Secure payments

Updated October 1, 2025

Our personal data protection policy (hereinafter "Policy") describes how Arc Web & Retail, a simplified joint-stock company, registered with the Boulogne sur Mer Trade and Companies Register under number 483 855 227, located at 104, avenue du Général de Gaulle - 62510 Arques (hereinafter "AWR"), processes, as data controller, the personal data of its customers (hereinafter "Customer(s)").

Arc Web & Retail, owner of the website www.latabledarc.com (hereinafter "Site"), collects, stores and processes personal data concerning the Customer when the latter uses the Site. This Policy is therefore intended to exclusively manage the processing of data collected directly on the Site.

Concerned with ensuring the best level of protection of your personal data, AWR undertakes to take all necessary measures to process your personal data in accordance with the provisions of Law No. 78-17 of January 6, 1978, as amended, relating to information technology, files and freedoms and those of Regulation (EU) No. 2016/679 of April 27, 2016 on the protection of personal data.

This Policy describes how the personal data of the Site's Customers is collected and processed by AWR.

AWR may process or collect all or part of the following personal data for the purposes described below:

▪ Identification data (surname, first name(s), email address, billing and delivery address);

▪ Username(s) and password(s) on the Site;

▪ Information relating to purchases and orders;

▪ Electronic identification data available on or from the Client's computer such as "cookies" or "IP" addresses.

AWR does not process data relating to racial or ethnic origins, political or religious opinions, philosophical beliefs or trade union membership, the processing of genetic data, life or sexual orientation of the Client.

The Client's personal data is collected when:

▪ The Customer creates his customer account on the Site;

▪ The Customer registers on the Site and gives his explicit consent to receive newsletters and commercial communications;

▪ The Customer places an order on the Site and proceeds to payment;

▪ The Customer contacts customer service.

AWR collects personal data for the following purposes:

Processing carried out on the basis of the performance of contractual obligations:

The processing of personal data is necessary for the execution of the contract between the Customer and AWR. Overall, the provision of personal data collected for the purposes of distance selling is mandatory for the confirmation and validation of the Customer's order as well as its tracking and shipping; without this information, the Customer's order cannot be processed.

Mandatory data is identified by an asterisk on the form completed when ordering, the other data is optional and allows AWR to improve communications and services to the Customer. This data may be transmitted to AWR service providers for the sole purpose of the proper execution of the order and in particular its payment and delivery, according to the options selected by the Customer when ordering.
Providing personal data also allows AWR to communicate with its Client about its account or the contractual relationship between AWR and the Client (for example, to inform the Client of changes to the Site, the Policy or updates).

In summary, the purposes of the processing carried out on the basis of the contract are as follows:

▪ Management of customer account, shopping cart and orders;

▪ Management of delivery operations;

▪ Management of payment transactions: when the Customer makes a payment on the Site, payments are secured by our banking service provider: the Customer's bank card details are encrypted using the SSL protocol and never pass unencrypted over the network. No banking data is stored by AWR. Bank transactions are made directly between the Customer and AWR's banking service provider. Payment can also be made via a Paypal account. If the Customer has a Paypal account, payment will be made using the process set up by this company: payment with the email address and password provided when creating the Paypal account. All of the Customer's bank details are collected solely by our certified payment service provider, which guarantees payment security;

▪ Management of customer relations by telephone or email, monitoring of after-sales service, product returns and refunds;

Processing carried out on the basis of AWR's legal obligations:

AWR uses the Client's personal data to meet its legal obligations and/or defend its interests in court, in particular for the purposes of:

▪ Proof of transactions or operations;

▪ Legal or administrative requirements incumbent on AWR, needs of its insurers, or for audit purposes;

▪ Management of requests to exercise the rights of data subjects.

Processing carried out on the basis of your consent:

The Client has accepted the processing of his personal data by AWR by means of express consent (opt-in) in particular when:

▪ The creation of your Client account;

▪ Acceptance of the deposit of cookies to offer content and targeted advertising adapted to your interests, to carry out measures to improve your experience on the Site and to share on social networks;

▪ Subscription to the newsletter;

▪ Participation in competitions.

The Customer has the option to withdraw his consent at any time via the unsubscribe link present in all commercial communications and in the “My Account” / “Newsletter Subscription” section on the Site.

Processing carried out on the basis of the legitimate interest pursued by AWR:

AWR has a business interest in processing Customer data that is justified, balanced, and does not tend to infringe on the Customer's privacy. Where AWR's processing is based on its legitimate interest, the Customer may object to such processing if it is found that its interests or fundamental freedoms prevail over AWR's legitimate interests.

Such treatment may be carried out on occasion:

▪ Commercial prospecting operations with Customers for the purpose of advertising our products;

▪ Sending satisfaction surveys for the purpose of improving our services;

▪ Organization of commercial events for the purpose of customer loyalty;

▪ Combating fraud when paying for the order;

▪ Management of product reviews in order to improve our goods and services;

▪ Recording of exchanges between customer service and the Customer by telephone for the purpose of improving our services;

▪ Statistical analyses for the purposes of managing and improving our services;

▪ Management of social networks for the purposes of advertising our products and customer service;

▪ Management of client disputes to defend our interests in court.

