Personal Data Charter

A. Information You Provide Directly

We collect information that you communicate to us directly when you use our Site and our services. This is particularly the case when you:

• Create an online account;
• Subscribe to our newsletter program;
• Use the Platform;
• Make online payments;
• Call us on the phone;
• Request information or a document;
• Communicate with us through third-party social networks;
• Request customer assistance; or
• Communicate with us in any other way.

The communication of your personal information is voluntary. However, if you do not provide some or all of the requested information, we may not be able to provide you with certain services or information. The categories of information we collect include:

• Identification and contact information (such as first name, last name, date of birth, postal address, means of contact) necessary for your identification when you use one of our services;
• Information necessary to process your request (billing address, phone number and email address, payment method, including your bank card number and expiration date, as well as the bank card holder when you make an online payment);
• Sociodemographic information (such as your age, occupation, gender, etc., mentioned when you register on the Platform); and
• Historical data of your contacts with us (We also design the history of our relationship when you contact the mizan secretariat or when you submit a complaint to us).

The data we request from you and which is essential to respond to your requests are identified by an asterisk or equivalent process on collection forms or specified as such orally at the time of collection. If you do not fill in the mandatory fields or do not provide the information indicated as mandatory, we will not be able to respond to your requests. In our premises or during events we organize, we may collect additional personal data under conditions and for uses that are specially notified to you on that occasion.

B. Information We Collect Automatically

We automatically collect certain information about you when you access the Site, including:

• Connection data: We collect information about the device you use to connect, as well as your use of the Site (such as operating system, browser type, use of proxy, device location deduced from your IP address, access times, pages visited, and the link that allowed you to access our Site).
• Information about your navigation (whether you are logged in or not): We may use cookies and other tracking technologies to collect information about you when you interact with our Site or emails we send you. This information is collected both when you are identified and when you are not, and can be reconciled with each other, regardless of the device used.
• Recording of calls to our customer service. Furthermore, in case of contact with one of our advisors, your conversations may be recorded for quality assurance purposes. You are then informed by a pre-answer message. You will always be offered other means to contact us if you do not wish your conversation to be recorded.

Moreover, depending on the data already in our possession, certain forms may be pre-filled.

C. Third-Party Information

In some cases, we may also collect information you provide about other people, for example when you designate an arbitrator or opposing party and request that this person be contacted electronically or by post. We use such information only to respond to your requests.

A. Necessary to Provide Our Services

We use your data to manage contracts and subscribed services and meet our contractual obligations, including:

• Provide the services you requested online or in our premises, process transactions and billing or provide notifications;
• Manage your online account and the Platform; and
• Any other service, current or future in relation to our services and included in our Terms of Use.

B. Necessary for Our Legitimate Interest

In this case, we ensure that we take into account any potential impact this collection may have on you and Site users in general. If we believe that your interest or fundamental rights and freedoms override our legitimate interest, then we will not use your personal data on this basis and may ask for your specific consent.

• Customer relationship management.

We manage our relationships with you by maintaining a database that includes existing and potential customers.

• Ensure your navigation on the Site and improve your user experience.

You can generally browse the Site without having to provide us with data allowing us to identify you. However, information about your navigation is automatically collected (see the section "Information We Collect Automatically").

• Conduct studies and statistics.

We also use the information collected for study and statistical purposes, after making it anonymous or in any case having implemented processes intended to prevent the reattribution of data to an identified person. And/or Outside of these cases, they are also collected on the basis of your consent, for example when you create an account, fill out a contact form, send us a complaint or subscribe to a newsletter, which allows us to:

• Ensure the effectiveness of our services.

We use your data to communicate with you, manage your subscriptions to our newsletters and answer your questions, manage your complaints. In case of a phone call, mizan records conversations to manage complaints and for evidentiary purposes.

• Communicate with you about our services.

We collect and process your personal data for the purpose of pursuing our legitimate interest in managing and dynamically animating our service provision relationship, enhancing our corporate image and promoting our services.

