#PERSONAL DATA POLICY

thecamp Privacy and Personal Data Protection Policy

This page explains the principles and our commitments for the protection of your Personal Data
Personal and aims to inform you about:

• The Personal Data that thecamp collects and the reasons for this collection,
• How this Personal Data will be used,
• Your rights as a person concerned by our data processing.

This Policy applies to all thecamp services regardless of their nature (site, applications, services...)

The Data Controller

The data controller is thecamp. The contact details are as follows:
• Postal address: 550 Rue Denis Papin, 13100 Aix-en-Provence
• Email: rgpd@thecamp.fr

How thecamp implements Personal Data Protection

thecamp is committed to taking into account the protection of your Personal Data and your privacy when designing the services offered to you (Privacy by design). To ensure security and guarantee the respect and proper exercise of your rights, measures to ensure the protection of your
Personal Data is implemented (Privacy by default).

What Personal Data does thecamp use?

thecamp undertakes to collect only data that is strictly necessary for the performance of the services offered and which are mainly: names, first names, postal and email addresses. In the event that optional data is requested from you, thecamp will clearly inform you about the Personal Data necessary to perform the service. Personal Data that is collected directly from you is only used for
uses that have been brought to your attention. When they have not been collected from you, thecamp will inform you as soon as possible of the
treatment for which they were collected and its purposes. Personal Data is used to offer you other services, only if you have agreed to benefit from services or to receive additional communications.

What is the basis for the legitimacy of our treatments

thecamp relies on the following legitimate bases in order to be able to process Personal Data:

Execution of the contract
The legal basis for the processing of the user's Personal Data that is collected is the execution of the contract. In this regard, the user is obliged to provide the data necessary for its execution. If he does not provide this data, possibly to the online payment provider, it will not be possible to perform the service.

Legal Obligations
The obligations by which thecamp complies with a legal or regulatory obligation fall into this category, such as the management and issuance of invoices as part of thecamp's relationship with customers.

Consent
For the following purposes, the legal basis for the processing of the user's Personal Data will be the user's consent, if he has given it:

• Management of registration on the site and applications.
• Management of the sending of information on the activities of the site and personalized information adapted to the user profile.
• Response to the exercise of rights, as well as to questions and complaints from the user.

The withdrawal of consent for these treatments on the part of the user will not condition the execution of the contracts concluded by the person concerned with thecamp.

Legitimate interest
For the following purposes, the legal basis for the processing of the user's Personal Data will be the legitimate interest of thecamp:

• The development of profiles by means of navigation on the site by a user registered on the site, as well as all users who have provided us with their data for any other purpose.
• The development of profiles to send information on exclusive promotions, the latest news and personalized information adapted to the user's profile.
• Sending satisfaction surveys on products purchased or services used by thecamp customers in order to ask for their opinion and improve them.

Our legitimate interest lies in being able to ensure that our site remains secure, and in being able to help thecamp understand the needs, expectations and satisfaction levels of users, in order to improve services, products and brands in this way. All these actions are carried out in order to improve the level of customer satisfaction and to ensure a unique browsing and buying experience.

Personal Data of minors

Some services may be used by minors under the age of fifteen. In this case, minors must obtain the consent of their parents or legal representatives.

Who can your Personal Data be communicated to?

Your data is likely to be transmitted:

• Has internal services at thecamp: the departments in charge of executing the services subscribed to, in particular Customer Service, Sales Administration...
• To service providers external to thecamp: technical service providers, including subcontractors;
• To thecamp's commercial partners, after having informed you beforehand and allowing you to express your choices using a checkbox.

Can your Personal Data be transferred outside the European Union?

thecamp carries out all the processing of your Personal Data on the territory of the European Union (EU).
However, for certain specific services, thecamp may use subcontractors established outside the EU. Some Personal Data may then be communicated to them for the strict needs of their missions. In this case, in accordance with the regulations in force, thecamp requires its
subcontractors that they provide the necessary guarantees to supervise and secure these transfers, in particular by signing standard contractual clauses from the European Commission.

How long does thecamp keep your Personal Data?

The retention period of your Personal Data depends on the service subscribed for. thecamp undertakes not to keep your Personal Data beyond the period necessary for the provision of the service, and therefore for your use of the service, plus the retention period imposed by the applicable rules on legal prescription.

