PERSONAL DATA PROTECTION POLICY 

This policy details how the company Chaumet International SA, a public limited company with a capital of 42,430,230 euros, with its registered office at 12 place Vendôme, 75001 Paris (France), registered with the Paris Trade and Companies Register under number B 342 966 942, and/or its affiliated companies (list accessible here), acting as joint controllers in accordance with applicable legislation, (hereinafter, "Chaumet"), process personal data concerning you (hereinafter, your "Data"). 

The provisions of Regulation (EU) 2016/679 of April 27, 2016 (the General Data Protection Regulation or "GDPR") as well as the adaptation provisions provided for by the French Act No. 78-18 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, as amended by Law n° 2018-493 of June 20, 2018 and Ordinance n° 2018-1125 of December 12, 2018 (hereinafter, the "French Data Protection Act") apply to the processing of your Data by Chaumet. The terms used for the purposes of this policy have the meaning given to them by the GDPR. 

Chaumet International SA has a Data Protection Officer, in accordance with current regulations. 

For any questions relating to the collection and/or processing of your Data by Chaumet, you can contact Chaumet's Data Protection Officer at the following addresses. 

• By postal mail: 

Chaumet International SA 

Data Protection Officer 

79 boulevard Haussmann 

75008 Paris – France 

• By email: privacy@chaumet.com 

The websites www.chaumet.com/en and  https://crownyourlove.chaumet.com/ (hereinafter, the "Sites") are operated by Chaumet and allow Chaumet to collect your Data. 

Chaumet boutique staff are required to collect Data and implement Data processing as part of their activities. The sources of data collection in Chaumet boutiques are: 

– the data collection forms provided by our boutique staff for you to complete and which are subsequently retained by Chaumet  

– the customer relationship management tool used in Chaumet boutiques. 

Finally, Chaumet's customer service collects and processes your Data when you contact them with any type of request.

The Data concerning you that is collected via the Sites, during your visits to Chaumet boutiques, and during your exchanges with our customer service are mainly, depending on the services provided by Chaumet (as well as your choices and your device's settings relating to cookies and other trackers), your: 

a. Identity:  

– Title;  

– Last name and first name;  

– Date of birth; 

– Nationality; 

– Official documents enabling verification of identity, date and place of birth, and other information necessary for tax-free sales, transactions subject to anti-money laundering and terrorist financing obligations, and compliance with applicable laws and regulations relating to international sanctions regimes and export controls. 

b. Contact details:  

– Email address;  

– Postal address;  

– Telephone numbers;  

– Social media identifiers;  

c. Technical data: 

– Connection data; 

– Cookies and trackers;  

– IP address; 

– Geolocation data (to identify the store closest to you, or to display the webpage in your language).  

d. And more generally, all information that you entrust to our advisors or our customer service, which allows us to welcome you in the best possible conditions in store or on our websites:  

– Your preferences for our collections or the means available to contact you; – Information relating to any adverse effect caused by our creations (e.g., allergies to certain precious metals);  

– Information related to the sales experience (e.g., ring size or wedding date; scans and measurements of certain body parts for the creation of custom pieces);  

– Purchase and contact history;  

– Your activities on our Sites.  

In the specific case where you wish to communicate with Chaumet staff via instant messaging, Chaumet cannot guarantee the confidentiality and security of your personal Data or any other information exchanged through such messaging. The companies offering this type of messaging are themselves data controllers and comply with their own data protection and confidentiality policies. In this specific context, the processing of your Data remains outside Chaumet's control: our Maison therefore disclaims any responsibility in the context of this use. 

This Data is collected:  

– based on your consent;  

– or is necessary for the execution of your orders, based on a contract;  

– or for the pursuit of Chaumet's legitimate interest (such as, for example, to combat fraud and counterfeiting).  

Thus, your Data is collected notably for the following purposes:

Your Data is processed by Chaumet and its local commercial partners. 

In the context of providing its services, Chaumet may transfer or grant access to your Data for technical, logistical, or commercial reasons, to the following categories of Data recipients: 

— Subsidiaries, branches, and/or affiliated companies of Chaumet located abroad to offer you the same quality of service in all Chaumet boutiques; 

— The hosting provider for our Sites; 

— The development and maintenance provider for our Sites; 

— Service providers responsible for sending news (newsletters, invitations, and other publications); 

— Providers of cookie and tracker statistical analysis solutions; 

— Service providers managing all Chaumet boutique processes (transactions, inventory management, and customer database management); 

— Service providers responsible for managing transactions, tax-free shopping, and payment fraud prevention; 

— Service providers responsible for the development and maintenance of the customer relationship personalization tool used in Chaumet boutiques; 

— Service providers responsible for carrying out statistics and marketing analyses to understand customer behavior for the purpose of improving the customer experience and potential targeting for communication campaigns and segmentation;  

— Service providers responsible for Chaumet's targeted campaigns, including social network providers and other platforms; 

— Service providers responsible for after-sales services, particularly repairs; 

— Service providers that may offer concierge services to Chaumet clients. 

