PRIVACY POLICY

SITE WEB

www.groupeaoste.com

Aoste SNC (hereinafter "Aoste" or the "Company") makes this Privacy Policy available to users of the Website accessible from the URL www.groupeaoste.com (hereinafter also the "Website") in order to provide them with information on how we process their personal data and how we protect their privacy and information. Aoste kindly asks users to take a few minutes to read this Privacy Policy carefully.

Introduction

This Privacy Policy applies to the Aoste Website, which is accessible to the public via the URL www.groupeaoste.com, and also intended for user interactions with Aoste via this Website. Aoste may modify this Privacy Policy if necessary. In the event of any changes, we will inform you via the Website or other channels, to inform you of these new privacy conditions. Your use of the features offered by Aoste after notification of such changes constitutes your acceptance, except in cases where your express consent is required.

Who is the data controller?

The company responsible for the processing of personal data AOSTE, a general partnership with a capital of 54,758,737.32 euros, whose registered office is located at the Hameau de Saint-Didier, RD 592, BP 9, 38490 AOSTE, registered with the RCS of Vienna under number 388 818 726. To ensure the proper management of the processing of your data, Aoste has appointed a data protection officer whom you can contact for any request for information, at the following email address dpo.external@campofriofg.com.

What is the purpose of the processing of your personal data?

The personal data provided by the users of this Website may be processed by Aoste to achieve the following purposes, depending on the type of data provided by the user, as well as their interactions with Aoste through the Website.

Contact, management and processing of questions and requests from users of the Website:
- Purpose:the personal data of users who contact Aoste using any of the contact channels provided on the Website to collect questions and/or requests from users, will be processed for the purpose ofenabling contact between the parties, ensuring the management of users of the Website, offering customer support or customer service, and managing and dealing with questions or requests.
- Data processed for this purpose: identification data and contact details.
- Criteria for the lawfulness of the processing: the criterion that makes this processing lawful is the processing and management of the legal relationship between the user and Aoste in the context of the handling of the user's requests, the contact to be maintained between the parties and, where applicable, the provision of the service requested by the user.
Customer service:
- Purpose: Aoste provides users with a communication channel to reach the customer service online and/or by telephone. The data collected through this service will be processed by Aoste in order to deal with the questions and requests transmitted and the incidents reported.
- Data processed for this purpose: identification data and contact details.
- Criteria for the lawfulness of the processing: the criteria that make the processing lawful are the management of the legal relations between the interested party and Aoste and compliance with the legal obligations applicable to Aoste (applicable Consumer Protection Regulations).
Promotions Management:
- Purpose: the personal data of users collected when registering to participate in a promotion offered by Aoste on its Website will be processed for the purpose of managing the promotion concerned, awarding the corresponding prizes to the winner of the promotion and also to allow Aoste to comply with all the legal and tax obligations applicable to it as the organizer of said promotion, exclusively on condition that the user has consented to this purpose of data processing. Likewise, Aoste informs that, in any case, the data will be processed in accordance with the regulations of the relevant promotion, in which the user can consult in detail the information on data protection and which he must accept before participating in the promotion.
- Data processed for this purpose: identification data and contact details; economic and financial data.
- Criteria for the lawfulness of the processing: the criterion that makes this processing lawful is the consent of the interested party and the commercial relationship established by the promotion regulations. In this sense, the user may withdraw the consent they have given for the processing of their data in relation to this purpose, using any of the channels provided for this purpose by Aoste.

From which sources does the processed data come from?

The data processed by Aoste as a result of the interactions carried out by the user through our Website come from the following sources:

The data provided by the user by filling in the fields used to manage communications provided by Aoste and/or the fields provided for participation in promotions managed by Aoste, through the sending of e-mails or through any other channel used for the user's communication with Aoste
The data produced during the browsing and use of the Website by the user.
The data produced during the development, processing and maintenance of legal and/or contractual relationships between the Aoste user.

To whom is your data transmitted?

The data collected by Aoste through this Website may be transmitted to the following recipients, depending on the criteria of lawfulness of the processing in the context of the transmission, and only if necessary:

To public bodies and administrations (e.g. if necessary for the management of complaints, for compliance with legal and tax obligations inherent in the organisation of promotions, etc.).
Banks and financial institutions, for the management of collections and payments.
Notaries (e.g. in the context of promotional prize draws).

In any case, and if necessary for the fulfilment of the purposes of the processing, Aoste may provide access to users' personal data to third-party service providers, who will access them in their capacity as Data Processors. Aoste informs you that access by these Data Processors may possibly involve the international transfer of personal data outside the European Economic Area. In all cases, the mechanisms provided for by the applicable regulations (e.g. adequacy decision of the European Commission and/or standard contractual clauses, among others) will be applied to ensure that these providers maintain a level of security equivalent to that required by the European data protection regulation.