• Important information on processing for payment incident prevention and management purposes

As part of the fight against internet fraud, information relating to your payments, as well as information relating to the device used to make the payment (in particular the operating system used, the location of the machine, the use or not of a proxy...) are collected automatically with your consent and are used to analyze your transactions for fraud detection and payment default prevention purposes. They may be transmitted to any third party authorized by law or designated by mizan for the sole purpose of verifying the subscriber's identity, the validity of the request and the payment method used. For any questions about these controls or in case of blocking of your account we invite you to contact us (see the Contact Us section).

We do not use personal information for purposes incompatible with those for which it was collected, unless such purposes have been subsequently approved by you. And/or

C. Necessary for Compliance with Our Legal Obligations

Certain data is also retained to meet our legal obligations and ensure the defense of our interests in case of dispute or legal action.

A. Access and Copy

You have the right of access and communication to your personal data. Before responding to your request, we are required to verify your identity. We may be led to ask you to provide us with more information to respond to your request. We will endeavor to respond to your request as soon as possible.

If you have a mizan account, you can directly access the data contained in your online account and the history of your transactions.

This access also allows you to correct, modify or delete your identification data and contact details.

If you cannot access your account or to access other data, contact us according to the methods indicated in the Contact Us section below.

B. Correction of Inaccurate Personal Data

You also have the possibility to request the correction of personal data concerning you that would be incorrect and the limitation of their processing during their correction. You also have the right, depending on the nature of the processing, to request that the personal data in our possession be completed. We may in this case ask you for supporting documents.

If you cannot access your account or to access other data, contact us according to the methods indicated in the Contact Us section below.

C. Withdrawal of Consent

When the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time.

To withdraw your consent, contact us according to the methods indicated in the Contact Us section below.

D. Data Erasure

You may also request the erasure of your personal data in the following cases:

• You consider that our processing of your data concerning you is no longer necessary with regard to the services subscribed or your use of the Site, or the achievement of the purposes referred to in this policy or that their retention is contrary to law;
• You have withdrawn your consent to the processing of your data (see above); or
• You object to the processing of your personal data for reasons relating to your personal situation.

Please note that notwithstanding the exercise of your right to erasure or limitation, we may retain certain personal data concerning you when the law requires or authorizes it, when we have a legitimate reason to do so (for example to allow us to justify the execution of a contract), for the exercise or defense of legal rights.

A. What is a Cookie?

A "Cookie" is a generic term that refers to a text file stored in a dedicated space on the hard drive of the device (e.g., Computer, tablet, smartphone, etc.) of a media user (internet, applications, etc.), when consulting online content or advertising. This Cookie file allows its issuer to identify the device in which it is stored and thus to track the media user's activity, and to remember information, such as the user's preferences or information previously entered by the user in forms present on the media, during the validity or recording period of the Cookie. Some Cookies are essential for using the media, others allow optimization and personalization of displayed content, and others finally, to display advertisements.

Cookies do not allow a user to be directly identified, but identify a browser or a device. Information relating to content viewed on a media is directly associated with an identifier contained in the Cookie. When a user navigates on a media, this identifier is associated with the pages viewed, as well as more broadly with the path on the media and interactions (number of clicks for example): it is thus possible to track the navigation of a single user on the media.

The use of Cookies allows navigation data to be associated with the user's profile regardless of the device used through cookie exchange technologies implemented by the partner publishers of these Cookies, generally communication agencies or digital advertising service providers, so that a user's journey can be tracked regardless of the media or device used.

B. Cookies Used by mizan

When you connect to our Site, we may install four types of Cookies in your Device:

• Technical cookies to make your navigation on the site possible, ensure the security of the site and allow you to access the different products and services of the site.
• Online payment security cookies to prevent payment fraud.
• Sharing cookies allowing you to share content from our site with other people or to inform these other people of your consultation or your opinion concerning content of the Site.

When you visit our Site for the first time and mizan plans to place Cookies other than "technical" ones, we inform you that we use Cookies using an information banner at the bottom of the page. By continuing your navigation on the Site when this banner is displayed, you consent to our use of Cookies.

By using our site, you consent to the use of the aforementioned Cookies. However, you can choose to disable all or part of these Cookies at any time.

Your browser may allow you to choose to disable all or part of Cookies, either systematically or according to the issuer. You can also configure your navigation software so that the acceptance or refusal of cookies is offered to you (case by case or in full).

However, we remind you that disabling all Cookies will prevent you from using our site under normal conditions, except for basic functions.