PRIVACY POLICY

Updated July 2, 2022

1. Parties and Purpose

Tahiti S.P.R.L. (hereinafter "Manimini" or the "Data Controller")
Rue de L'Hotel des Monnaies 47, 1060 Saint-Gilles, Brussels, Belgium
ECB / VAT: BE0598994794
Register of legal persons: Brussels
Email: tahiti.brxl@gmail.com
Phone: +3225394727

Manimini establishes this Privacy Policy, the purpose of which is to inform

full transparency for Users of the website hosted at the following address:

www.manimini.be, (hereinafter the "Site"), of the manner in which personal data

are harvested and processed by Manimini.

The term "User" refers to any user, i.e. any natural person

or legal entity, who visits or interacts in any way with the Site.

As such, Tahiti S.P.R.L. determines all the technical, legal and organizational means and purposes of the processing of Users' personal data. Tahiti S.P.R.L. undertakes to this end to take all the necessary measures to guarantee the processing of personal data in accordance with the law of July 30, 2018, relating to the protection of natural persons with regard to the processing of personal data (hereinafter , "the Law") and the European Regulation of 26 April 2016 on the protection of personal data with regard to the processing of personal data and on the free movement of such data (hereinafter the "Regulation") ).

Tahiti S.P.R.L. is free to choose any natural or legal person who processes the personal data of users at his request and on his behalf (hereinafter the "Subcontractor"). Where applicable, Tahiti S.P.R.L. undertakes to select a Subcontractor offering sufficient guarantees as to the technical and organizational security measures for the processing of personal data, with regard to the Law and the Regulations.

2. Processing of personal data

The use of the Site (online store) by Users may result in the communication of personal data. The processing of this data by Tahiti S.P.R.L., in its capacity as Data Controller, or by service providers acting in the name and on behalf of TAHITI S.P.R.L., will comply with the Law and the Regulations.

Personal data will be processed by TAHITI S.P.R.L., in accordance with the purposes mentioned below, via:

an automated procedure, the newsletter registration form; the use of cookies; sending surveys or questionnaires, sharing free content.

Processors. Tahiti sprl uses suppliers who process personal data only on behalf of tahiti sprl. providers providing hosting services, accounting services, providing marketing systems, online store traffic analysis systems, marketing campaign effectiveness analysis systems,

Administrators. Tahiti sprl uses suppliers who do not act solely on instructions and themselves set the purposes and methods of use of customers' personal data. They provide electronic payment and banking services.

Personal customer data is stored:

If the basis for the processing of personal data is consent, the Customer's personal data is processed by Tahiti sprl until the revocation of consent, and after revocation of consent for a period corresponding to the limitation period for claims that may be brought by TAHITI S.P.R.L. and who might oppose him. Unless otherwise provided, the limitation period is six years, and for claims for periodic benefits and claims related to running a business - three years. If the basis of the data processing is the execution of the contract, then the personal data of the Customer are processed by Tahiti sprl for as long as necessary for the execution of the contract, and beyond for a period corresponding to the limitation period for complaints. . Unless otherwise provided, the limitation period is six years, and for claims for periodic benefits and claims related to running a business - three years.

In case of purchase in the Online Store, personal data may be transferred, according to the Customer's choice, to the following entities in order to deliver the ordered goods: Delivery company, BPost, InPost, If the customer chooses payment via PayPal , his personal data is transferred to the extent necessary for payment to PayPal (EUROPE) S. à r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449 Luxembourg,

Browsing data may be used to provide better service to customers, analyze statistical data and adapt the online store to customer preferences, as well as to administer the online store. Tahiti S.P.R.L. will send electronic messages to his e-mail address or text messages (SMS) to a mobile phone, containing commercial information on promotions and new products available in the store.

If requested by Tahiti S.P.R.L. provides personal data to authorized state authorities, in particular to the organizational units of the prosecutor's office, the police, the president of the Office for Personal Data Protection, the president of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.

3. Purpose of processing personal data

In accordance with Article 13 of the Regulations, the purposes of the processing of personal data are communicated to the User and are as follows:

Processors. Tahiti sprl uses suppliers who process personal data only on behalf of tahiti sprl. providers providing hosting services, accounting services, providing marketing systems, online store traffic analysis systems, marketing campaign effectiveness analysis systems,

By Administrators. Tahiti sprl uses suppliers who do not act solely on instructions and themselves set the purposes and methods of use of customers' personal data. They provide electronic payment and banking services.

Customers' personal data is stored: If the basis for processing personal data is consent, the Customer's personal data is processed by Tahiti sprl until consent is revoked, and after consent is revoked for a period corresponding to the period limitation of claims that may be brought by tahiti sprl and which could be opposed to it. Unless otherwise provided, the limitation period is six years, and for periodic service claims and claims related to running a business - three years. If the basis for data processing is the performance of the contract, then the Customer's personal data is processed by Tahiti sprl for as long as necessary for the performance of the contract, and beyond that for a period corresponding to the limitation period for complaints. Unless otherwise provided, the limitation period is six years, and for claims for periodic benefits and claims related to running a business - three years.

