ATHANA PRIVACY POLICY

Last update: February 24, 2023

The protection of your Data is an important issue for us. We therefore invite you to read the following rules carefully and to contact our Data Protection Officer if you have any questions on this subject at the following addresscontact@athana.fr

For further information, please refer to the General Terms and Conditions of Sale and General Terms and Conditions of Use.

What data do we collect?

During your browsing on our Website, we may collect various types of Data relating to the following elements in particular:

Identification data

(exlast name, first name, postal address, e-mail address, telephone number)

Connection data

(cookies, technical data)

Anonymized data

ATHANA is committed to the protection of personal data. It is committed to ensuring the highest level of protection for your personal data, in compliance with the European and French regulations applicable to it in terms of personal data protection.

For further information on the protection of personal data, please consult the Commission Informatique et Liberté website. www.cnil.fr

Who is responsible for processing my personal data?

The data controller is the company that determines how and for what purpose your personal data is used.

Personal data collected on the site is processed by : ATHANA SAS, headquartered at 87 rue Saint Aubert 62000 ARRAS (RCS ARRAS SIREN 918422411) (hereinafter " ATHANA SAS ").

Why does ATHANA collect my personal data?

ATHANA uses your personal data mainly for the following purposes:

• Order management and customer relations

We need your personal information in order to manage your orders and their follow-up (e.g. deliveries, invoices, accounting and in particular the management of customer areas, the management of the ATHANA Ambassador program, the follow-up of customer relations such as satisfaction surveys, the management of complaints and after-sales service, or the selection of customers to carry out studies, surveys and product tests.

• Payment of your orders or subscriptions

When you pay on our site, your payments are secure. ATHANA does not collect your payment details, but only a payment identifier and the first 6 and last 4 digits of your credit card number to enable you to recognize the card used for payment. All your bank details are collected only by our PCI-DSS-certified payment service provider, which guarantees payment security.

• Payment on purchase

When you pay for an order, the data relating to the credit card used for payment is kept for the time necessary to complete the transaction, and then for a period of 15 months from the date of payment, in order to guarantee proof of the transaction.

• Payment by subscription

If you have subscribed to an ATHANA subscription service or any other subscription service, the credit card used for payment at the time of subscription is recorded for the purposes of paying the instalments of your tacitly renewed subscription.

• Registering your bank card in the e-wallet

If you have accepted the registration of your bank card to facilitate your future purchases, your card will be associated with your ATHANA SAS customer area under the heading "My means of payment" and kept for this purpose for as long as you wish to associate it with your customer area. You can delete it at any time by going to your customer area - heading "My means of payment" or by sending a request to the following address: contact@athana.fr

• The personalization of our services and the messages we send you

Your personal data enables us to improve and personalize the services we offer you and the communications we send you. For example, we can send you personalized e-mails or recommend products that are similar to those you have already purchased or consulted and that correspond to your centers of interest.

• Fighting Fraud

Personal data collected on the site is also processed in order to secure payments and deliveries and to ensure optimum quality of service. Athana SAS determines the level of fraud risk associated with each order. As part of this analysis, Athana may ask its specialized risk prevention service providers to refine its analysis. Some of these service providers (Payplug) may receive the results of the analysis carried out and may use it on their behalf to feed their own incident file.

ATHANA may, depending on the results of the control carried out on orders, take security measures, in particular requesting additional proof or proposing an alternative method of delivery (e.g. delivery to a relay point). These measures will have the effect of suspending the execution of the order or, if the result of the analysis does not guarantee the security of the order, of cancelling it. Fraudulent use of a means of payment or fraudulent delivery may result in the registration of data relating to the order in ATHANA's alert file, which may lead ATHANA SAS to carry out additional checks on future orders.

• Site security

We collect certain browsing data to enable us to ensure the security of our services and to detect, prevent or trace any malicious attempt or computer intrusion or any violation of the terms of use of our services.

• Personalization of online advertising (targeted advertising)

We may use data that does not directly identify you (technical identifiers or socio-demographic data) to tailor the advertising you see on our site or those of our partners. Your data may be cross-referenced with browsing data and other information collected in the course of our relations with partners, and rendered pseudonymous prior to any use, such as your age range or gender, in order to draw up your user profile and associate with it centers of interest on the basis of which advertisements will be served on behalf of advertising partners.

