AMMA DESIGN collects and processes personal data concerning Plum Living's Services Customers as defined in the General Terms and Conditions of Sale ("GTC"), accessible here.

AMMA DESIGN ("we", "us" or "Plum Living") is concerned about the protection of privacy and personal data. It therefore ensures that it adopts and complies with a personal data processing policy that complies with the regulations in force and in particular with the General Data Protection Regulation No. 2016/679 of 27 April 2016 (the "GDPR").

The purpose of this Privacy and Personal Data Protection Policy is to set out the terms and conditions for the processing of personal data by Plum Living concerning Customers.

Plum Living reserves the right to modify the Privacy Policy at any time. Customers will be notified by email of any substantial changes.

1. PERSON RESPONSIBLE FOR THE PROCESSING

Plum Living is responsible for the processing of personal data collected and processed under the terms of this Policy applicable to Customers. AMMA DESIGN, registered with the CRETEIL Trade and Companies Register under number 851 360 677, has its registered office at 5 avenue Du General De Gaulle 94160 SAINT MANDE.

You can contact Plum Living at the following address:

Email: [email protected]

2. SOURCES AND CATEGORIES OF PERSONAL DATA

2.1 - Source of personal data collection

Plum Living collects personal data in the context of your use of our various Services. In particular, Plum Living collects and processes personal data from Customers when they create Accounts and when they browse our website.

Plum Living also collects personal data when the Customer subscribes to our newsletter, to events organized by Plum Living and/or when the Customer participates in surveys organized by or for Plum Living.

More generally, Plum Living collects all personal data that the Customer spontaneously and voluntarily provides to us, including to our customer service department.

Plum Living may also collect information about the Customer from authorized third parties. These sources may include, for example, business partners (physical or online shops, consumer service providers, etc.), advertising agencies, distributors or data analysts.

2.2 - Categories of personal data

Plum Living collects and processes the following categories of personal data:

information required to create an Account and to use the Services: your first and last name, e-mail address, telephone number, postal code. For

Orders, Customer data relating to payment methods (including credit card details) is also required.

data relating to the use of our Services and to the monitoring of the commercial relationship, such as order history (dates, times and places of delivery...).

Plum Living also processes Customer personal data obtained from third party sources, such as in the context of a commercial partnership.

This data may be combined for the purposes set out below.

2.3 - Compulsory nature of data provision

Some of this information may be mandatory for the implementation of the Services, in particular when placing an Order. When creating an Account, mandatory data is indicated on our forms by an asterisk. If you do not provide the required data, we will not be able to provide the relevant services.

2.4 - Accuracy of data

Plum Living makes every effort to keep personal data accurate and complete. To ensure that we have the most current information, the Customer may notify us of any changes to their contact information or any other data by contacting Plum Living at the above address.

2.6 - Location of personal data

The personal data collected on our website is hosted in France.

3. PURPOSES AND BASIS OF PROCESSING

Personal data is processed by Plum Living for the following purposes>

Necessary for the performance of the contract

To manage the relationship with the Customers which includes in particular :

• creation and use of a Plum Living account,
• the management of the acceptance of the GTC and of the present privacy and data protection policy,
• the conclusion and execution of the service contract in accordance with the terms and conditions of the GTC, including the management of deliveries
• payment for the Services,
• communication with Customers, including technical and commercial support from Plum Living,
• management of Customer complaints,
• management of Customer opinions and comments on products and services, as well as conducting satisfaction surveys and polls,
• management of Customer loyalty programmes,
• the management of sponsorship operations, it being specified that we do not collect any information concerning the sponsored person unless he/she creates a Plum Living account,
• and more generally, the execution of any contract concluded between the Customers and Plum Living.

> On the basis of our legitimate interest, respecting the rights of the Customer

• Establish statistical, demographic and marketing analyses, for example on the use of Plum Living Services or on the behaviour of Customers and their consumption habits, by creating standard profiles.
• Transfer your postal address and telephone number to third parties or business partners, for the purpose of prospecting with human intervention
• To manage debt collection,
• To detect, investigate, prevent or take action regarding illegal activities, abuse, suspected fraud or situations involving potential threats to the safety or rights of a person or entity and to use as evidence in litigation,
• Investigate, prevent and deter violations of our T&Cs, this Policy and our property,
• To protect and defend our property, rights and interests, including in litigation before any court or tribunal.

In this respect, the above personal data processed on the basis of necessity for the execution of the contract are, at the end of the contract, processed on the present basis of our legitimate interest.

• To enable the training of our employees and the conduct of compliance and security audits.
• Communicate with Customers regarding changes or improvements to our services, changes to the Policy or as a result of comments on our blog.

With the consent of the Customer

• To transfer, rent or exchange prospect files to third parties or commercial partners, to offer products or services directly by email or in an automated way by telephone number (SMS, MMS...).

