PRIVACY POLICY

The vuarnet.com website (hereinafter the "Website") is managed by Sporoptic Pouilloux SA (hereinafter "SPO" or "we"), a public limited company with a capital of 4,378,430.00 euros, registered in the Paris Trade Register under number R.C.S. PARIS 309 552 008, and whose registered office is located at 29 rue Taitbout, 75009 Paris. This Privacy Policy (hereinafter the "Privacy Policy") applies to any person who browses the Website and uses our products and services and to any person who interacts with us (hereinafter the "User(s)" or "you"). SPO is dedicated and committed to protecting your privacy in compliance with legal requirements, including the General Data Protection Regulation which has entered application May 25, 2018 in the member states of the European Union. The purpose of the Privacy Policy is, among other things, to inform Users as well as possible Users about our practices regarding the protection of personal data that we collect on our Website. ARTICLE 1 - USER CONSENT In providing personal data on our Website, you agree to the terms of this Privacy Policy and expressly consent to the collection, use and disclosure of your personal data as set forth in this Privacy Policy, as well as to the privacy terms of Google (our statistical analytics tool) and Shopify (our e-commerce platform) as set forth in this policy.

ARTICLE 2 - WHAT DATA DO WE COLLECT?

We collect the data you provide to us SPO processes the data that the User communicates to it on the Website, in particular during the following operations: - When creating the User's account on the Website; - When the User participates in contests, promotions, events available via the Website; - When the User contacts customer service or any other SPO contact point; - When communicating any other information directly provided by the User. In this context, SPO may in particular collect and process the following personal data of the User: - The identity of the User: first name, last name, gender; - The User's contact details: e-mail address, postal address, phone number; - The User's identifiers: email address, account password; - The User's payment information. The mandatory nature of the information you are required to provide on the Website is indicated at the time of collection and on the corresponding forms. Failure to provide certain personal data may make it impossible to take certain actions on the Website such as creating an account (e. g. first and last name) or purchasing products (e. g. credit or payment card information). The provision of other personal data is entirely optional but, if not provided, certain features of the services offered by SPO may be unavailable or limited: - Identification service (via cookies or password); - E-commerce service due to maintenance or unavailability of products; - Localization/geolocation service leading to a default language choice. We may also ask the User to provide additional data when problems regarding the operation of the Website or services are reported. We collect other data collected using certain technologies Our Website uses "Cookies", small files stored by an Internet server on a device's hard drive. These cookies or other similar technologies automatically collect information about your preferences and settings in order to identify you, obtain information about your use of the Website and manage the various services provided. In particular, we use cookies to improve your experience while browsing the Website. We use the following cookies on our Website: Identification cookie; Geolocation cookie; Cart abandonment cookie; Cookie of the most recently viewed articles; Cookie of the most recently viewed products; Cookie related to social networks; Audience measurement cookie. Deleting and/or disabling cookies results in a degraded user experience and service; however, here are some examples of how to set and/or remove cookies from your browser at any time: If you are using Internet Explorer: Click on the Tools button, then on Internet Options; On the General tab, under Browsing History, click Settings or Privacy; Click on the Show Files button; Click on the name column header to sort all files in alphabetical order, and then scroll down the list until you see files beginning with the prefix "Cookie" (all Cookies have this prefix and usually contain the name of the website that created the Cookie); Select Cookies and delete them; Close the window that contains the list of files, then double-click OK to return to Internet Explorer. If you are using Mozilla Firefox: Go to the "Tools" tab of the browser and select the "Options" menu. In the window that appears, choose "Privacy" and click on "Display cookies"; Select the cookies you wish to delete and delete them. If you use Safari: In your browser, choose Edit menu > Preferences ; Click on Security; Click on "Show cookies"; Select the cookies and click on "Delete" or "Delete All"; After you have deleted the cookies, click on Done. If you use Google Chrome: Click on the "Tools" menu icon; Select "Options"; Click on the "Advanced Options" tab and access the "Privacy" section Click on the "Show cookies" button; Locate the files you want to delete. Select them and delete them; Click on "Close" to return to your browser. In addition, the Website may contain digital images that are known as web beacons (sometimes also defined as Gif or pixel tag), which are also linked to the usage of Cookies, for the purpose of collecting information about how the Website is used. Web beacons may provide certain types of information found on the User's terminal, such as the time and date the web page was visited, the description of the page on which the web beacon is found, or the same Cookies. These web beacons may also be found in promotional emails and newsletters, in order to confirm that the message has been opened and read. SPO may use third-party web beacons to facilitate the collection of aggregate statistics about the effectiveness of its advertising campaigns or other aspects of the Website’s operation. The use by third parties of web beacons to collect or access personal data in an aggregated non format and for other than statistical purposes is prohibited.

