General terms of use, Confidentiality Policy and legal notice

The purpose of the present General Terms of Use (hereinafter "CGU") and Confidentiality Policy is to define the terms and methods used by Company MULTIPASS (hereinafter "WONDERBOX") to let the Partners use a space (Partner Site and/or Application) dedicated to performance of the Services stipulated in the contract signed with WONDERBOX (hereinafter the "Contract").

Consequently, all use of the Partner Site or of the Application by a Partner implies its full and unreserved acceptance hereof, and these presents shall take precedence over all other documents, subject to special terms expressly granted in writing by WONDERBOX.

The present CGU and the Confidentiality Policy come into force on ………………...2018. They cancel and replace all prior versions.

WONDERBOX reserves the right to amend these presents at any time, by publishing a new version on the Partner Site and on the Application.

If a clause is found to be invalid this shall not render the entire CGU and Confidentiality Policy invalid. Temporary or permanent non-application of one or more clauses by WONDERBOX may not be deemed equivalent to a waiver thereof by it.

• The Wonderbox group Partners application is an application dedicated to the Partners (hereinafter the "Application") which enables you:
• To validate your gift tokens and e-tickets
• To check whether the cheque is valid, and the box or offer to which it corresponds
• To enter all reservation data (client's date, surname, first name, email and telephone number)
• To scan your cheques and ask for reimbursement of them
• To view and manage your reservations
• To make a search on a cheque no. or the name of a client

The site www.wonderbox.com (hereinafter the "Partner Site") enables you:

• To undertake all the operations available on the Application, except for scans of your cheques for the purposes of obtaining reimbursement
• To monitor the statuses of your payments;
• To download your invoices;
• To view your offers, the boxes in which they appear, and also your photographs. You can also make new ones to Wonderbox;
• To view satisfaction-related data;
• To follow news;
• To view or modify your information, such as contact addresses, billing address, location of services and opening times.

Access to the Partner Site and to the Application is reserved for Partners which have signed a Contract with WONDERBOX (hereinafter a "Partner").

Access to the Partner Site, and use of it, are reserved for authorised persons within the Partner, for use which relates strictly to performance of the services as defined in the Contract. Partner Site data cannot be used for purposes other than those defined in the Contract.

For the purpose of satisfactory management of the Partner Site and the Application WONDERBOX may at any time:

• suspend, interrupt or restrict access to all or part of the Partner Site or the Application;
• delete all information which may disrupt its operation, or which contravenes national or international laws;
• suspend the site in order to apply updates.
• Optimise the Application, by means of updates which the Partner must download.

On the Partner Site you have the option of replying to Client opinions. WONDERBOX reserves the right not to publish your reply if it contains one of the following types of content, or if it breaches other internal directives:

• Obscenities, discriminatory language or other forms of language which are unfit for a public forum
• Advertisements, "spam" content
• Names of establishments or owners, email addresses or website addresses, telephone numbers, physical addresses or other forms of contact details
• Critical or malicious opinions directed at other opinions or replies published on our site, or concerning their authors.
• Libellous comments concerning Wonderbox, your partnership, your offers and your contract, or any mention of a complaint pending processing by ourselves

Partners are free at all times to share their opinions or to enter into dialogue with WONDERBOX relating to the partnership, the offers and the Contract, or a pending complaint. To do so Partners are requested to contact WONDERBOX directly at 01 70 55 49 76, from Monday to Saturday, from 8 AM to 7 PM, or by email at the following address: partenaires@wonderbox.fr.

On the Partner Site, and the Application, the Partner records a Gift Voucher when a reservation is requested. When they do so the Partner can supply information on the bearer of the Gift Voucher (hereinafter the "Beneficiary"), to identify them and to improve management of the reservation. The form provided contains fields relating to the Beneficiary's identity, and also, in the case of the Partner Site, a free field for the Partner's personal notes. None of this information is mandatory to register the reservation, except for the Beneficiary's email address.

The Partner is liable for the content of personal notes. It undertakes not to use excessive, insulting or discriminatory language. The sole purpose of personal notes is to improve tracking of Beneficiaries. This notes must be objective, and must relate to the service delivered by the Partner. They must not be detrimental to the Beneficiary's reputation or honour. It is the responsibility of the Partner completing these personal notes to act such that their employees do indeed observe these rules.

WONDERBOX reserves the right to delete all personal notes which do not comply with these stipulations.

