RGPD STANDARD

SECURITY AND PROTECTION OF PERSONAL DATA.

Definitions : The Publisher: The person, natural or legal, who publishes the online public training services. The Site: All sites, web pages and online services.

TYPE OF DATA COLLECTED

Civil status, identity and identification data… Personal data (lifestyle, family situation, excluding sensitive or dangerous data) Professional data (CV, education, professional training, awards, etc.) Connection data (IP addresses, event logs, etc.) Location data (movements, GPS, GSM data, etc.)

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

Communication to authorities on the basis of legal obligations. On the basis of legal obligations, your personal data may be disclosed in application of a law, regulation or by virtue of a decision by a competent regulatory or judicial authority. In general, we undertake to comply with all legal rules that may prevent, limit or regulate the dissemination of information or data, and in particular to comply with Law no. 78-17 of January 6, 1978 relating to information technology, files and civil liberties. Disclosure to third parties with recipient restrictions. The personal data you provide when placing your order may be passed on to our facilitators for the proper conduct of the training. This information is considered by our facilitators to be strictly confidential.

VIRALITY OF THE CONDITIONS FOR RE-USING PERSONAL DATA

No commitment on the virality of reuse conditions. If your personal data is communicated to a third party, the third party’s confidentiality conditions apply. Prior notification of the transfer of personal data to third parties in the event of a merger/absorption Prior information and opt-out before and after the merger / acquisition In the event that we take part in a merger, acquisition or any other form of asset transfer, we undertake to guarantee the confidentiality of your personal data and to inform you before they are transferred or subjected to new confidentiality rules.

PURPOSE OF RE-USE OF PERSONAL DATA COLLECTED

Carry out customer management operations concerning – contracts; orders; deliveries; invoices; accounting and, in particular, customer account management – a loyalty program within one or more legal entities; – monitoring customer relations, such as satisfaction surveys, claims management and after-sales service – the selection of customers for studies, surveys and product tests (except with the consent of the persons concerned obtained under the conditions set out in article 6, these operations must not lead to the creation of profiles likely to reveal sensitive data – racial or ethnic origins, philosophical, political, trade-union or religious opinions, sex life or health) Carry out prospecting operations – management of technical prospecting operations (including technical operations such as normalization, enrichment and de-duplication) – the selection of individuals for loyalty-building, canvassing, surveys, product testing and promotional activities. Unless the consent of the persons concerned has been obtained in accordance with the conditions laid down in article 6, these operations must not lead to the establishment of profiles likely to reveal sensitive data (racial or ethnic origins, philosophical, political, trade-union or religious opinions, sex life or personal health). – solicitation operations

COMPILING SALES STATISTICS

The organization of contests, lotteries or any promotional operation, with the exception of online gambling subject to the approval of the Autorité de Régulation des Jeux en Ligne The management of requests for access, rectification and opposition rights The management of people’s opinions on products, services or content

DATA AGGREGATION

Aggregation with non-personal data. We may publish, disclose and use aggregated information (information about all of our Users or specific groups or categories of Users that we combine in such a way that an individual User can no longer be identified or referred to) and non-personal information for industry and market analysis, demographic profiling, promotional and advertising purposes and other business purposes. Aggregation with personal data available on the User’s social accounts. If you connect your account to another service’s account for the purpose of cross-mailing, that service may share your profile and login information with us, as well as any other information you have authorized to be shared. We may aggregate information about all our other Users, groups, accounts, with personal data available about the User.

IDENTITY DATA COLLECTION

Prior registration and identification for service provision. Use of the Site’s services requires prior registration and identification. Your personal data (last name, first name, postal address, e-mail address, telephone number, etc.) is used to fulfill our legal obligations resulting from the performance of our services, under the End-User License Agreement, the Warranty Limitation, if applicable, or any other applicable conditions. You will not provide false nominative information or create an account for another person without that person’s authorization. Your contact information must always be accurate and up-to-date.

GEOLOCATION IDENTIFICATION DATA COLLECTION

Geolocation for service provision purposes We collect and process your geolocation data in order to provide you with our services. We may use personal data to determine your geographical position in real time. In accordance with your right of opposition under the French Data Protection Act no. 78-17 of January 6, 1978, you may, at any time, deactivate the geolocation functions. Geolocation for cross-referencing purposes We collect and process your geolocation data to enable our services to identify the points at which you cross paths in time and space with other Users of the service, in order to present you with the profile of crossed Users. In accordance with your right of opposition under the French Data Protection Act no. 78-17 of January 6, 1978, you may, at any time, deactivate the geolocation functions. You acknowledge that the service will no longer be able to present you with profiles of other Users. Geolocation available to partners for referencing and aggregation (with opt-in) We may collect and process your geolocation data with our partners. We undertake to anonymize the data used. In accordance with your right of opposition under French law no. 78-17 of January 6, 1978 relating to data processing, data files and individual liberties, you may deactivate geolocation functions at any time.

