DATA MANAGEMENT

PROTECTION OF PERSONAL DATA AND CONFIDENTIALITY

Percall Group attaches great importance to the protection of privacy, and we are committed to preserving the confidentiality of the personal information we collect when :

• You visit or register on our websites

• You apply for a job via our websites

• You take part in our events

• You agree to receive our newsletters, promotional emails and other communications about our products, services, promotions or events that may be of interest to you

• We work together on a service offer proposed by the Percall Group and its subsidiaries or any other business relationship

• When you send us a comment, question or complaint.

WHICH INFORMATION IS LIKELY TO BE COLLECTED?

We collect personal information as part of our business relationship. This is the only context in which we use this information.

This data may be collected in various ways:

• when you communicate it to us as part of the relationship you have with Percall Group (contractual relationship with Percall Group and professional contact data, etc.). Ex: surname, first name, address, position, telephone number, etc.

• through the various digital technologies that Percall Group may use for the needs of its business, as part of its websites or other online services.

• when our customers entrust us with their Personal Data for the purposes of our services or our partners in the context of our relations with them.

In the event that we wish to use your Personal Information for a purpose other than that described in this policy, we will need to obtain your consent before doing so.

WHY DO WE COLLECT YOUR INFORMATION?

Percall Group undertakes to only collect personal information that is necessary for our business relationship, in particular to carry out our commercial activities, for example:

• To offer you the products and services you require

• To organise contact for recruitment purposes

• To organise and invite you to promotional events or activities

• To comply with legal or regulatory requirements

• To protect the rights and interests of Percall Group: internal audits, systems control, protectionagainst fraudulent actions, collection of information to ensure the defence of Percall Group’s rights in the event of litigation, etc.

• To send you communications about our products and services or to provide you with information of interest to you.

• To design, improve or market products and services

• For research, analysis and marketing purposes

• For any other reasons required by law and to carry out our activities properly

HOW DO WE PROTECT THIS INFORMATION?

The protection of personal information is a major concern for Percall Group. In order to ensure the protection of this information, technical and organizational measures have been put in place to limit access to this data to those persons who need to know it for the purposes of processing.

We also ensure that we always comply with the regulations in force. We carry out audits of information storage environments.

WHO WILL HAVE ACCESS TO YOUR PERSONAL INFORMATION?

In addition to situations provided for or required by law, Percall Group minimizes and limits access to this data to groups of Percall Group employees and to agents or suppliers specifically authorized by Percall Group and who require this information as part of their duties.

They must only process this information for the purposes mentioned above.

RIGHTS OF DATA SUBJECTS

We are always open to questions or requests from data subjects concerning the conditions under which their Personal Data is Processed. The aim is to enable data subjects to verify and assert their rights with regard to their personal data:

• Right to information: the right to know how data is collected and for what purpose

• Right of access: the right to know what data companies are collecting on an individual

• Right to object: the right to object to the collection of personal data (unless required by law)

• Right of rectification: right to modify data sent to a company

• The right to be forgotten: the right to have one’s data and that of sub-contractors deleted

• Right to portability: the right to retrieve one’s data in a legible form.

The RGPD is the first reference text in the European Union on personal data, which aims to provide a single framework so that there are no differences in the protection of personal data (unifying and harmonising).

It also aims to redefine the ways in which companies process and manage this data.

REQUEST OR COMPLAINT CONCERNING YOUR PERSONAL DATA

For any question or request for information concerning this Policy, or for any request relating to the exercise of your rights as defined in Article 7 above, you may contact this department.

dataprotection@percallgroup.com

We encourage you to contact us in the first instance, but you may also, if you are a Data Subject, submit your complaint directly to the competent supervisory authority: for the Percall Group, the lead authority is the CNIL, located at 3 Place de Fontenoy, 75007 Paris, France.

OUR COMMITMENT WITH REGARD TO OUR ELECTRONIC COMMUNICATIONS

We undertake to manage electronic addresses responsibly and to use them in accordance with the law and the consents you have given us. In addition, each of our communications will give you the opportunity to remove your name and e-mail address from our mailing list.

Furthermore, despite your unsubscription to our commercial messages, certain specific situations allow us to send you e-mails and other electronic communications, all in accordance with the exceptions provided for by law.

HOW LONG DO WE RETAIN PERSONAL DATA?

Personal Data processed by Percall Group is only kept for the time required for the purpose for which it is processed.

It may, however, be kept for a longer period in accordance with our legal and regulatory obligations and compliance with legal requirements or to the extent necessary to protect our rights and interests.

On expiry of the applicable retention period, we will anonymise or delete this data

UPDATING OF THIS POLICY

As our activities and the regulatory context are subject to regular change, this Policy may also be modified.You are therefore invited to consult it regularly.

Last update: 04/05/2024