- Personal data protection policy -

The company BD Multimedia (hereinafter referred to as the "Company"), editor of the present, is required to process personal data as part of the missions entrusted by its customers.

You will find below the main information relating to this data processing, the commitments of the Company in terms of privacy protection, and the exercise of rights guaranteed by the General Regulation on Data Protection (RGPD).

The Company's contact details are as follows

1. What are the treatments carried out on demonia.com ?

The personal data collected by the Company in the course of providing the services are necessary for the execution of the contracts concluded with the Customer(s), or to allow the Company to pursue its legitimate interests in respect of the Customer's rights. Some data may also be processed on the basis of the Client's consent.

The Company asks for these data because they are necessary for the correct processing of the order which is not possible without your data.

Personal data processing may be carried out in the following functions:

• Process of an order;
• Customer service;
• Online payment;
• Sending of the newsletter;
• Cookie management;

These treatments, which correspond to the functionalities of demonia.com and to the legal obligations which result from it, are based on the consent of the customers, with the exception of those related to the payment (execution of a contract) and to the legal obligations related to the platform. The cookies strictly necessary for the proper functioning of the site are based on the legitimate interest of the Company.

The following information is collected when you place an order on the site:

• The data collected are in particular those relating to the civility (name and first name), e-mail address, postal address, telephone number, date of birth to allow the delivery and information on the delivery of orders placed on the site.
• Payment data. When recording payment data, we only note the total amount and your payment method (MasterCard, VISA, Paypal or bank transfer). The technical solutions of our credit institution. Therefore, we do not record your bank details and each payment method is secure.
• When you contact customer service, we use your data to answer your question or complaint. We keep your customer service communication information for as long as your account exists so that we can best assist you. When your account and related data is deleted, this data will also be deleted.
• We send you our offers, promotions and news by e-mail. Of course, we only do this if you have given us your consent. You can unsubscribe at any time via the unsubscribe link at the bottom of the e-mail.
• In addition, certain data is collected automatically as a result of the customer's actions on the site through the use of cookies. A cookie is a piece of information deposited on the hard disk of an Internet user by the server of the site he or she is visiting. It contains several pieces of information: the name of the server that placed it, an identifier in the form of a unique number, and possibly an expiration date. This information is sometimes stored on the computer in a simple text file that a server accesses to read and record information.

The main subcontractors used by the Company to manage and host demonia.com are: Google Cloud Platform and Zayo.

Because demonia.com is intended for users 18 years of age or older, we do not knowingly collect personal information from anyone under the age of 18

2. How is data privacy and security ensured?

The Company's first commitment to GDPR compliance and privacy is transparency.

In addition, the Company ensures the security of personal data by implementing technical measures that ensure a high level of IT security. Similarly, internal procedures for the management of personal data are put in place to ensure a constant level of data confidentiality.

The processed data is kept for the following periods:

• Data related to the user's account and profile: three months after deletion of the account by the user, or after four years of inactivity on the site;
• Data related to the newsletter: four years;
• Data related to cookies: thirteen months;
• Data related to online payment: five years;
• Data related to legal obligations (age verification): five years.

3. How to exercise your rights?

You have rights relating to the processing of your personal data, and in particular the rights of access, rectification, deletion and opposition, to limit the processing and to the portability of data.

For your information, please note that the demonia.com website does not carry out any processing based on automated decision making or profiling.

To exercise your rights, or for any information regarding your personal data, you can contact the Data Protection Officer (DPO) at the following address: dpo@demonia.com.

In the event of a complaint, you may refer the matter to the French National Commission for Information Technology and Civil Liberties (CNIL):