TERMINAL DATA COLLECTION

No collection of technical data We do not collect or store any technical data about your device (IP address, Internet service provider, etc.).

COOKIES

Cookie retention period In accordance with CNIL recommendations, cookies are kept for a maximum of 13 months after they are first stored on the User’s terminal, as is the period of validity of the User’s consent to the use of these cookies. The lifetime of cookies is not extended with each visit. The User’s consent must therefore be renewed at the end of this period. Purpose of cookies Cookies may be used for statistical purposes, in particular to optimize services rendered to the User, based on the processing of information concerning access frequency, page personalization, operations carried out and information consulted. You are informed that the Publisher may place cookies on your terminal. The cookie records information relating to navigation on the service (the pages you have consulted, the date and time of consultation, etc.) which we can read during your subsequent visits. Opt-in for cookies We do not use cookies. Should we use cookies in the future, you will be informed in advance and given the opportunity to deactivate them.

TECHNICAL DATA STORAGE

Technical data retention period Technical data is kept for the time strictly necessary to achieve the above-mentioned purposes.

PERSONAL DATA RETENTION AND ANONYMIZATION PERIODS

Data retention for the duration of the contractual relationship In accordance with article 6-5° of French law no. 78-17 of January 6, 1978 on data processing, data files and individual liberties, personal data that is the subject of processing is not kept beyond the time required to fulfill the obligations defined when the contract was signed, or the predefined duration of the contractual relationship. Retention of anonymized data beyond the contractual relationship / after account deletion We keep personal data for the time strictly necessary to achieve the purposes described in these GTU. After this period, the data will be anonymized and kept exclusively for statistical purposes and will not be used in any way whatsoever. Deleting data after account deletion In accordance with French law no. 78-17 of January 6, 1978 on data processing, data files and individual liberties, you have the right to delete your data, which you may exercise at any time by contacting the Publisher.

ACCOUNT DELETION

Account deletion on request The User may delete his or her Account at any time, by simple request to the Publisher OR via the Account deletion menu in the Account settings, if applicable. Account deletion in the event of a breach of the GCU If you breach any provision of the TOS or any other document incorporated herein by reference, the Publisher reserves the right to terminate or restrict, without notice and at its sole discretion, your use of and access to the services, your account and all of the Sites.

INDICATIONS IN THE EVENT OF A SECURITY FLAW DETECTED BY THE EDITOR

Informing the User in the event of a security breach We undertake to implement all appropriate technical and organizational measures to guarantee a level of security appropriate to the risks of accidental, unauthorized or illegal access, disclosure, alteration, loss or destruction of your personal data. In the event that we become aware of unlawful access to your personal data stored on our servers or those of our service providers, or of unauthorized access resulting in the risks identified above, we undertake to : – Notify you of the incident as soon as possible; – Examine the causes of the incident and inform you; – Take all reasonable steps to mitigate any adverse effects and damages that may result from the said incident Limitation of liability Under no circumstances may the undertakings set out in the point above concerning notification in the event of a security breach be assimilated to any admission of fault or responsibility for the occurrence of the incident in question.

TRANSFER OF PERSONAL DATA ABROAD

No transfer outside the European Union The Publisher undertakes not to transfer the personal data of its Users outside the European Union.

MODIFICATION OF THE GGU AND PRIVACY POLICY

In the event of modification of the present GCU, undertaking not to lower the level of confidentiality substantially without the prior information of the persons concerned. We undertake to inform you in the event of substantial modification of the present GCU, and not to lower the level of confidentiality of your data in a substantial way without informing you and obtaining your consent.

APPLICABLE LAW AND REMEDIES

Application of French law (CNIL legislation) and jurisdiction of the courts These GCU and your use of the Site shall be governed by and construed in accordance with the laws of France, and in particular with Law no. 78-17 of January 6, 1978 relating to data processing, data files and individual liberties. The choice of applicable law does not affect your rights as a consumer under the applicable law of your place of residence. If you are a consumer, you and we agree to submit to the non-exclusive jurisdiction of the French courts, which means that you may bring an action relating to these TOU in France or in the EU country in which you live. If you are a professional, all actions against us must be brought before a court in France. In the event of a dispute, the parties will seek an amicable solution before taking any legal action. Should these attempts fail, all disputes concerning the validity, interpretation and/or execution of these GCU must be brought before the French courts, even in the event of multiple defendants or third-party claims.

DATA PORTABILITY

Data portability The Publisher undertakes to offer you the possibility of having all your personal data returned to you on request. In this way, the User is guaranteed greater control over his or her data, and retains the possibility of reusing it. This data must be supplied in an open and easily reusable format.