privacy

“Personal data(s)” or “Data”

Refers to any personal data within the meaning of the GDPR, that is to say any data allowing you to be identified directly (surname, first name, email address, etc.) or indirectly (olfactory preferences, age, NOSE product(s) purchased )…).

“Privacy Policy” or “Policy”

Refers to this privacy policy.

" Treatment "

Refers to any operation or set of operations applied to Personal Data, including, without limitation, collection, recording, organization, retention, adaptation or modification, extraction, consultation , use, communication by transmission, dissemination or any other form of making available, reconciliation or interconnection, limitation, erasure or destruction of personal data.

“Processing manager”

Refers to the person who determines the purposes and means of processing your Personal Data, in this case NOSE.

“GDPR”

Refers to European Regulation 2016/679 of April 27, 2016 relating to the protection of personal data.

“NOSE”

Refers to the company NOSE, a simplified joint stock company with capital of 131,463.20 euros, registered in the Paris trade and companies register under number 534 386 818, whose head office is located at 20, rue Bachaumont, 75002 Paris, France.

" Subcontractor "

Refers to any person processing Personal Data on behalf of NOSE.

“Personal account data”

Data collected when creating your personal NOSE account and associated with this account (First and last name, gender, date of birth, email address, postal code). This Data may be processed as part of various services offered by NOSE (see section 2 “Processing carried out by NOSE”).

Treatments

Data(s) concerned

Purpose(s)

Legal basis(s)

Shelf life(s)

Creation of a personal account in store

• First and last name, gender, date of birth, email address, postal code, country

(Registration using a Facebook account: your Facebook account address will also be collected)

This data constitutes “Personal Account Data”.

• Password

Allow you to create a personal account for the purposes of carrying out an olfactory test, offer you an offer adapted to the result of the test, manage your orders and offer you other associated services (delivery of samples, product evaluation, sponsorships, etc.).

Execution of the contract concluded when creating the account

(art. 6§1 b) of the GDPR)

5 years from the last contract concluded with you.

Carrying out an in-store olfactory test

Data from the personal account created in store, test data:

• Data provided: your last three perfumes worn (brand, name of the perfume and period during which you wore the perfume or you no longer wear the perfume),

• Test results: your olfactory portrait (your favorite olfactory families, your olfactory pyramid)

Identify your olfactory preferences in order to offer you a personalized product offer.

Execution of the NOSE CGU (service provision)

(art. 6§1 b) of the GDPR)

This Data is kept in a form that allows you to be identified in your personal account for the duration of the existence of this account.

Payment by credit card in store

Bank details, date and amount of the transaction

Allow you to pay for your purchases in store by payment card

Execution of the sales contract

(art. 6§1 b) of the GDPR)

Your Bank Data is kept for the duration of full payment plus a period of 13 months (15 months for deferred debit payment cards) for the purpose of managing possible complaints.

VAT refund (customers with tax residence outside the European Union)

Name, first name, address, bank card number and expiry date, nature of the product purchased, amount of purchase, amount of VAT, date of tax refund, other information appearing on the tax refund form (e.g. number of terminal used, time of request)

Allow you to obtain a VAT refund on your purchases in our store

Legitimate interest of NOSE in allowing its customers to obtain a tax refund (art. 6§1 f) of the GDPR)

Your data is kept for a period of 10 years from the date of the tax refund, in accordance with the law, with the exception of your banking data (bank card number and expiration date) which are kept for a period of 6 months from the sale.

Payment by gift card in store

Gift card number, gift card activation and expiration date, gift card balance, transaction date and amount

Allow you to pay with a NOSE gift card

Execution of the contract concluded with the buyer of the gift card (art. 6§1 b) of the GDPR)

NOSE's legitimate interest in ensuring the proper functioning of its gift cards (art. 6§1 f) of the GDPR)

The data relating to the transaction are kept for the duration of full payment plus a period of 13 months for the purposes of managing possible complaints.