In case of purchase in the Online Store, personal data may be transferred, according to the Customer's choice, to the following entities in order to deliver the ordered goods: Delivery company, BPost, InPost, If the customer chooses payment via PayPal , his personal data is transferred to the extent necessary for payment to PayPal (EUROPE) S. à r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449 Luxembourg,

Browsing data may be used to provide better service to customers, analyze statistical data and adapt the online store to customer preferences, as well as to administer the online store. Tahiti S.P.R.L. will send electronic messages to his e-mail address or text messages (SMS) to a mobile phone, containing commercial information on promotions and new products available in the store.

If requested by Tahiti S.P.R.L. provides personal data to authorized state authorities, in particular to the organizational units of the prosecutor's office, the police, the president of the Office for Personal Data Protection, the president of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.

4. Personal data likely to be processed

The User agrees, when visiting and using the Site, that TAHITI S.P.R.L. collects and processes, according to the methods and principles described in this Privacy Policy, the following personal data:

________

5. Consent

By accessing the Site and using it, the User declares to have read and given his free, specific, informed and unambiguous agreement to the processing of personal data concerning him. This agreement covers the content of this Privacy Policy.

Consent is given by the positive act by which the User has ticked the box proposing the Privacy Policy in hypertext link. This consent is an essential condition to carry out certain operations on the Site or to allow the User to enter into a contractual relationship with TAHITI S.P.R.L. Any contract binding TAHITI S.P.R.L. and a User relating to the services and goods offered on the Site is subject to the acceptance of the Privacy Policy by the User.

The User agrees that the Data Controller processes and collects, in accordance with the terms and principles included in this Privacy Policy, his personal data that he communicates on the Site or on the occasion of the services offered by TAHITI. S.P.R.L., for the purposes indicated above.

The User has the right to withdraw his consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on the consent previously given.

6. Duration of retention of Users' personal data

In accordance with Article 13 §2 of the Regulation and of the Law, the Data Controller only stores personal data for the time reasonably necessary to enable the fulfillment of the purposes for which they are processed.

This duration is in all cases less than: 2 years

7. Recipients of data and disclosure to third parties

Personal data may be transmitted to employees, collaborators, subcontractors or suppliers of Tahiti S.P.R.L. which offer adequate data security guarantees, and which collaborate with TAHITI S.P.R.L. in the context of the marketing of products or the provision of services. They act under the direct authority of TAHITI S.P.R.L., and are notably responsible for collecting, processing or sub-contracting this data.

In all cases, the recipients of the data and those to whom this data has been disclosed comply with the content of this Privacy Policy. TAHITI S.P.R.L. ensures that they will process this data only for the intended purposes, in a discreet and secure manner.

In the event that the data is disclosed to third parties for direct marketing or prospecting purposes, the User will be informed beforehand so that he can express his consent to the use of this personal data.

8. User Rights

At any time, the User may exercise his rights by sending a message by e-mail to the following address: tahiti.brxl@gmail.com, or a letter by post addressed, attaching a copy of his identity card at the following address: Rue de L'Hotel des Monnaies 47, 1060 Saint-Gilles, Brussels, Belgium

a. Permission to access

In accordance with Article 15 of the Regulations, TAHITI S.P.R.L. guarantees the User's right of access to their personal data. The User has the right to obtain access to said personal data as well as the following information:

• the purposes of the processing;

• the categories of personal data concerned;

• the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular recipients who are established in third countries or international organisations;

• where possible, the envisaged retention period of the personal data or, where this is not possible, the criteria used to determine this period;

• the existence of automated decision-making, including profiling, referred to in Article 22, paragraphs 1 and 4 of the Regulation, and, at least in such cases, useful information concerning the underlying logic, as well as that the significance and intended consequences of such processing for the data subject

The Data Controller may require the payment of a reasonable fee based on administrative costs for any additional copies requested by the User.

When the User submits this request electronically (via the e-mail address for example), the information is provided in a commonly used electronic form, unless the User requests otherwise. .

The copy of his data will be communicated to the User no later than one month after receipt of the request.

b. Right of rectification

TAHITI S.P.R.L. guarantees the right of rectification and erasure of personal data to the user.

In accordance with Article 16 of the Regulations, incorrect, inaccurate or irrelevant data may be corrected or deleted at any time. The User first carries out the necessary modifications himself from his user/other account, unless these cannot be carried out independently, in which case the request can be made to TAHITI S.P.R.L.

In accordance with Article 19 of the Regulation, the Data Controller notifies each recipient to whom the personal data has been communicated of any rectification of the personal data, unless such communication proves impossible or requires disproportionate effort. The data controller provides the data subject with information about these recipients if the data subject so requests.

c. Right to erasure

The User has the right to obtain the erasure of his personal data as soon as possible in the cases listed in Article 17 of the Regulations.

When the Data Controller has made the personal data public and is required to erase them under the previous paragraph, the Data Controller, taking into account the available technologies and the costs of implementation, takes reasonable measures , including of a technical nature, to inform other controllers who process this personal data that the data subject has requested the erasure by these controllers of any link to this personal data, or of any copy or reproduction thereof.

