest

When you make a purchase, we may carry out the necessary checks to detect and prevent possible fraud.
To enable and manage your registration as a user of our Platform and/or your membership in the loyalty program.

Consent

Execution of the contract By creating a user account and/or joining the loyalty program, you provide certain personal data necessary to identify you and to give you access to the various features, services and products available to you as a registered user and/or member. The processing of your data is therefore required for the execution of the general conditions of our Platform. Carry out commercial prospecting and marketing actions Consent If you decide to subscribe to the newsletter, you consent to us processing your data in order to manage your subscription and/or send you information relating to our products and/or services as well as commercial prospecting messages through various means, such as email or SMS. If you participate in a competition via the Platform or our social networks, you consent to your data being used in the context of this competition and the delivery of the prizes you have won. Unless you expressly consent, the data collected is not used for advertising purposes by us or our business partners. If you first agree to the applicable legal terms and conditions (including those of the social media platforms you use), we may post photographs you share publicly or with us on our Platform or our various social media platforms. Subject to your prior consent, we may record data about your preferences (such as your size or color) to personalize your experience with Livy.

Legitimate interest

We have a legitimate interest in contacting you by telephone or post to inform you of our commercial offers, provided that you did not object to this when your data was collected (please note that you can object at any time by sending an email to privacy@li-vy.com). Similarly, unless you object, we have a legitimate interest in sending you commercial communications by electronic means (e.g. SMS or email) if you are already a customer and if these communications only concern products or services similar to those we have already provided to you. In order to adapt our marketing actions to your preferences and needs to better serve you and meet your expectations (personalization of our services via our Platform and messages), we believe that in certain cases we have a legitimate interest in carrying out profiling with the data provided by you as well as the information we have about you thanks to the cookies that you have accepted to be installed on your terminal, in particular your journey on the Site, your preferences (language, colors, type of products, etc.) or your purchase history. Functional cookies, essential to your navigation on our Site, allow us to offer you by email to recover your unfinished shopping cart if you are a prospect or registered customer. Please read Article 5 "Cookies and connection witnesses" for more information.

Respond to any questions, requests or complaints you may have submitted through Customer Service channels

Execution of the contract

If your request relates to your order or the product(s) purchased via our Platform, the processing is necessary for the execution of the contract and the proper management of after-sales service.

Legitimate interest

We believe we have a legitimate interest in processing your personal data as strictly necessary to properly manage your requests and complaints and to answer your questions. The data we process may include photographs if you have decided to send us some as part of your request or complaint. For the purpose of after-sales service procedures (e.g., goodwill gestures), we may contact you by SMS or email. When you call our Customer Service, telephone conversations may be recorded for quality control and training purposes.

Legal obligation

If your question concerns the exercise of the rights set out in Article 3 “Your rights” or relates to a complaint concerning our products or services, we will need to process your data to comply with our legal obligations. Produce anonymous statistics on Site traffic

Legitimate interest

We believe we have a legitimate interest in analyzing the usability and quality of our Platform in order to improve our users' experience and offer a better Platform to our customers. Please read Article 5 "Cookies and cookies" for more information. Conducting customer satisfaction surveys and research Legitimate interest We believe we have a legitimate interest in conducting surveys and research intended to analyze the level of satisfaction of our customers in order to improve the quality of our products and services. Recruitment management Contract performance (pre-contractual measures) Legitimate interest We may process and respond to any job application you send us.

4.2 Data retention period

The retention period for your data is determined based on the purpose for which it was collected. If this purpose is achieved, your data will be archived, deleted, or anonymized (particularly for statistical purposes). Initially, the data is retained for a period that does not exceed the period necessary for the purposes for which it was collected:

