The Site:

https://ryaninteriorarchitecture.com

Publisher:

RYAN INTERIOR ARCHITECTURE (RIA), a French limited liability company EURL with a capital of 1,500 euros, whose registered office is located at 4 rue Rollin 75005 Paris - France. Registered under the Trade and Companies Register of Paris under n° 527 633 655. Represented by Ms Nathalie Ryan, in her capacity of President. Tel n°: +33 6 16 31 39 33 E-mail address: inquiry@ryaninteriorarchitecture.com

Director of publication:

Ms. Nathalie Ryan

Hosting service provider :

Squarespace Ireland Ltd. Le Pole House Ship Street Great Dublin 8, D08 N12C Ireland

Contact for customer support: https://support.squarespace.com

Intellectual property

The Site as a whole, as well as its components and contents constitute works protected by the laws in force on intellectual property, in particular the legislation relating to copyright and the rights of the producer of databases.

As such, any reproduction, disclosure, distribution, dissemination (including by creating a hypertext link), representation, modification, transcription, adaptation, translation, and more generally any use, on any medium whatsoever and by any process whatsoever, of all or part of the following elements, is strictly prohibited, except with the prior and express authorization of RIA

- the graphic elements, images, photographs, videos, texts, animated sequences with or without sound, presented on the Website

- the title, the form of the Site, its content, its organization

- any database and any software in source code or object code constituting and/or represented on the Site

- the domain name, trademarks, logos and slogans, graphic charters, names of products and services, downloadable documents, photographic representations, and all related distinctive signs

Any contravention of the provisions of this article constitutes an infringement and engages the civil and criminal liability of its author.

Responsibility

The consultation and use of the Site are under the sole responsibility of the User.

RIA does not guarantee that (i) the use of the Site will be uninterrupted or free of errors, (ii) that the defects of the Site will be corrected, (iii) that the Site will be free of viruses or other harmful elements, and (iv) that the use of the Site will not result in any loss of data.

RIA may take any measure necessary for the proper management of the Site. In particular, RIA may suspend, interrupt or limit access to all or part of the Site (e.g. in the context of a maintenance operation), or reserve access to the Site, or to certain parts of the Site, to a specific category of Users.

Finally, the Site may host links to third-party websites. The User acknowledges that RIA has no control over the content of these third-party sites and that access to these third party sites is the sole responsibility of the User.

Website Design:

Kurated, Anastasia Komnou, Ryan Interior Architecture

Photos:

Nathalie Ryan, David Patterson, David Marlow, Karim Daher, Bertrand Fompeyrine@BCDF Studio, Fabrice Rambert, Philippe Brazil, Oscar de la Renta, Zimmermann, Damien Boisson-Berçu, Francis Amiand, Gilles Pernet, Sparkling Press

Last update: 03/07/2022

This Privacy Policy sets out the way in which Ryan Interior Architecture, a limited liability company EURL with a capital of €1,500 euros registered in the Paris Trade and Companies Register under n° 527 633 655, whose registered office is located at 4 rue Rollin 75005 Paris - France represented by its president, Ms. Nathalie Ryan (hereinafter “RIA”), acting as data controller, is likely to collect, process and use the personal data that the user (hereinafter the « User ») of the website https://ryaninteriorarchitecture.com (hereinafter, the “Site”), provides to Ryan Interior Architecture through his/her visit of the Site.

RIA undertakes to process the User’s personal data in compliance with the applicable regulations, in particular with law no. 78-17 relating to information technology, files and freedoms of January 6, 1978, in its current version and with regulation (EU) 2016/679 of 27 April 2016, the so-called general data protection regulation “GDPR”.

RIA is available to provide any necessary clarification regarding its Data Protection Policy at the address indicated in article 9 of this Privacy Policy.

Article 1. Definitions

Personal Data or Data: refers to information, in any form whatsoever, relating directly or indirectly to an identified or identifiable natural person such as surname, first name, date of birth, information transmitted by this person, IP address, connection data.

Controller: means RIA, which, alone or jointly with others, determines the purposes and means of the processing of Personal Data.

Processor: refers to any company that processes Personal Data on behalf of the Controller.

User: refers to any Internet user, natural person of legal age accessing the Site.

Article 2. Processing of personal data

The use of the Site, access to some of its sections and/or any request for information or services from Users of the Site may result in the collection and/or any other processing of Personal Data.

The processing of such Personal Data will be carried out mainly by automated means and will be used for the purposes set out in Article 4 below. RIA takes appropriate measures to ensure that the Personal Data of Users is processed lawfully, securely and confidentially, and to prevent the loss, misuse, alteration and deletion of such Personal Data.

Article 3. Category and origin of Personal data that may be collected and processed by RIA

Browsing on the Site:

IP address, MAC address, time zone, country and language settings, day and time of consultation of the Site, services consulted and/or used, etc., operating system, the device from which the connection is made, its advertising identifier (ADFA), etc.