AWR undertakes not to sell the Customer's personal data to partner brands for commercial purposes. The Customer's personal data remains the exclusive use of AWR. In order to achieve the aforementioned purposes, AWR discloses personal data only to:

ARC Group entities:

Only authorized personnel of the ARC Group (i.e. any entity, whatever its form, including ARC HOLDINGS (575 680 350 RCS Boulogne-sur-Mer) which holds, directly or indirectly, links in capital or voting rights) whose activity justifies access to information, for the purposes of internal audit, Customer relationship management, including in particular the management of Customer information contained in the Customer file, the management of Customer commercial relations, the management of Customer orders and complaints/after-sales service files, the management of promotional operations and campaigns, the improvement of the AWR - Customer relationship, the management of purchases and payments, is authorized to access Customer data.

Below is a list of ARC Group entities that may be authorized to process your personal data for the associated purposes.

ENTITY CONCERNED: Arc France

HEAD OFFICE:

104 Avenue du General de Gaulle,
62510 Arques - France.
Registered with the Boulogne-sur-Mer Trade and Companies Register under number
834 257 081

PURPOSE OF THE PROCESSING:

• Accounting treatment;
• Email routing and database hosting.

Subcontractors:

Service providers and subcontractors performing services according to the instructions and on behalf of AWR only, in particular in the context of payment and delivery of the order.


AWR also uses commercial and technical subcontractors to whom data may be transmitted temporarily and securely, such as:

▪ Colissimo for delivery of orders;

▪ Chronopost for delivery of orders;

▪ Schenker for delivery of orders;

▪ Brevo for email routing;

▪ Those who assist us and help us manage loyalty programs, customer relationship management and commercial monitoring (CRM);

▪ Those who assist us and help us provide IT services, for the maintenance of our database and related software and applications, these services may have access to your data to carry out the requested tasks.



Third party to AWR:

In the context of a restructuring, reorganization or transfer, in any form and for any reason whatsoever (in particular transfer of business assets, dissolution, liquidation, merger, etc.) of the entities of the ARC Group.



Other third parties:

▪ AWR shares your personal data with other third parties only if i) AWR is required to do so under its legal obligations (e.g., upon request from competent courts), or ii) if sharing is lawful under applicable law.

▪ Certain regulated professions such as lawyers, notaries, auditors in the context of the execution of their mandate or directly to judicial or administrative authorities in application of legal provisions.

The Client's personal data collected on the Site by AWR may be accessed or transferred outside the European Union (list annexed to the general conditions of sale) and may be accessible there by ARC Group personnel or by one of its subcontractors.

AWR undertakes to take the necessary measures to ensure that its personnel and subcontractors acting on its instructions and on its behalf only adhere to the commitments set out in this Policy, in particular by concluding suitable contracts according to the models adopted by the European Commission or any other valid transfer mechanism that may be put in place in the future.

The Customer's personal data is kept for a period of three (3) years from the last order placed by the Customer on the Site or from the last contact from the Customer (e.g. request for information, click on a hyperlink contained in an email, creation of a customer account without placing an order, etc.).

Contractual data is kept and archived for the duration necessary for contractual obligations (warranty, compliance, etc.) as well as for legal, accounting and tax obligations and/or during applicable limitation periods.

If the Client has expressly consented to receive commercial prospecting, AWR retains their personal data until the Client unsubscribes or until the latter requests AWR to delete them.

The Client's data is then archived and may be used in the context of a dispute, action or litigation, during the applicable limitation period.

In the event of legal action, data may be retained until all legal remedies have been exhausted, and will then be deleted or archived to the extent permitted by law.

The Client's data is then destroyed or anonymized.

In accordance with Law No. 78-17 of 6 January 1978, as amended, relating to information technology, files and freedoms, as well as those of Regulation (EU) No. 2016/679 of 27 April 2016 on data protection, the Client has the following rights:

▪ Right of access: the Client can obtain information concerning the processing of his personal data as well as a copy of his personal data.

▪ Right of rectification: if the Client considers that his personal data is inaccurate or incomplete, he can demand that this personal data be modified accordingly.

▪ Right to erasure: the Customer may request the erasure of his personal data within the limits of what is permitted by the regulations.

▪ Right to limitation of processing: the Client may request the limitation of processing of his personal data.

▪ Right to object: the Customer may object to the processing of their personal data, for reasons related to a particular situation. The Customer has the absolute right to object to the processing of their personal data for commercial prospecting purposes, including profiling related to such prospecting.

▪ Right to data portability: when this right is applicable, the Client has the right to have the personal data provided to AWR returned to him or, where technically possible, transferred to a third party;

▪ Right to define guidelines relating to the retention, deletion or communication of personal data, applicable after death.