NATURE OF PROCESSING STORAGE DURATION

Contract management (order management, delivery, execution of the service or supply of the good, invoices and payments), including loyalty program Retention for the purposes of executing your contract, then for the period necessary to establish proof of a right or a contract; this data may be archived in accordance with the provisions of the French Commercial Code relating to the retention period for books and documents created during commercial activities and the French Consumer Code relating to the retention of contracts concluded electronically. Data relating to bank cards used for payment Deletion once the transaction has been completed, i.e. upon effective payment, which may be deferred until receipt of the product, increased, where applicable, by the 14-day withdrawal period (which you have to change your mind) in the event of a purchase on our Site. If you pay by credit card, the card number and its expiry date may nevertheless be kept for evidentiary purposes in the event of a dispute over the transaction, in intermediate archives, for a period of 13 months following the debit date or 15 months in the case of a deferred debit payment card. Subject to obtaining your express and informed consent, your bank card data (with the exception of the visual cryptogram) may be kept for a longer period to facilitate payment in the event of subsequent purchases, without exceeding the period necessary to achieve this purpose. In other words, your data may be kept until you withdraw your consent and/or your bank card data expires. Management of our customer and prospect file Retention for a period of 3 years from your last contact with us (for example, for customers, a purchase or, for prospects, a click on a hyperlink contained in an email) or until you withdraw your consent. Your questions addressed to Customer Service Retention for the period necessary to process your request. Regarding recordings of telephone conversations with our Customer Service, they are kept for a limited period (6 months maximum) except in exceptional cases (for example for investigation purposes, fraud or for a legal reason). Your electronic identification data (your connection logs collected, subject to your agreement and the settings of your terminal, via the use of cookies and other trackers placed on our Site) Retention in accordance with applicable regulations for a period not exceeding 13 months. For more details on cookies, how they work and your ability to disable them, see below our section "5. Cookies and Connection Cookies". For recruitment and personnel management Retention for 2 years from the last contact with the unsuccessful candidate. If the candidate is successful, the data necessary for personnel management will be retained, in principle, for the duration of the employment relationship, unless otherwise provided by law or regulation.

Secondly, regardless of the retention period necessary to achieve the purpose of data processing, it may be justified that we archive your data for a limited period, in a secure manner and with restricted access, for various reasons: • To comply with a legal obligation to retain data (the retention of personal data for accounting purposes is, for example, 10 years).
- To protect against possible liability claims arising from the processing of your personal data. In order to manage pre-litigation and litigation, we may archive your data for evidentiary purposes during the period during which our liability could be incurred (duration of the related limitation period: civil, commercial, etc.). Once the retention period imposed by law has expired and any actions have been prescribed, your personal data will be deleted or anonymized.

4.3 Recipients of the data

Your personal data is intended for the Livy departments concerned by your requests. However: • When you order a product on the Site, the personal data that you communicate as part of the order is intended for Livy and other companies or subcontractors (such as our warehouses) responsible for executing said order.
- The processing of your personal data is authorized to third parties that we use to provide certain services. These include:
- providers of technical, logistics, transport and delivery services,
- providers of services related to customer service and marketing,
- payment service providers and fraud detection and prevention entities.

- Only when you give us your consent, we can share your data with certain business partners.

In any event, there is no transfer outside Europe and Livy does not transmit your personal data, except:

- If Livy needs to share this information with third parties to provide you with the service you request, or
- If Livy is ordered by a judicial authority or any other administrative authority to provide it with the information, or
- If you have given your prior consent for the sharing of this information.


In this case, the transfer of your personal data outside Europe will be carried out by implementing appropriate guarantees and preserving the security of your data.

Livy may be required to transfer your personal data to judicial and police authorities, regulatory authorities, public bodies or third-party companies in order to comply with a court order, subpoena, formal notice, search or any other legal or regulatory obligation or request. Such transfer may also be made for the purposes of fraud protection or investigation of potential offenses.

4.4 Data security

Livy has endeavored to implement reasonable precautions to preserve the confidentiality, integrity, and availability of the personal data processed and to prevent them from being distorted, damaged, destroyed, or accessed by unauthorized third parties. Technical and organizational security measures have been implemented for this purpose. However, Livy does not control all the risks associated with the operation of the Internet and draws Internet users' attention to the existence of possible risks inherent in its use and operation. For the purposes of technical storage of your personal data, your data will be centralized with the following service providers:
- oXya – in Ile-de-France and Hauts de France,
- Salesforce Commerce Cloud - in Ireland,
- Amazon Web Service - in Germany and Ireland,
- Jaguar Networks - in Provence-Alpes-Côte-d'Azur,
- OVH - in Hauts-de-France,
- Actito - in Belgium.
Livy attaches the utmost importance to the protection and security of its information systems. Tools have been implemented to enable Livy to detect potential security breaches. These tools may incidentally lead to access to personal data by security teams. This data will be collected and processed for the exclusive purpose of managing these breaches and in compliance with applicable regulations regarding the protection of personal data.

5. COOKIES AND CONNECTION WITNESSES

5.1 What is a cookie?

A cookie is a text file that can be stored in a dedicated space on the hard drive of your electronic device when you consult an online service using your browser software. A cookie file allows its issuer to identify the terminal in which it is stored, for the duration of the validity or registration of the said cookie.

