FIMALAC ENTERTAINMENT (hereinafter "the Company") places great importance on respecting your privacy and is committed to building strong and lasting relationships with you.

The protection of your personal data is paramount to us.

Therefore, this personal data protection policy aims to inform you as clearly as possible of our commitments and measures implemented to ensure compliance with your personal data in accordance with the European and French regulations applicable to personal data protection.

This policy thus applies to all services offered on the website https://www.parisgamesweek.com/ (hereinafter referred to as "the Site").

This policy is subject to Law No. 78-17 of January 6, 1978, relating to data processing, files, and freedoms, as amended (hereinafter "Data Protection Law") as well as the European Regulation on the protection of personal data dated April 27, 2016. It may evolve according to the legal and regulatory context and the guidance of the CNIL.

For any information on the protection of personal data, you can also consult the website of the Commission Informatique et Libertés: www.cnil.fr.

Definitions

"Consumer Account" or "Client Account": term designating a space reserved for the Consumer on the Site, accessible after registration via a username (email address) and a confidential password, and allowing in particular access to all or part of the Site.

"Consumer" or "you": term referring to any natural person aged eighteen (18) or over, accessing the Site.

"Personal Data" or "Data": term referring to any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, an online identifier. Your surname, telephone number, email address, IP address are personal data.

"Partner(s)": term referring to any company, other than a Processor, having a contractual relationship with the Data Controller, in order to govern the provision and protection of personal data. Authorized Partners to receive and use your Data include the producer and organizer of the Event.

"Data Controller": term referring to the person who determines the purposes and means of using your Personal Data.

"Site": term referring to an online service, accessible at the following URL address: https://www.parisgamesweek.com/ and/or any other address that may be added to or replace it. The term Site includes any mobile application derived from the Site.

"Processor(s)": term referring to any company that may process personal data (PD) on behalf of and under the instructions of the Data Controller.

"Processing of personal data": operation or set of operations applied to Personal Data (collection, recording, storage, consultation, etc.)

Who collects your data?

Identity and contact details of the Data Controller:

The company FIMALAC ENTERTAINMENT, publisher of the e-commerce website and ticketing distributor of the Site:
10 place du Général Catroux – 75017 PARIS.

For any question regarding this personal data protection policy, you can contact us directly by writing:

• to the email address: rgpd@fimalac-entertainment.com
• or by mail to the address: Fimalac Entertainment - 10 place du Général Catroux - 75017 PARIS

Why is your data collected?

We may collect, process, or retain your personal data for the following purposes:

• Sending newsletters, emailings following registration on our Site
• Personal data concerning you allows us to improve and personalize the services we offer and the communications we send to you. For example: we may send you personalized emails or recommend similar products that match your interests or keep you informed of our news.

Order and Customer Relationship Management

We need your information to manage your orders and their follow-up (e.g., deliveries, invoices, accounting and especially the management of customer accounts, customer relationship follow-up such as satisfaction surveys, complaints management and after-sales service, customer selection for satisfaction surveys).
This data notably allows FIMALAC ENTERTAINMENT to send your tickets and, where possible, contact you in case of cancellation or change of date, time or venue of an Event for which you have booked tickets.

Payment for your orders

We collect certain data related to payment methods (such as credit card number, bank account details, etc.). It is specified that the credit card number used for the payment is encrypted and kept for the time necessary for the transaction and then for a period of 36 (thirty-six) months from the payment in order to guarantee proof of the transaction.

Security of our Site

We collect certain browsing data to ensure the security of the Site and to detect, avoid or trace any attempt at malicious action, IT intrusion or violation of our terms of use.

Statistics and performance of our Site

We may use personal data to better understand our customers or for statistical purposes to analyze the activity of our Site and improve the services we offer. We conduct audience measurements, such as the number of pages viewed, visits to the Site, and the activity and frequency of visitors on the site.

What data is collected?

