SECURITY AND PRIVACY POLICY

Protecting individual data

KAHA is concerned about the protection of personal data. It is committed to ensuring the best level of protection for your personal data in accordance with the Computer Science and Freedoms Act.

Object

This policy outlines how we ("KAHA") process the Personal Data ("personal data") that we collect and provide to us. It applies to all personal data about you collected as part of our relationships. We invite you to read this document carefully to learn and understand our practices in this regard.

Who are we?

KAHA is one of the main players in the manufacture of sports articles for obstacle races, gym, ninja warrior course in France.

As part of our activities, we are required to process personal data relating to you in full compliance with applicable regulations, including the European Regulation 2016/679 of 27 April 2016 relating to the protection of individuals (or "RGPD"), as well as the amended law of 6 January 1978 relating to computer science, files and freedoms (or "Computer And Freedoms Act").  KAHA registered as SIREN 830 976 585. The address of our website is: https://kaha-france.fr

What are our commitments?

We are committed to putting in place all the technical and organisational measures necessary to ensure compliance with the fundamental principles of personal data collection and processing, including the principles of:

• lawfulness, loyalty, transparency: personal data is treated lawfully, fairly and transparently;
• limitation of purposes: personal data is treated for specific, explicit and legitimate purposes, and is not subsequently treated in a manner incompatible with the original purposes;
• proportionality of data: the personal data collected is adequate, relevant and limited to what is necessary in terms of the purposes of treatment;
• Data accuracy: Personal data is accurate and kept up-to-date. All reasonable steps are taken to ensure that inaccurate or outdated data is deleted or corrected, in light of the purposes of Treatment.

How do we collect your Personal Data?

Throughout our relationships, you may be required to pass on your personal data to us through various means:

• When you create your customer account
• When shopping online, especially when you fill out our order forms.
• When you contact our after-sales service, make a claim or more generally, when you contact our customer relations teams;
• more generally, in any other direct contact with our teams.

We may also collect personal data through Partners to whom you have previously given your Consent to be contacted by us. In this context, only data for which you have provided explicit consent for their use by a partner will be used.

When you browse KAHA's websites, we are also likely to use cookies, small text files that are stored on your device (computer, tablet or mobile). These cookies allow us to collect personal information and data for various purposes (statistics of attendance and use of the site, adaptation of the website to your settings, third-party cookies for advertising purposes, etc.).

As part of cookie management, we are also committed to complying with data protection regulations. Thus, when required, Cookie Consent will be collected via the cookie headband that will appear clearly and visible on your first visit to the company's website.

You can set cookie settings at any time. To learn more about cookie management, please refer to the "cokkies" section below.

Cookies

A cookie is a file sent by a site to your browser and stored on your computer. The cookies we use do not identify you, but they record information based on how you use our site (navigation, access to accounts, statistics).

1. Why use cookies?

The cookies used on this site are used to secure and facilitate your browsing. These cookies also allow us to analyze site traffic, improve the services we offer and enhance its security.

2. The different types of cookies used on our sites?

Different types of cookies are used on our sites, they have different purposes. Some are necessary for your use of our sites. The set
of cookies, excluding essential cookies, has a validity period of less than 13 months.

3. Strictly necessary cookies

These are the cookies necessary for the operation of our site. They allow you to use the main features of our site (for example, access to your account). Without these cookies, you will not be able to use our site normally. These are deposited cookies that only concern the operation of our si
te. "Essential cookies" for the use of our site are not subject to consent.

4. Performance analytics cookies

These are cookies that allow us to know the use and performance of our site and improve its operation.

5. Advertising cookies

These are cookies used to show you advertisements or send you information tailored to your interests. These
include limiting the number of times you see an ad and helping to measure the effectiveness of an ad campaign. The ref
usal of these advertising cookies has no impact on the use of our site. However, refusing advertising cookies will not stop advertising on our site. This will only h
ave the effect of displaying an advertisement that will not take into account your interests or preferences.
Advertising cookies used on our site are likely to come from third parties duly authorized by the Site Manager.

6. How do I accept or refuse cookies?

You can choose to disable these cookies at any time by setting up your internet bro
wser. We remind you that the setting may change your conditions of access to our services requiring the use of cookies. If your browser is configured to refuse all cookies, you won't be able to access your online account, for examp
le. Most browsers allow you to manage your cookies. You can set your browser to refuse or delete certain cookies. Generally, you can also manage similar technologies in the same way, using your browsers

. The following links show you how to set cookies based on browsers:

1. If you use the Internet Explorer browser:http
   ://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies
2. If you use the Firefox browser:http:
   //support.mozilla.org/fr/kb/activer-desactiver-cookies
3. If you use the Safari browser:http:
   //support.apple.com/kb/index?page=search&fac=all&q=cookies%20safari
4. If you use the Chrome browser:https://
   support.google.com/chrome/answer/95647?hl=fr

For more information you can visit the CNIL website at http://www.cn
il.fr/your-rights/your-traces/the-cookies/

What is the use of your personal data? (Treatment finalities)

Your personal data is mainly used to organize our business relationship and allow us to deliver a better quality service.

