Personal data protection policy

1. Who is SAS BAINS ET NATURE?

The following information is provided so that you may be aware of the personal data protection commitments of SAS BAINS ET NATURE, a simplified joint stock company with a single shareholder, located at 4 rue des défenseurs de Verdun 94130 Nogent sur Marne, France, which acts as data controller for the personal data processing mentioned in this document.

2. The personal data we process

As part of the processing of personal data, SAS BAINS ET NATURE collects and processes the following categories of customer data in particular:
- your first and last names ;
- your postal address

- your telephone number

- your email address

- your date of birth;

- Certain marketing information (e.g. your registration date, the date of your last visit, your order history, your browsing history).
We may collect personal data in particular
- via our website
- through orders placed;

- via social media and brand communication channels (e.g. Facebook, Twitter);

- or when you give it to us voluntarily, in particular for our loyalty programme.

3. The purposes and legal bases of our data processing

3.1. The purposes of our data processing

The data we process is used for the following purposes:


- the management and follow-up of requests for information made by Internet users and the responses to be provided;
- the management and follow-up of orders;
- the management of after-sales service;
- the reporting of access to the site;
- the measurement of quality, satisfaction and traffic;
- registration for the newsletter and canvassing, particularly commercial canvassing;
- participation in competitions.

3.2. The legal basis for our processing

We only process data if at least one of the following conditions is met:

- your consent to the processing operations has been obtained ;

- the existence of a legitimate interest on our part, or on the part of a third party, which justifies our processing the personal data concerned;

- the performance of a contract between us and you requires us to process the personal data concerned; or

- we are bound by legal and regulatory obligations which require us to process the personal data concerned.

4. Recipients of your data

The personal data that we collect, as well as those collected subsequently, are intended for us in our capacity as data controller.
This data is mainly intended for :


- authorised departments and staff of the data controller ;

- any sub-contractors of SAS BAINS ET NATURE who may be involved, particularly in the context of verified opinion operations.

SAS BAINS ET NATURE may also provide users' personal information to companies that provide services to help SAS BAINS ET NATURE in its activities such as offering customer service and sending emails on behalf of SAS BAINS ET NATURE.

These companies are authorised to use users' personal information solely to provide us with these services. SAS BAINS ET NATURE will only share personal information with third parties in the ways described herein. SAS BAINS ET NATURE does not sell personal information to third parties. Certain personal data may finally be sent to third parties or to legally authorised authorities in order to satisfy our legal, regulatory or contractual obligations.

We ensure that only authorised persons have access to this data. Our service providers may receive this data in order to carry out the services we entrust to them.

5. How long we keep your data

The retention periods we apply to your personal data are proportionate to the purposes for which they were collected. Consequently, we organise our data retention policy for the strict period necessary for processing, in accordance with our retention period policy.

6. Your rights

6.1. Your right to information

You acknowledge that this policy informs you of the purposes, legal framework, interests, recipients or categories of recipients with whom your personal data is shared.

You also have the option of directly managing the deletion and portability of your personal data by means of a module made available directly in your personal account.

In addition to this information and with the aim of guaranteeing fair and transparent processing of your data, you declare that you have received additional information concerning:

- how long your personal data will be kept

- the existence of your rights and how to exercise them.

If we decide to process data for purposes other than those indicated, you will be provided with all the information relating to these new purposes.

6.2. Your right to access and rectify your data

You have the right to access and rectify your personal data, which you can exercise at the following address SAS BAINS ET NATURE - Data Protection - 4 rue des défenseurs de Verdun 94130 Nogent sur Marne.

As such, you have confirmation that your personal data is or is not being processed and when it is, and have access to your data as well as information concerning:

- the purposes of the processing

- the categories of personal data concerned

- the recipients or categories of recipients;

- where possible, the period for which the personal data will be kept or, where this is not possible, the criteria used to determine this period;

- the existence of the right to ask the controller to rectify or erase your personal data, the right to request a restriction on the processing of your personal data, a right to the portability of your data, the right to object to such processing;

- the right to lodge a complaint with a supervisory authority;

- information about the source of the data when it is not collected directly from the data subjects;

- the existence of automated decision-making, including profiling, and in the latter case, useful information concerning the underlying logic, as well as the significance and anticipated consequences of such processing for the data subjects.

You may ask us to rectify or complete your personal data if it is inaccurate, incomplete, ambiguous or out of date.

6.3. Your right to erase your data

You may ask us to delete your personal data if one of the following reasons applies:

- the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

- you withdraw the consent previously given; or

- you object to the processing of your personal data where there are no legal grounds for such processing;

- the processing of personal data does not comply with the provisions of the applicable laws and regulations;

- your personal data has been collected in connection with the provision of information society services to children under the age of 16.

However, the exercise of this right will not be possible where the retention of your personal data is necessary under the law or regulations and in particular, for example, for the establishment, exercise or defence of legal claims.

6.4. Your right to limit data processing

You may request the restriction of the processing of your personal data in the cases provided for by the laws and regulations.

6.5. Your right to object to data processing

You have the right to object to the processing of personal data concerning you where the processing is based on the legitimate interests of the data controller.

6.6. Your right to data portability

From 22 May 2025, you will have the right to the portability of your personal data.
The data for which this right may be exercised is :

- your personal data only, which excludes anonymised personal data or data that does not concern you ;

- declarative personal data and the personal operating data mentioned above;

- personal data that does not infringe the rights and freedoms of third parties, such as data protected by business secrecy.

This right is limited to processing based on consent or on a contract and to personal data that you have personally generated.

This right does not include derived or inferred data, which are personal data created by SAS BAINS ET NATURE.

6.7. Your right to withdraw your consent

When the data processing that we implement is based on your consent, you can withdraw it at any time. We will then cease to process your personal data without the previous operations for which you had given your consent being called into question.

6.8. Your right to appeal

You have the right to lodge a complaint with the Cnil in France, without prejudice to any other administrative or legal remedy.

6.9. Your right to define post-mortem directives

You have the possibility of defining directives relating to the conservation, deletion and communication of your personal data after your death with a trusted third party, certified and responsible for ensuring that the wishes of the deceased are respected in accordance with the requirements of the applicable legal framework.

6.10. How to exercise your rights

All the rights listed above may be exercised at the following e-mail address contact@nailmatic.com or by post accompanied by a copy of an identity document by contacting SAS BAINS ET NATURE - Data Protection - 4 rue des défenseurs de Verdun 94130 Nogent sur Marne.
However, with regard to exercising the right to information, we may not be obliged to respond if:

- you already have this information;

- the recording or communication of your personal data is expressly provided for by law; or

- it is impossible to provide the information;

- providing the information would require disproportionate efforts.

7. Security

The security of personal data is important to SAS BAINS ET NATURE.
In accordance with legal obligations, SAS BAINS ET NATURE keeps this information in reinforced security conditions and for limited periods of time proportional to the purposes for which you have communicated it to us.
SAS BAINS ET NATURE follows generally accepted standards to protect personal data submitted to it, both during transmission and once SAS BAINS ET NATURE receives it.

8. Updating of this privacy policy

This policy may be modified or amended at any time by SAS BAINS ET NATURE. You are invited to consult it regularly.
Last modification: 22/05/2025.