As part of the Site, we collect and process:

• Data relating to your civil status and contact details, including your first name, last name, address, email address, password, and phone number.
• Data relating to payment methods (such as credit card number, bank account details, etc.).
• IP addresses, connection data, browsing data, order history, preferences, interests, viewed products, delivery issues, complaints.

The mandatory or optional nature of the data is indicated when collected by an asterisk. Some data is collected automatically due to your actions on the Site.

When is your data collected?

We collect the information you provide to us, notably when:

• You create your customer account on our Site.
• You place an order for tickets on our Site.
• You browse our Site and view our offers.
• You participate, where applicable, in a game or contest.
• You contact our Customer Service.
• You view our advertisements.

What happens when you buy a ticket on our Site?

When you browse our Site, you have the option to buy a Ticket for an Event.

The information and data concerning you are then collected by FIMALAC ENTERTAINMENT, as well as its Processors.

This data is necessary for managing your order and our commercial relationship. It is also retained for security purposes, in order to comply with legal and regulatory obligations. It also helps us improve and personalize the services we offer.

This data is stored in two separate databases:

• The data is stored in your personal account by FIMALAC ENTERTAINMENT. This data allows the transaction to be completed. Once recorded, this data enables you to complete your future transactions more quickly.
• The data is also stored by Wetix and Tick & Live, our providers (processors) supplying the necessary technology to offer ticket sales on the Site.

The personal data concerning you allows us to contact you, where possible, in case of cancellation or change of date, time, or venue of an Event for which you have reserved tickets. As part of the organization of the Event and your order, the data may also be communicated to the event organizers and producers (Partners) on whose behalf we are working.

Your payment data (such as your credit card or bank details in the case of deferred payment) is only processed by the Processor, Extent. For more information about Extent, you can visit their site: http://www.extent.fr/.

For certain Events, our Company does not offer tickets for sale. In that case, you may find links to third-party resellers' sites where you can purchase tickets. However, in such cases, we are not responsible for the subsequent processing carried out by these resellers, and we do not transmit any personal data we may have collected about you to them.

What about data concerning minors?

Our Site is not intended for minors. As a result, we do not process any personal data concerning minors. For example, we do not create marketing profiles related to minors.

What communications and newsletters might I receive?

Service emails

Following an order or in the context of contract management, you will receive an email to allow you to track your order or the execution of your contract (order confirmation, delivery information, etc.). These service messages are necessary for the proper execution of the orders and services you have requested. Receiving these communications is not tied to any preferences you may have expressed regarding newsletters and commercial offers.

Newsletters

After creating your account and if you have consented, you may receive our information and offers via electronic communication (email, SMS, etc.). These newsletters will keep you informed of our latest updates and offers. We measure the open rate of our emails to adapt them better to your needs.

News and deals from FIMALAC ENTERTAINMENT

If you have agreed to receive news and deals from the FIMALAC ENTERTAINMENT Group, you will receive offers from the FIMALAC ENTERTAINMENT Group and other companies within the FIMALAC ENTERTAINMENT Group via electronic communication (email, SMS, etc.).

On what legal basis is my data processed?

The processing of your personal data is justified by various legal grounds depending on the use we make of this data.

Below are the legal bases we apply to our main data processing activities:

• Contract: The processing of personal data is necessary for the execution of the contract to which you have consented by accepting the General Terms and Conditions of Sale on the Site.
• Consent: You agree to the processing of your personal data by giving express consent (checking a box, clicking a button, etc.) for receiving newsletters, news, and deals. You can withdraw your consent at any time.
• Legitimate interest: Our Company has a legitimate commercial interest in processing your data, which is justified, balanced, and does not infringe on your privacy. Except in exceptional cases, you can oppose processing based on legitimate interest by notifying our company.
• The law: The processing of your personal data is required by a legal text.

How long is your data kept?

We have established a precise rule regarding the retention period for personal data of Site users: it is defined as three (3) years from the last positive contact between you and us.

Your data is then archived with restricted access for an additional period for limited and legally authorized reasons (payment, warranty, disputes, etc.) and in accordance with statutory limitation periods.

