Privacy Policy

This privacy policy aims to explain why we collect your data and how we are committed to protecting it.

BOTTRAX is committed to protecting your personal data and your privacy.

As such, and in accordance with the General Data Protection Regulation (hereinafter referred to as "GDPR"), we inform you below of the conditions under which your personal data will be processed by us.

What personal data do we process?

Purposes:

We may collect and store your personal data, in particular to:

Process and respond to your messages, Create and manage access to your accounts, Receive and process your order, Receive and process your participation in a survey or contest, Manage your subscriptions to our newsletters, Establish and monitor the commercial relationship that may result from your messages, Write a review/comment published on the website, Process your job application, Collect your payment, Ensure accounting and management, Improve our customer service and monitoring, Manage the proper functioning and personalization of services, Send you commercial and advertising information based on your preferences, Detect attacks and seek legal recourse against fraud, Allow you to communicate with other users of the website, Remember your choices regarding the use of cookies, Process and respond to your requests to exercise your rights, To comply with regulatory requirements in force or in the process of being adopted.

Data categories:

Contact information (e.g., first name, last name, telephone number, email address); Personal information (e.g., date of birth, nationality, marital status, profession); Your preferences; Payment method data; Technical and location information generated through the use of our services.

Legal basis for processing

The processing of personal data is based on:

Either the consent of the data subject (Article 6.1.a of the GDPR) for all processing operations requiring prior consent. In online forms, mandatory fields are marked with an asterisk. If mandatory questions are not answered, we will not be able to provide you with the requested services.

Either for the performance of a contract or the implementation of pre-contractual measures;

Or for the pursuit of a legitimate interest (Article 6.1.e of the GDPR).

Or for compliance with a legal or regulatory obligation;

Your data is retained for the period necessary to fulfill the purposes mentioned above.

The retention period for Customers' personal data depends on the purpose in question. In this context, Customers' personal data is retained for the time necessary to fulfill

their request. Failing any fulfillment, personal data is deleted within the time limits recommended by the French National Commission for Information Technology and Civil Liberties (CNIL), after a period of three years from its collection, subject to: – legal archiving possibilities and obligations,

– obligations to retain certain data for evidentiary purposes, and/or to anonymize

the data.

Customer personal data collected and processed for the purposes of fulfilling offers is retained

for the period necessary to manage the contractual relationship.

By way of exception, personal data required to establish proof of a right or contract is archived in accordance with legal provisions (5 or 10 years after the end of the business relationship, as applicable).

Who will receive your data?

Your personal data is intended for BOTTRAX.

Our internal departments: It is processed by staff from our various departments, such as the sales department or the IT security department. Trusted companies or individuals: They process your information for us for the purposes stated above, in accordance with our instructions as described in our Privacy Policy and any other appropriate use cases in terms of confidentiality and security. Technical subcontractors: Your personal data may be transferred to our technical subcontractors (as defined in Article 4.8 of the GDPR) in a strictly regulated manner. In the event of a transfer, we ensure that subcontractors comply with the GDPR and take technical and organizational measures to guarantee data protection (Art. 28 of the GDPR).

Traffic analysis (Google Analytics), Payment service provider (Stripe), Email service provider (Mailpoet), Store service provider (WooCommerce), Delivery service provider (GLS).

We sometimes need to allow our partners to process, on our behalf, the personal information we hold about you for the purposes set out in this policy or for any other reason required by law.

Customer personal data collected is hosted in France.

If we use a service provider located outside the European Union, we undertake to verify that appropriate measures have been implemented to ensure an adequate level of protection for your personal data.

How does BOTTRAX maintain the security of your data?

We implement all organizational and technical measures to ensure an appropriate level of security for your personal data, and in particular to prevent any loss of confidentiality, integrity, or accessibility.

We frequently back up data, physically protect our premises and monitor entry. Where possible, we limit access to personal information to only those who need to process it. We implement technical and organizational measures to ensure that the storage of Customers' personal data is secure and for the duration necessary to fulfill the purposes for which it was collected.

What are your rights regarding your personal data?

In accordance with Applicable Regulations, you have the following rights:

A right of rectification: you have the right to obtain the rectification of inaccurate data concerning you. You also have the right to complete incomplete data concerning you by providing a supplementary declaration. If you exercise this right, we undertake to communicate any rectification to all recipients of your data.