If you have not exhausted the balance of the gift card, the card number and the amount of the balance of the card are kept until you have spent the entire balance of the card or, failing that, until on the expiry date of the gift card, increased by a period of 13 months for the purposes of managing possible complaints.

Treatments

Data(s) concerned

Purpose(s)

Legal basis(s)

Shelf life(s)

Creating a personal account

• First and last name, gender, date of birth, email address, postal code, country

(Registration using a Facebook account: your Facebook account address will also be collected)

This data constitutes “Personal Account Data”.

• Password

Allow you to create a personal account for the purposes of carrying out an olfactory test, offer you an offer adapted to the result of the test, manage your orders and offer you other associated services (delivery of samples, product evaluation, sponsorships, etc.).

Execution of the contract concluded when creating the account

(art. 6§1 b) of the GDPR)

5 years from the last active contact with you.

Carrying out an online smell test

Personal account data, test data:

• Data provided: your last three perfumes worn (brand, name of the perfume and period during which you wore the perfume or you no longer wear the perfume),

• Test result: your olfactory portrait (your favorite olfactory families, your olfactory pyramid

Identify your olfactory preferences in order to offer you a personalized product offer.

Execution of the NOSE CGU (service provision)

(art. 6§1 b) of the GDPR)

This Data is kept in a form that allows you to be identified in your personal account for the duration of the existence of this account.

My five perfume recommendations

Personal account data, data from the olfactory test

Offer you a personalized offer based on the results of the olfactory test

Execution of Nose’s T&Cs (service provision)

(art. 6§1 b) of the GDPR)

This Data is kept in a form that allows you to be identified in your personal account for the duration of the existence of this account.

Ordering perfume samples

Personal account data, delivery address that you have provided

Provide you with samples to help you find a perfume; send you a promotional code

Execution of sample order contract

(art. 6§1 b) of the GDPR)

This Data is kept in a form that allows you to be identified in your personal account for the duration of the existence of this account.

My reviews

Personal account data, evaluation data that you have provided

Take your feedback into account in order to offer you a personalized product offering and to adapt NOSE's offering more widely to the needs of its customers

Execution of Nose’s T&Cs (service provision)

(art. 6§1 b) of the GDPR)

This Data is kept in a form that allows you to be identified in your personal account for the duration of the existence of this account.

Sponsorship Program

• Data from the sponsor's personal account,

number of invitations sent, free samples and coupons in value

• Data relating to the sponsored person: name, first name, email address of the sponsored person, relationship with the sponsor

Allow you to sponsor a loved one to obtain free valuable samples and coupons and allow your loved one to discover NOSE products and services

• For the sponsor: Execution of the Nose T&Cs (service provision) (art. 6§1 b) of the GDPR)

• For the sponsored person:

NOSE's legitimate interest in offering a sponsorship service (art. 6§1 f) of the GDPR)

• For the sponsor:

This Data is kept in your personal account for the duration of the existence of this account.

• For the sponsored person:

As long as the sponsored person does not create a personal account, the data is deleted by NOSE after one year.

Online order

Personal account data, delivery address, billing address, telephone number, products selected in the basket/purchased, payment method and bank details (or Paypal details depending on the payment method chosen), “credits” obtained by inviting a loved one to carry out an olfactory test, gift card(s) (“balance Gift Card” and/or “Gift Card”)

Allow you to order or pre-order the products offered by NOSE online; follow up on your orders

Pre-contractual steps with a view to concluding a sales contract and execution of the sales contract

(art. 6§1 b) of the GDPR)

Your Data is kept in your personal account for the duration of the existence of this account, subject to the following reservations:

• Your banking data (and/or Paypal details) are kept by the NOSE payment service provider for the duration of full payment, increased by a period of 13 months (15 months for deferred debit payment cards) for the purpose of managing your data. possible complaints.

• Billing Data is kept for 10 years from the end of the current accounting year at the time of the order, in accordance with the law.

