Privacy Statement

1. Purpose

The purpose of this Privacy Statement is to inform you about how WeKady collects and processes your personal data when you browse our website, when you contact us (in particular via the form) and, more generally, when you interact with our online services.

Principle.We only collect data that is necessary, for specific, explicit and legitimate purposes, and we implement measures designed to ensure its confidentiality, integrity and availability.

2. Data controller

The data controller is the companyWeKady(hereinafter “WeKady”). Detailed identification information is available in our legal notice, accessible on the website.

For any questions relating to data protection, you can contact us at:contact@wekady.com.

Where the appointment of a Data Protection Officer (“DPO”) is applicable, their contact details will be provided on this page or in the legal notice.

3. Data processed

Depending on how you use the website, we may process in particular:

• Identification and contact data: last name, first name, email address, phone number (if provided).
• Content of communications: message, possible attachments, information provided as part of a request.
• Technical data: IP address, information relating to your browser and device, logs and browsing data, subject to your device configuration and your cookie choices.

We invite you not to transmit, via free-text fields, sensitive data within the meaning of Article 9 of the GDPR (health data, opinions, etc.). If you do provide such data, you do so on your own initiative and under your responsibility.

4. Purposes and legal bases

The processing carried out is based on one of the legal bases provided for in Article 6 of the GDPR. In summary:

4.1 Responding to your requests (form / email / phone)

• Purpose: handle your requests for information, demonstrations, pre-orders, support, and follow up on our communications.
• Legal basis: WeKady’s legitimate interest in managing relationships with its contacts (Article 6.1.f) and/or pre-contractual measures (Article 6.1.b) when your request is part of a purchasing process.

4.2 Order management and contract performance (if applicable)

• Purpose: process and fulfil orders, deliveries, invoicing, after-sales service.
• Legal basis: performance of the contract (Article 6.1.b) and legal obligations (Article 6.1.c), in particular accounting and tax obligations.

4.3 Website improvement, security and fraud prevention

• Purpose: ensure website operation, improve quality, guarantee security, detect incidents and prevent abusive use.
• Legal basis: legitimate interest (Article 6.1.f); and, where required, legal obligations (Article 6.1.c).

4.4 Audience measurement and non-essential cookies (if enabled)

• Purpose: measure audience, understand website usage and optimise the experience.
• Legal basis: your consent (Article 6.1.a), where required by regulations.

4.5 Marketing / newsletter (if offered)

• Purpose: send you communications (news, offers, events) if you consent or where regulations allow it.
• Legal basis: consent (Article 6.1.a) and/or legitimate interest (Article 6.1.f) depending on the case (e.g., existing relationship and similar products/services, subject to your rights and opt-out).

Important.When processing is based on consent, you can withdraw it at any time (without affecting the lawfulness of processing carried out before withdrawal).

5. Data recipients

Your personal data may be accessible, within the limits of their responsibilities, to the following categories of recipients:

• authorised internal WeKady teams;
• our technical service providers (hosting, maintenance, email, audience measurement tools, etc.), acting as processors within the meaning of Article 28 of the GDPR;
• where applicable, our logistics and payment partners as part of fulfilling an order;
• administrative or judicial authorities where required by law or to defend our rights.

We require our processors to provide appropriate security and confidentiality guarantees, and a contractual commitment compliant with the GDPR.

6. Transfers outside the European Union

To the extent that certain service providers may process data outside the European Union, WeKady implements appropriate safeguards in accordance with Articles 44 and following of the GDPR (for example, adequacy decision, Standard Contractual Clauses of the European Commission, additional measures if necessary).

Information relating to applicable transfers (where relevant) can be provided upon request viacontact@wekady.com.

7. Retention periods

We retain your data for periods proportionate to the purposes pursued, then we delete, anonymise or archive it in an intermediate archive where justified (in particular to meet legal obligations or for dispute management).

• Requests via form / email: time necessary to process the request, then limited retention for follow-up and relationship management.
• Contractual relationships (if applicable): for the duration of the contract, then archiving according to legal retention periods (e.g., accounting/tax obligations) and limitation periods.
• Logs and security: limited and proportionate duration for security and incident investigation purposes.
• Cookies: depending on the category, for a maximum duration compliant with current recommendations; details are provided below.

Reference.Exact retention periods may vary depending on the nature of communications, applicable legal obligations and CNIL recommendations.

8. Security and confidentiality

WeKady implements appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration or destruction (Article 32 of the GDPR), including:

• access control and authorisations;
• securing environments and communications (where available, encryption in transit);
• logging and monitoring measures for security;
• incident management procedures and, where applicable, GDPR notifications.

As no system is completely invulnerable, we continuously improve our security measures, taking into account the state of the art, implementation costs and risks.

9. Cookies and trackers

Cookies and similar technologies may be placed or read on your device when you visit the website, subject to your choices.

9.1 Strictly necessary cookies

These cookies are essential for the website to function and to provide services expressly requested. They are generally not subject to consent.

9.2 Audience measurement cookies (subject to consent where required)

They help us understand website usage (pages viewed, time spent, errors) and improve performance. Their placement may be subject to your consent depending on their configuration.

9.3 Personalisation cookies

They allow the display and experience to be adapted to your preferences (e.g., language), where this feature is offered.

9.4 Marketing cookies

They are intended to offer you relevant content and/or measure campaign effectiveness, where applicable. They generally require your consent.

Manage your choices.You can set your preferences via your browser settings. Where the website provides a consent management module, you can also change your choices at any time via that module.

10. Your rights

In accordance with the GDPR and the French Data Protection Act, you have, subject to the conditions and limits provided, the following rights:

• Right of accessto your data;
• Right to rectificationif your data is inaccurate or incomplete;
• Right to erasure(“right to be forgotten”) in the cases provided;
• Right to restrictionof processing;
• Right to objecton grounds relating to your particular situation, and objection to marketing;
• Right to data portabilityfor data provided where processing is based on consent or contract and carried out by automated means;
• Right to withdraw your consentat any time where processing is based on consent;
• Right to define instructionsregarding what happens to your data after your death (French law).

To exercise your rights, contact us at:contact@wekady.com.

For security reasons, proof of identity may be requested in case of reasonable doubt about the requester’s identity. We undertake to respond within the time limits provided by the GDPR.

11. Complaint to the CNIL

If you believe, after contacting us, that your rights are not being respected, you can lodge a complaint with the French supervisory authority:

CNIL— Commission Nationale de l’Informatique et des Libertés
3 Place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07
https://www.cnil.fr

12. Minors

Our services are not intended for minors. If you are a parent or legal guardian and believe that a minor has provided us with personal data, you can contact us so that we can review the situation and, where appropriate, delete the data concerned.

13. Updates to this statement

We may update this statement, in particular in the event of regulatory, technical or organisational changes. The date of the last update appears at the top of the page.

14. Contact

For any questions relating to this statement or to your personal data, you can contact us:

• by email:contact@wekady.com
• via the form:/golf/en/contact.html