'S PERSONAL DATA PROTECTION POLICY

Article I. Preamble

RZBALL COMPANY SAS, whose registered office is located in France, at 120 route des Macarons, 06560 VALBONNE SOPHIA-ANTIPOLIS France, registered with the GRASSE Trade and Companies Register under number 829 110 485 – represented by its current legal representative (hereinafter referred to as "the " Company " for the specific purposes of this Charter), operates a business selling sports equipment for the practice of RAQBALL and, to this end, in particular, a website allowing Users to order said equipment (hereinafter referred to as the " Site ").

This charter relating to the protection of personal data (hereinafter referred to as the " Charter ") is intended to define the conditions and procedures for the collection, use, and sharing of personal data (hereinafter referred to as " Data " for the specific purposes of this Policy) that the Company may collect in connection with the performance of the Services, the performance of which is governed by the General Terms and Conditions of Use and Sale, which the User agrees and certifies to have accepted upon signing this document.

Article II. Definitions

Each of the contractual terms defined in the General Terms and Conditions of Use and Sale shall be deemed to have the same meaning in the context of this document, unless there is a contradiction with the definitions listed below, which shall prevail.

Charter:refers to the terms and conditions governing the collection, use, and sharing of Data that the Company collects in the course of providing its Services.

Data : any information relating to an identified or identifiable natural person (data subject), directly or indirectly, by reference to an identification number or to one or more factors specific to that person (including, but not limited to, their name, telephone number, email address), within the meaning of Regulation No. 2016/679, known as the General Data Protection Regulation (hereinafter referred to as the " GDPR ").

Data Processing : refers toany operation or set of operations performed on such data, regardless of the process used (collection, recording, organization, storage, adaptation, modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, reconciliation or interconnection, locking, erasure or destruction, etc.) within the meaning of the GDPR.

Article III. Scopeof application

This Charter is valid for the entire duration of the General Terms and Conditions of Use and Sale to which it relates.

The Company reserves the right to modify this Policy as necessary, depending on changes to the Services offered or changes in legislation, at its sole discretion. The Company's data management policy is always subject to the most recent version of the Policy. Users are invited to consult this Policy as often as necessary.

In any event, any significant changes will be notified by email or by any other means at least 30 (thirty) days before they take effect in order to obtain your consent.

Article IV. Collectionof User Data

4.01 Information collected

This information includes User Data collected when the User accesses the Services, such as:

• Data collected during account registration, such as:
• The first name;
• The name;
• Email address;
• The User's phone number;
• Bank details, if applicable;

This data is mandatory for order management. If this data is not provided, the User may be unable to access the Services offered.

• Data collected during the Order, such as:
  • The date;
  • The starting address;
  • The arrival address;
  • Any comments made by the User

This data is necessary for the provision of high-quality Services.

4.02 Shelf life

The Data collected and processed will be retained for the entire duration of the Services, so as not to exceed the period necessary for the purposes for which it is processed, with the exception, however, of bank details, which are not retained by the Company.

If the User decides to delete their Account, the Company will not retain any User Data.

If the Account is deleted due to inactivity, the owner's Personal Data will be deleted immediately.

An Account is considered inactive after two (2) years without the User logging in to the Website. The Company reserves the right to delete the inactive Account after informing the User in advance, who may object to the deletion of their Account by expressly stating their wish to do so.

In any event, certain categories of Data will be subject to intermediate archiving at the end of the performance of the Services or their interruption for any reason whatsoever, if such Data is necessary for the Company to protect itself against evidence in the event of a dispute. The duration of this intermediate archiving will be 5 (five) years from the date of interruption, with the exception of proof of subscription to the Services and a copy of the Contract, which will be kept for a period of 10 (ten) years from the performance of the Service, in accordance with Article L 213-1 of the French Consumer Code.

In the event that the Contract signed between the Parties has been suspended or blocked, the Data will be retained for a period of 5 years from the date of suspension, with the exception of proof of subscription to the Services and a copy of the Contract, which will be retained for a period of 10 (ten) years from the date of performance of the Service, in accordance with Article L 213-1 of the French Consumer Code.

