DEFINITIONS

"Personal Data" means any information relating to an identified or identifiable natural person. For the purposes of this definition, an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Applicable Data Protection Legislation" means any data protection regulations that may apply in the context of the Personal Data Processing operated and in particular:

• Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (RGPD) as amended;
• The amended French Data Protection Act of January 6, 1978.

"MAGELLIUM ARTAL GROUP" refers collectively or individually to the following companies:

• FINANCES GESTION & DEVELOPPEMENT SAS (R.C.S. TOULOUSE 528 808 561)
• ARTAL TECHNOLOGIES SAS (R.C.S. de TOULOUSE 419 472 493)
• MAGELLIUM SAS (R.C.S. TOULOUSE 450 550 991)
• GEO DATA SOLUTIONS (IDE\UID CHE-285.970.379)

"Data Controller" means the natural or legal person, public authority, department or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.

"Processor" means a legal entity that processes personal data on behalf of the Data Controller.

"Processing" means any operation or set of operations, whether or not performed using automated processes and applied to Personal Data or sets of Personal Data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination or otherwise making available, alignment or combination, limitation, erasure or destruction.

"Data Breach" means any security incident, whether malicious or not and whether intentional or unintentional, that results in the compromise of the integrity, confidentiality or availability of personal data.

WHAT PERSONAL DATA DOES MAGELLIUM ARTAL GROUP COLLECT VIA ITS WEBSITE?

Browsing the https://www.magellium.com/fr/ website entails the collection of Personal Data relating to browsing, i.e. web timestamps, users' IP addresses, technical data relating to the equipment and browser used by users.
Apart from the above-mentioned Processing, only the Personal Data you communicate to MAGELLIUM SAS via the contact form are processed by MAGELLIUM ARTAL GROUP.

HOW IS PERSONAL DATA PROCESSED?

The Personal Data collected via the website https://www.magellium.com/fr/ are necessary for the purposes of :

• allow MAGELLIUM ARTAL GROUP to respond to your messages/requests for information;
• process your application via the TALEEZ API;
• ensure the safety of https://www.magellium.com/fr/

WHAT IS THE LEGAL BASIS FOR PROCESSING?

In general, the Processing of Personal Data communicated via the https://www.magellium.com/fr/ website is based on the following legal grounds:

• your consent, which you may withdraw at any time, without affecting the lawfulness of the processing operations based on that consent prior to its withdrawal;
• MAGELLIUM SAS' legitimate interest in ensuring the security of the https://www.magellium.com/fr/ website.

HOW LONG IS MY PERSONAL DATA STORED?

The retention period of Personal Data is specific to each Processing.
Thus:

• In the case of requests for information via the contact form, your Personal Data will be kept for a maximum of 12 months from the last contact with you;
• Your Personal Data will be kept for a maximum of 24 months from the date of your last contact with us when you send us your unsolicited application or reply to a job offer;
• Connection data is kept for a maximum of 1 year.

In general, your Personal Data will only be kept for as long as is necessary to achieve the purpose for which it was collected or to comply with MAGELLIUM ARTAL GROUP's legal obligations.

IN WHICH COUNTRIES ARE MY PERSONAL DATA PROCESSED?

The https://www.magellium.com/fr/ website is hosted by OVH SAS, a French company with share capital of €10,174,560, headquartered at 2 rue Kellermann 59100 Roubaix, France, and registered with the Lille Métropole Trade and Companies Register under number B424 761 419.
Your Personal Data will be processed in France. However, insofar as your request concerns GEO DATA SOLUTIONS, your Personal Data will also be processed in Switzerland.

Should your Personal Data be transferred outside the European Union, you will be specifically informed, and organizational and technical measures will be taken to ensure an adequate level of protection for your Personal Data, in particular through the implementation of Standard Contractual Clauses approved by the European Commission.

WHO HAS ACCESS TO MY PERSONAL DATA?

The recipients of your Personal Data, within MAGELLIUM ARTAL GROUP, depending on the nature of your request, are :

• Unit managers
• The company's recruitment department, via the TALEEZ API, for processing all job applications and via the contact form for unsolicited applications.
• The communication department to answer any request made via the contact form
• The sales department to answer any request made via the contact form.

They are subject to an obligation of confidentiality. Your Personal Data will be used internally within MAGELLIUM ARTAL GROUP.

In the specific case of a response to a job offer, your Personal Data is also collected by our HR solution provider Taleez SAS (RCS Toulouse 791 647 233). You can consult Taleez's commitments regarding the protection of your Personal Data at https://taleez.com/protection-des-donnees-rgpd.

WHO IS THE DATA CONTROLLER?

Each legal entity of MAGELLIUM ARTAL GROUP, which collects or uses your Personal Data for the purposes of processing your request, acts as Data Controller and undertakes to implement adequate measures to ensure the protection, confidentiality and security of your Personal Data, in accordance with the Applicable Data Protection Legislation.

WHAT IS MAGELLIUM ARTAL GROUP'S POLICY ON COOKIES?

By browsing the www.magellium.com website, you can accept or refuse our cookies.

Our cookies are used to better understand how visitors use the site. The purposes of our cookies are as follows:

• Analytical
• A/B testing and customisation
• Conversion tracking
• Marketing automation
• Remarketing
• User feedback
• Non-standard consent

If you would like to know more and access your cookie settings, please contact us by e-mail: magelliumartalgroup.rgpd@magellium.fr .

HOW IS MY PERSONAL DATA PROTECTED?

MAGELLIUM ARTAL GROUP implements all reasonable measures under the principles of privacy by design and privacy by default in order to implement the necessary safeguards and secure the Processing of Personal Data.

MAGELLIUM ARTAL GROUP implements appropriate technical and organizational measures to protect Personal Data against accidental or unlawful alteration or loss, or against unauthorized use, disclosure or access. To this end, MAGELLIUM ARTAL GROUP has drawn up an Information Systems Security Policy, an IT charter and internal provisions and procedures relating to the processing of Personal Data.

WHAT ARE MY RIGHTS?

In accordance with Applicable Data Protection Legislation, you have rights in respect of Personal Data concerning you, which you may exercise at any time and free of charge.
You are entitled to access all your Personal Data, and in certain cases to have them rectified (inaccurate, incomplete data), deleted, or to ask to temporarily limit their use, to object to being the subject of an automated individual decision (including profiling). You also have the right in certain cases to the portability of the Personal Data you have provided.
Requests should be addressed to MAGELLIUM ARTAL GROUP's Data Protection Officer: magelliumartalgroup.rgpd@magellium.fr

To exercise your rights with our partner Taleez SAS when submitting an application, please send your request to: support@taleez.com

You can also lodge a complaint with the CNIL (online https://www.cnil.fr/fr/plaintes or by post CNIL - service des plaintes - 3 place de Fontenoy - TSA 80715 - 75334 Paris cedex 07) or any other relevant personal data protection authority.

HOW TO CONTACT THE MAGELLIUM SAS DATA PROTECTION OFFICER?

If you have any questions or require further information about the Data Processing carried out, please contact the MAGELLIUM ARTAL GROUP Data Protection Officer at the following address: magelliumartalgroup.rgpd@magellium.fr.

UPDATES

These provisions may be updated at any time. MAGELLIUM ARTAL GROUP invites you to consult them regularly.