To log on to the Partner Site or to the Application you are given a password. You are responsible for keeping your password confidential, and you undertake to communicate it only to persons duly for performance of the Contract.

WONDERBOX may not be held liable in the event of a failure, malfunction, difficulty or interruption of operation making it impossible to log on to the Partner Site and the Application or to use one of its functions.

The equipment used for logging on to the Partner Site, or the Application, used by you is your sole responsibility. You must take all appropriate measures to protect your equipment and your own data, in particular from Internet-based virus attacks.

WONDERBOX is not liable for damage caused to yourself, third parties and/or to your equipment as a consequence of you logging on to or using the Partner Site or the Application. The Partner waives the right to take any action against WONDERBOX as a consequence thereof.

If a procedure for amicable settlement or legal proceedings were to be brought against WONDERBOX due to an incorrect use of the Partner Site, or the Application, by a Partner, WONDERBOX shall then be able to make a claim against this Partner to obtain compensation for all losses, sums, adverse judgements or costs resulting from such proceedings.

In its capacity of entity responsible for processing WONDERBOX SAS cares about, and attaches great importance to, protection of any personal data which may be processed in connection with its activity. It ensures that it is processed in compliance with the computing and freedom law of 6 January and with European Regulation 2016/679 from the time when it comes into force (hereinafter the "Regulation").

The aim of the present Policy is to provide information on the processes used on personal data which you supply to us in connection with performance of your Contract.

Personal data which may be collected on the Partner Site, or the Application, is collected and used by WONDERBOX for performance of the Contract pursuant to article 6 section 1 b) of the Regulation.

The personal data which may be processed is as follows: (i) Surname, first name, postal address, telephone no.; (ii) date of birth, IP address.

It is intended for use by Wonderbox SAS and all companies which it controls, and also for WONDERBOX's subcontractors. It may be transferred to subcontractors located within the EU or outside it. In the case of data transferred outside the EU, WONDERBOX has established and provides the appropriate guarantees referred to in article 46. 2) point c) of the Regulation

This data (i) is required to allow performance of the Contract. If this data is missing this will make performance of the Contract impossible. Conversely, data (ii) is optional.

Personal data relating to you is kept for 5 years, from the end of the contractual relationship (article L110-4 of the Commercial Code).

You have a right to view, rectify and delete data relating to you, and a right to data portability over such data, and also a right to object to, or to restrict, processing of it. If you wish to exercise these rights you can write to: MULTIPASS, Service Relation Partenaires, 71 rue Desnouettes, 75015 PARIS or use the online form which can be found on the Partner Site in the tab "Contact us". You also have the right to make a complaint to a supervisory authority. Collected data shall not be used to establish an automated decision-making system.

You undertake to inform the beneficiaries thereof at the latest when collecting it.

• to enable you to identify the Beneficiary and to improve your management of performance of the services stipulated in the Contract
• to enable us to carry out satisfaction surveys with the Beneficiaries after the service has been performed

You must enter the personal data of Beneficiaries. This data is optional, except for the Beneficiary's email address, which is mandatory. This data is recorded by you on the Partner Site:

Improved reservation

Data entered in this manner enables you to identify the Beneficiary and improve your management of performance of the services described in the Contract, pursuant to article 6 section 1 b) of the Regulation.

Pursuant to article 5 section 1 b) of the Regulation, you undertake not to process this data subsequently for an incompatible purpose.

The processed data consists of the Beneficiary's title, surname, first name, email address and telephone, and the Partner's personal notes.

The data which you enter enables us to conduct satisfaction surveys with the Beneficiaries after the service has been performed, pursuant to article 6 1) f) of the Regulation, i.e. WONDERBOX's legitimate interest. We undertake this processing to audit the services. This processing is also occasional, relating to the performed service, and strictly limited to a request for an opinion after the activity.

The processed data is the Beneficiary's email address.

This data is intended for use by Wonderbox SAS and all companies which it controls, and for WONDERBOX's subcontractors. It may be transferred to subcontractors located within the EU or outside it. In the case of data transferred outside the EU the entity responsible for processing has established and provides the appropriate guarantees referred to in article 46. 2) point c) of the Regulation.

This data is kept for 3 years from the end of the commercial relationship for the clients, pursuant to simplified CNIL standard no. NS-048.