5.2 Cookies issued on the Site

When you connect to the Site, Livy may, subject to your choices, install various cookies allowing in particular to recognize the browser that you use during the validity period of the cookie concerned. The cookies issued have the following purposes: • to establish statistics and volumes of visits and use of the various elements making up the Site (sections and content visited, paths), allowing Livy to improve the interest and ergonomics of the services, as well as the visibility of the published content; • to allow or facilitate your navigation on the Site, or to provide you with the online communication services that you request during your navigation, and thus: - to adapt the presentation of the Site to the display preferences of your terminal (language used, display resolution, operating system used, etc.) during your visits to the Site, according to the hardware and viewing or reading software that your terminal contains; - to memorize information relating to a form that you have completed on the Site (registration or access to your account) or to products, services or information that you have chosen on the Site (subscribed service, contents of an order basket, a wishlist, etc.); - to allow you to access reserved and personal areas on the Site, such as your account, using identifiers or data that you may have previously provided; - to implement security measures, for example when you are asked to log in again to content or a service after a certain period of time; - to share information with advertisers on other websites to offer you relevant advertisements that match your interests. For this purpose, we use advertising cookies.

5.3 Cookies issued on the Site by third parties

Livy may include third-party computer applications on the Site that allow you to share content from the Site with other people or to let these other people know that you have viewed or expressed your opinion about content on the Site. The issue and use of cookies by third parties are subject to the privacy policies of these third parties. Livy does not control the process used by social networks to collect information relating to your browsing on the Site. Livy invites you to consult the privacy policies of these social networks to learn about the purposes of use, particularly advertising, of the browsing information they may collect through these application buttons. These protection policies must allow you to exercise your choices with these social networks, in particular by configuring your user accounts for each of these networks. The Site may contain cookies issued by third parties (communications agency, audience measurement company, etc.) and allowing them, during the validity period of these cookies, to collect browsing information relating to Terminals consulting the Site, and in particular in order to measure the effectiveness of paid referencing campaigns with search engines.

5.4 Your choices regarding cookies

You have several options for managing cookies. Any settings you make may affect your Internet browsing experience and your access to certain services requiring the use of cookies. You can choose at any time to express and modify your preferences regarding cookies, using the methods described below. You can configure your browser software so that cookies are stored on your device or, on the contrary, so that they are rejected, either systematically or depending on their issuer. You can also configure your browser software so that you are asked to accept or reject cookies from time to time, before a cookie is likely to be stored on your device. For more information, see the section "How to exercise your choices, depending on the browser you use?

For more details on the cookies used, follow this link here

To change your choices regarding cookies, see the “Cookie Settings” section at the bottom of the Site page.
(a) The Cookie Agreement The registration of a cookie in a terminal is essentially subject to the will of the user of the terminal, which the latter can express and modify at any time and free of charge through the choices offered to him by his browser software. If you have accepted in your browser software the registration of cookies in your terminal, the cookies integrated in the pages and contents that you have consulted may be temporarily stored in a dedicated space of your terminal. They will be readable there only by their issuer. (b) Refusal of cookies If you refuse the registration of cookies in your terminal, or if you delete those that are registered there, you will no longer be able to benefit from a certain number of functionalities which are nevertheless necessary to navigate in certain areas of the Site. This would be the case if you tried to access contents or services which require you to identify yourself. This would also be the case when Livy or its service providers could not recognize, for technical compatibility purposes, the type of browser used by your terminal, its language and display settings or the country from which your terminal appears to be connected to the Internet. In this case, Livy declines all responsibility for the consequences related to the degraded functioning of its services resulting from our inability to record or consult the cookies necessary for their operation and which you have refused or deleted. (c) How to exercise your choices, depending on the browser you use? For the management of cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, which will allow you to know how to modify your wishes regarding cookies.

5.5 If you share the use of your terminal with other people

If your terminal is used by several people and when the same terminal has several browser software, Livy cannot guarantee with certainty that the services and advertisements intended for your terminal correspond to your own use of this terminal and not to that of another user of this terminal. If applicable, sharing the use of your terminal with other people and the configuration of your browser settings with regard to cookies are your free choice and your responsibility. For more information on cookies and their use, you can consult the file of the National Commission for Information Technology and Civil Liberties at the following address: https://www.cnil.fr/fr/site-web-cookies-et-autres-traceurs.

6. AMENDMENT OF THE CHARTER

Livy may be required to modify the Charter and will ensure that you are informed of this either by a special mention on the Site or by a personalized warning, particularly in the context of sending newsletters.

7. PERSONAL DATA POLICY RELATING TO MINORS

The Site is not intended for minors. However, access to the Site is not prohibited for minors, as it does not contain content prohibited for minors under the age of 18. If information is collected about a minor by the Site, the minor's legal representative may contact customer.service@li-vy.com to correct, modify, or delete this information.