System for combating payment card fraud (verification by transaction of a small amount, fraud declaration and other procedures, etc.)

Personal account data, bank details, delivery address, delivery status

Fight against payment card fraud and guarantee secure online payment

• Compliance with a legal obligation of NOSE to ensure secure payment and to prevent fraud via the payment tools made available by NOSE (art. 6§1 c) of the GDPR)

• NOSE's legitimate interest in combating payment card fraud (art. 6§1 f) of the GDPR)

Your Bank Data is kept by NOSE's payment provider for the duration of full payment plus a period of 13 months (15 months for deferred debit payment cards) for the purpose of managing possible complaints.

This period may be extended in the event of payment card fraud. If the fraud leads to legal action, your banking data will be kept for the duration of the steps and/or the current procedure, increased by any appeal deadlines. Otherwise, your data will be kept for five years from the discovery of the fraud, i.e. during the limitation period for actions in civil matters.

Gift card (“balance Gift Card” and “Gift Card”)

Gift card number, gift card activation and expiration date, gift card balance, transaction date and amount

Allow you to purchase products with your NOSE gift cards

Execution of the sales contract concluded at the time of purchase of the gift card

(art. 6§1 b) of the GDPR)

The Data relating to the transaction is kept for the duration of full payment plus a period of 13 months for the purposes of managing possible complaints.

If you have not exhausted the balance of the gift card, the card number and the amount of the balance of the card are kept until you have spent the entire balance of the card or, failing that, until on the expiry date of the gift card, increased by a period of 13 months for the purposes of managing possible complaints.

Treatments

Data(s) concerned

Purpose(s)

Legal basis(s)

Shelf life(s)

Statistics and incidents

Data relating to site traffic (number of visitors, pages viewed, connection time, etc.) – This data is anonymized.

Produce statistics on attendance and use of the NOSE website in order to identify incidents and improve the performance of the site

NOSE's legitimate interest in producing statistics on the use of its site

(art. 6§1 f) of the GDPR)

The data stored is anonymous.

Treatments

Data(s) concerned

Purpose(s)

Legal basis(s)

Shelf life(s)

Delivery

Name, first name, delivery address that you provided on the “delivery addresses” page or at the time of ordering, telephone number

Deliver products ordered online on the NOSE website

Execution of the sales contract concluded at the time of ordering a product

(art. 6§1 b) of the GDPR)

This Data is kept in a form that allows you to be identified in your personal account for the duration of the existence of this account.

A client request

Any data useful for processing your request, including, depending on the case:

• Data from your personal account
• Data relating to the delivery of your order (delivery address, date, etc.)
• Payment data (payment method)
• Data relating to products purchased (nature, amount, quantity, etc.)

Process your requests relating to NOSE products and services (purchased or not); follow up on your requests

• When your request concerns an order/purchase:

Execution of the sales contract concluded at the time of the online order or in-store sale

(art. 6§1 b) of the GDPR)

• For any other request:

NOSE's legitimate interest in answering your questions (art. 6§1 f) of the GDPR)

• When your request concerns an order/purchase:

Five years from the request, i.e. during the limitation period for actions in civil matters.

• For any other request:

Three years at most from the last exchange with you.

Subscription to our news and/or sending our news

email address

Phone number

Inform you by email or text messages (SMS, WhatsApp, etc.) about NOSE products and services that may interest you

If you have carried out an olfactory test (online or in store) or if you have purchased a product (online or in store):

Legitimate interest of NOSE to offer you similar products or services (art. 6§1 f) of the GDPR)

Your Data is kept in the recipient database of our news as long as you consent or until you object. In this case, your Data is deleted. After five years from the last active contact with you, this Data will be automatically deleted.

email address

Other cases :

Consent (art. 6§1 a) of the GDPR)

Customer Loyalty

Phone number

Ensure personalized monitoring of customer relations

NOSE's legitimate interest in contacting its customers by telephone as part of monitoring the relationship (following an olfactory test, following a purchase) (art. 6§1 f) of the GDPR)

Your Data is kept until you object. In this case, your Data is deleted. After five years since the last active contact with you, this Data will be automatically deleted.