A right of erasure: in certain cases, you have the right to obtain the erasure of your data. However, this is not an absolute right, and we may retain this data for legal or legitimate reasons.

A right to restriction of processing: In certain cases, you have the right to obtain restriction of processing of your data.

A right to data portability: You have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format, for your personal use or to transmit it to a third party of your choice. This right only applies when the processing of your data is based on your consent, a contract, or when this processing is carried out by automated means.

A right to object to processing: You have the right to object at any time to the processing of your data for processing based on our legitimate interest, a mission in the public interest, or for commercial prospecting purposes. This is not an absolute right, and we may refuse your request to object for legal or legitimate reasons.

The right to withdraw your consent at any time: You may withdraw your consent to the processing of your data when the processing is based on your consent. Withdrawing consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

The right to lodge a complaint with a supervisory authority: You have the right to contact your data protection authority to complain about our personal data protection practices.

Pursuant to the GDPR, the conditions for exercising these rights may vary depending on the lawful basis for the processing mentioned in the first paragraph.

We will respond to any exercise of rights as quickly as possible and in any event within 30 days of receiving the request.

We reserve the right:

To request proof of the requester's identity in the event of reasonable doubt about it, in order to comply with our confidentiality obligations,

To extend the response deadline by two months, informing the requester of this extension and the reasons for the delay within one month of receiving the request,

To refuse to respond to an exercise of rights if it is considered abusive (given their number, repetitiveness, or systematic nature).

Who should I contact for all GDPR-related requests?

To exercise your rights, you can contact us:

We have appointed a Data Protection Officer (DPO), who will be able to respond to all your requests, including requests to exercise your rights, relating to your personal data.

Contact BOTTRAX DPO: rgpd@bottrax.fr

SAS (French simplified joint-stock company) with a capital of €10,000.00.

Registered with the Versailles Trade and Companies Register under SIRET number 943 111 518.

Represented by: Hervé BLEHAUT (CEO)

Address: 6 Parc des Fontenelles, 78870 Bailly, France

Publication Director: Noah CARPENTIER (N2DEV)

If, despite our efforts and commitments, you feel that your rights regarding your personal data have not been respected, you can file a complaint with the French Data Protection Authority (CNIL): 3 Place de Fontenoy TSA 80715 75334 Paris Cedex 07

Right to Amend the Data Protection Policy

This Personal Data Protection Policy may be subject to change. As we are constantly developing our services, we reserve the right to modify this Privacy Policy in accordance with applicable legal provisions. Any changes will be posted to this document in a timely manner. We recommend that you regularly review this page to learn of any changes or updates to our privacy policy.

Cookie Policy

What is a "cookie"?

Cookies are small text files that a website saves on your computer or mobile device when you visit the site.

They make your online experience easier by saving browsing information. With cookies, websites can keep you logged in, remember your site preferences, and offer you personalized content. Cookies can also be used to compile statistics on the browsing experience and to display targeted advertising.

In general, cookies can be classified by:

Domain:

– First-party cookies are issued by a website that a user visits directly.

– Third-party cookies are not created by the website visited, but by a third party such as Google Analytics, DoubleClick, Facebook, Twitter, LinkedIn, YouTube, Vimeo, etc.

Purpose:

– Strictly necessary cookies are required for the website to function properly.

– Preference cookies allow a website to remember choices you have made in the past.

– Statistics cookies help the website owner collect statistical data and understand how visitors interact with the website.

– Marketing cookies track a user's online activity to help advertisers deliver more relevant ads.

Duration:

– Session cookies, which are deleted when the user closes their browser.

– Persistent cookies, which remain on the user's device for a certain period of time.

Your Cookie Preferences

When you first visit the website, a cookie banner will prompt you to accept or reject cookies that are not essential to the website's operation. You can reject/disable cookies at any time, with the exception of cookies required for the website's stable operation. You can change your cookie management preferences at any time.

Legal Notice

Website Ownership:

This website is owned by:

SAS (simplified joint-stock company) with a capital of €10,000.00.

Registered with the Versailles Trade and Companies Register under SIRET number 943 111 518.

Represented by: Mr. Hervé BLEHAUT (CEO)

Telephone: +33 7 56 94 95 60

Email: contact@bottrax.net

Address: 6 Parc des Fontenelles, 78870 Bailly, France

Website Publisher:

This website is published by:

Mr. Noah Carpentier