• Customer knowledge, statistics and site performance

We may use data to better understand our customers or for statistical purposes to analyze site activity and improve the services we offer. For example, we measure the number of pages viewed, the number of visits to the site, as well as visitors' activity on the site and the frequency with which they return.

What personal data is collected about me?

• What data?

In particular, we collect and process your surname, first name, address, e-mail address, password, telephone number, IP address, connection and browsing data, order history, preferences and interests, products consulted, delivery incidents and complaints. In some cases, we may collect location data, for example to inform you of the nearest relay point.

The compulsory or optional nature of the data is indicated at the time of collection by an asterisk. Some data is collected automatically as a result of your actions on the site, while other information may be transmitted by partners.

• When?

We collect the information you provide when :

• create your customer area on our website;
• you place an order on our site;
• you browse our site and consult products ;
• you are taking part in a game or competition;
• contact our Customer Service department;
• you write a comment ;
• you consult our advertisements.

What communications am I likely to receive?

Information and newsletters

• Service emails

Following an order or as part of the follow-up of a contract, you will receive an email to enable you to follow your order or the execution of your contract (order confirmation, information on the delivery of your parcel, information on the expiry of your subscription, etc.). These service messages are necessary for the proper execution of the orders and services you have requested. Receipt of this information is not linked to your choice to receive newsletters and commercial offers.

For example: from time to time, you may receive information necessary for the execution and proper management of ATHANA service contracts (in particular, information on the status of your customer account, your delivery address, product characteristics such as a change in available colors or an improvement made to the product, etc.).

• ATHANA Newsletters

Following the creation of your customer area and if you have not objected, you may receive information and offers from ATHANA by electronic communication (email, sms...). These newsletters allow us to keep you informed of ATHANA's latest news and the advantages you can benefit from on our ATHANA site for products similar to those you have already ordered or consulted on our website. We measure the opening rate of our electronic mailings in order to adapt them to your needs.

• Postal mail

If you have not objected, you may receive offers and information by post from ATHANA and its commercial partners.

• Telephone contact

If you have not objected (with the exception of automated telephone canvassing, which is subject to your express consent), you may be contacted by our operators or partners with offers and services related to those you have purchased.

• Product alerts

We can offer you alerts to keep you informed by e-mail of any availability or news of interest to you. These alerts allow you to be informed of the next availability of the product you are interested in.

On what legal basis and for how long is my personal data processed?

The processing of your personal data is justified on different grounds (legal basis) depending on the use we make of the personal data. You will find below the legal bases and retention periods we apply to our main processing operations.

Legal basis for processing

Among the applicable legal bases:

• The contract: the processing of personal data is necessary for the performance of the contract to which you have agreed.
• Consent: you agree to the processing of your personal data by giving your express consent (tick box, click ....). You can withdraw this consent at any time
• Legitimate interest: ATHANA has a business interest in processing your data that is justified, balanced and does not infringe your privacy. With certain exceptions, you may object to processing based on legitimate interest at any time by notifying ATHANA at the following address: contact@athana.fr
• The law: the processing of your personal data is required by law.

Shelf life

• Most data (e.g. information from your customer area and order history) is kept for as long as you are an "active" customer, and for a period of 5 years after your last activity (e.g. purchase, login to your customer area or expiry of a contract or warranty). Your data will then be archived with restricted access for a further period for limited purposes authorized by law (payment, warranty, disputes, etc.). After this period, your data will be deleted.

Who will receive my data?

Transmission of data to subcontractors

The data we collect may be transmitted to service providers (subcontractors) that Athana uses to carry out its services for the purposes mentioned above, for example for the management, execution, processing and payment of your orders, as well as for marketing operations.

Data sharing between ATHANA services

The data collected on the ATHANA site is first and foremost intended for ATHANA teams to get to know you better and thus better serve you, in a more fluid manner, as a customer of the ATHANA universe. By using the ATHANA customer area, you will be able to take advantage of the many benefits offered by ATHANA. As a result, you agree to the sharing of your data between ATHANA services in connection with the pooling of their resources.

For advertising targeting

We inform you that we may communicate some of your non-identifying data to partners, such as customer profiles (socio-demographic data), cookies or technical identifiers without it being possible for them to identify you by name for the purposes of advertising targeting on our site or on third-party sites.