Order withdrawal

• Withdrawal form data

Or

Data from the mail or email sent to NOSE to exercise the right of withdrawal (first and last name, email or postal address, order number)

• Banking data, where applicable any promotional code, “balance Gift Card” or “Gift Card” used at the time of purchase

Allow you to exercise your right of withdrawal

Compliance with a legal obligation of NOSE

(art. 6§1 c) of the GDPR)

Five years from the request, i.e. during the limitation period for actions in civil matters.

Legal guarantee of conformity/hidden defects

Depending on the case: name, first name, email, postal address and/or personal account details, bank details (in the event of reimbursement)

Allow NOSE to fulfill its obligations in terms of legal guarantee of conformity/hidden defects and to carry out, if necessary, any necessary exchange or reimbursement

Compliance with a legal obligation of NOSE

(art. 6§1 c) of the GDPR)

Five years from the exchange or refund, i.e. during the limitation period for actions in civil matters.

Promotional operations (competitions, satisfaction survey, etc.)

Depending on the case: name, first name, email, postal address and/or personal account data

Contact you and offer to participate in promotional operations such as competitions

• Sending promotional operations/satisfaction surveys:

Consent (art. 6§1 a) of the GDPR)

• Participation in competitions:

Execution of the competition rules

(art. 6§1 b) of the GDPR)

Three years from submission/participation, with the exception of competition winners (five years from participation, i.e. during the limitation period for actions in civil matters).

Processing your requests relating to your personal data

• Identifying data: surname, first name, email address and/or postal address of the person concerned

• Content of the request: data relating to the nature of the request and any data necessary to respond to it

Allow NOSE to fulfill its Data protection obligations and respond to your request

Compliance with a legal obligation of NOSE

(art. 6§1 c) of the GDPR)

NOSE's legitimate interest in proving that your request has been processed

(art. 6§1 f) of the GDPR)

Five years from the request, i.e. during the limitation period for actions in civil matters.

Cosmetovigilance

• Contact data of the person who reported the adverse event or of any healthcare professional likely to provide further details: name, first name, postal address, email address, telephone number, specialty of the healthcare professional.

• Data relating to the exposed person strictly necessary for the assessment of the adverse health event: identification data of the person exposed to the adverse health event (surname, first name, date of birth, sex, weight, height), data relating to the identification of the product concerned by the report (type of product), health data.

Allow NOSE to fulfill its obligations in terms of cosmetovigilance (and in particular to make any declaration that may be necessary and/or contact the people concerned)

Compliance with a legal obligation of NOSE

(art. 6§1 c) of the GDPR)

Five years from the adverse event, i.e. during the limitation period for actions in civil matters.

Analytics and reporting

Data relating to all NOSE activity (sales data, data relating to customer preferences) – This data is anonymized; they do not allow you to be identified.

Carry out analyzes and reports on all of NOSE's activity (purchasing behavior of its customers, most popular products, etc.) in order to enable NOSE (i) to adapt its activity to changes in the market and its customers (ii) establish and exploit relationships.

NOSE's legitimate interest in carrying out analyzes and reports on its activities

(art. 6§1 f) of the GDPR)

The data stored is anonymous.

Social networks & data controllers

Links to information notices relating to the Processing of your Data

Facebook and Instagram:

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin, Ireland

https://www.facebook.com/privacy/explanation 

LinkedIn:

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

https://www.linkedin.com/legal/privacy-policy 

Youtube:

Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland

https://policies.google.com/privacy 

Type of recipients

Further information

Electronic communications provider

With your agreement, we use Whatsapp Business to communicate with you by instant message on the Whatsapp application. As part of our exchanges (conversation between you and NOSE), the company Whatsapp LLC acts as NOSE's personal data subcontractor.

