WHO WE ARE

ENIES, EX NIHILO Paris brand owner, pays particular attention to the processing, confidentiality and safety of your personal data.

This aim of this privacy charter is to provide you with clear, simple and complete information about how we process the personal data you give us or the data we may collect while you are browsing our website, how it may be transferred to third parties and your rights and options to control your personal information and protect your privacy.

ENIES, a SAS company with headquarters located at 35 rue des Petits Champs 75001 Paris FRANCE, registered in the Paris trade and companies register under no. B 537 661 522 is the data controller of personal data collected on the website www.ex-nihilo-paris.com in the sense of regulations applying to personal data, in particular Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter the “GDPR”).

YOUR PERSONAL DATA

Cookies are small text files that are used to store small pieces of information. The cookies are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make the website more secure, provide a better user experience, and understand how the website performs, and to analyze what works and where it needs improvement.

WHO WE ARE

What is personal data?

Personal data is any information about an identified physical person or a physical person that may be directly or indirectly identified via an identification number or one or more elements particular to them, such as their last name, first name, date of birth, customer number, order number, photo, etc…

When can we collect your personal data?

We collect your personal data when:

• You visit our website ;
• You create an account on our website ;
• You place an order or book a reservation on our website or in one of our points of sale ;
• You subscribe our newsletter ;
• You participate to special operations, including contests, product testings, satisfaction surveys, polls, market studies ;
• You share contents on social networks like Instagram, Facebook, Pinterest or Twitter using the #exnihiloparis hashtag or other hashtags we suggest ;
• You visit us in official points of sale or licensed distribution networks ;
• You contact us, especially when you call or request assistance to our Premium Customer Service, when you give your option about our – products and/or services ;
• You allow third parties to share your personal data with us.

What personal data might we collect?

1. As part of the services we provide, we may need to collect certain data directly from you using electronic forms on our website, mobile apps or in selected stores, or in paper form, for a range of purposes (see IV for a list of processing purposes).
Information we might collect includes:

• Your identity
• Your contact details (e.g. email address)
• Your personal preferences in relation to the products we market or to our website (language)

Personal data essential to ENIES is marked with an asterisk on all personal data collection forms on our website, in electronic form at some of our counters and stores, as well as off-line in paper form. If you do not fill in these compulsory fields, ENIES will probably be unable to respond to your request and/or provide you with the requested services. Other information is optional and enables us to get to know you better and improve our communications and services with respect to you.

2.We may also collect certain data generated by your purchases of products or services, online or in stores, particularly information regarding the amount and type of your purchases.

3.Lastly, we may collect information regarding the use of our website, especially with respect to your browsing (pages visited, links clicked, etc.). Some of this information may be collected using cookies placed in your web browser when you browse our website. For more information about cookies, read point XXXXXXXXXX of this policy.

For what purpose is your personal data collected and used?

ENIES processes your data to:

• Manage customer relations with respect to any requests for information or complaints you may send us via our website, customer service or social network pages ;
• Trace and manage any alerts you may send us as part of our cosmetic vigilance obligations ;
• Manage and optimize your customer experience by improving our knowledge of our customers ;
• Propose appropriate, tailored services, particularly when we enhance our products and services ;
• Conduct statistical analyses to develop management, measuring and reporting tools in order to adjust and improve our sales, marketing and – product manufacturing ;
• Subject to your consent, send you information on our offers, news and events on your chosen communication media ;
• Manage your participation in any events to which you have signed up ;

What legal grounds legitimise the processing of your data?

ENIES processes your personal information:

• To perform the contract agreed between yourself and ENIES to manage your access to your customer account and to process and track your orders ;
• Within the framework of its legitimate interest for the purposes of marketing management, securing its digital media (websites, applications, etc.) and combating fraud ;
• When you have given your consent for the processing of your data, especially for the purposes of managing our sales prospection, and of your browsing data via cookies, etc. ;
• Within the framework of compliance with our legal obligations, particularly fiscal obligations (conserving purchase invoices) and cosmetic vigilance with regard to Regulation (EU) 1223/2009 of 30 November 2009 on cosmetic products;

Who are the recipients of your personal data?

Your personal data is processed by the personnel of ENIES. We ensure that only authorized persons within ENIES have access to your personal data when this is necessary for the purpose of managing our commercial relations or meeting our legal obligations.

We may also share your personal data with:

• Other entities of ENIES, with some of these entities acting as data processors
• Subcontractors, such as:
• Site hosting and maintenance service providers and the providers of our electronic personal data collection solutions at counters and in stores ;
• Logistic service providers
• Marketing solution service providers
• Sales prospection and social network communication service providers
• Customer service providers
• Service providers for managing cosmetic vigilance alerts
• Event organisation service providers

Lastly, ENIES may need to share your personal data with third parties to meet its legal, regulatory or treaty obligations, or to respond to requests from authorized legal authorities.

Transferring data abroad

Some recipients of your personal data may be located abroad, including outside of the European Economic Area.

All data transfers outside of the European Economic Area are subject to appropriate guarantees, especially contractual, technical and organisational guarantees, that comply with applicable regulations relating to the protection of personal data.

How long do we keep your data?

