**Legal Notice and Privacy Policy**

The sole proprietorship GRAINBOW, mindful of individuals’ rights, particularly regarding automated processing, and committed to transparency with its clients, has implemented a policy that encompasses all these processes, the purposes pursued by them, as well as the means of action available to individuals so they can best exercise their rights.

For more information on personal data protection, please visit the website: https://www.cnil.fr/

Continued browsing of this site constitutes unreserved acceptance of the following provisions and terms of use.

The currently online version of these terms of use is the only enforceable version throughout the duration of use of the site and until a new version replaces it.

**Article 1 – Legal Notices**

**1.1 Site (hereinafter “the site”):**

GRAINBOW

**1.2 Publisher (hereinafter “the publisher”):**

The sole proprietorship GRAINBOW

located at: 14 IMPASSE DE L’ETANG, 17340 CHATELAILLON PLAGE

registered at the RCS under number 887883130

email address: grainbowcoffee@gmail.com

**1.3 Host (hereinafter “the host”):**

GRAINBOW is hosted by HOSTINGER, whose headquarters is located at HOSTINGER INTERNATIONAL LTD, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus.

**Article 2 – Access to the Site**

Access to the site and its use are reserved for strictly personal use. You agree not to use this site and the information or data contained therein for commercial, political, advertising purposes, or for any form of commercial solicitation, including sending unsolicited emails.

**Article 3 – Site Content**

All trademarks, photographs, texts, comments, illustrations, animated or non-animated images, video sequences, sounds, and all computer applications that could be used to operate this site and more generally all elements reproduced or used on the site are protected by current intellectual property laws.

They are the full and entire property of the publisher or its partners. Any reproduction, representation, use, or adaptation, in any form whatsoever, of all or part of these elements, including computer applications, without the prior written consent of the publisher, is strictly prohibited. The fact that the publisher does not initiate proceedings upon becoming aware of these unauthorized uses does not constitute acceptance of said uses and waiver of prosecution.

**Article 4 – Site Management**

For the proper management of the site, the publisher may at any time:

– suspend, interrupt, or limit access to all or part of the site, reserve access to the site, or certain parts of the site, to a specific category of internet users;
– remove any information that may disrupt its operation or that contravenes national or international laws;
– suspend the site to carry out updates.

**Article 5 – Responsibilities**

The publisher cannot be held responsible in case of failure, breakdown, difficulty, or interruption of operation, preventing access to the site or one of its functionalities.

The equipment you use to connect to the site is your full responsibility. You must take all appropriate measures to protect your equipment and your own data, particularly from internet viral attacks. You are also solely responsible for the sites and data you consult.

The publisher cannot be held responsible in case of legal proceedings against you:

– due to the use of the site or any service accessible via the Internet;
– due to non-compliance by you with these terms of use.

The publisher is not responsible for any damage caused to you, third parties, and/or your equipment due to your connection or use of the site, and you waive any action against them for this reason.

If the publisher is subject to amicable or judicial proceedings due to your use of the site, they may turn against you to obtain compensation for all damages, sums, sentences, and costs that may result from these proceedings.

**Article 6 – Hypertext Links**

The setting up by users of any hypertext links to all or part of the site is authorized by the publisher. Any link must be removed upon simple request by the publisher.

Any information accessible via a link to other sites is not published by the publisher. The publisher has no rights to the content contained in said link.

**Article 7 – Collection and Protection of Data**

Your data is collected by the sole proprietorship GRAINBOW.

Personal data refers to any information relating to an identified or identifiable natural person (data subject); an identifiable person is one who can be identified, directly or indirectly, notably by reference to a name, identification number, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

Personal information that may be collected on the site is mainly used by the publisher for managing relations with you, and if necessary, for processing your orders.

The personal data collected are as follows:

– name and surname
– address
– email address
– phone number
– date of birth
– financial data: as part of the payment for products and services offered on the Platform, it records financial data relating to the user’s credit card.

**Article 8 – Right of Access, Rectification, and Dereferencing of Your Data**

In accordance with the applicable regulations on personal data, users have the following rights:

– **right of access**: they can exercise their right of access, to know the personal data concerning them, by writing to the email address below. In this case, before implementing this right, the Platform may request proof of the user’s identity to verify its accuracy;
– **right of rectification**: if the personal data held by the Platform are inaccurate, they can request the update of the information;
– **right to delete data**: users can request the deletion of their personal data, in accordance with applicable data protection laws;
– **right to limit processing**: users can request the Platform to limit the processing of personal data in accordance with the cases provided for by the GDPR;
– **right to object to data processing**: users can object to their data being processed in accordance with the cases provided for by the GDPR;
– **right to data portability**: they can request that the Platform provide them with the personal data they have provided to transmit them to a new Platform.

You can exercise this right by contacting us at the following address:

14 IMPASSE DE L’ETANG, 17340 CHATELAILLON PLAGE.

Or by email, at the address:

grainbowcoffee@gmail.com

Any request must be accompanied by a photocopy of a valid signed identity document and mention the address at which the publisher can contact the requester. The response will be sent within one month of receiving the request. This one-month period may be extended by two months if the complexity of the request and/or the number of requests so require.

Furthermore, since the law no. 2016-1321 of October 7, 2016, individuals who wish to do so, have the possibility to organize the fate of their data after their death. For more information on the subject, you can consult the CNIL website: https://www.cnil.fr/.

Users can also file a complaint with the CNIL on the CNIL website: https://www.cnil.fr.

We recommend that you contact us first before filing a complaint with the CNIL, as we are at your full disposal to resolve your issue.

**Article 9 – Use of Data**

The personal data collected from users are intended to provide the Platform services, improve them, and maintain a secure environment. The legal basis for processing is the execution of the contract between the user and the Platform. Specifically, the uses are as follows:

– access and use of the Platform by the user;
– management of the operation and optimization of the Platform;
– implementation of user support;
– verification, identification, and authentication of data transmitted by the user;
– personalization of services by displaying advertisements according to the user’s browsing history, according to their preferences;
– prevention and detection of fraud, malware (malicious software) and management of security incidents;
– management of any disputes with users;
– sending commercial and advertising information, according to the user’s preferences;
– organizing the terms of use of Payment Services.

**Article 10 – Data Retention Policy**

The Platform keeps your data for the time necessary to provide you with its services or support.

To the extent reasonably necessary or required to meet legal or regulatory obligations, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions, we may also retain some of your information as needed, even after you have closed your account or we no longer need it to provide services to you.

**Article 11 – Sharing Personal Data with Third Parties**

Personal data may be shared with third-party companies exclusively within the European Union, in the following cases:

– when the user uses payment services, for the implementation of these services, the Platform is in contact with third-party banking and financial companies with which it has entered into contracts;
– when the user posts publicly accessible information in the free comment areas of the Platform;
– when the user allows a third-party website to access their data;
– when the Platform uses the services of providers to provide user support, advertising, and payment services. These providers have limited access to user data, as part of the performance of these services, and are contractually obligated to use them in compliance with the provisions of applicable personal data protection regulations;
– if required by law, the Platform may transmit data to respond to claims against the Platform and comply with administrative and judicial procedures.

**Article 12 – Commercial Offers**

You may receive commercial offers from the publisher. If you do not wish to do so, please click on the following link: grainbowcoffee@gmail.com.

Your data may be used by the publisher’s partners for commercial prospecting purposes, if you do not wish this, please click on the following link: grainbowcoffee@gmail.com.

If, while browsing the site,