PRIVACY POLICY

Thank you for visiting our website. Ensuring the protection and security of our users' data is a priority for Pierre Fabre.

This information on the processing of personal data ('Privacy Policy') pursuant to EU Regulation 2016/679 ('GDPR') explains what information is collected when you visit and use our website and how your data is processed.

This website (hereinafter the "Website") is owned by Pierre Fabre S.A, whose registered office is at ‘Parc industriel de la chartreuse, 40 rue Albert CALMETTE, 81000 CASTRES’ (FR) (hereinafter "Pierre Fabre", "We", "Our", "Us") which is the controller of the Personal Data that may be collected on the Website for the purposes described below.

The Site is managed by ARNEO, whose registered office is at 37-41 rue Fernand Pelloutier, 92100 Boulogne-Billancourt (FR) in its capacity as data controller (hereinafter the "Data Processor") on behalf of Pierre Fabre.

The Data Protection Officer (the "DPO") appointed by Pierre Fabre can be contacted at: dpofr@pierre-fabre.com.

We encourage you to read this Privacy Policy carefully and point out that Pierre Fabre may update it at any time. The date of the most recent version will be indicated on this page. We invite you to consult it regularly.

Depending on the services on our Site that you use and the choices you make when setting up your device (particularly with regard to cookies and other tracking tools), the personal data relating to you (hereinafter referred to as 'Your Personal Data') collected and processed by Pierre Fabre includes:

• data generated by your browser, collected automatically by our server through the installation of cookies and other tracking tools, such as:
  • specific data collected on the basis of web pages visited and activity on the Site, including domain name, date, time and duration of the visit, pages and videos viewed, advertisements that the user clicked on.
  • specific data relating to the user and the device used to browse the Website, including the user's IP address (location of the point of entry into the network, browser type and operating system).

In any event, we do not use such Personal Data collected automatically through cookies and other tracking tools used on the Site to try to identify you, nor do we relate it to any Personal Data that you may have voluntarily provided.

The following is an overview of the purposes for which personal data are processed and the reasons why such processing is necessary.

We are part of the international Pierre Fabre Group and, from time to time, we may disclose your Personal Data to other companies in the Pierre Fabre Group for the above purposes, as part of the intra-group services they provide.

We may also engage third party service providers (who will act on our instructions) to help us provide information, products or services to you, to conduct and manage our business, or to operate and improve our Site. In these cases, these third parties may need access to your Personal Data.

If your Personal Data is transferred outside the EEA (European Economic Area) to other Pierre Fabre Group companies or service providers, we will take steps to ensure that your Personal Data receives the same level of protection as if it were within the EEA by entering into data transfer agreements, based on European Commission approved standard contractual clauses (SCCs) as subsequently updated or revised, or adopting other transfer mechanisms such as Binding Corporate Rules (BCRs) or agreements approved by EU data protection authorities

We may also share your Personal Data with third parties as part of any actual or potential sale of Pierre Fabre or transfer of any assets owned by us or our affiliates, in which case the Personal Data we hold about our users may be part of the transferred assets.

We will also disclose your Personal Data if required to do so by law, or if such disclosure is necessary to protect us and/or our rights, comply with a court order, a request from a supervisory authority, or in connection with any other judicial or administrative proceeding to which we are a party.

In general, Personal Data are retained by Pierre Fabre only for as long as necessary to ensure the fulfilment of all the obligations necessary for the provision of the service and, after termination, for the ordinary limitation period of 10 years.

Should it be necessary to defend the Controller's rights in an extrajudicial and/or judicial complaint and/or settlement, the Personal Data shall be retained for the duration of the extrajudicial and/or judicial complaint and/or settlement, until the time limit for judicial remedies and/or appeals is exhausted.

However, we may retain your Personal Data for a longer period than indicated in this Privacy Policy if this is necessary to comply with our legal obligations, in the event of a request by the competent authorities, or to enforce one of our rights.

Provided that the user has accepted cookies or other tracking technologies implemented on the Site, connection logs and other data collected for analysis and statistical purposes will be retained in accordance with applicable laws and regulations, according to the cookie deadlines set out in the Cookie Policy.

When Personal Data are no longer needed for the intended purposes or in order to fulfil legal obligations, they will be deleted or anonymized.

The Site may contain links to third-party sites or platforms.

Since we do not control these sites, Pierre Fabre is not responsible for the data processing carried out by these third parties; we therefore invite you to read the relevant data processing information of these third-party sites or platforms.

This Privacy Policy applies exclusively to Personal Data collected by our Site or in the course of processing activities carried out by Pierre Fabre.

In accordance with applicable law, users may exercise the following rights to protect their Personal Data

• Obtain a copy of your Personal Data, as well as information on how such Personal Data are processed and the relevant legal basis for processing.
• Rectify inaccurate Personal Data (including the right to complete incomplete Personal Data);
• Delete Personal Data insofar as the legal basis for collecting the data permits.

Moreover, in some cases this right may only apply when the data are no longer necessary for the purposes for which they were collected or processed

• Limit the processing of Personal Data where:
  • The accuracy of Personal Data is disputed.
  • The processing is unlawful but the user objects to the deletion of his or her Personal Data.
  • Personal Data is no longer necessary for the pursuit of the purposes, but the exercise of rights or defense in court is.
• Request portability of your Personal Data in a machine-readable format to a third party (or to you) if our processing is based on your consent or a contract that has been entered into with you;
• Obtaining or consulting a copy of the appropriate measures taken by Pierre Fabre to transfer Personal Data to a third country or international organization.
• In addition to the above rights, you also have the right to object to any processing of your Personal Data justified by Pierre Fabre's legitimate interest, including profiling.

The user also has the right to lodge a complaint with the data protection authority. For Italy, more information can be obtained at www.garanteprivacy.it.

To exercise these rights, you can use the details in the section below under 'Contact Us' in this Privacy Policy. To process your request to exercise your rights, we may ask you for proof of identity, reserving the right to charge a fee if permitted by law (for example, if the request is manifestly unfounded or excessive). In any case, we will endeavor to respond to your request for the exercise of your rights within the time allowed by law.

If you have any doubts or questions about this Privacy Policy, or if you wish to exercise any of your rights, please contact our Data Protection Officer (DPO) at: dpofr@pierre-fabre.com.

We may amend our Privacy Policy at any time to reflect changes in the law and/or our data protection policies