SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

Privacy and Cookie Policy

This "Privacy and Cookie Policy" is updated regularly: you are welcome to view it as often as you like in order to

stay informed of any recent changes.

I : Scope of the Skeepers "Privacy and Cookie Policy"

Skeepers, a simplified joint-stock company with a capital of 9,133,750 euros, listed in the Marseille Trade and Companies

Register under number 879 038 990 and with its registered office at 18-20 Avenue Robert Schuman CS 40494, 13002 Marseille,

is the owner of the Website https://www.Skeepers.io/fr/.

It includes Solutions Ratings & Reviews (Verified Reviews), CX-

Management (ex-MyFeelBack and Mediatech), Predictive Marketing Activation (ex- Advalo), Influencer Marketing (ex-Hivency

and Octoly), Live Shopping (ex-Spockee) and User Generated Videos (ex-Teester).

Skeepers is particularly concerned with issues relating to confidentiality, as well as the protection of the personal data of Users

of its Website and/or services, as well as the protection of the personal data of its Customers. It takes this into account in the

design of any new solution it offers to its customers to improve their Customer Engagement.

Skeepers thus guarantees the highest level of protection of personal data in accordance with the Regulation (EU) 2016/679 of

the European Parliament and of the Council of April 27, 2016 (known as the "General Data Protection Regulation", hereinafter

"GDPR"), French law (Data Protection Act of 1978, known as "LiL") and, in general, with all regulations applicable to this in

terms of the protection of said personal data.

This "Privacy and Cookie Policy" describes in detail the policy and practices of Skeepers (or "the Skeepers Group") regarding

the collection, use and disclosure of personal data that it processes on its own behalf or on behalf of its Customers.

II : Contents of the "Privacy and Cookie Policy" of the Skeepers Group

1 : Definitions

2 : Processing of personal data of the Skeepers Group

A) Processing of personal data by Skeepers (Controller) on its Website

1. Contact form

2. Cookies

3. Processing of navigation data (trackers)

4. Management of applications and interviews (creation of a CV bank)

B) Processing of personal data by Skeepers (processor) as part of its Ratings & Reviews, CX Management, Influencer

Marketing, Predictive Marketing Activation and Live Shopping solutions

C) Processing of personal data by Skeepers and its Customers (joint Data Controllers) as part of its User Generated Videos

and Influence solutions.

D) Processing of personal data by Skeepers (Contoller) with regard to its Customers

3 : Sharing of collected personal data

4 : Security and confidentiality of personal data

5 : Rights relating to personal data and their management

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

III : Contents of the "Privacy and Cookie Policy" of the Skeepers Group

1 : Definitions

"Supervisory Authority" means an independent public authority that is established by a Member State under Article 51 of the

GDPR, and to which any data subject may lodge a complaint regarding the protection of his or her personal data, i.e., the

French Data Protection Commission (CNIL);

"Consent" by the data subject is any free, specific, informed, and unambiguous manifestation of will by which the data subject

accepts, by a declaration or by a clear positive act, that personal data relating to them may be processed;

"Consumer", a natural person who acts for purposes that are not within the scope of his trade, business, craft or profession;

"Personal data" or "Personal information": any information relating to an identified or identifiable natural person (hereinafter

referred to as the "data subject"); is deemed to be an

"identifiable natural person": a natural person who can be identified, directly or indirectly, in particular by reference to an

identifier, such as a name, an identification number, location data, an online identifier, or to one or more elements specific to

their physical, physiological, genetic, psychological, economic, cultural, or social identity.

In simpler terms: "personal data" shall be understood as any kind of "personal information" or any information which concerns

the Users;

"Joint controllers" are two or more data controllers who jointly determine the purposes and methods of the personal data

processing they implement;

"Controller ", the natural or legal person, public authority, service or other body which, alone or jointly with others, determines

the purposes and means of processing; when the purposes and means of this processing are determined by Union law or the

law of a Member State, the controller may be appointed or the specific criteria applicable to his appointment may be provided for

by the law of the Union or by the law of a Member State;

"Service(s)", refers to the service(s) provided by the Skeepers Group (Ratings & Reviews, CX- Management, Predictive

Marketing Activation, Influencer Marketing, Live Shopping and User Generated Videos) subscribed by the Customer;

"Site" or "Platform": website from which the Skeepers Group offers its Ratings & Reviews, CX-Management, Predictive

Marketing Activation, Influencer Marketing, Live Shopping and User Generated Videos, accessible from the following domain

name: https://www.Skeepers.io/fr/

;

"Processor": the natural or legal person, public authority, department or other body that processes personal data on behalf of

the Controller;

"Processing " means any operation or set of operations, whether or not carried out by automated means and applied to

personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration,

retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination,

limitation, erasure or destruction.

In simpler terms: "Data processing" is any form of use of your data;

"User", any person browsing the Website https://www.Skeepers.io/fr/;

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

"Breach of personal data", a breach of security resulting, accidentally or unlawfully, in the destruction, loss, alteration, or

unauthorized disclosure of personal data transmitted, stored, or otherwise processed, or the unauthorized access to such data.

