As part of the application of data protection regulations, in particular Regulation (EU) 2016/679 (hereinafter the “GDPR”) and the French Data Protection Act n°78-17 (hereinafter together the “Regulations”), Optical Center (hereinafter “Optical Center” or “we”) has implemented a personal data charter to inform you about the data it may collect and process during the stay of its clients at Château Optical Center (hereinafter “you”), in accordance with the requirements of the Regulations (hereinafter the “Personal Data Charter”). Demonstrating its strong commitment to protecting your data, Optical Center has also appointed a Data Protection Officer who can be contacted by email at dpo@optical-center.com. Optical Center’s Personal Data Charter may be updated depending on legal developments and/or personal data processing that we may carry out. Commitment to the confidentiality of your personal data In particular, in order to respond to requests, organize your stay, or ensure the security of your data, we collect personal data about you. Optical Center seeks to collect only the data necessary to process your requests, files, and their follow-up. Optical Center handles your personal data confidentially and with care to best protect your privacy. Who is responsible for processing your data on https://www.chateau-opticalcenter.com, in the context of a contractual relationship with Optical Center or for marketing purposes by Optical Center? The data controller of your data is: SAS OPTICAL CENTER 74/76 rue Laugier 75017 PARIS SIREN No.: 382 372 993 Our commitments Here are the three main commitments we make as a data controller: – Minimal use We never share your personal data with third parties without a valid reason or your consent. – Responsible processing We protect and process your personal information as if it were our own. – Transparent use We use your personal information only for the purposes described below. For what purposes do we process your data? Reservations for stays at Château Optical Center, Reservations for services associated with the stay (room, stay package, etc.), Management of gift cards, Customer relationship management in general, After-sales service, Marketing by mail, phone, or email, Sending newsletters by Messages, SMS, and more broadly via mobile phone if the user has expressly subscribed. You can unsubscribe at any time using the opt-out method provided in the commercial message, Sending newsletters by postal mail to inform as many people as possible about our promotional offers and new products. Optical Center sends mailings accordingly. Even if you are not a client of our stores, you may also receive such mailings. Regulations fully allow this type of mailing without your prior consent. We ensure that you can exercise your right to object. You can fill out the form at the following page: https://www.optical-center.fr/contact. Please note that Optical Center sometimes entrusts partners to send mailings on your behalf without storing or having access to data about you, and ensures that the paper used complies with PEFC standards, which certify sustainable forest management. Marketing: we may use information about your purchases, your visits and searches on our site, and your orders to improve and analyze our services, better understand your needs and interests, target our advertising and marketing campaigns, and personalize our content and offers, Site maintenance and optimization to verify/improve service quality, availability and performance, resolve any operational problems or anomalies, and secure the site, notably against fraud or impersonation. On what legal basis do we process your data? Your data is processed either with your consent, on the basis of a legitimate interest, on the basis of a legal obligation, or under a contract to which you are a party. With whom do we share your data and why? Optical Center uses the tool “ReservIT” to outsource reservations. The reservation confirmation is managed by ReservIT. Once the reservation is confirmed, the ReservIT back-office software allows Optical Center to consult reservations and ensure the proper follow-up of your stay at the Château. More generally, Optical Center only collaborates with partners who meet its security standards. In all cases, third parties are not authorized to use your information for any purpose other than that described in this Personal Data Charter. Your data is only shared with our subcontractors to carry out the purposes described above. For this purpose, we may share your data for computerized processing by our IT service providers, payment processing by our banks and trusted third parties, ordering from glassmakers or eyewear manufacturers, delivery of your order, and with our commercial partners. We limit the retention period of your data Optical Center retains your data in accordance with its legal obligations for the time necessary to achieve the processing objectives according to legal prescription periods (for example (1) in the context of a commercial relationship, we retain your data for 3 years from the end of this relationship and warranty periods; (2) at least one year for data related to the exercise of individual rights and in particular 6 years from the exercise of an objection request in accordance with CNIL recommendations). What are your rights regarding your personal data? Within the limits set by the Regulations and the French Data Protection Act, you have rights regarding your data. You may: * Request access to your personal data: This right allows you to receive a copy of the personal data we hold about you and verify that we process it in accordance with applicable law; * Request correction of your personal data: This right allows you to correct any incomplete or inaccurate information we hold about you; * Request deletion of your personal data: This right allows you to request the deletion of your personal data if we have no legitimate reason to continue processing it. In most cases, the services we provide must be terminated and accounts settled with a zero balance to carry out data deletion; * Object to the processing of your personal data: when the legal basis for processing is our legitimate interest, for reasons relating to your particular situation; * Withdraw your consent where the legal basis for processing is your consent; * Request limitation of the processing of your personal data: This right allows you to request the suspension of processing of your personal data concerning you; * Request portability of your personal data: This right allows you to receive the personal data we process concerning you, in a structured, commonly used, machine-readable format, and transmit it to another data controller without obstruction; * Set directives regarding the fate of your data post-mortem. You may exercise your rights by sending a request to our service at the following email address. We will respond to your request within 30 days and provide a link to easily retrieve your data, except in special cases. You may exercise your rights via the online form: www.optical-center.fr/contact or write to Optical Center headquarters – DPO – 74 rue Laugier, 75017 Paris. The Data Protection Officer (DPO) of Optical Center He is the internal guarantor of the compliance of Optical Center’s activities regarding data processing. He has the necessary resources to carry out his role without conflicts of interest in accordance with the obligations and best practices that Optical Center must implement regarding the protection of personal data. He is your contact for any request regarding the processing of your data. You can contact him at: dpo@optical-center.com. If your question is not resolved, you may submit your request to the CNIL, the French Data Protection Authority, directly at www.cnil.fr.