PRIVACY POLICY

This notice aims to provide you with information regarding the processing of your data collected through the website www.s3ns.io and its subdomains (hereinafter "the S3NS Website"). When you visit the S3NS Website, Thales Cloud Sécurisé SAS, a simplified joint-stock company registered in the Paris B Trade and Companies Register under number 908 211 980, with its head office located at 54-56 rue Hoche - 75008 Paris, France (hereinafter "S3NS" or "we"), may collect and process information about you. In this case, S3NS acts as the data controller, meaning that S3NS determines the purpose and means of processing your personal data.

Is the collection of your personal data mandatory when you visit the S3NS Website?

The collection of personal data (including cookies) during browsing, measuring the audience of the Website, and using online services is optional. However, we must collect and process personal data about you to allow you to access certain sections of our Website or specific online services, to respond to your information requests, and to ensure the security of the S3NS Website, as explained below.

What personal data do we collect and process?

When you visit the S3NS Website, we may collect and process the following information about you:

• Identity data such as your first and last name;
• Data related to your position;
• Contact data such as your email address, phone number, country of residence;
• Data related to your navigation on the Website (connection logs, IP address, technical data related to the equipment and browser used, cookies, and other trackers);
• Data related to the management of contacts and technical services (timestamp and subject of requests, follow-up, actions taken).

What are the purposes and legal basis for the processing of your personal data?

Your personal data is used for the purposes and on the legal basis described below:

Purposes of Personal Data Processing: Legal Basis for Processing

Communication & Marketing

• Responding to your requests and messages: S3NS legitimate interest

• Sending you emails with information about S3NS products, services, and activities: Your consent*

• Allowing you to download content related to S3NS products, services, and activities (white papers, etc.): Your consent*

• Customizing your visit to the S3NS Website and recommending content based on your interests and preferences: Your consent*

• Conducting audience statistics for the S3NS Website and usage of online services (preferences, subscriptions to our newsletters, etc.): S3NS legitimate interest

• Conducting commercial prospecting, market research, and satisfaction surveys related to S3NS products, services, and activities via email and telephone: Your consent*

Technical Management of the S3NS Website

• Ensuring the security, maintenance, and improvement of the S3NS Website: S3NS legitimate interest

• Managing navigation on the S3NS Website: S3NS legitimate interest

*You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

How long do we keep your personal data?

The information about you that is collected from the S3NS Website for communication and marketing purposes is retained for a maximum period of 36 months from the date of collection. The information necessary for the technical management of the S3NS Website is retained for a period of 13 months from the date of collection.

Who are the recipients of your personal data?

• Les sociétés du Groupe Thales S3NS is a subsidiary of the Thales Group, an international group with numerous distinct legal entities. Consequently, we may share your data with other companies within the Thales Group and their employees. When your personal data is transferred by a Thales company established in the European Economic Area (hereinafter "EEA") or the United Kingdom to a Thales company established outside the EEA or the United Kingdom, in a country that has not been recognized as offering an adequate level of protection by a decision of the European Commission or the United Kingdom, this transfer is based on the Binding Corporate Rules or "BCR" adopted by Thales.

Thanks to Thales' BCR, rardless of where your pegersonal data is processed within the Thales Group, it benefits from the same standard of protection. You can access Thales' BCR by clicking here.

• S3NS external suppliers and service providers S3NS uses external suppliers and service providers responsible for, among other things, hosting and maintaining the S3NS Website and/or carrying out marketing and communication activities on behalf of S3NS. S3NS ensures that third parties processing personal data on its behalf comply with the instructions issued by S3NS and implement appropriate protective measures. When your personal data is transferred to a third-party company established outside the EEA, in a country that has not been recognized as offering an adequate level of protection by a decision of the European Commission, S3NS relies on the European Union's Standard Contractual Clauses as adopted by the European Commission (hereinafter "SCC") or any other appropriate safeguard. You can obtain a copy of the SCC signed by Thales by clicking here.

• Public, Governmental, and/or Judicial Authorities S3NS may be required to disclose your data to public, governmental, and/or judicial authorities by law or in the context of a dispute, judicial procedure, or any other request from such an authority. In this case, we ensure that only the strictly necessary data is communicated. It is also specified that S3NS does not sell your personal data to third parties.

What security measures are implemented to protect your data?

S3NS is committed to implementing the necessary technical, organizational, and contractual security measures to protect your personal data against any accidental or unlawful destruction, loss, alteration, disclosure, or unauthorized access. However, due to the public and unsecured nature of the Internet, S3NS cannot be responsible for the security of personal data transmissions over the Internet. Additionally, the S3NS Website may contain links to third-party websites. S3NS makes no representations or warranties, express or implied, regarding these third-party sites. The publishers and operators of third-party websites may collect, use, or transfer personal data under terms and conditions different from those of S3NS, which you should consult.

What are your rights regarding your personal data?

You have the right to access your personal data. You can also request the rectification or erasure of your personal data. You also have the right to withdraw your consent or object to the processing of your personal data and to request a restriction of such processing, if applicable. Finally, you can request the communication of your personal data in a structured and standard format. For any request to exercise your rights or in case of a complaint, please send an email to support.internet@thalesgroup.com. You can also contact the Thales Group Data Protection Officer at the email address dataprotection@thalesgroup.com. In all cases, you have the right to lodge a complaint with the competent data protection authority.

Update of the S3NS Website Notice

This S3NS Website Notice is regularly updated to reflect, among other things, technological developments and legislative and regulatory changes.

Date of the last revision of this notice: July 2024