Finally, Chaumet may also be required to disclose your Data to third parties when such disclosure is required by law, a regulatory provision, or a judicial decision, or if such disclosure is necessary to protect and defend its rights. 

Outside of these cases, your Data will not be transferred or made accessible to any third party without your consent, subject to any restructuring of Chaumet, including total or partial sale of assets, merger, absorption, acquisition, spin-off, and more generally any reorganization. 

As Chaumet has foreign subsidiaries and/or affiliated companies and uses subcontractors located abroad, the recipients of your Data may be located abroad, including outside the European Economic Area (hereinafter, the "EEA"). 

Any transfer of Data outside the EEA, particularly to a country for which there is no adequacy decision from the European Commission, is carried out with appropriate safeguards, including contractual ones, in accordance with the applicable personal data protection regulations. 

You may obtain a copy of the appropriate guarantees by contacting our Data Protection Officer at the addresses listed in Article 2. 

Chaumet implements technical and organizational security measures in accordance with best practices, particularly concerning the security of its information system. 

Chaumet endeavors to implement all necessary measures to preserve the confidentiality and security of your Data and prevent them from being altered, damaged, destroyed, or accessed by unauthorized third parties. Chaumet ensures in this regard that its subcontractors provide appropriate guarantees of security, whether technical and/or organizational.

In accordance with current regulations, you have the right to access and rectify your Data, the right to withdraw your consent at any time, the right to request the erasure of your Data, the right to request the portability of your Data, the right to request the restriction of processing, and to define directives concerning the fate of your Data after your death, to the extent that this is applicable, unless Chaumet can demonstrate compelling legitimate grounds for retaining your Data. 

You also have the right to object: 

– for reasons relating to your particular situation, to processing based on Chaumet's legitimate interest; 

– to processing for commercial prospecting purposes. As such, you may at any time request to no longer receive our communication relating to our offers, products, news, and events by using the unsubscribe link provided for this purpose in each email we send you. 

These rights may be exercised at any time by contacting our Data Protection Officer at the addresses listed in Article 2. 

You also have the right to lodge a complaint with any competent supervisory authority. 

In France, the supervisory authority is the Commission Nationale de l’Informatique et des Libertés (CNIL), 3 place de Fontenoy – TSA 80715 – 75334 Paris Cedex 07, for any complaint relating to how Chaumet collects and processes your Data. 

Chaumet processes your Data for a determined period based on the purposes for which they are processed. 

Data necessary for the management and optimization of customer relations (such as your purchase history, your collection preferences, or the tracking of your requests) are retained for a period of ten (10) years from your last interaction with Maison Chaumet. 

Regarding the data of prospects who have not yet finalized a purchase but have subscribed to our news or shown interest in the brand, this data may be retained for five (5) years from its collection or last interaction with Maison Chaumet. 

As part of the preservation of the Maison's heritage and history, the Heritage department of Chaumet retains specific information, the duration of which, potentially longer than that applicable to customer data, is communicated directly to the persons concerned. These individuals retain full control over their information at all times, including the right to object to this retention. 

Upon expiration of these periods, or following your request for deletion, your Data will be irreversibly erased or anonymized. Exceptions to this rule include legal retention obligations (invoices, for example, are archived for ten (10) years from the close of the accounting period) as well as Chaumet's legitimate administrative needs, such as managing potential disputes, tracing responses to requests for the exercise of rights, or establishing proof within the limits of applicable statutes of limitations. 

Browsing Chaumet's Sites results in the deposit of cookies, some of which are subject to your prior consent. 

For more information on these cookies and other trackers and to configure your choices, please refer to the cookie settings displayed during your visit to our Site and accessible at any time at the bottom of the Site page. 

You also have the option to manage cookie placement using your browser settings. These settings may modify your internet browsing experience and your access conditions to certain services that require the use of cookies.

In the event of modification of this policy, Chaumet will inform you of the update to its personal data protection policy, either by displaying a notice on its Sites, or by email, for example as part of sending its newsletters.