YAARZ EVENT Privacy Policy

V4 - September 11, 2026

This Personal Data Protection Policy (the "Privacy Policy") informs you how your personal data is processed in connection with your use of the www.yaarz.io platform and the YAARZ mobile application (together, the "Site").

In accordance with applicable regulations, the purpose of this Privacy Policy is to inform you about the collection, use, and more broadly the processing we carry out on your personal data.

This Privacy Policy was last updated on: September 11, 2026.

THE PERSONAL DATA WE PROCESS

We only collect the personal data necessary for the purpose for which it is processed. Whether providing information is mandatory is indicated on the collection form when you sign up or update your information.

This data includes:

Identification data, such as your first and last name.
Contact details, such as your postal address, email address, and mobile phone number.
Transactional information, namely all information related to your orders on the Site, such as the products purchased and information related to your payment method.
Date of birth, when you sign in to the YAARZ mobile app via Google Sign-In and authorize access to this information ("user.birthday.read"), in order to verify that you have reached the legal minimum age to be engaged as a seller or "yaarzer" at our organizer clients' events.
Connection data, such as information about your smartphone or tablet's hardware and software. This information includes your IP address, device type and model, browser type, and device identification. It is used to ensure the Site functions properly, to maintain its quality, for general statistical purposes, and to comply with our legal and regulatory obligations.

All or part of this personal data is obtained when you:

visit the Site and, where applicable, provide your information;
sign in to the mobile app via Google Sign-In and authorize sharing your date of birth with YAARZ;
send comments or questions;
and more generally, by any other means by which you contact us.

THE PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA

The personal data collected is processed in accordance with applicable regulations to serve explicit, legitimate, and specified purposes, either on the basis of the contractual terms of sale of products purchased through the Site, to comply with a legal and/or regulatory obligation, subject to your prior consent, or on the basis of our legitimate interest. These purposes are as follows:

To allow you to purchase products:

We collect and use your personal data to enable us to fulfill orders for the products we offer through the Site. This data is processed in particular to process your Order, including managing its tracking and payment and validating it, as well as, where applicable, handling any incidents (fraud management, payment incidents…).
Your personal data is also essential to us in the context of our interactions with you while browsing the Site and, more generally, in the context of our business relationship with you.
To ensure the quality of our products and services and to improve them, we also compile general statistics, which are anonymized whenever processing your personal data does not appear necessary to produce them.
The main legal bases for this processing are performance of the contractual terms of sale and, where applicable, your consent.

To inform you about our services and manage our relationship with you:

Your personal data is also essential to us in the context of our interactions with you, in particular your use of the Site.
We may use your personal data to inform you about the products and services we offer, subject to having obtained your prior consent to receive such information.
Depending on how you use the Site, the information we hold about you will allow us to send you information we believe is most likely to interest you.
If you no longer wish to receive special promotional information, advertisements, or other messages from us, you can click the link at the bottom of the email to unsubscribe.
For technical reasons, we need a reasonable amount of time to process your request, and you may receive a few messages after your request while we process it.
To ensure the quality of our services and to improve them, we also compile general statistics, which are anonymized whenever processing your personal data does not appear necessary to produce them.
Finally, at your request, we may also send commercial information to a third party in your circle whom you believe may be interested in our products. In such a case, please ensure you have their prior consent to receive such a message from us.
The main legal bases for this processing are your consent and our legitimate interest.

To secure the Site:

We ensure the security of your personal data, as well as the personal data of third parties, against any fraudulent access, use, or disclosure by implementing enhanced data protection through appropriate physical and logical technical security measures, in order to guarantee the integrity of your data as well as its confidential and secure processing.
We nevertheless remind you that no security system is infallible and we cannot guarantee that your information is completely secure.
The main legal basis for this processing is our legitimate interest.

To verify your age on the mobile app:

The YAARZ mobile app is intended for the sellers and "yaarzers" who work at our organizer clients' events. Because applicable labor law only allows such contracts to be entered into with adults, we must verify your age before allowing you to create an account and be engaged for an assignment.
When you sign in via Google Sign-In, we ask for your authorization to access your date of birth (as recorded on your Google Account) in order to automatically verify that you are of legal age, without you having to re-enter it manually.
Your date of birth is used solely for this age-verification purpose, is not disclosed to any third party, and is retained with the rest of your profile data for the lifetime of your account, in accordance with the "DATA RETENTION PERIOD" section above.
If you do not wish to share this information with YAARZ via Google Sign-In, you can enter your date of birth manually within the app.
The main legal basis for this processing is our legal obligation to contract only with adults and, where applicable, your prior consent given when authorizing Google Sign-In.

To comply with our legal and regulatory obligations

In operating the Site, we are subject to various legal and regulatory obligations requiring us to retain your personal data. This data may also be used in connection with efforts to identify the authors of unlawful content.

RECIPIENTS OF THE PERSONAL DATA PROCESSED

We process your personal data exclusively for the purposes described in this Policy.

To this end, we may engage trusted partners acting as processors in order to provide you with all of the services offered on the Site, and in particular:

in connection with an order, to process payment (payment interface and card management by our bank) or manage delivery;
more generally, in connection with your use of the Site, to host your data, send you an email, assist you in using the Site, or help us carry out statistical analyses.

In all cases, these third parties are contractually prohibited from using the personal data we transmit to them for any purpose other than that for which they were engaged, and they are required to maintain the security and confidentiality of your information with protection equal to or greater than what we implement.

We will not disclose your personal data without prior notice except:

if applicable regulations require it,
if such disclosure is necessary to comply with the law or applicable regulations, with legal proceedings, and/or with an administrative or judicial order;
to protect and defend our rights or property or those of our partners;
more generally, to act in urgent circumstances to protect the personal safety of Site users or third parties.

DATA RETENTION PERIOD

We retain your personal data only for as long as necessary to achieve the purposes described in this Privacy Policy, unless the law requires that your personal data be retained differently.

By way of exception, this data may be archived to manage ongoing claims and disputes, to comply with legal and/or regulatory obligations, and/or to respond to requests from authorities entitled to make such requests.

TRANSFER OF YOUR DATA OUTSIDE THE EUROPEAN UNION

In providing our services and operating the Site, we may transfer your personal data to countries that are not members of the European Union and that have not been the subject of an adequacy decision by the European Commission.

In such cases, we ensure that this transfer is carried out in accordance with applicable regulations, taking all appropriate measures and under legal, technical, and operational safeguards designed to ensure the confidentiality and security of this data.

YOUR RIGHTS AND HOW TO EXERCISE THEM

In accordance with applicable regulations, you have a right of access, objection, rectification, and erasure of your personal data, as well as a right to restrict the processing carried out, a right to portability, and a right to determine what happens to your data in the event of your death, subject to any legal and regulatory obligations requiring us to retain it. Exercising some of these rights may prevent us from providing you access to the Site and/or from using some or all of the services offered on it.

These rights may be exercised by contacting us at hello@yaarz.io while providing proof of your identity.

You have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL), the French supervisory authority responsible for overseeing compliance with personal data obligations.

Finally, please note that we may be required to disclose your personal data, under the conditions provided by law, to a duly authorized judicial or administrative authority.

CHANGES TO THIS PRIVACY POLICY

We may, at any time and from time to time, make changes to this Privacy Policy, in particular as our services evolve and/or as applicable regulations require: such changes will then apply to personal data collected after the effective date indicated in the Privacy Policy, and we will notify you via a notice on the Site or by any other means.

In any event, we recommend that you regularly review this Privacy Policy to obtain the latest information about our privacy practices.

The most recent version of the Privacy Policy is the one dated at the beginning of this document.