Privacy policy

**Privacy and Cookies Policy**

Last Updated: 23/10/2021

The use of this website by an individual implies full and unconditional acceptance of this privacy and cookies policy.

**1. Purpose**

This privacy and cookies policy (hereinafter referred to as the "Policy") describes how the company MUSU collects and processes personal data when using its website (hereinafter referred to as the "Site") located at https://www.musubrand.com. It specifies the rights of Site Users and the obligations of MUSU in accordance with the General Data Protection Regulation (European Regulation No. 2016/679, hereinafter referred to as "GDPR") and applicable national laws where applicable. In this regard, every Site User must be 16 years of age or older. It is noted that purchases are reserved for adults (18 years and older).

**2. Personal Data Concept**

In accordance with Article 4.1 of the GDPR, personal data refers to "any information relating to an identified or identifiable natural person." Accordingly, any "natural person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity" is considered identifiable.

**3. Data Controller**

In accordance with Article 4.7 of the GDPR, the data controller is "the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing (...)." The data controller for the website https://www.musubrand.com is MUSU, a French company located at 35 Avenue de Profondeville, Roquebrune-Cap-Martin, 06190, France. For more details about MUSU, the User is invited to review the legal notices available at https://www.musubrand.com/legal-notice.

**4. Policy Modifications**

This Policy may be modified at any time by MUSU, without any liability on its part. In the event of significant changes, MUSU will inform Users of the Site through an informative message displayed on its Site. For this reason, every User is encouraged to check it regularly. In this regard, the User can find out the date of the last update at the beginning of the Policy.

**5. General Information on Data Collection**

**5.1. Regarding Data Collection and Processing**

Every User of the Site accepts that their data is collected and processed for the purpose of fulfilling their order (conclusion and execution of the order). This data includes their name, surname, email address, postal address for delivery, and mobile phone number.

**5.2. Retention Time of Collected and Processed Data**

Data related to the order is kept in accordance with the deadlines prescribed by commercial and tax law (between 6 to 10 years). Payment data is retained by the relevant service providers according to the selected payment method.

**6. Payment Data Management**

The payment data that the Customer transmits is communicated to the selected payment service provider during their purchase (Stripe) https://stripe.com/fr, headquartered in Dublin, Ireland. These transfers are made securely (https) in accordance with industry standards. MUSU does not retain any payment data on its servers. Refund management is also carried out through the payment service provider.

**7. Security Measures**

MUSU uses data protection and security technologies recognized as industry standards in the IT sector (SSL protocol) for the personal data it collects and processes.

**8. Transfer of Personal Data**

MUSU only transfers Customer data when justified by the nature of the relevant action. Under no circumstances does MUSU transfer this data for advertising purposes on behalf of third parties. Regarding order and return management, MUSU ensures that the data to be transferred is strictly limited to the data necessary for order processing and delivery.

**9. Rights of Individuals and How to Exercise Them**

In accordance with applicable regulations (GDPR), the natural person whose personal data is processed has the following rights:
- Right of access to their personal data,
- Right to rectify their personal data,
- Right to erasure of their personal data,
- Right to object to or limit the processing of their data, subject to compliance with the legal grounds justifying data processing. In this regard, proper execution of the order, compliance with the General Terms and Conditions, etc., may justify the impossibility of exercising the requested right of objection or limitation of processing,
- Right to data portability,
- Right to lodge a complaint with the competent supervisory authority.

To exercise these rights, the Customer must submit their request, indicating their email address, name, and surname, and the subject of the request being "exercise of the right of personal data," using one of the following means of communication:
- By email to the address: team@musubrand.com. In this regard, the request must be sent from the email address registered on the Site managed by MUSU. Otherwise, the request will be rejected. If the requester is no longer able to use the same email address, they must prove by any other reasonably reliable means that they are the owner of the data concerned.
- By postal mail: to the address 35 Avenue de Profondeville, Roquebrune-Cap-Martin, 06190, France. For security reasons, the requester must prove that they are the holder of the rights to the data concerned. Due to technical constraints, the Customer agrees that MUSU will process their request within a reasonable time and within a maximum period of 30 days from the receipt of the request.

**10. Use of Cookies**

MUSU uses cookies when a User visits the Site. These are small text files stored on the User's computer by the MUSU web application, through which MUSU can recognize the User's internet browser. Common internet browsers are set to automatically accept cookies. The User can disable them or configure their internet browser to inform them about the use of cookies. However, depending on the type of cookies, disabling them may directly impact their browsing experience.

**10.1. Types of Cookies**

- Essential Cookies: They are essential to provide services available to the User on the Site and allow them to use certain features. For example, these cookies allow secure login to secure areas of the Site and help load page content quickly. Without these cookies, the requested services cannot be provided. These cookies are only used to provide these services. If these cookies are disabled, it is no longer possible to make purchases on MUSU for security reasons.
- Functionality Cookies: They allow the Site to remember the choices that the User makes when using them. The purpose of these cookies is to offer a more personal experience and avoid the User having to re-enter their preferences every time they visit the Site. In the event of use by MUSU, an information notice and a request for acceptance of this type of cookies appear when the User visits the Site for the first time. This type of cookie is kept for 12 months from the User's acceptance (which may correspond to them continuing to browse the Site).
- Analytics and Performance Cookies: These cookies are used to collect traffic information to the Site and how Users use it. The information collected does not identify any individual User, and the