Privacy Policy

Last updated: September 2022

Protecting your personal data is an integral part of the SMCP Group's (Maje brand) values. By using our website (the "Site"), you acknowledge that you have read this privacy policy ("Privacy Policy"), which governs the use and protection of your personal data collected when using our Site, i.e., any information that directly or indirectly identifies you ("Data" or "Personal Data"), such as your name, surname, postal address, email.

1. Who is the data controller and the Data Protection Officer?
2. What Personal Data do we collect?
3. Why do we use your Personal Data?
4. What rights do you have regarding your Personal Data?
5. Who are the recipients of your Personal Data?
6. Transfer of your Personal Data outside the European Union
7. Security and confidentiality of your Personal Data
8. How long are your Personal Data kept?
9. Miscellaneous

1. Who are the data controller and the Data Protection Officer?

In the context of protecting your data, regulations define two key roles:

- The data controller who determines the purposes of collecting your data. This is Maje, whose registered office is located at 2 rue de Marengo 75001 Paris, registered with the Paris Trade and Companies Registry under number 382 544 310 ("Maje", "we"), reachable by phone at 01 58 16 77 00 and by email by filling out the contact form, selecting "Personal Data" as the subject, located on the contact page of the Site;

- The Data Protection Officer who advises and assists our company in our compliance with personal data regulations. The Data Protection Officer can be contacted for any questions regarding your Personal Data by email at the following address: dpo@smcp.com or by mail at: DPO, Maje, 49 rue Etienne Marcel, 75001 Paris.

2. What Personal Data do we collect?

Your Personal Data is collected, for example, when you provide it in dedicated forms on the Site or when creating your customer account on the Site, when you purchase or have a second-hand product taken back on the Site, during your interactions with customer service, and more generally during your browsing on our Site. This includes the following Personal Data:

• Information collected when creating your account on the Website, such as your name, surname, email address, password, your contact preferences regarding newsletter subscription, and your phone number.
• Information necessary for the management and monitoring of your purchases and/or returns such as your credit card data for transaction processing, your purchase/return history (e.g., purchase amount, product references returned and/or purchased), your written or telephone exchanges with our customer service;
• Information collected during your browsing on the Webite such as your browsing history (e.g., date, time of connection and/or navigation, pages visited), type of device and browser, your location, browser language, access provider, IP address.

3. Why do we use your Personal Data?

We use your Personal Data for several reasons.

Our primary goal is, of course, to always satisfy you as a customer. As such, we collect the majority of your Data in the context of your acts of purchase or returns, notably to take back and/or deliver your second-hand products and to assist you in monitoring our relationship.

Furthermore, we may collect your Data when you give us your consent for purposes that will optimize your experience with our brand.

Finally, other Data is collected because it arises from a legitimate interest (for example, to allow you access to our Site and its use).

Below are further examples of the purposes of Data collection: Legal basis, Processing purposes, Your purchase act, Ensuring the delivery of your purchased products, Managing customer relations and any complaints, Managing requests related to the exercise of your rights regarding personal data.

4. What are your rights regarding your Data?

In accordance with applicable data protection regulations, you have the following rights which you can exercise with us:

• Right of access : You have the right to access the Personal Data we process;
• Right to rectification : You have the right to request us to rectify your Data if it is inaccurate or incomplete;
• Right to erasure : You have the right to request us to delete your Data (subject to the conditions set out in Article 8 below);
• Right to object : You have the right to request no longer to receive communications from us using our online forms, the unsubscribe links present in our emails, or by replying STOP via SMS.
• Right to data portability : You have the right to request the portability of your Data, if the conditions for exercising this right are met;
• Right to information : You have the right to obtain information about how we process your Data.

To exercise your rights, you can fill out the contact form, selecting the "Personal Data" option, located on the contact page of the Site, or by calling us at 0 801 800 111 from Monday to Friday from 9 am to 7 pm and on Saturday from 10 am to 5 pm. We may ask you to provide proof of identity if we have reasonable doubts about your identity.

We commit to responding to you promptly upon receipt of your request by our services.

If you no longer wish to receive our newsletters, you can click on the unsubscribe link at the bottom of our emails.

Please note that you can register on the Bloctel telephone solicitation opt-out list, and in this case, we will not contact you on the contact details transmitted to Bloctel.

5. Who are the recipients of your Personal Data?

Your Data is primarily intended for use by our services.

They may sometimes be communicated to external recipients for the reasons described below. In any case, the recipients of your Data are selected by us based on their competence in terms of data security and confidentiality. We sign contracts with these recipients to ensure a high level of security for their systems. These recipients include our service provider responsible for the buy-back service, our service providers responsible for optimizing and analyzing the operation of our websites, ensuring your transactions and payment security, our service providers responsible for logistics (storage, preparation, and delivery of your products), or our customer service, our service providers responsible for marketing and commercial studies.

Your Data may also be transferred to third parties, (1) subject to your prior consent, for processing in accordance with the purpose(s) for which your Data was collected, or (2) in cases where we are required by law, in the context of legal proceedings, or if there is an imperative request from a public authority, or (3) if we are involved in a merger, acquisition, or asset transfer.

6. Transfers of your personal data outside the European Union

In the event that Personal Data is transferred to a country located outside the European Union, we undertake to take the necessary technical and organizational measures to ensure the adequate level of security for your Data as if it had remained within the European Union.

Indeed, we require these Data recipients to implement the necessary measures to ensure the same level of protection as required by European data protection regulations, for example, by using the European Commission's standard contractual clauses or binding corporate rules (BCR).

7. Security and Confidentiality of your Personal Data

We implement technical and organizational measures to ensure the security, integrity, authenticity, and confidentiality of Personal Data. We ensure that our partners maintain a level of protection similar to ours regarding your Personal Data. Additionally we ensure that your transactions are secured through the implementation of appropriate measures and fraud prevention.

8. How long are your Personal Data kept?

We retain your Personal Data for the strictly necessary duration to achieve the purposes for which they were collected. Thus, we keep:

• Your Personal Data, except for your banking data collected and processed through our payment management providers, for 3 years from the date of the last interaction between us (i.e., your last purchase, last contact (call, email, chat, or social media) with our customer service, opening of our newsletter, or lack thereof, the date of creation of the customer profile);
• Connection logs collected, provided that you consent, using cookies and other trackers used in the service, for a duration not exceeding thirteen (13) months. For more details, refer to the "Cookies Policy."

Your banking data are kept by our payment partners. When placing your order, you will need to enter your banking details in the fields provided for this purpose.

Once your data is deleted from our database, some of your data may be kept as archives with restricted and strictly limited access for the purpose of fulfilling our legal, accounting, and tax obligations, as well as to manage your possible claims and warranty requests within the limits of the applicable prescription periods.

Once your Personal Data are no longer necessary for the purposes or for archiving purposes to comply with our legal obligations or for the needs of the applicable prescription, your Data will be irreversibly anonymized.

At any time, you have the option to request the deletion of all or part of your Data, to object to their processing, or to request their limitation, in accordance with article 4 above. In case of a request for the deletion of your Data, il will be deleted from our database and kept as archives as indicated above.

9. Miscellaneous

In the event of changes to the processing terms of your Data, we will update our Privacy Policy, of which you will be informed.

Finally, we would like to inform you that in case of a complaint regarding the protection of your Personal Data, you can also contact the French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL), whose website is accessible at the following address: https://cnil.fr/en.