UPDATED ON OCTOBER 15, 2022

WE, CODECLOTHING, ACT AS THE "DATA CONTROLLER," WHICH MEANS WE DETERMINE "WHY" AND "HOW" YOUR PERSONAL DATA IS COLLECTED AND USED. WE ARE A FRENCH COMPANY LOCATED AT 239, PARC SAINT-GEORGES, BAT D4, 13170 LES PENNES MIRABEAU, FRANCE, AND REGISTERED WITH THE COMMERCIAL REGISTER UNDER NUMBER 900 698 242.

The use of the website involves the collection and processing of various types of personal data, carried out for various purposes and using different methods. In particular:

(A) Personal data related to navigation, which is processed for the proper functioning of the website, managing the sending of purchase-related messages and shopping cart management, as well as enabling you to manage your contractual relationships with third parties in the context of sales activities, and for marketing purposes. For more information on this, please refer to the "Cookie Policy";

(B) Personal data provided voluntarily by the user (such as an email address, personal information, a password provided when filling out the registration form for "My Account") or otherwise acquired legally during the user's visit to the website, or when subsequently contacting customer service by email, in order to respond to the user's requests and provide the requested services, assistance, and product information related to CODECLOTHING's products and universe. Please note that registration and access through a social profile involve the disclosure of certain data (including first name, last name, email, and other user-related data present on the social profile) by the chosen social network and therefore require explicit authorization before logging in, allowing you to carry out activities with the user account. In some cases, social networks may request feedback and information about the use of the login. For further information, please refer to the privacy documentation available on the social network;

(C) Personal data provided by the user as part of the online registration on the website, when placing orders for products on the online store for e-commerce transactions, and for interactions with users for operational and essential sales activities as well as any necessary pre-sale and after-sales assistance and related services;

(D) With the express consent of the user, CODECLOTHING may process the user's personal data for marketing purposes, i.e., to send the user information and updates regarding products, sales, promotional campaigns, events, and other initiatives launched by CODECLOTHING (using traditional tools and telematic tools such as newsletters, emails, SMS, MMS, and smart messages), as well as messages suggesting that purchases are pending completion (reminders of viewed products and abandoned carts) and also for activities and messages aimed at checking customer satisfaction and the quality of service provided;

(E) With the express consent of the user, CODECLOTHING may also process the user's personal data to study their consumption habits and choices so that CODECLOTHING's products and initiatives better meet their expectations and tastes;

(F) Personal data processed for the purpose of preventing and suppressing fraud and behavior that is illegal and/or contrary to applicable regulations, contractual provisions, as well as rules of fairness and good faith. This processing may also be carried out by third parties such as companies specializing in online fraud identification, public authorities, investigative bodies, police officers, and judicial authorities.

With the exception of navigation data covered by the Cookie Policy, the processing of personal data is based on:

- The contractual obligation assumed by CODECLOTHING in connection with sales made on the website and the related legal obligation;

- The consent that can be provided by the user for the purposes indicated in point (B) - exclusively referring to login through a social network - and in points (D) and (E);

- The legitimate interest of both CODECLOTHING in providing services on the website and the user in browsing the website and/or the legitimate interest of CODECLOTHING in responding to all customer requests;

- The legitimate interest in carrying out audits and security activities for the purpose of preventing and protecting against fraudulent activities and abusive behaviors.

Please note that based on the legitimate interest principle, CODECLOTHING may contact you to offer services and products similar to those you have previously purchased. Please also note that in accordance with applicable law, this type of contact (referred to as "soft spam") does not require consent. However, you can request the interruption of processing at any time, and CODECLOTHING will comply without delay.

CODECLOTHING collects personal data directly from the user (during registration on the website or during the steps of the purchase process), with the exception of data collected during website navigation, as outlined in section 2(A) above, data collected during login via a social network as per section 2(B), and data collected and processed for fraud prevention and malicious behavior on the website.

As indicated in section 2(E) above, CODECLOTHING, with the express consent of the user, may also process the user's personal data to analyze their habits and consumption choices, so that CODECLOTHING's products, services, and initiatives better align with the expectations and tastes of its customers.

CODECLOTHING will carry out this processing using automated tools to determine the value of purchases made over a given period, the frequency of purchases (even during sales periods), and the type of items purchased (accessories, clothing, ready-to-wear). CODECLOTHING will not conduct any intrusive analysis of the user's behavior; this approach is solely aimed at suggesting products, services, and initiatives that better match the user's expectations and tastes.

Furthermore, please note that in accordance with section 2(A), with the express consent of the user, CODECLOTHING may process personal data using automated cookie analysis tools to track the user's navigation throughout the entire website and, as a result, offer the user relevant products and services based on their browsing behavior.

The processing of personal data collected by CODECLOTHING via the website is carried out using primarily computer and telematic methods, applying all necessary security measures to reduce the risks of data destruction or loss, even accidental, unauthorized access, or processing not permitted or not in compliance with the data collection objectives specified in this Privacy Policy.

