LA COMPAGNIE INTERNATIONALE DU TAPIS, a limited liability company, with a share capital of 7500 euros, registered with the Paris Trade and Companies Register under number 511 309 957 (NAF CODE 4743Z, intra-community VAT FR13511309957), whose registered office is located at 4 rue de Wattignies 75012 Paris, as data controller, attaches great importance to the protection and respect of your privacy.

This policy aims to inform you, in accordance with Regulation n°2016-679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation"), of our practices concerning the collection, use and sharing of information that you provide to us through our website babarug.com (hereinafter referred to as the "site").

This policy aims to inform you about the categories of personal data that we may collect or hold about you, how we use it, who the recipients are and with whom we share it, how long we keep it and how we protect it, and finally the rights you have over your personal data.

1. Data we collect

By using the site, you transmit information to us, some of which is likely to identify you and therefore constitutes personal data (hereinafter referred to as "Data"). This is particularly the case when you contact us or register for events and training courses.

This information includes the following data:

1. Contact data: refers to the data you provide when submitting a contact request by filling out the form.
2. Navigation data: refers to the data we collect when you browse the Site, such as the date, time of connection and/or navigation, browser type, browser language, and its address.

In the event that you connect to our services using the social network functionalities made available to you, we will have access to certain Data (in particular your first name, last name, photograph, email address and number of Facebook friends) from your account on the said social network in accordance with the general terms of use of the social network concerned. We may also collect some of your Data when you interact with features of these social networks, such as "Like" features.

2. How do we use the data we collect?

We use the data we collect to be able to contact you following your request made via the contact form. This processing is based on the following legal basis: consent (the person has consented to the processing of their data).

When collecting Data, you will be informed whether certain Data must be compulsorily provided or if it is optional. Data identified by an asterisk in the collection form is mandatory. Otherwise, the execution of your request may be restricted.

3. Who are the recipients of the data we collect and for what reasons do we transmit this data to them?

3.1 Data processed by BabaRug

• The Data collected is intended for us in our capacity as data controller.
• The departments responsible for processing your Data in order to contact you and register you, organize events and training, and make reservations are the marketing department as well as the training and events department.

3.2 Data transferred to authorities and/or public bodies

In accordance with current regulations, Data may be transmitted to competent authorities upon request, particularly to public bodies, judicial officers, ministerial officers, organizations responsible for debt recovery, exclusively to meet legal obligations, as well as in the case of investigating the perpetrators of offenses committed on the internet.

4. How long do we keep your data?

Your Data will not be kept beyond the period strictly necessary for the purposes pursued as set out in this policy and in accordance with the Regulation and applicable laws.

In this regard, the Data used for the purpose of recontacting you is kept for 3 months.

When the retention periods expire, your Data is erased or anonymized so that it can be used without infringing your rights. Nevertheless, your Data may be archived beyond the specified periods for the purposes of searching for, establishing, and prosecuting criminal offenses, solely to allow, as needed, the provision of your Data to the judicial authority.

Archiving means that your Data will no longer be accessible online but will be extracted and stored on a standalone and secure medium.

5. Is your data transferred, how and where?

Your Data is not transferred outside the territory of the European Union.

6. How is your data protected?

We take adequate technical and organizational measures to prevent unauthorized access or modification, disclosure, loss or destruction of your Data.

7. What are your rights regarding your data?

In accordance with applicable laws and regulations concerning the protection of personal data, you have a number of rights regarding your Data, namely:

• A right of access and information: you have the right to be informed in a concise, transparent, intelligible, and easily accessible manner about how your Data is processed. You also have the right to obtain (i) confirmation that Data concerning you is being processed and, if applicable (ii) to access this Data and obtain a copy of it.
• A right to rectification: you have the right to obtain the rectification of inaccurate Data concerning you. You also have the right to complete incomplete Data concerning you by providing a supplementary statement. If you exercise this right, we undertake to communicate any rectification to all recipients of your Data.
• A right to erasure: in certain cases, you have the right to obtain the erasure of your Data. However, this is not an absolute right, and we may retain such Data for legal or legitimate reasons.
• A right to restriction of processing: in certain cases, you have the right to obtain the restriction of processing of your Data.
• A right to data portability: you have the right to receive your Data that you have provided to us, in a structured, commonly used, and machine-readable format, for your personal use or to transmit it to a third party of your choice. This right only applies when the processing of your Data is based on your consent, on a contract, and when this processing is carried out by automated means.
• A right to object to processing: you have the right to object at any time to the processing of your Data for processing based on our legitimate interest, a mission of public interest, and for commercial prospecting purposes. This is not an absolute right, and we may refuse your objection request for legal or legitimate reasons.
• The right to withdraw your consent at any time: you can withdraw your consent to the processing of your Data when the processing is based on your consent. The withdrawal of consent does not affect the lawfulness of processing based on consent carried out before such withdrawal.
• The right to lodge a complaint with a supervisory authority: you have the right to contact your data protection authority to complain about our personal data protection practices. - The right to give instructions regarding the fate of your data after your death: you have the right to give us instructions regarding the use of your Data after your death.

To exercise these rights, you can contact our Data Protection Officer at the following address: Maxime RAHIMZAD-AHARI, 4 rue de Wattignies 75012 Paris

Please note that we may require proof of your identity to exercise these rights.

8. Changes to our privacy policy

We may occasionally modify this policy, in particular to comply with any regulatory, jurisprudential, editorial or technical developments. If so, we will change the "last updated" date and indicate the date on which the changes were made. Where necessary, particularly but not exclusively in the event of a substantial modification or a particular event requiring a modification of this policy, we will inform you and/or seek your agreement. We advise you to regularly consult this page to take note of any modifications or updates made to our policy.

9. Contact

For any questions regarding this policy or for any request regarding your Data, you can contact us by:

• sending an email to our data protection officer at the following address: hello@babarug.com
• sending a letter to the following address: 4 rue de Wattignies 75012 Paris

Version updated on September 12, 2024