The two preceding paragraphs do not apply insofar as this processing is necessary:

• the exercise of the right to freedom of expression and information;

• to comply with a legal obligation which requires the processing provided for by Union law or by the law of the Member State to which the controller is subject, or to perform a task in the public interest or falling within the exercise of the official authority vested in the controller;

• the recognition, exercise or defense of legal rights

In accordance with Article 19 of the Regulation, the Data Controller notifies each recipient to whom the personal data has been communicated of any deletion of personal data or any limitation of the processing carried out, unless such communication proves impossible. or requires disproportionate effort. The data controller provides the data subject with information about these recipients if the data subject so requests.

d. Right to restriction of processing

The User has the right to obtain the limitation of the processing of his personal data in the hypotheses listed in article 19 of the Regulations.

In accordance with Article 19 of the Regulation, the Data Controller notifies each recipient to whom the personal data have been communicated of any limitation of the processing carried out, unless such communication proves impossible or requires disproportionate effort. The data controller provides the data subject with information about these recipients if the data subject so requests.

e. Right to data portability

In accordance with Article 20 of the Regulations, Users have the right to receive from TAHITI S.P.R.L. personal data concerning them in a structured, commonly used and machine-readable format. Users have the right to transmit this data to another controller without TAHITI S.P.R.L. obstruct it in the cases provided for by the Rules.

When the User exercises his right to the portability of data pursuant to the previous paragraph, he has the right to obtain that the personal data be transmitted directly from one controller to another, when this is technically possible.

The exercise of the right of data portability is without prejudice to the right to erasure. This right does not apply to processing necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller.

The right to data portability does not affect the rights and freedoms of third parties.

f. Right to object and automated individual decision-making

The User has the right at any time to oppose the processing of his personal data due to his particular situation, including the automation of data carried out by TAHITI S.P.R.L. In accordance with Article 21 of the Regulations, TAHITI S.P.R.L. will no longer process the personal data, unless there are legitimate and compelling reasons for the processing which prevail over the interests and the rights and freedoms of the User, or for the recognition, exercise or defense of legal rights.

When personal data is processed for prospecting purposes, the User has the right to object at any time to the processing of personal data concerning him for such prospecting purposes, including profiling to the extent where it is related to such prospecting.

When the data subject objects to the processing for prospecting purposes, the personal data will no longer be processed for these purposes.

g. Right of complaint

The User has the right to lodge a complaint concerning the processing of his personal data by TAHITI S.P.R.L. with the Data Protection Authority, competent for Belgian territory. Further information can be found on the website: https://www.autoriteprotectiondonnees.be.

The lodging of a complaint is made at the following addresses:

Data Protection Authority

Rue de la Presse 35, 1000 Brussels

Such. + 32 2 274 48 00

Fax. + 32 2 274 48 35

Email: contact@apd-gba.be

The User may also lodge a complaint with the court of first instance of his domicile.

9.Cookies

The Site uses cookies to distinguish Users of the Site. This makes it possible to provide Users with a better browsing experience and an improvement of the Site and its content. The purposes and methods of cookies are contained in this article.

a. General principles

A "Cookie" is a file placed temporarily or permanently on the User's hard drive during consultation of the Website, with a view to subsequent connection. Thanks to cookies, the server recognizes the User's computer.

Cookies can also be installed by third parties with whom TAHITI S.P.R.L. collaborate.

Some of the cookies used by TAHITI S.P.R.L. are necessary for the proper functioning of the Site, others improve the User's experience.

The User can personalize or deactivate cookies by configuring his browser.

By using the Website, the User expressly agrees to the management of cookies as described in this article.

b. Type of cookies and purposes pursued

Different types of cookies are used by TAHITI S.P.R.L. on the site :

• Technical cookies: they are necessary for the operation of the Website (online store), allow the communication of the data entered and are intended to facilitate the navigation of the User;

• Statistical and audience measurement cookies: these cookies allow User recognition and are used to count the number of Users of the Website (online store) over a certain period. Since they also indicate browsing behavior, they are an effective way to improve the User's browsing, by displaying proposals and offers likely to interest him. They also allow TAHITI S.P.R.L. to identify possible bugs on the Website (Online Store) and to correct them.

• Functional cookies: these cookies facilitate the use of the Website (online store) by retaining certain choices introduced (for example, user name or language);

• Tracking cookies: TAHITI S.P.R.L. uses tracking cookies via Google Analytics, to measure the interaction of Users with the content of the Site and to produce anonymous statistics. These statistics allow TAHITI S.P.R.L. to improve the Website (Online Shop). Google supports the explanation of these cookies at: http://www.google.nl/intl/en_uk/policies/privacy/

c. Cookie retention period

Cookies are kept for the time necessary to fulfill the intended purpose. The cookies likely to be stored on the User's hard drive as well as their retention period are as follows:

________

d. Cookie management

If the User does not want the Website (online store) to place cookies on his hard drive, he can easily manage or delete them by modifying his browser settings. The programming of the browser also allows the User to receive a notice or notification as soon as a Website uses cookies and thus decide to accept this, or to refuse it.