For any other service of this company (conversations to which NOSE is not a party, services other than the exchange of messages in the conversation with NOSE, etc.), Whatsapp is solely responsible for the processing of personal data carried out. We invite you to consult the Whatsapp privacy policy to find out more.

IT and software providers

Your Data may be transferred to IT and software providers necessary for the operation of NOSE's activities (e.g. hosting providers, customer relationship management software publishers, etc.).

Payment service provider

Your Data may be transferred to payment service providers to allow you to make remote purchases on the NOSE website.

When you make a purchase on the NOSE website, your banking data is exclusively collected and processed by NOSE payment service providers. NOSE has no access to this Data at any time, does not process it directly and does not store it in its systems. Any request to exercise rights on your part relating to this Data will be transmitted by NOSE to its payment provider.

Logistics providers

Your Data may be transferred to logistics providers when a product or paper communication must be sent to you (e.g. delivery of your order, delivery of samples, etc.).

Marketing, communications and/or press relations agencies

Your Data may be transferred to NOSE service providers as part of the organization of a communication campaign or an event, only if you have consented to receiving commercial communications from NOSE.

Rights

The subject of your rights

The right to object

You have the right, at any time, to object to the Processing of your Personal Data, when such Processing is carried out on the legal basis of the legitimate interest of NOSE. When you object to the Processing of your Personal Data:

• for advertising purposes, you can object without telling us the reason(s) justifying your request;
• for all other purposes, you must then tell us the compelling reason(s) motivating your request to exercise your right of opposition.

Your opposition to the Processing(s) of your Personal Data applies for the future. Please note that NOSE may continue to send you advertising solicitations after receiving your objection request. These shipments are temporary, some being automatically scheduled in advance. However, this does not mean that NOSE does not implement your right to object.

Withdrawal of your consent

You have the right at any time to withdraw your consent to the Processing of your Personal Data, when such Processing is carried out on the legal basis of your consent. You may withdraw your consent without providing NOSE with any reason(s) for your request. If you wish to unsubscribe from the NOSE newsletter, simply click on the “unsubscribe” field at the bottom of the page of each newsletter.

The withdrawal of your consent to the Processing(s) of your Personal Data applies for the future. Please note that NOSE may continue to send you advertising solicitations after receiving your request to withdraw your consent. These shipments are temporary, some being automatically scheduled in advance. However, this does not mean that NOSE does not implement your right to withdraw your consent.

Registration on the Bloctel opposition list

You have the right to register free of charge on the Bloctel opposition list. In this case, NOSE will not call you to offer you offers.

The right of rectification

You have the right to ask NOSE to correct your Personal Data that is incorrect or incomplete.

The right of access

You have the right to question NOSE about the nature and methods of the Processing of your Personal Data carried out by NOSE. You also have the right to obtain a copy of your Personal Data that NOSE holds about you.

The right to erasure

You have the right to ask NOSE to erase your Personal Data. In this context, NOSE deletes the Personal Data concerned as much as possible. However, please be aware that such a request cannot affect NOSE's right to retain your necessary Personal Data:

• to meet its legal obligations;
• in the event of a complaint and/or dispute relating to your orders, your products and/or subscribed services.

The right to portability

You have the right to ask NOSE to transmit to you and/or to the third party of your choice your Personal Data, in a format technically usable by you or by said third party.

The right to limitation

You have the right to ask NOSE to limit the Processing of your Personal Data, in one of the following cases:

• when you contest the accuracy of this Personal Data or you consider that NOSE would process it contrary to its obligations, but you do not immediately wish to have it deleted; in either case, NOSE must suspend the Processing of your Personal Data while it carries out the necessary verifications;
• when NOSE no longer needs this Personal Data but you need it to claim, exercise and/or defend your rights; in this case, NOSE must retain your Personal Data which is necessary for you.

The right to give directions

You have the right to give NOSE instructions regarding the fate of your Personal Data after your death.