Newsletter Form:

(“Sign Up”, “Keep in Touch”) First and last name of User, email address of User (optional: geographic position)

Some Personal Data are compulsory, others are optional. Compulsory personal data is marked with an asterisk (*) on the form to be completed by the User.

Compulsory Personal Data is necessary for the execution of the requested service, and its absence will render the latter impossible. On the other hand, any lack of, partial or inaccurate information on optional personal data is without consequence.

The User undertakes to provide true, accurate and complete information.

The Site is not intended to contain so-called sensitive Personal Data (racial or ethnic origins, political, philosophical, or religious opinions, trade union membership, health status, genetic and biometric data). Users are solely responsible for the information they provide on these data.

As RIA never collects birth dates of Users, RIA can't identify the age of Users. But if RIA learns that it has collected the personal information of a child under 15, unless the holder of parental responsibility over the child provided verifiable consent, RIA will take steps to delete the information as soon as possible.

Article 4. Purpose and legal basis of personal data processing

The collection of Personal Data is intended in particular to optimize the management of the various relations between the Data Controller and the User.

More specifically, the processing of Personal Data meets the following purposes (non-exhaustive list):

Consent:

• Sending newsletters and promotional offers to Users

• Deposit of cookies and other tracers to personalize content and optimize the Site through audience measure. For more details visit the Cookie Policy that follows on this page.

Legitimate interest:

• Complaint management

Article 5. Recipients of Personal Data

The Data Controller applies strict security measures which ensure that the Personal Data it processes is only transmitted to persons authorized to have access to it internally, according to their respective authorizations. These persons are bound by an obligation of confidentiality.

The Data Controller may also use service providers, commercial and technical subcontractors, to whom the Personal Data may be transmitted or made accessible as Processor, in a temporary and secure manner, such as :

- Suppliers of software and maintenance providers; these services may sometimes have access to the data in order to carry out the tasks requested.

- Marketing agencies for the implementation of advertising, marketing, and sales campaigns.

Guarantees have been taken to ensure a sufficient level of protection of the Personal Data concerned with regard to the requirements of French and European regulations.

Article 6. Transfer of Personal Data to third countries

When the Data Controller needs to transfer Personal Data outside the European Union, in particular through its Processors, it does so only within the framework of specific contractual provisions that comply with the requirements of the competent supervisory authorities. For example, when a country of destination is not considered adequate by the European Commission, by means of a cross-border flow agreement that complies with the European Commission's standard contractual clauses concluded in order to govern the transfer of the Data and to ensure an adequate level of protection.

The Data Controller may also share the User's Personal Data with authorized third parties only if it is obliged to do so by virtue of its legal obligations or at the request of public authorities (e.g., judicial authorities) or in the context of a restructuring, reorganization, or transfer in any form and for any reason whatsoever (in particular, the sale of a business, dissolution, liquidation, merger etc.).

In any event, Personal Data will never be transmitted to third parties for commercial purposes, nor sold or exchanged, without the express consent of the User.

Article 7. Cookies

Cookies are small text files downloaded on the User’s computer - or any other terminal (eg smartphone, tablet, connected device, etc.) when the User accesses the Site.

For more information, the RIA Cookie Policy is accessible on this page.

Article 8. Security

Appropriate technical and organizational measures are implemented by RIA to ensure that the User’s Personal Data is processed in such a way as to guarantee its protection against loss, destruction or damage of accidental origin which could affect its confidentiality or integrity.

When it uses a service provider, the Data Controller only communicates the User’s Personal Data to such Processor after having imposed on it the respect of its own security principles.

Article 9. Users’ rights on their Personal Data

The User has the right to access, rectify or delete his/her Personal Data, the right to limit the processing of his/her Data, the right to portability of his/her Data and the right to object to the processing of his/her Personal Data, within the limits provided for by the regulations in force.

The User has also the right to define specific and general directives relating to the conservation, deletion, and communication of his or her Data after his death.

The User also has the right to withdraw his consent to the processing of his Personal Data at any time. Withdrawal of consent does not affect the lawfulness of the processing already carried out, based on the consent given prior to such withdrawal.

The Data Controller is able to respond to requests for the exercise of the rights of the data subjects throughout the processing, in compliance with the conditions and deadlines established by the applicable regulations.

All of these rights and, more generally, any additional question relating to the use of the User’s Personal Data by RIA can be exercised by sending:

- An e-mail to the following address: inquiry@ryaninteriorarchitecture.com, or by

- An ordinary post mail to the following address: Ryan Interior Architecture, 4 rue Rollin 75005 Paris – France.

This correspondence must be accompanied by:

- a mention of the User’s first and last name.

- a postal or electronic address to which the User wishes the reply to be sent.

- a copy of both sides of the User’s identity card so that RIA can identify the User with certainty.

If the User feel that his/her rights have not been respected, he/she has the right, independently of any recourse in the context of an administrative or judicial procedure, to lodge a complaint with the competent supervisory authority, the Commission Nationale de l’Informatique et des Libertés (CNIL) at www.cnil.fr.