You can get more detailed information on these aspects by going to dpo.external@campofriofg.com.

How long will we keep your data?

The personal data provided will be kept for a period defined according to the following criteria: (i) duration of the legal relationship and assumption of any liability arising therefrom; (ii) legal obligation to retain; and, (iii) request for erasure by the interested party, if applicable. For more information on retention periods, please contact dpo.external@campofriofg.com.

What personal information do you need to provide in each case?

Aoste informs users that, when personal data is collected through a form on our Website, the user must provide at least the data indicated as mandatory in the form. Failure to provide this data, which is considered necessary, will not be able to provide the requested service or to answer the question asked by the user.

The data required as part of the purchase process in the online store are necessary for the processing of the order and the shipment of the product, which cannot be carried out if the data marked as mandatory is not provided.

Likewise, Aoste informs users wishing to participate in a promotion launched by Aoste that the user must provide the personal data requested in each case, in accordance with the mechanisms of the promotion in question and the provisions of the promotion regulations. Failure to provide the required data in each case will result in the user not being able to participate in the relevant promotion and, where applicable, will not be able to receive the prize associated with the promotion.

What do you have to ensure when you provide us with your personal data?

The user guarantees that the data provided is true, accurate, complete and up-to-date. The User will be held liable for any damage or prejudice, direct or indirect, that may be caused as a result of failure to comply with this obligation.

In the event of providing the data belonging to a third party, the user guarantees that they have informed the third party concerned of all the aspects contained in this Privacy Policy and that they have obtained their consent to transmit their data to us for the purposes of the processing in question. These steps must be taken before the third party's data is transmitted via our Website.

Aoste informs you that in order to provide your personal data, in any way, through our Website, you must be over 16 years of age. The user providing data to Aoste through this Website declares and warrants that he/she is over 16 years of age and assumes full responsibility for his/her statements.

What security measures do we adopt to protect your personal data?

As Aoste is committed to guaranteeing the security and confidentiality of your data, we have implemented the necessary levels of security to protect your personal data and have installed the technical channels at our disposal to prevent the loss, misuse, alteration, unauthorised access and theft of the personal data provided through the Website. However, you should be aware that security measures on the Internet are not foolproof.

What are your rights in relation to your personal data?

Aoste informs you that you have the right to obtain confirmation as to whether or not personal data concerning you is being processed.

In addition, Aoste informs you that you have the following rights regarding your personal data:

We also remind you that you have the right to object to the processing of your data for advertising or promotional purposes, and to withdraw any consents you may have given for the processing of your data, without affecting the lawfulness of the processing based on consent before the withdrawal of the same.

Aoste informs you that you can exercise your rights regarding your personal data, in one of the following ways:

Right of access: you have the right to access your data in order to become aware of the personal data we process.
Right to request rectification or erasure of your data: Under certain conditions, you have the right to have your personal data rectified if you believe that we are processing inaccurate data. You can also request the erasure of your personal data when, among other things, the data is no longer necessary for the purposes for which it was collected.
Right to restrict the processing of your data: Under certain conditions, you have the right to ask us to restrict the processing of your personal data. In these cases, we will only store your personal data for the exercise or defence of our rights in the context of a possible exercise or defence of legal claims.
Right to data portability: under certain conditions, you have the right to receive from us, in a structured, commonly used and machine-readable format, the personal data we hold about you. You also have the right to have such data transferred to another data controller by Aoste.
Right to object to the processing of your information: under certain conditions, and on the basis of your personal situation, you may object to the processing of your personal data. In this case, we will cease to process your data, unless the processing must be continued for a legal reason or in the context of a possible exercise or defence of legal claims.

In either case, proof of identity of the person exercising his or her rights must be provided. If this was not enough, additional information could be requested.

Aoste will provide the requested information within a maximum of one month from receipt of the request. This period may be extended by a further two months, if necessary, in view of the complexity and number of applications.

Aoste informs you that you can lodge a complaint with the Data Protection Authority. However, you can start by filing a complaint with the Data Protection Officer, who will process it within a maximum of two months.

By letter addressed to Aoste SNC, 523 cours du 3ème Millénaire – CS 50152 – 69792 SAINT PRIEST CEDEX, mentioning "Data Protection" in the subject line.
By e-mail to dpo.external@campofriofg.com.

In either case, proof of identity of the person exercising his or her rights must be provided. If this was not enough, additional information could be requested.