In this context, your personal data is processed for the following main purposes:

• Managing the business relationship:

1. • Using and managing your customer account
   • Buying products through our website;
   • Tracking orders;
   • The management of after-sales service and claims;
   • The management of requests for access, rectification and opposition;
   • Conducting statistical studies to find out the use and performance of our website;

 

• Protecting our interests:

1. • Fraud management,
   • Managing unpaid debts,
   • Litigation management,
   • Tracking collection operations;
   • The management of our compliance with the various applicable legal obligations.

 

• The management of our suppliers and logistics (deliveries)

Do we process all the personal data you provide us?

In line with our commitments, we collect only the data we believe is necessary to carry out our activities (data minimisation principle).

However, some data is essential to the processing of your requests and/or orders, others allow us to know you better and therefore adapt our offers to your needs. The fields of collection forms marked with one () are to be filled out. Otherwise, we will not be able to process your request or order or offer you the offers tailored to your needs.

What is the legal basis for the processing of personal data?

The processing of your personal data is based on different legal bases determined according to the purpose of the treatments concerned. In this context, your data is necessary for us to:

• Executing a contractual commitment to which you are a party (e.g. order management, delivery management, etc.)
• The pursuit of our legitimate interest as a Processing Manager (including developing the knowledge of our customers, adapting our offers to your needs and/or conducting promotional activities);
• Compliance with a legal obligation as long as current legislation requires that data processing.

Who can access your personal data?

Only the qualified people on our teams can access your personal data, depending on their business needs.

Your personal data may also be passed on to other entities in the group, as well as to our partners ("Subcontractors") whose delivery is necessary to carry out our activities as Processing Manager. For example, your personal data may be passed on to providers providing hosting and IT maintenance services, as well as delivery, fraud management, etc.

In this context, we are committed to using only Subcontractors who provide sufficient safeguards and comply with our privacy commitments.

How long is your personal data stored?

Personal data is kept only for the period necessary to achieve the purposes.

These shelf life periods are defined according to the nature of the treatment purposes and take into account, among other things, the applicable legal provisions requiring a specific shelf life for certain categories of data, the applicable statute of limitations and the recommendations of the local control authorities regarding certain categories of Data Processing.  As an illustration, KAHA undertakes to retain your personal data, as a customer, only for the duration strictly necessary to manage the business relationship, i.e. for a period of three years from the end of the business relationship (except for the legal obligations of the Treatment Manager requiring a longer shelf life) , for example, from a purchase, the expiry date of a warranty, the term of a service contract or the last contact from the customer.

Is your data secure?

We pay particular attention to the privacy and security of your personal data.

In this context, we implement appropriate technical and organisational measures to ensure a level of safety that is appropriate and in line with good industry practices. In this way, we meet the regulatory requirements and protect the rights and data of the people concerned from the moment of the design of the processing operations.

In addition, our e-Commerce platform benefits from enhanced security measures such as the use of encryption protocols, protection of an application firewall. Finally, your password associated with your account is stored encrypted in our databases making it inaccessible by anyone other than you.

What are your privacy rights?

Under applicable data protection regulations, you can exercise your rights as a person at any time; and request access, rectification, erasure and portability of your data, as well as exercise your rights to limit and oppose the processing of that data.

In particular, you have the right to object to the processing of your data for commercial exploration purposes. Depending on your choices when you create or change your account, you will be able to receive offers from our company. These choices can be changed at any time once authenticated on your online account.

Similarly, if you no longer wish to receive our newsletter, you can click on the opt-out link at the bottom of each electronic advertising communication.

How do you exercise your rights?

These rights can be exercised by contacting: KAHA, 158 Grand Street 60490 MARGNY ON MATZ or by email at contac@kaha-france.fr

In this context, please accompany your request for the necessary elements for your identification (name, first name, email) and an identity document as well as any information relating to your application.

You also have the right to appeal to the Local Control Authority in case of violation of applicable data protection regulations, including the RGPD.

Who to contact?

For any additional questions about this policy or how KAHA handles your personal data, please contact us at: contact@kaha-france.fr

Changes and updates

This privacy policy may be amended or updated in light of the different interpretations, decisions and opinions relating to the RGPD. KAHA is committed to notifying you through its website of any changes made.