Legal periods of retention defined by ENIES comply with the recommendations and/or the legal obligations covering ENIES

What are your rights and how can you exercise them?

Under current regulations, particularly the GDPR, you have the right to access and correct your personal data, request erasure, object to processing on legitimate grounds and obtain limitation or portability, insofar as this is applicable.

You can exercise these rights directly with ENIES by sending an email to contact@ex-nihilo-paris.com or a non-registered letter by post to ENIES SAS – 35 rue des Petits Champs 75001 Paris FRANCE, including a document proving your identity.

If, at any time, you no longer wish to receive details of our offers, news and events, you can unsubscribe using the hypertext link provided for this purpose in each mail we send you.

You may also lodge a complaint with the Commission Nationale Informatique et Libertés 3 place de Fontenoy 75007 Paris, www.cnil.fr.

INFORMATION ON COOKIE MANAGEMENT

This section is dedicated to our policy for managing cookies on the website www.ex-nihilo-paris.com.

It has been designed to provide you with information on the origin and use of browsing data processed when you use our website, together with your rights.

What is a cookie?

When you use our website, we may, depending on your choice, place a text file on your terminal (computer, smart phone or tablet) via the web browser.

This text file is a cookie. Throughout the period of validity or registration, it will enable ENIES to identify your terminal during subsequent visits.

Only the entity issuing the cookies is able to read or modify the information they contain.

Below you will find information about the cookies that may be placed on your terminal when you visit the pages of the website www.ex-nihilo-paris.com, either by ENIES or by third parties, together with ways in which you can delete or refuse installation of these cookies.

What is the purpose of the cookies issued on www.ex-nihilo-paris.com?

There are several types of cookies, some of which are issued directly by ENIES and its service providers, whilst others may be issued by third parties.

1. Cookies issued by ENIES and its service providersDifferent types of cookies may be placed on your terminal whilst you are browsing on our website:

1. “Essential” cookies
   These cookies are essential for browsing on our website, especially for the functioning of the order process.
   Deletion of these cookies may cause problems with browsing on our website and make it impossible for you to place an order.
   These cookies are also necessary for tracking the activity of ENIES.
   They may be installed on your terminal by ENIES or by its service providers.

2. 1.2. “Analysis and Customization” cookies
   These cookies are not essential to browsing on our website, but may help you, for example, to search more effectively and optimize your purchasing experience and help us better target your requirements, improve our offer and optimize the functioning of our website.

Important information if you share your terminal with other users

If your terminal is used by several people or when a single terminal has more than one type of browser software, we cannot be sure that the services sent to your terminal will match your use of the terminal, rather than that of another user.

In this case, sharing use of your terminal with others and deciding your browser cookie settings are your free choice and your responsibility.

2. Cookies issued by third-party companies
The issue and use of cookies by third parties on our website are subject to privacy policies concerning these third parties.

These cookies are not essential to browsing on our website.

On our website, we may include computer applications from third parties that enable you to share our website content with others, inform others that you have been consulting our website or notify them of your opinion concerning content on our site. This particularly concerns use of the “Share” and “Like” buttons featured on social networks such as Facebook, Twitter, Instagram, Pinterest, etc.

The social network providing these application buttons is likely to identify you via this button, even if you have not used it when browsing our website.

Indeed, this type of application button can enable the social network concerned to track your browsing on our website, simply because your account on the social network in question is enabled on your terminal (a session is open) whilst you are browsing our website.

We have no control over how social networks collect information regarding your browsing on our website and associated with the personal data they hold.

We encourage you to read the privacy policies of the social networks to learn about the purpose, especially advertising, of any browsing information they may collect via these application buttons. These privacy policies should enable you to exercise your choices with respect to these social networks, in particular by changing your account settings.

Visit the websites of the aforementioned social networks for more information about their privacy policies.

3. Managing the cookies placed in your web browser

You can decide whether to allow cookies to be installed on your terminal.

You can adjust your browser settings as you wish, so that cookies are either accepted and registered on your terminal or refused.

1. Agreeing to Cookies
   If your browser software is set to accept the registration of cookies on your terminal, the cookies embedded in the pages and content you have consulted will automatically be registered on your terminal.

2. Refusing Cookies
   You can set your browser software so that:

   you are regularly asked if you wish to accept or refuse cookies before a cookie can be registered;

   you systematically refuse the registration of cookies on your terminal.

Important: Any adjustments you may make to the settings in your browser software concerning the acceptance or refusal of cookies may modify your browsing on the Internet and your terms of access to certain services requiring use of these cookies.

For example, by refusing certain essential cookies, you may no longer be able to place orders on our website.

If you choose to refuse the registration of cookies on your terminal or if you delete cookies that are already registered, we decline all responsibility for any consequences relating to the degraded performance of our services resulting from the fact we are unable to register or consult the cookies required for their performance and which you have refused or deleted.

How to exercise your choice, depending on your browser

Settings vary from one type of browser software to another. Details can generally be found in your browser software help menu. We therefore encourage you to look at your settings to find out how you can make choices regarding cookies.

For Internet Explorer™: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

For Safari: https://support.apple.com/kb/PH19214?locale=fr_FR&viewlocale=en_US

For Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en

For Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

For Opera™: http://help.opera.com/Windows/10.20/en/cookies.html