Personal data

Personal Data

This document constitutes the personal data protection policy implemented for the BAYO website by NSE in the context of its activities.
The term "Personal Data" refers to any information relating to an identified or identifiable natural person, directly or indirectly, by reference to an identification number or to one or more elements specific to that person, such as for example: name, address, date of birth.
In this regard, here are the principles that NSE and all its employees adhere to:

• Never collect or use data without a specific and legitimate purpose;
• Only collect and use the data strictly necessary for processing
• Keep the data only for a limited period and consistent with the services provided
• Ensure the quality and security of the data at all times
• Only transfer data when necessary, and in compliance with legal and security rules
• Provide you with clear and transparent information at all times
• Ensure respect for your rights and the conditions of their exercise

The Data Controller is:
NSE BU Services
BAYO Activity
ZA La Tour d'Abrest
03200 ABREST – France

You can contact NSE's Data Protection Officer (rgpd@nse-groupe.com)

NSE collects and uses data about you only for specific and limited purposes that are necessary for you, namely:

Process your orders:

• Ensure delivery of physical products (via a carrier) and digital products
  Ensure payment for the products you have purchased
• Invoice your order, which can be used to assert rights within after-sales service for example
• Ensure follow-up and after-sales service of ordered products (information, cancellations, refunds, exchanges, complaints, repairs).

Manage your customer account: Your customer account is a dedicated space that allows you to:

• Place orders
• Access the tracking and history of your orders.

Communicate with you: We send you electronic communications, via email or SMS, only for the following reasons:

• Order follow-up: sending an order confirmation and any other message related to the service you have ordered;
• Management of your customer account: creation and modification of your account;
• Offering commercial offers: only in one of the following two cases:
  • If you have subscribed to the "Newsletter" service of BAYO
  • If you have ordered products on the BAYO website.
• If you have added one or more items to your cart but have not completed your order, we may contact you via email to help you retrieve your cart. The processes implemented to do this are based, in particular, on our legitimate interests in optimizing the commercial success of our organization, offering you smooth and user-friendly journeys within our site, especially if your browser stops working, and this within the pre-contractual relationship with us. You can oppose being contacted by email to complete a cart by clicking here.

In all cases, you can unsubscribe from our Newsletter service by:

• Entering your email address in the "Newsletter Subscription" section
• Clicking the link at the bottom of the newsletters you receive
• Unchecking the corresponding box in your account settings

What data do we collect and how do we collect it?

NSE, in the context of its BAYO activity, ensures that it only collects the data strictly necessary for the purposes defined below, namely:

• Contact data (name, first name, title, email address, postal addresses, phone number): This data is essential for any order, customer account registration, or to contact you if needed (delivery, issue related to your order or the product purchased)
• Banking data: For online orders, this data is entered on the bank's payment platform without being collected on the BAYO site
• Order-related data (product purchased, date, price...): Essential data to ensure the service ordered and after-sales service;
• Source IP address: For site security monitoring
• Browsing data: Non-personal data used for statistical purposes (page views, most searched products, cookies…);

Data sources are:

• You: When you create an account or place an order
• Technical information: As described above (IP address, browsing data)

How long is data kept?

Data is kept only for the strictly necessary periods:

• For order execution
• For legal and regulatory obligations, particularly in terms of dispute management and warranty;

The general data retention policy of NSE is as follows:

• Newsletter contact data: Until unsubscribed
• Account data: 5 years without connection
• Order data: 5 years from the order date
• Abandoned cart: 2 months from cart creation
• Banking details: Not kept on the BAYO site
• Browsing data (logs, cookies..): 1 year after the last activity on the NSE-BAYO site

We have implemented appropriate technical and organizational security measures to protect your Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other illegal or unauthorized forms of processing, in accordance with applicable law.

Only relevant internal services have access to your data within the strict scope of the processes described in this policy. NSE-BAYO does not transfer any data to third-party companies for any reason other than one of the following:

• Provision of ordered services: In order to provide you with delivery services, data is transmitted to the relevant companies, including carriers to ensure delivery of your orders.
• Subcontracting: NSE uses service providers to operate its sites and provide the services and products offered.

Specific case for transfers outside the EU

NSE's policy is not to transfer data outside the European Union. However, some of our subcontractors may transfer and/or