ARTICLE 3 - FOR WHAT PURPOSES DO WE COLLECT USER DATA?

As a data controller, SPO collects your personal data in a lawful manner and respects your rights. The main purpose of collecting personal data is to provide you with a safe, optimal, efficient and personalized User experience. The information we collect, including personal data, is used for the following purposes: - To provide the services available through the Site (e. g. management of the account creation and access procedure, account management); - To manage orders, provide products and services, process payments, transmit orders; - For the technical management of the Website and its operational functions (including logistics), as well as for the resolution of any technical problems, statistical analyses, tests and research; - To prevent or uncover fraudulent activity or abuse that may harm the Website or jeopardize the security of our transactions; - To manage, if necessary, promotions, contests or any event available on the Website; - To respond to User requests (e. g. management of information requests) and communicate with them. Please note that, during the account creation process or when leaving the Website for No registered Users (visitor), SPO may offer the User to provide certain personal data for commercial prospecting and statistical purposes. The User may explicitly and freely consent or not consent to the collection, processing and transfer of his/her personal data for marketing purposes, including the receipt of commercial, promotional or informational communications and periodic updates (e.g. by e-mail, telephone, SMS/MMS, mail and via social networks) regarding SPO products, services, initiatives and events organized by, or in collaboration with, SPO as well as for the purposes of statistical analysis, surveys and market research regarding SPO products and services. This consent can be changed later (unsubscribe) by the User accessing his/her profile on his/her account, or sending a communication to the customer service of SPO at the following address web@vuarnet.com. If a User receives email messages from the Website and wishes to stop receiving such communications in the future, the User may do so by following the instructions in the message (via the unsubscribe link) or the procedures set forth above. SPO is committed to processing unsubscribe requests received as soon as possible, but a User may continue to receive communications from us for up to ten (10) more business days while their request is being processed. Since the January 6, 1978 data processing, files and freedoms law, any User can oppose the use or the transfer of personal data concerning him/her. This allows the consumer to object to various forms of commercial prospecting by professionals using their data. These provisions were reinforced by the HAMON law in article L. 223-2 of the Consumer Code, the obligation for any professional collecting telephone data from a consumer to inform the latter of his or her right to register on the opposition list to telephone canvassing. This obligation entered into force on June 1, 2016. The consumer will be able to register free of charge on this list available on the website www.bloctel.gouv.fr. SPO shall refrain from canvassing consumers on this list, unless they are prior customers.

ARTICLE 4 - TO WHOM ARE YOUR DATA TRANSMITTED?