Is your Personal Data protected?

thecamp undertakes to take all measures to ensure the security and confidentiality of Personal Data and in particular to prevent them from being damaged, deleted or from being accessed by unauthorized third parties.
In addition, in the event of a security incident affecting your Personal Data (destruction, loss,
alteration or disclosure), thecamp undertakes to comply with the obligation to notify Personal Data breaches, in particular to the CNIL.

What are your rights to your Personal Data?

You have the right to exercise the rights provided for by the regulations in force applicable to personal data at any time with thecamp, provided that you meet the conditions:

• Right of access: you may have communication of your Personal Data processed by thecamp;
• Right to rectification: you can update your Personal Data or have your Personal Data processed by thecamp rectified;
• Right to object, in particular to receive commercial communications: you can express your wish to stop receiving communications
commercial from thecamp or request that your Personal Data no longer be processed.

• Right to erasure: you can request the deletion of your Personal Data;
• Right to limitation: you can request the suspension of the processing of your Personal Data;
• Right to portability: you can ask thecamp to recover your Personal Data in order to dispose of it.

When subscribing to a service or collecting your Personal Data, you are given the address (postal and/or electronic) to which to send your request to exercise your rights. All requests must be accompanied by proof of identity. thecamp is committed to responding to your requests to exercise your rights as soon as possible and in any event in accordance with legal deadlines.

Whom to contact?

The appointment of a Data Protection Officer testifies to thecamp's commitment to the protection, security and confidentiality of its customers' Personal Data. You can contact the Data Protection Officer at the following address: dpo@thecamp.fr
You also have the right to contact the Commission Nationale de l'Informatique et des Libertés (CNIL) (CNIL), 3 Place de Fontenoy - TSA 80715 - 75334 Paris Cedex 07 (https://www.cnil.fr/) any complaint relating to the way in which thecamp processes your Personal Data.

Modification of this policy

Updates to this Privacy Policy will be posted on the thecamp website.

Cookie Policy

The thecamp site and all of its web pages use cookies to distinguish you from other users of the site. This allows us to improve services and optimize your user experience. A cookie is a string of information in text format that is transferred by a website to your computer's hard drive so that the website remembers you. Cookies can help a website adapt content to your interests more quickly. Most major websites use cookies. In general, a cookie contains the name of the domain from which the cookie originated; the “lifetime” of the cookie and a value, which is a unique number that is created randomly.

On the thecamp site, there are [two] types of cookies:

• temporary cookies, which remain in the cookie file of your browser until you leave the site and
• persistent cookies, which remain much longer in the cookie file of your browser (the duration depends on the lifetime of the cookie in question).

Temporary cookies are used:

• To allow you to transfer information from one page to another on our site without having to re-enter it and
• To allow you to access stored registration information. Persistent cookies are used:
• To help us identify you as a visitor (using a number, not personally) when you return to our website;
• To allow us to adapt content or advertising to your interests, or to avoid showing you the same ads several times and
• To compile anonymous aggregate statistics that allow us to understand how visitors use our site and help us improve the structure of our website. We cannot identify you personally in this way.

You have the option of accepting or refusing cookies during your first visit to the site and then this will be offered to you regularly.
A window will allow you, when you access the site, to know the nature of cookies and to refuse those that are not absolutely necessary for navigation or for transactions, the service may be degraded as a result.
And also by changing your browser settings you can delete and block all cookies from the thecamp site. To do this, change your browser setting to refuse some or all cookies. Please note, however, that if you decide to block cookies via your browser,
some elements on our website may not function properly. You may lose some interactive features of the service if cookies are disabled.

GLOSSARY

Each term beginning with a capital letter has the meaning given to it below.

“Privacy and Personal Data Protection Policy” and “Policy” : refers to this Policy describing the measures taken for the processing, exploitation and management of your Personal Data and your rights as a person concerned by the processing.

“Personal Data” : Refers to any information relating to you and allowing you to be identified directly or indirectly.

“Treatment” : Refers to any operation or set of operations applied to your Personal Data.

“Data controller” : Refers to thecamp which processes your Personal Data.

“Personal data breach” : Refers to a security breach, resulting, in an accidental or unlawful manner, in the destruction, loss, alteration, disclosure or unauthorized access to your Personal Data.

“Recipient” : Refers to the service or company that receives communication and can access your Personal Data.