> To comply with a legal obligation

• To meet the legal and regulatory obligations to which Plum Living is subject, such as the tax declaration relating to transactions
• Train our teams, as part of the legal obligations to which Plum Living is subject as an employer,
• To manage the requests of the Clients in respect of their personal data rights.

4. COMMUNICATION OF PERSONAL DATA

The personal data collected and processed may be transmitted:

• to authorized persons in the relevant departments within Plum Living,
• to service providers or subcontractors used by Plum Living for the purposes set out in Article 3.- of the Policy.

These are mainly our advertising agencies, data hosts, payment and delivery service providers.

• to administrative and judicial authorities and, more generally, to public bodies in order to comply with our legal obligations or to enable us to defend our rights and interests,
• where necessary, to our legal advisers and lawyers,

If we sell or transfer our business or part of it and the personal data relates to that sold or transferred part, or if we merge with another company, we will share the personal data with the new owner of the company or our merger partner, respectively.

5. SECURITY OF PERSONAL DATA

Plum Living implements organizational, technical, software and physical security measures to protect personal data from loss, unauthorized access, disclosure or alteration.

For

example, the servers used by Plum Living are fully protected and Plum Living has a password protection policy in place for Customers;

6. RETENTION OF DATA

Plum Living retains personal data for the time necessary to achieve the purposes for which it was collected, plus any legal periods for archiving, retention of certain data and prescription. At the end of the processing, personal data will either be deleted or anonymized by Plum Living. The storage period depends on the type of personal data and the purpose. In particular, the retention period is determined by the following criteria:

1. The closing of the Plum Living account,
2. The regularity of your use of our Services,
3. The existence of legal or contractual obligations requiring us to retain data,
4. The existence of a retention period specifically defined by the applicable regulations,
5. The type of personal data and in particular its sensitivity (e.g., banking information and your geolocation).In this context, Plum Living retains the following retention periods:

• Data concerning your Plum Living account is kept as long as the account is active and, at the latest, after three years following the last transaction.
• Bank account information is retained for payment purposes until the date your Plum Living account is closed.
• Where personal data is used for marketing purposes, the retention period for such data is three years from the date of your last activity.
• For more information about the retention period of personal data, please contact us at [email protected].

7. CUSTOMER RIGHTS

Customers are informed that they have, under the conditions of the RGPD and the laws applicable in France, a right of access, rectification, deletion and portability of their personal data, as well as a right to limit and oppose the processing of such data.

Customers also have the right to organise the fate of their personal data in the event of their death, as well as the right to lodge a complaint with the CNIL, whose website can be accessed at the following address: https://www.cnil.fr and whose headquarters are located at 3 Place de Fontenoy, 75007 ParisFor

processing based on their consent, Customers may withdraw their consent at any time, without prejudice to the lawfulness of the processing prior to such withdrawal

The Customer may exercise his rights, free of charge, with Plum Living at the above address.

In addition to

the information below, Plum Living invites the Customer to consult the CNIL website:

Right of access: the Customer has the right to obtain from Plum Living confirmation as to whether or not his or her personal data are being processed and, where they are, access to said data as well as information on the purposes of the processing (art. 15 of Regulation 2016/679 on the protection of personal data ("RGPD")). Requests that are manifestly unfounded, excessive or repeated may not be answered.

Right of rectification: the Customer has the right to obtain from Plum Living, as soon as possible, the rectification of personal data that he/she considers inaccurate (art.

erasure: the Customer has the right to obtain from Plum Living the erasure of his/her personal data, under the conditions provided for in Article 17 of the RGPD,

Right to portability: the Customer has the right to receive his/her personal data provided to Plum Living, in a structured, commonly used and machine-readable format (art. 20 of the RGPD). This right applies only to the data provided, where the processing is based on consent or on a contract and is carried out using automated processes,

Right to limitation of processing: the Customer may obtain from Plum Living the limitation of the processing of his/her personal data under the conditions of Article 18 GDPR,

Right to withdraw consent: Customers have the right to withdraw their consent to the processing of data if such processing is based on consent. The withdrawal of consent does not affect the lawfulness of the processing based on consent carried out before the withdrawal of consent.

Right to object: the Customer has the right to object at any time, on grounds relating to his particular situation, to the processing of his personal data, where such processing is based on the legitimate interest and under the conditions of Article. 21 of the RGPD,

Right to organise the fate of his/her personal data in the event of death: the Customer may define general or specific directives relating to the conservation, deletion and communication of his/her personal data after his/her death (Law 78-17 of 6 January 1978 as amended, art.

Right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, the Customer has the right to lodge a complaint with a supervisory authority if he/she considers that the processing of personal data concerning him/her constitutes a breach of the regulations applicable to personal data (art. 77 of the RGPD)

.