Personal data shown on the Partner Site or the Application cannot be used for purposes other than those defined in the Contract, and in particular not for any form of commercial solicitation to which the person in question has not previously consented in a free, specific and informed manner as part of an affirmative act.

When the Beneficiaries express a request to exercise their rights (viewing, rectification, etc.) you must send these requests, on receipt, to Wonderbox using the form provided under the tab "Help and Contact" on wonderbox.fr.

You must guarantee the confidentiality of the personal data processed by your intermediary. This being so, you must ensure that:

• the persons authorised to process the personal data in your establishment under the Contract:
  • Undertake to observe confidentiality, or are subject to an appropriate legal obligation of confidentiality
  • Receive the necessary training on protection of personal data
• access to the data shall be limited to persons who have appropriate authorisation and a legitimate requirement relating to their position to view it, use it and process it
• all information systems, devices and networks are operating correctly and securely (art 32 of the Regulation).

In any event, none of this data may be transferred to a third party.

You must immediately inform WONDERBOX of any violation of personal data, at the following address: dpo@wonderbox.com. The notification must include the information enabling WONDERBOX to implement the obligations described in article 33 and 34 of the Regulation.

As a matter of principle we ensure that personal data is not transferred outside the European Union or to a country which has not been subject to a decision on adequacy by the European Commission. However, in implementing the service certain service-providers may transfer certain data outside the European Union.

In such cases WONDERBOX gives the appropriate guarantees pursuant to article 46. 2. d) of the Regulation, using standard contractual clauses of the European Commission.

In application of article 13.1 f), the appropriate guarantees are shown at www.wonderbox.fr, in the Confidentiality Policy.

This function can inform you of the status of your Internet connection, via 3G/4G/Wifi.

You will then receive alert messages informing you that "you are outside any wifi/3G/4G network".

By using the Wonderbox group Partners application you also give authorisations allowing:

• notification to be given when the phone has finished starting up, in order that the application is able to start at phone start-up
• an Internet connection to be made
• photographs of gift vouchers that you have taken with the phone to be recovered
• information pushes to the application.

A cookie is a text file placed in your computer when visiting a site or viewing an advert. It is intended to collect data relating to your browsing, and to send you appropriate services to your terminal (computer, mobile or tablet). Most sites in the world use cookies to operate correctly, and to improve their functions. Cookies are managed by your Web browser.

There are several categories of cookie:

• Cookies which are required to enable key features of the site. These are automatically activated when you use a website.
• Functional cookies, which activate additional functions, such as saving preferences and analysing how a website is used.
• Cookies which may be placed for advertising purposes.

When you use our application for the first time a unique authentication key is placed in your device. It enables you to log on automatically thereafter, as soon as our application is opened, so that you do not have to authenticate yourself each time.

If you wish to log out of our application you can click the "logout" button, which can be accessed using the "Plus" button at the bottom of the application.

When viewing the Partner Site cookies are placed on your computer, mobile or tablet. Our site is designed to be responsive to Partners' requirements and expectations. This is one of the reasons that we make use of cookies, for example to identify you and to access your account.

Partner Site cookies: these are cookies placed by wonderbox.fr on your terminal to meet requirements for browsing, optimisation and customisation of services on the Partner Site.

Third-party cookies: these are cookies placed by third-party companies (for example partners) to identify your areas of interest and, possibly, to customise advertisements which are sent to you on and outside our site.

They can be placed when you browse on the Partner Site or when you click in the advertising spaces of the Partner Site. As part of the partnership we ensure that the partner companies strictly comply with the regulations relating to personal data, and undertake to implement appropriate security measures and measures to protect data confidentiality.

You can choose to deactivate these cookies at any time. Your browser can also be configured to inform you when cookies are placed in your computer, and to ask you whether or not to accept them.

You can access or refuse cookies on a case-by-case basis, or refuse all cookies.

You should be aware that configuration may modify your conditions for access to our contents and services requiring use of cookies.

Internet Explorer: In Internet Explorer, click the Tools button and then Internet Options. Under the General tab, under Browsing History, click Settings. Click the Display Files button.

Firefox: Go to the browser's Tools tab and then select the Options menu. In the window which is displayed choose Private Life and click Display Cookies.

Safari: In your browser choose the menu Edit > Preferences. Click Security. Click Display Cookies.

Google Chrome: Click the Tools menu icon. Select Options. Click the Advanced Options tab and go to the Confidentiality section. Click the button Display Cookies.