▪ Right to withdraw consent: if the Customer has given his consent to the processing of his personal data, he has the right to withdraw his consent at any time via the unsubscribe link, which will not affect the legitimacy of the processing operations carried out before the withdrawal of his consent.

The Client may exercise the above rights at any time by sending his request to the email address of the ARC Group Data Protection Officer: dpo@arc-intl.com

Or by post to the following address:
The Data Protection Officer
ARC FRANCE,
104 Avenue du General de Gaulle 62510 Arques, France

In accordance with applicable regulations, the Client may file a complaint with a competent supervisory authority such as the CNIL in France.

A cookie is a piece of information placed on your device's hard drive by the Site's server. This cookie or "tracker" makes it possible to identify the device on which it is stored, for the duration of the consent's validity, which may not exceed 13 months after its first placement on the user's device.

A cookie does not contain or store any individual information. It can be read by a server via a web browser and provides information that allows the Site to be more tailored to users by, among other things, recording data, user preferences, detecting errors and/or collecting data for statistics.

The information collected through this means is primarily used to track the volume, type and configuration of traffic using the Site, to develop its design and layout and for other administrative and planning purposes and more generally to improve the service we offer to you.

AWR is required to obtain your consent before it can place cookies on your device when you visit the Site. Certain cookies and trackers are exempt from your consent; these are cookies and trackers that are strictly necessary to provide a service expressly requested by the user.

What types of cookies do we use?

Cookies strictly necessary for the operation of the Site (functional cookies)

These are cookies that are essential for browsing our Site, which allow you to use the main features of the Site and secure your connection.

For example, they allow you to directly access reserved and personal areas of our Site, using identifiers or data that you have previously provided to us.

Functional cookies are not subject to the Customer's consent.

Functional cookies allow AWR to:

▪ to implement security measures on the Site;

▪ to facilitate your navigation by saving your language preferences, your login details, or even the content of your order;

▪ to adapt the presentation of the Site to the display preferences of your terminal (display resolution, etc.)

Analytical cookies

These are cookies that allow AWR to understand the use and performance of the Site, to establish statistics, traffic volumes and use of the various elements of the Site. These cookies collect information relating to your behavior on the Site by analyzing URLs (where our visitors come from, which banners they clicked on, who directed them to the Site), but also the times of visits. These cookies allow us in particular:

▪ to establish statistics concerning the volumes of traffic to the Site (number of visits, pages viewed, etc.) and to compile reports and statistics concerning the use of the various elements comprising it (sections and content visited, navigation paths taken);

▪ to improve our Site accordingly;

▪ to better understand the products and services you prefer and to offer you more personalized communications and/or content on our Site;

▪ to detect possible navigation difficulties.

These cookies require your prior consent to be placed on your device.

Deleting analytical cookies does not prevent navigation on the Site.

Marketing cookies

These cookies help AWR tailor its advertisements on its Site. These cookies allow us to:

▪ Limit the number of times you see an advertisement or offer;

▪ Display advertisements tailored to your interests on the Site or outside the Site, depending on your terminal's navigation on the Site (personalized advertising), with your prior consent and based on the personal data that you have provided to AWR;

▪ Combat click fraud (detection of publishers claiming to achieve a higher advertising audience than is actually the case).

These cookies require your prior consent to be placed on your device.

Deleting marketing cookies does not prevent browsing on the Site.

How to manage cookie settings?

Except for functional cookies, the recording of a cookie in a terminal depends on the user's choices, which the user can express and modify freely at any time.

You can configure your cookies, either by clicking here, or through your browser and thus accept or reject cookies on your device, either globally or cookie by cookie.

Changing your browser settings may impact your experience on the Site.

We cannot be held responsible for the consequences resulting from reduced access to our services following the cookie settings you have made.

Each browser has its own cookie management system, which is described in your browser's "Help" menu, where you'll find the information you need to change your cookie preferences.

For Internet Explorer 8.0 and above: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies

For Google Chrome: https://support.google.com/chrome/answer/95647?hl=en

For Mozilla Firefox: https://support.mozilla.org/fr/kb/activate-deactivate-cookies-preferences

For Safari: https://support.apple.com/fr-fr/guide/safari/sfri11471/mac

For any further explanation on cookies and your browser settings, you can also consult the CNIL website: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

The Policy may be amended, in particular to reflect any changes in the way in which AWR processes and collects Customer data on the Site. The Customer may review updates to this Policy by consulting the Policy on the Site (the date of any updates will be specified at the top of this Policy) and any substantial changes to this Policy may be communicated to the Customer via the Site or through the usual means of communication.

Any additional questions relating to the management of the Client's personal data may be sent by email to the following address: dpo@arc-intl.com

Or by post to the following address:

Arc France,

The Data Protection Officer

104 Avenue du General de Gaulle 62510 Arques, France

The Client also has the option of consulting the website of the National Commission for Information Technology and Civil Liberties (CNIL): www.cnil.fr