Article V. Differenttreatments performed

The Company uses the Data collected from Users for the following purposes:

• The performance of the Services agreed between it and the User;
• Providing the User, where applicable, with information about the Services by email, SMS, or any other means of communication, within the limits of the authorization given by the User;
• Improvement of the quality of Services such as personalization of the offer, improvement of User knowledge through anonymized statistical analyses, where applicable.
• Ensure compliance with (i) applicable legislation, (ii) normal use of the Services, and (iii) this Charter;
• Send the User, in accordance with applicable legal provisions and with their consent where required by law, marketing, advertising, and promotional messages; invitations to events; and information relating to the use of the Services.
• Proceed with referencing the User in databases.
•  

Article VI. Recipientsand reasons for transferring the collected Data

The Company collects and processes User Data from its Application personally through its team, employees, or external service providers, who are, in any event, bound by a confidentiality clause and informed of the security obligations related to the collection and processing of Data.

In connection with the use of the Services, some of the information collected may be transmitted:

• To the Company's teams (its management and employees, occasional interns, or external service providers) in order to access information about the Order;
• To routing and emailing organizations;
• Subject to the User's consent, to service providers involved in marketing communications;
• To applications, certified GDPR-compliant, which the Company needs to process the actions it performs, such as payment services in order to offer remote payment for the Order by credit card, where applicable;
• To the Company's IT department;
• To the Company's hosting and backup server;
• When the Company is legally required to do so, in order to comply with any legal request;
• In the event that the Company sells its business by any means whatsoever, to the potential transferee of its business or shares in its share capital.

Article VII.Data Transfer

The Data is stored in France on identified servers. The Service Providers selected by the Company have undertaken to the latter not to transfer any data outside the European Union. To date, no transfers outside the European Union have been reported. Should this be the case in the future, the service providers selected by the Company have undertaken to (i) inform it in advance and (ii) comply, in any event, with the provisions of the GDPR so that the minimum protection guarantees of this regulation are respected.

Article VIII.User RightsRegarding Their Data

The User has the right to obtain a copy of the Data concerning him/her held by the Company. To do so, they must either (i) send their request by email to the following address: contact@raqball.com, or (ii) send their request by letter to the Company's address as stated in the preamble to this Policy.

The Company will endeavor to respond to the User's request within a reasonable time and, in any event, within the time limits set by law.

The User also has the option of accessing the Data held by the Company in order to request that it correct, modify, or delete any incorrect information.

The User has the right to object to or restrict the processing of their Data.

The User has the right, where applicable, to lodge a complaint with the competent supervisory authority (the CNIL) or to seek redress from the competent courts if they consider that the Company has not respected their rights.

The User also has the right to data portability, i.e. the right to receive the Data provided to the Company in a structured, commonly used, and machine-readable format, and the right to transmit this Data to another data controller.

Finally, Users also have the right, where applicable, to define guidelines regarding the fate of their Data after their death.

Article IX. Trackers

9.01 General information – Purpose – Duration

Trackers enable information relating to access to the Site to be stored, such as the date, time, and any data entered by the User during their visit, such as their email address and password. Trackers make interaction between the User and the Site faster and more efficient.

In order to enable all Users to make optimal use of the Site and to improve its functioning, the publisher may install these trackers on the User's device after obtaining the User's express prior consent and informing them of the insertion of these trackers. However, certain trackers are exempt from this consent requirement.

Trackers requiring consent cannot be stored or read until the User has given their consent.

The User gives their consent through a positive action such as checking a box, after being informed of the consequences of their choice and the various purposes of cookies.

The User may withdraw their consent at any time.

These trackers are intended to be stored for a maximum period of 13 (thirteen) months. At the end of this period, consent must be obtained again.

These obligations apply regardless of whether trackers collect Data or not.

9.02 Right to object to the installation of the tracker

Users can choose to enable or disable trackers on their device at any time, or delete them. They can disable all trackers or, alternatively, modify their tracker preferences by clicking on the link in the information banner.

Any settings made by the User may modify the use of the Website and the conditions of access to certain services requiring the use of trackers. This malfunction shall in no way constitute damage to the User, who shall not be entitled to any compensation as a result.

RZBALL COMPANY
120, Route des Macarons
06560 Valbonne Sophia Antipolis - France