However, due to the nature of online data transmission methods, these measures cannot absolutely limit or exclude the potential risks of unauthorized access or data dispersion. That is why we recommend that you regularly check that your computer is equipped with software to protect online data transmission, both incoming and outgoing (recent and updated antivirus, for example), and that your internet service provider has applied adequate measures to secure online data transmission (firewalls and spam filters, for instance).

To ensure the perfect security of online purchases, www.code-clothing.com uses state-of-the-art security and encryption technologies (SSL).

With the exception of browsing data (the transmission and collection of which are subject to Section 7 "Cookies" on this page/Cookie Policy), communicating personal data to CODECLOTHING, whether to respond to user requests and inquiries, for marketing purposes, or for studying consumer habits and preferences, is optional and voluntary. Although not transmitting this data in any way prevents the use of the website, CODECLOTHING may not be able to respond to user requests for information and inquiries, provide them with personalized services and products, or send them informational documents, updates, newsletters, and invitations to CODECLOTHING events.

The transmission of data, including civil status data, email address, postal address, telephone number, and banking details in case of payment by credit card, is mandatory and essential to sign the purchase contract for products via the website.

Furthermore, some of this data may be indispensable either to benefit from other services offered by the website in connection with sales (pre-sale and after-sale services such as personalized services, delivery, item exchange, etc.), or in compliance with legal and regulatory provisions (tax obligations and measures to combat money laundering). Therefore, any failure to fulfill this obligation to communicate data may constitute, depending on the circumstances, a legitimate and justified reason for non-execution of the purchase contract for products on the website and the associated services.

Where applicable, the mandatory or optional nature of data communication will be indicated by means of an asterisk (*) placed next to the information that must be provided, or individual data necessary for the provision of services and the purchase of products on the website. The absence of the transmission of optional data does not entail any obligation or inconvenience.

CODECLOTHING communicates the personal data of users of the website in strict compliance with the limits authorized by law and the provisions outlined below. In addition to the provisions indicated in section 2 B (namely, connection via a social network), personal data will be processed and communicated:

- To employees and consultants of CODECLOTHING assigned to data processing, who are authorized to process data for internal organization of activities;

- To other companies within the same group responsible for processing your data to carry out contractual activities and services (such as in-store item withdrawal services) as well as specific marketing activities (such as invitations to local events);

- To companies responsible for data processing providing CODECLOTHING with specific business and technical services related to the website (logistics services, IT services, customer service, and marketing services).

Personal data may also be transmitted:

- To third parties solely for the purpose of executing the contract for products purchased on the website (for example, credit institutions providing remote payment services by credit/debit card);

- To specialized third parties in online payment fraud prevention to protect the company against unlawful acts and damages;

- To law enforcement and relevant judicial authorities, in accordance with the law and subject to an official request from said authorities, or if there is reasonable cause to believe that it is reasonably necessary to transmit this data to (1) investigate, prevent, or take action in the case of suspected illegal activities, or cooperate with competent national authorities; (2) prepare a defense against third-party damage claims, protect the security of its own website and the company; (3) exercise or protect the rights, property, or safety of CODECLOTHING, subsidiaries, customers, collaborators, and third parties.

Personal data associated with the purchase of items will be retained for a minimum of 10 years in accordance with the tax code and civil code. Additionally, data associated with the purchase may be retained for a longer period, as per the unlimited contractual warranty provided to the customer due to the type of products sold by CODECLOTHING.

Data collected during interactions with customer service will be retained for the strictly necessary duration to follow up with the customer.

Personal data provided for marketing and profiling purposes will be retained for as long as required for this specific processing, considering the nature of the industry and the fact that the customer has expressed interest in receiving updates on CODECLOTHING products and events.

The user has the permanent right to request CODECLOTHING to confirm the existence or absence of personal data concerning them, even if this data has not yet been recorded, and to have it transmitted to them in an intelligible form. The user also has the right to obtain information about the origin of personal data, their purpose and the methods of processing, the logic of processing applied to them by computerized processes, the references of the data controller and data processors, and the references of the individuals or categories of individuals to whom personal data may be communicated or who may become aware of it, such as data processors or individuals in charge of data processing as data security supervisors or data processors. The user also has the right to obtain the updating, rectification, or, in their own interest, the integration of their personal data, the erasure, transformation into anonymous form, or blocking of personal data processed in violation of the law, including data whose retention is unnecessary for the purposes of the collection or subsequent processing. The user has the right to be informed that these operations and their content have been communicated to those to whom the data has been disclosed or disseminated, except where this proves impossible or involves the use of means that are manifestly disproportionate to the right being protected. The user can also request data portability. In all cases, the user has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if the data corresponds to the purpose of the collection, to the processing of their personal data for the purpose of sending advertising or direct marketing material or for market research or commercial information. They may also request to limit the processing of their data. The user can also exercise their right to object to one or more specific methods of sending marketing communications.