SPO undertakes to keep all personal data collected via the Website and to share them only in certain circumstances and in accordance with the provisions of Act No. 78-17 of 6 January 1978 as amended. SPO does not share personal information, except in the following cases: - Internal Use: We share information with our consultants and third party service providers who work on behalf of the company and require access to your data in order to perform the tasks we assign to them (e.g., hosting companies, payment providers and agencies online, transportation companies); these service providers will only have access to your data in order to perform these services and will be bound by the same security and confidentiality obligations as SPO ; - For analysis purposes: We transmit data to third parties for statistical analysis purposes, we do not sell, trade or rent your personally identifiable data to third party websites or companies for commercial purposes; these providers have limited access to the User's data, in the context of the performance of these services, and are contractually obliged to use it in accordance with the provisions of the applicable regulations regarding the protection of personal data; - Legal Obligations: we will disclose your personal data to companies, organizations or individuals outside of SPO if we believe in good faith that access, use, preservation or disclosure of such information is reasonably necessary (a) to comply with applicable laws, regulations, legal process or official requests, (b) to analyze, detect, prevent or otherwise address any fraud, intellectual property, security or technical issues, c) to prevent harm to the rights, property or safety of the Company, users of our website and application, and the public to the extent required or permitted by law; - Business Transitions: Over time, SPO may develop; as such, mergers, acquisitions and sales of assets are possible, which could result in a change of ownership or control of your personal data. As indicated above, Users' personal data may be transferred and/or otherwise accessed to third party service providers, including outside the European Economic Area, for the sole purpose of providing the Services or as required by applicable law. SPO will systematically require these third parties to take all appropriate organizational and technical measures, in accordance with the regulations in force, to preserve the security and confidentiality of your personal data and, in particular, in such security conditions as to ensure the adequate protection of your personal data. By using our services and/or accessing the Website, you expressly consent to the transfer of your personal data under the conditions described above. Data transfer to Shopify We use Shopify as our e-commerce platform. To learn more about how Shopify uses the data it collects, visit https://www.shopify.com/legal/privacy?utm_source=exacttarget&utm_medium=email&utm_campaign=support&utm_content=gdpr Data transfer to Google Analytics We use Google Analytics, a website analysis service from Google, Inc. ("Google") to improve the operation of our Website. Google uses the data collected to track and study website usage, prepare activity reports and share them with other Google services. Google can use the collected data to contextualize and customize ads in its own ad network. Consult the page https://policies.google.com/privacy not to be followed by Google Analytics. Data transfer to social networks This Website uses various social media plugins (e. g. facebook.com and twitter.com). When browsing the Website, data may be transferred directly to such social networks, even without direct interaction by the User. The User acknowledges and accepts that the management of the social network plugins is carried out directly by the company that manages the corresponding plugin. When Users use the plugins available through the Website (e.g. access a social network with their login details, or link their SPO account to their account on a social network, click on the Facebook "like" or "share" button), the User's browser establishes a direct connection with the server of that social network, which sends the contents of the plugin directly to the User's browser. SPO may therefore receive data concerning the User, in accordance with the terms of use and privacy protection of the social network concerned and may add this information to the User's personal data that it has already collected via the Website. If the User agrees to share the information with social networks, SPO will share the data with them in accordance with the User's preferences. Any information communicated to the social network, including any personal data, will be subject to the privacy policy and the general conditions of use of this social network.

ARTICLE 5 - HOW DO WE ENSURE THE SECURITY OF YOUR DATA?

SPO is committed to protecting Users' personal data. We implement all necessary security measures in accordance with this Privacy Policy and applicable data protection regulations to protect SPO and our Users from unauthorized access to and alteration, disclosure or destruction of the data we hold. SPO cautions that the password is one of the means of account protection, therefore Users are advised to use a password that is sufficiently secure and kept in a safe place, limiting access to it and to their own computers and browsers, and logging out after visiting the Website. SPO also monitors activity on the Website to prevent the unauthorized circulation of credit card numbers and other personal data. Transport Layer Security (TLS) and its predecessor Secure Sockets Layer (SSL). The SSL protocol was originally developed by Netscape. THE IETF continued the development by renaming it Transport Layer Security (TLS). SSL/TLS is sometimes referred to as SSL or TLS Our Website operates entirely with Transport Layer Security (TLS) technology, which has replaced SSL technology. This is a protocol for securing exchanges on the Internet that guarantees the security of all the data you transmit to us. TLS encrypts your order information to prevent third parties from decoding this information. To make sure you are accessing our secure server, please check your browser. If you see a closed padlock or a complete key (depending on your browser), the TLS protocol is active. The first few characters of our Website address will then read "https". Some browser versions and firewalls do not allow communication via secure servers such as the ones we use. If you are unable to access the secure server, please contact us at by calling +33 1 48 85 28 24 or by sending an email to web@vuarnet.com. Payments made via PAYPAL are directly processed by PAYPAL.