What are your rights and how to exercise them with our Company?

You have the right to unsubscribe from newsletters and communications at any time by clicking on the unsubscribe link provided in each email you receive or by contacting us directly.

You have the right to access, rectify, and oppose the processing of your personal data.

You may also exercise your right to restrict processing, request the deletion of your data, request data portability, and object to automated individual decision-making.

In accordance with Article 40-1 of the Informatique et Libertés law, you can send us your instructions regarding the storage, deletion, and communication of your personal data after your death. These instructions can be general or specific.

You can exercise these rights by email or by mail at the following addresses:

• By email: Write to: rgpd@fimalac-entertainment.com
• By mail: Fimalac Entertainment - 10 place du Général Catroux - 75017 PARIS

If you are not satisfied with the response, you have the option to contact the CNIL: 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07.

These rights are not absolute. You can exercise them within the legal framework provided and within the limits of these rights. In some cases, we may not be able to fulfill your request (legal obligation, compliance with our commitments to you, etc.). In that case, we will inform you of the reasons for this refusal.

To help us identify your Customer Account, we kindly ask you to provide the email address you used to create your Customer Account.

Furthermore, to enable us to respond promptly, we thank you for providing your first name, last name, email, address, and if possible your Customer reference. Certain requests to exercise your rights (access rights) must be accompanied by a photocopy of an identity document bearing your signature to verify your identity and specify the address to which the response should be sent.

A response will be provided within one (1) month of receiving your request, which may be extended to two (2) months due to the complexity and number of requests.

If your phone number is collected during the creation of your customer account or when placing your order, we inform you that your phone number will only be used for the proper execution of your orders. In accordance with legal provisions, you are informed that you can, if you wish, register on the list of opposition to telephone solicitation. You can register for free on this list, which applies to all professionals except those with whom you have already concluded a contract. You can oppose telephone solicitation from companies with which you are not a customer by registering at www.bloctel.gouv.fr.

How to express my choices regarding the use of my data?

We are actively working on improving our preferences manager, accessible from your Customer Account, to allow you to better control how your data is used.

You can oppose the use of your data at any time:

• During the creation of your customer account, via the opposition boxes or links dedicated to account creation.
• By email: rgpd@fimalac-entertainment.com

Who are the recipients of your data?

The data we collect may be transferred to our service providers, processors, and the FIMALAC ENTERTAINMENT Group (if you have agreed to receive its news, deals, and communications). Our company relies on them to perform its services in line with the objectives outlined above, for example:

• For the management, execution, processing, and payment of your orders, as well as for marketing operations (sending informational emails and newsletters).
• Where applicable, for collecting your data for participation in quizzes, satisfaction surveys, or event registrations.

Is your data sent outside the European Union?

Your personal data may be transferred for the purposes defined above to companies located in countries outside the European Union that do not provide a level of personal data protection equivalent to the legislation existing within the European Union.

Before transferring data outside the European Union and in accordance with current regulations, we implement all necessary procedures to ensure the required guarantees for securing such transfers.

Transfers outside the European Union may occur as part of our activities, such as IT services, fraud prevention, and data utilization related to social media.

How do we protect your data?

We take various measures to ensure the security of your data against loss, misuse, unauthorized access, disclosure, modification, or destruction. In particular:

• Access to the databases is strictly reserved for authorized individuals involved in their specific tasks.
• In accordance with the Informatique et Libertés law and the GDPR, we ensure that our processors commit to safeguarding the security and confidentiality of data.
• All our employees are made aware of personal data protection through training, newsletters, the company intranet, and team meetings.

Changes to the personal data protection policy

We reserve the right to modify this personal data protection policy at any time. In the event of a significant change, such as the introduction of a new purpose, we will provide you with prior information about this new purpose. This is to ensure that you have a reasonable period to exercise your rights in accordance with the applicable legislation.

However, we encourage you to regularly review the personal data protection policy to keep yourself informed about how your personal data is protected on the Site.

This policy was last updated on the date indicated above.