How can I express my choices about the use of my data?

You may at any time withdraw your consent or object to the use of your data as described above:

• By email to : contact@athana.fr
• By post to the following address: ATHANA, 87 RUE SAINT AUBERT 62000 ARRAS 

 If you send us an e-mail or letter, please provide us with your full name, e-mail address and state the reason for your request and/or the right you wish to exercise.

To help us understand your request, you may wish to specify one or more of the following reasons:

• To stop commercial prospecting :

"Stop email ATHANA

"Stop email ATHANA partners

• Stop sharing data for customer knowledge purposes

"Opposition shares ATHANA

• For an end to advertising targeting

"Opposition to sharing with third parties for targeted advertising".

You can also manage your cookies by going to the cookie manager on the cookie information page.

• To delete your ATHANA customer area

"Delete my ATHANA customer space

What are my rights regarding the use of personal data?

In accordance with the regulations on the protection of personal data, you may exercise your rights (access, rectification, deletion, opposition, limitation and portability where applicable) and define the fate of your personal data "post mortem" by email to contact@athana.fr or by post: ATHANA SAS 87 rue Saint Aubert 62000 ARRAS. 

To enable us to respond promptly, please provide us with your full name, e-mail address and, if possible, your customer reference number. Certain requests to exercise your rights (right of access) must be accompanied by a photocopy of an identity document bearing your signature in order to verify your identity and specify the address to which the reply should be sent. A reply will be sent to you within one month of receipt of the request.

You also have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), in particular on its website www.cnil.fr.

Athana has a Personal Data Protection Officer (DPO) responsible for ensuring the protection of personal data. You can contact ATHANA's Data Protection Officer at the following address: contact@athana.fr

Is my data transferred outside the European Union?

You are informed that data concerning you will not be transmitted for the purposes mentioned above to companies located in countries outside the European Union which have a lower level of data protection than the European Union.

What about minors' personal data?

ATHANA's services are not intended for minors. Consequently, ATHANA does not process data specifically concerning minors. For example, we do not create marketing profiles for minors.

It is the responsibility of parents and guardians to decide whether their minor child is authorized to use ATHANA services.

What use is made of social networking data?

The use of social networks and ATHANA's services or applications in connection with these social networks is likely to result in the collection and exchange of certain data between the social networks and ATHANA. We invite you to consult the personal data protection policies of the social networks in order to find out exactly what information is collected by the social networks and may be transmitted to ATHANA in connection with its sites and applications, as well as the purposes for which your data may be used, in particular for advertising purposes.

You can configure access and confidentiality of your data directly on the social networks. ATHANA collects certain information and personal data on its behalf in connection with your activity on ATHANA social network pages or ATHANA sites and applications that use social network services. This data is used for advertising purposes to improve our commercial relationship and the advertising sent to you in order to offer you a personalized and social experience. Information collected by ATHANA on its own behalf through ATHANA applications, sites or services linked to social networks is governed by the present conditions and the specific conditions of ATHANA applications.

However, ATHANA is not responsible for the use made of your data by social networks on their own behalf.

"Plug-ins and social modules

Our site uses social plug-ins. These include the small "like" and "share" buttons on third-party social networks such as Facebook, Twitter and LinkedIn...., which you can find on our site. They enable you to "like" and share information from our site with your friends on social networks. When you visit a page on our ATHANA site (web or mobile) containing social plugins or modules, a connection is established with the servers of the social networks (Facebook, Twitter, LinkedIn, etc.), which are then informed that you have accessed the corresponding page of the ATHANA site you are visiting, even if you do not have a Facebook or Twitter user account, and even if you are not logged in to your Facebook or Twitter account.

For example:

• If you are connected to a social network while browsing the www.athana.fr website, the social networks to which you are connected may mention your visit in your social network account.
• If you use plug-ins (e.g. like), your actions may be recorded and published on your social network accounts, depending on your social network account settings.
• If you do not want social networks to publish your actions resulting from plug-ins in your social network accounts, you must disconnect from your social networks before visiting our site.

What cookies are used for advertising targeting?

We use tracking technologies such as cookies to tailor advertising to your needs and interests on our sites or those of our partners.