ARTICLE 6 - THE PERIOD OF STORAGE OF USERS' PERSONAL DATA

SPO accesses, uses, processes, classifies and stores the personal data collected only for the purposes described above. Personal data is kept for the time necessary to fulfill the purposes for which the data was collected and processed and application of any retention period required by applicable law. The retention period of the data will not exceed 99 years.

SECTION 7 - WHAT ARE MY RIGHTS AND HOW DO I EXERCISE THEM WITH SPO? WHAT IS MY RECOURSE IN CASE OF UNSATISFACTORY RESPONSE NO ? SPO offers Users tools to update and correct the personal data provided. Each Registered User can access their personal data and update them directly on their account. In accordance with law number 78-17 of January 6, 1978 relating to data processing, files and freedoms, as amended in 2004, the User has a right of access, rectification, opposition and deletion of personal data concerning him/her. The User may exercise this right by sending an e-mail to web@vuarnet.com. Pursuant to Regulation 2016/679 of April 27, 2016, the User may exercise his or her right to limitation of processing, erasure of data and portability at any time as of May 25, 2018. In this regard, it should be recalled that where processing is based on the consent of the data subject, the exercise of the right to withdraw consent does not affect the lawfulness of the processing based on consent carried out prior to the withdrawal of consent. These rights can be exercised with the SPO company that collected the personal data as follows: Either by mail, writing to us at the following address Customer Service VUARNET - SPOROPTIC POUILLOUX - 29 RUE TAITBOUT - 75009 PARIS, indicating your name, first name, address, email and if possible customer reference in order to speed up the processing of your request. Or by email to the following address: web@vuarnet.com. In the event of exercising any of these rights, SPO may request proof of the User's identity in order to verify the accuracy of the information. The SPO company sends a reply within two (2) months after the exercise of the right. In the event of a dissatisfactory response, the User may refer the matter to the CNIL in France or any other local organization authorized to deal with this type of request. ARTICLE 8 - MINOR USERS The Website is not intended for minors under the age of eighteen (18) and SPO does not intentionally collect personal data from them. If personal data relating to minors is accidentally collected, SPO will endeavor to delete it as soon as possible.

ARTICLE 9 - CHANGES TO THE PRIVACY POLICY

We may update this Privacy Policy at any time to adapt it to our possible new practices and service offerings. In this case, the date of update of the Privacy Policy will be updated and will indicate the day on which the changes were made. It is your responsibility to check for any updates to this Privacy Policy posted on the Website.

ARTICLE 10 - LINKS TO THIRD PARTY SITES

While browsing the Website, the User may see content that contains links to third-party websites. SPO cannot access or control Cookies or other functions used by third party websites, and the procedures of these external websites are not governed by our Privacy Policy. Consequently, it is the User's responsibility to contact and/or consult these third parties directly to obtain additional information regarding their procedures for the protection of their personal data.

ARTICLE 11 - CONTACT SPO

If the User has any questions or comments regarding this Privacy Policy, we may be contacted at any time via the following means:

By mail at the following address Customer Service VUARNET - SPOROPTIC POUILLOUX - 29 RUE TAITBOUT - 75009 PARIS, indicating your name, first name, address, email and if possible the customer reference in order to process your request in a timely manner.

By email at the following address: web@vuarnet.com. By phone by contacting us at +33 1 46 85 28 24 from Monday to Friday from 9am to 6pm.