Article 10. Duration of retention of personal data

In accordance with the legal requirements imposed by the applicable regulations, RIA keeps Users’ Personal Data only for as long as is reasonably necessary to fulfil the purposes for which they are processed. Such duration of retention may be, where applicable, extended by a period of archiving corresponding to the period for applicable liability claim(s).

For example, the Users’ Personal Data:

- Used for the newsletter management processing may be kept for a period of three (3) years from the last contact between the User and the Data Controller (subscription to the newsletter, a click in a newsletter or the opening of a newsletter) unless the latter objects.

- Used for the requests management processing, may be kept for a period of 18 months from the date of the request.

It is specified that the Users’ Personal Data may be kept in an archive in order to allow RIA to constitute evidence in the event of claim or litigation during the limitation period in civil and commercial matters which is five (5) years.

Article 11. Changes to the privacy policy

RIA reserves the right to modify this Privacy Policy at any time in order to comply with applicable regulations or in order to adapt it to its practices and their evolution.

Therefore, the User is invited to consult this Privacy Policy regularly in order to be aware of any changes and adaptations.

This Cookies Policy defines the way in which Ryan Interior Architecture, a French EURL limited liability company with a capital of 1,500 euros registered in the Paris Trade and Companies Register under the number 527 633 655, whose registered office is located at 4 rue Rollin 75005 Paris - France represented by its president, Ms. Nathalie Ryan (hereinafter "RIA"), is likely to deposit information on the terminal of a user (hereinafter "the User") or to collect information on their terminal, when the user arrives on the site https://ryaninteriorarchitecture. com (hereinafter, the "Site"), and during their navigation on the latter.

Article 1 - What is a cookie?

A cookie is a small text file that is deposited on the User's terminal (computer, tablet or any other internet connected device) when he/she arrives on the Site.

When a User visits the Site, a cookie sends information to RIA and/or one of its partners about this User (such as a session identifier or the choice of a language) for a specific purpose (see art. 2 below).

For convenience, the term "cookie" will also cover other technologies (tag, pixel, SDK, etc.) in the context of this Policy (hereinafter the "Cookie(s)").

Only the issuer of a Cookie can read or modify the information contained in the Cookies.

The use of these technologies requires that the Users be informed and, for certain uses (Purposes), that their express consent be obtained.

The present Cookies Policy is part of this information so that the User can express his choice in an informed manner.

Article 2 - What types of Cookies does the Site use ?

Two (2) main categories of Cookies may be used:

1. Cookies strictly necessary for the operation of the Site.

These Cookies ensure the normal operation of the Site and as such cannot be deactivated.

However, these Cookies can be blocked by the User's browser settings. In such a case, the operation of the Site or some of its features may be altered.

Crumb/Cookie/Session

Prevents cross-site request forgery (CSRF). CSRF is an attack vector that tricks a browser into taking unwanted action in an application when someone is logged in.

ss_cookieAllowed/Cookie/30 days

Remembers if a visiter agreed to placing analytics cookies on their browser if a site is restricting the placement of cookies.

2. « Analytics » cookies.

These cookies allow RIA to distinguish Users and to measure the number of visits and the use of the various pages and sections of the Website (number of visits, pages viewed, the path taken by Users on the Website, frequency of return to the Website, etc.) in order to improve its content and its service offer.

The activation of this functionality requires express consent.

ss_cvr

- consent and data retention period for two years

- Identifies unique visitors and tracks a visitor’s sessions on a site.

ss_cvt

- consent and data retention period for two years

- Identifies unique visitors and tracks a visitor’s sessions on a site.

RIA reserves the right to periodically review the above-mentioned retention periods.

ARTICLE 3 - How to manage Cookies?

The User has several options to manage cookies.

On the first visit to the Site, a banner informs the User of the presence of these Cookies and invites him to indicate his choice. They will only be deposited if the User accepts them.

The User may at any time choose to change his/her acceptance of these Cookies by modifying his/her browser. The modification consists of simply deleting the ss_cookieAllowed, which will redirect the cookie permission popup to reappear on the next visit to the website.

Please note, the configuration of each browser is different. It is described in the help menu of the browser concerned. As an example, here is a link to the main browsers listed below.

Internet Explorer™

Safari™

Chrome™

Firefox™

Opera™

However, RIA draws the User's attention to the fact that by setting their browser to refuse Cookies, certain functionalities, pages, or areas of the Website may not be accessible, for which RIA cannot be held responsible.

ARTICLE 4 - More information?

For more information on cookies, click here to consult the CNIL website (in French).

For more information on the processing of personal data by RIA on its Website, its Data Protection Policy is available for review under the Privacy Policy found on this page.

ARTICLE 5 - Modification of the Cookies Policy

In order to improve its services, RIA may modify the present Cookie Policy, for example in case of the implementation of new technologies or the launch of new services or according to the evolution of the applicable Data Protection Regulations.

When necessary, the User's consent will be obtained through the Cookie banner if required.