PRIVACY POLICY

PRIVACY POLICY
1. Definition and nature of personal data
When you use our site and / or our mobile applications, we may ask you to provide us with personal data about you.
The term "personal data" refers to all data that identifies an individual, including your name, surname, pseudonym, photograph, postal and email addresses, telephone numbers, date of birth, data your transactions on the site and / or mobile applications, details of your purchases and subscriptions, credit card numbers, and any other information you choose to communicate about you.
2. Purpose of this charter
This charter is intended to inform you about the means we use to collect your personal data, in the strictest respect of your rights.
We inform you that we comply, in the collection and management of your personal data, with the law n ° 78-17 of January 6th, 1978 relating to data processing, the files and the liberties, in its current version.
3. Identity of the person responsible for data collection
The person responsible for the collection of your personal data is EyeLights, a simplified joint-stock company, registered in the Trade and Companies Register of Toulouse under number 819 514 118, having its registered office at 425 rue Jean Rostand 31670 Labège LA FRANCE.
4. Collection of personal data
Your personal data are collected to fulfill one or more of the following purposes:
(i) Manage your access to certain services accessible on the site and mobile applications and their use,

- 2 -
(ii) Perform customer management operations related to contracts, orders, deliveries, invoices, loyalty programs, customer relationship monitoring,
(iii) Create a file of registered members, users, customers and prospects,
(iv) Address newsletters, solicitations and promotional messages. In case you do not wish it, we give you the option to express your refusal on this subject when collecting your data;
(v) Develop trade and attendance statistics for our services,
(vi) Organize contests, sweepstakes and all promotional activities other than online gambling subject to the approval of the Online Games Regulatory Authority,
(vii) Manage the management of the opinions of people on products, services or contents,
(viii) Manage unpaid and potential litigation regarding the use of our products and services,
(ix) Comply with our legal and regulatory obligations.
When you collect your personal data, we inform you if certain data must be completed or optional. We also tell you what are the possible consequences of a failure to answer.
5. Recipients of collected data
The personnel of our company, the services in charge of the control (auditor in particular) and our subcontractors will have access to your personal data.
The public bodies may also be the addressees of your personal data, exclusively to fulfill our legal obligations, the judicial officers, the ministerial officers and the bodies responsible for collecting debts.
6. Transfer of personal data
Your personal data may be sold, rented or exchanged for the benefit of third parties. In case you wish, we give you the option to check a box expressing your agreement on this subject when collecting your data.

- 3 -
7. Retention period of personal data
(i) Regarding customer and prospect management data:
Your personal data will not be stored beyond the time strictly necessary to manage our business relationship with you. However, the data allowing to establish the proof of a right or a contract, to be conserved for the respect of a legal obligation, will be it for the duration envisaged by the law in force.
Regarding possible prospecting operations for customers, their data may be retained for a period of three years from the end of the business relationship.
The personal data relating to a prospect, non-client, may be kept for a period of three years from their collection or the last contact from the prospect.
At the end of this three-year period, we will be able to contact you again to find out if you wish to continue receiving commercial solicitations.
(ii) With regard to identity documents:
In case of exercise of the right of access or rectification, the data relating to identity documents may be kept for the period provided for in Article 9 of the Code of Criminal Procedure, ie one year. In the event of the exercise of the right of opposition, these data may be archived during the limitation period provided for in Article 8 of the Code of Criminal Procedure, ie three years.
(iii) Regarding credit card data:
Financial transactions relating to the payment of purchases and fees via the site are entrusted to a payment service provider who ensures the smooth running and security.
For the purposes of the services, this payment service provider may be required to receive your personal data relating to your credit card numbers, which it collects and stores on our behalf and on our behalf.
We do not have access to this data.
To allow you to regularly make purchases or pay the fees on the site, your credit card data are kept during the time of your registration on the site and at least until you realize your last transaction.
By ticking on the site or mobile applications the box expressly provided for this purpose, you give us your express consent for this conservation.

- 4 -
The data relating to the visual cryptogram or CVV2, registered on your bank card, are not stored.
If you refuse that your personal data relating to your credit card numbers are kept under the conditions specified above, we will not keep this data beyond the time required to complete the transaction.
In any case, the data relating to these may be retained, for a proof purpose in case of possible dispute of the transaction, in intermediate archives, for the duration provided for by Article L 133-24 of the Code monetary and financial, in this case 13 months from the debit date. This period can be extended to 15 months to take into account the possibility of using debit payment cards.
(iv) Concerning the management of opposition lists to be received from prospecting:
The information allowing to take into account your right of opposition is kept at least three years from the exercise of the right of opposition.
(v) Regarding audience measurement statistics:
The information stored in the users' terminal or any other element used to identify the users and allowing their traceability or attendance will not be kept beyond 6 months.
8. Security
We inform you to take all necessary precautions, organizational and technical measures to preserve the security, the integrity and the confidentiality of your personal data and in particular, to prevent that they are deformed, damaged or that unauthorized third parties have access to it . We may or may also use secure payment systems that comply with the state of the art and applicable regulations.
9. Cookies
Cookies are text files, often encrypted, stored in your browser. They are created when the browser of a user loads a given website: the site sends information to the browser, which creates a text file. Each time the user returns to the same site, the browser retrieves this file and sends it to the server of the website.
There are two types of cookies, which do not have the same purpose: technical cookies and advertising cookies:

- 5 -
➢ Technical cookies are used throughout your navigation, to facilitate and perform certain functions. A technical cookie can for example be used to memorize the answers filled in a form or the user's preferences regarding the language or the presentation of a website, when such options are available.
➢ Advertising cookies may be created not only by the website on which the user is browsing, but also by other websites displaying advertisements, ads, widgets or other items on the displayed page. These cookies may in particular be used to carry out targeted advertising, that is to say advertising determined according to the navigation of the user.
We use technical cookies. These are stored in your browser for a period that can not exceed six months.
We do not use advertising cookies. However, if we use them in the future, we will inform you in advance and you will have the possibility if necessary to disable these cookies.
We use or may use Google Analytics which is a statistical audience analysis tool that generates a cookie to measure the number of visits to the site, the number of pages viewed and the activity of visitors. Your IP address is also collected to determine the city from which you are connecting. The shelf life of this cookie is mentioned in article 7 (v) of this charter.
We remind you for all practical purposes that you can oppose the deposit of cookies by configuring your browser. Such a refusal could however prevent the proper functioning of the site.
10. Consent
When you choose to communicate your personal data, you expressly consent to the collection and use of your personal data in accordance with the terms of this charter and the applicable legislation.
11. Access to your personal data
In accordance with the law n ° 78-17 of January 6th, 1978 relating to data processing, the files and the liberties, you have the right to obtain the communication and, if necessary, the rectification or the suppression of the data concerning you, through online access to your file. You can also contact:
- e-mail address: sav@eye-lights.com
- postal address: EyeLights, 425 rue Jean Rostand, 31670 Labège, FRANCE
It is recalled that any person may, for legitimate reasons, oppose the processing of data concerning him.

- 6 -
12. Changes
We reserve the right, in our sole discretion, to modify this charter at any time, in whole or in part. These changes will come into effect as of the publication of the new charter. Your use of the site and mobile applications following the coming into force of these changes will be worth recognition and acceptance of the new charter. Otherwise, if this new charter does not suit you, you will no longer have to access the site or the mobile applications.
13. Entry into force
This charter came into force on March 09, 2017.