The purpose of this privacy policy is to inform you about how your personal data is processed by Semkel.

1. Contact details of the data controller

The person in charge of the processing is Semkel SA, registered with the RCS of Lyon under the number 894 689 975, whose head office is located at 37-39, rue Dubois-Crancé 69 600 Oullins.

2. Nature of the data processed

Semkel collects the following data:

• • Identity data: title, surname, first name, date of birth, place of birth.

• • Contact data: Email, telephone, postal address.

• • Professional data: Company name, company sector, job title, qualifications.

• • Bank data: Bank details, SEPA direct debit, payment method, credit card number.

• • Data for monitoring the commercial relationship: Services purchased, publications made, history, exchanges and various communications.

• • Connection data: IP address of the requesting device connected to the Internet, date and time of access, name and URL of the file accessed, the browser used, the name of the access provider.

Some personal data that may be requested from you are mandatory. The mandatory nature of the data collected is indicated by an asterisk or other sign, the other data is optional. Failure to provide the required personal data will result in the impossibility of accessing the Semkel services for which they are required.

3. Sources of data

Your personal data is collected directly from you. It may also be collected from other sources:

• • Categories of indirectly collected data: sources

• • Connection data: Cookies

4. Purposes of data processing and legal basis

Semkel processes your personal data for the purposes detailed in the following summary table:

Goals	Legal basis	Category of data processed
Customer relationship management operation	The need to execute the contractual relationship with the customer or partner	Identity data, contact data, data related to the professional activity, data of follow-up of the commercial relation, banking data
Accounting and tax management: issuing of invoices, collection and accounting	The need to respect a legal obligation	Identity data, contact data, commercial relationship follow-up data
Complaints management, quality control/audit	The need to comply with legal and contractual obligations, the legitimate interest of Semkel to improve the quality of services offered by Semkel	Identity data, contact data and data for the follow-up of the commercial relationship
Retention of bank data	The need to comply with legal obligations under the monetary and financial code	Banking data
Response to a contact request on the contact form	Semkel's legitimate interest in developing its business	Identity data, contact data, business data
Sending Semkel emails	Your consent	Identity data, contact data
Management of requests for access, rectification and opposition rights	The need to comply with legal obligations	Possibly all data depending on the request
Analysis of connection data in order to identify trends in the use of the Site and to optimize it	Your consent	Connection data

5. Recipients

We only share your data when strictly necessary and only with the following third parties: Internal recipients: authorized Semkel personnel from the marketing department, the accounting department, the sales department, the auditing department, the IT department, authorized personnel of Semkel's service providers in order to execute the purposes described above: e.g., accountant, IT department, hosting company, website maintenance provider, training provider. External Recipients: Semkel may also disclose data to third parties when it is necessary to collect debts, investigate, prevent, take action regarding illegal activities, suspected fraud, situations that may involve potential security threats or if we believe, in our sole discretion, that your use of the Semkel.com website or Semkel services is in violation of the contractual documents binding us. In addition, personal data may be disclosed to a third party if Semkel is required to do so by law or regulation, by court order or if such disclosure is necessary in connection with an investigation or proceeding in France or abroad. As detailed in the Article "Cookies" below, some of your data is collected by the company Google Inc, whose servers are located in the United States. The data is transmitted on the basis of Google's adherence to the Privacy Shield.

6. Place of treatment

Some of our service providers process your data outside the European Union, where data protection and privacy regulations do not provide the same level of protection as in other parts of the world, such as the European Union. Where data is transferred outside the European Union to a country that does not benefit from an adequacy decision of the European Commission, your data is adequately protected by standard contractual clauses approved by the European Commission or by any other mechanism recognized by applicable law.

7. Shelf life

Your personal data will be kept for the time necessary to achieve the purposes described above. However, the personal data allowing to establish the proof of a right or a contract, or preserved under the respect of a legal obligation, are archived in an intermediate way for a duration not exceeding the duration necessary to the purposes above mentioned. Your purchase data is kept for a period of two years from the date of your last purchase. Thereafter, this information is archived for a period of 10 years. Data relating to customer or partner contracts are kept for the duration of the contractual relationship, then archived for the applicable statute of limitations. Personal data used for marketing purposes are kept for a period of two years from the end of the contractual relationship for customers, partners and freelancers or for two years from the date of collection by Semkel or the last contact for prospective customers. Personal data related to complaints are kept for five years from the date of the complaint. The data relating to the bank cards are kept in the form of archives for the purpose of proof in the event of a possible dispute of the transaction, for a period of 13 months following the date of debit or 15 months in the case of the use of deferred debit payment cards.

8. Your Rights

Semkel implements technical and organizational measures that it deems appropriate to prevent the unauthorized destruction, loss, alteration or disclosure of your personal data processed by Semkel.

9. Data security

You have a right of access, rectification, limitation of processing and portability on the information that concerns you. You may also, for legitimate reasons, object to the processing of your data or request their deletion by Semkel. It is also possible to give us instructions on what to do with your data after your death.

10. Cookies

We use cookies on our website semkel.com. Cookies are files that are stored on your computer (laptop, tablet, smartphone, etc.) when you visit our website. Cookies are able to identify you as a customer and save your personal preferences as well as technical information. We use these different cookies to :

• • to operate our site (mandatory technical cookies);

• • to measure the audience of our website: the statistical and audience measurement cookies allow us to measure the number of visits, the number of pages viewed as well as the activity of the users on the website and their frequency of return. The statistical data is collected via the Google Analytics tool and is then returned to Semkel in an aggregated and anonymous form in a web interface to which only Semkel has access. Google Analytics is a web analysis service provided by Google. It uses cookies to process statistics and traffic information, to facilitate navigation and to improve the service for the user's convenience. For further information on how Google treats your personal data in the context of tools such as Google Analytics, you can consult its privacy policy via the following link: https://policies.google.com/technologies/cookies.

• • to offer you personalized advertisements according to your navigation and your profile.

Your consent to the use of statistical and audience cookies and targeted advertising cookies is requested when you access the site for the first time. To make this choice, the user can "Accept" or "Decline" by clicking on the link available in the Cookies banner displayed when first connecting to the site. You can change your choice at any time by clicking here.

11. Contact

To exercise your rights or if you have any questions about the processing of your data, you can contact us by writing to the following e-mail address: nous-contacter@semkel.com or by sending a letter to Semkel, Personal Data Protection Department, Semkel, 37, rue Dubois-Crancé 69 600 Oullins, and indicating your name, first name, customer number, e-mail address and postal address. In the event of a dispute, a complaint may be lodged with the CNIL.

12. Changes to the Privacy Policy

Semkel reserves the right to change this privacy policy at any time. Users are invited to review the latest version of this document on the website and Semkel will notify them of any material changes through the website or through our usual communication channels.