2 : Processing of personal data of the Skeepers Group

A) Processing of personal data by Skeepers (Controller) on its Website

1. Contact form

For any contact request made via the form available on the https://www.Skeepers.io/fr/contact/

page, the User gives his consent

to Skeepers to process the following personal data via a checkbox:

•

Last name and first name;

•

Email address;

•

Telephone number;

•

Company name;

•

Job level;

•

Post held;

•

Sector.

They must be filled in so that we can contact you again to answer your request, but also to offer you additional solutions that

may be of interest to you given your needs (Ratings & Reviews, CX-Management, Predictive Marketing Activation, Influencer

Marketing, Live Shopping and User Generated Videos). Otherwise, it will be impossible to send the contact form.

Skeepers will also be able to process any other personal data that the User will have deliberately chosen to communicate to it

during their exchanges.

Your information will be kept for three years, before it is deleted.

2. Cookies

Access and navigation on the Site https://www.Skeepers.io/fr/

triggers the processing of data collected through cookies, pixels

and other similar technology (collectively referred to as "Cookies" in this "Privacy and Cookie Policy"), which are necessary for

the Site to function, in order to make your visit to the Site as easy, reliable and useful as possible.

Non-essential cookies require the prior consent of the User before their use.

•

What is a cookie?

Cookies are basic digital information (text files) regarding the use of the website by Internet users; they do not personally identify

the Internet user, but identify the computer that the Internet user is using.

As such, Cookies allow us to recognize an internet user's computer or mobile device each time the user visits the Skeepers site

and, therefore, personalize and improve their browsing experience. Cookies contain information that the Site uses to make

communication between the user and their browser more efficient.

To find out more about cookies, and in particular how to block them on Chrome, Firefox, and Internet Explorer browsers:

https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser

However, you are advised not to deactivate the so-called "essential" cookies from your browser as you may no longer have

access to the Site and be unable to navigate it.

Where applicable, Skeepers declines all responsibility for the consequences related to the degraded behavior of the Site

resulting from the inability to use the Cookies necessary for its operation.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

•

Why does Skeepers use cookies?

Skeepers uses so-called "essential" cookies ("necessary" is the term used by specialized sites, in particular, on the CNIL site)

whose function is to facilitate your access to the Site, while helping you navigate and use all the features of the Site.

These cookies are also used to detect and prevent fraud.

These cookies do not require your consent as they are strictly necessary for the Site to function:

Cookie name

Cookie ID

Purpose

Host name

Category

Foundation

pll_language

d17d8624-

ba68-4190-

905d-

5cdd3c9fe4bc

Configuration

of the language

of the Website

by the User

www.skeepers.io

Functional

Consent

_gid

dae338ca-6f42-

40a5-bd64-

115d11422ed4

Anonymous

statistics

skeepers.io

Performanc

measureme

nt cookies

Consent

_ga

80f43923-5f82-

4bce-972d-

3bce75ed342a

Anonymous

statistics

skeepers.io

Performance

measurement

Consent

_gat

f665e227-8f34-

4a17-a9c5-

7cfc6ed3f43d

Anonymous

statistics

skeepers.io

Performance

measurement

Consent

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

In order to find out more, to refuse, or to accept all or part of these functionality and performance Cookies, you can

visit our cookie banner at any time.

By visiting the Skeepers Site, "third-party Cookies" may be installed: these are Cookies placed on a User's computer by the

server of a domain separate from the Skeepers site. As such, a third-party Cookie "collected" on the Skeepers Site has not been

placed there by Skeepers, but by its advertising partners. These companies can use them to establish a profile of your interests

and offer you relevant adverts on other websites. They do not store personal data directly, but are based on the unique

identification of your browser and the device with which you are accessing the Internet. If you do not allow these cookies, your

advertising will be less targeted.

These are cookies stored by the following "hosts":

Display name

Host name

Host

Purpose

Retention

period

zoominfo.com

H21

Third-party advertising

Unknown

https://www.zoominf

o.com/about-

zoominfo/privacy-

policy

youtube.com

Ensure connection and

integration with YouTube

Session, 180

days

https://www.youtub

e.com/intl/ALL_fr/ho

wyoutubeworks/use r-

settings/privacy/

www.slideshare.net

H30

Third-party advertising

Unknown https://www.slidesh

are.net/privacy

www.netreviews. eu

H12

Internal cookies

90 days

This Privacy and

Cookie Policy

www.linkedin.com

H16

Ensure connection and

integration with LinkedIn

731 days

https://fr.linkedin.co

m/legal/privacy-policy

www.facebook.com

H18

Ensure connection and

integration with Facebook

Session

https://fr-

fr.facebook.com/ab

out/privacy/

www.dailymotion.

com

www.dailymotion.

com

Ensure connection and

integration with Dailymotion

Unknown https://legal.dailymo

tion.com/fr/politique

-de-confidentialite/

ws.zoominfo.com

H22

Third-party advertising

Unknown https://www.zoominf

o.com/about-

zoominfo/privacy-

policy

skeepers.kinsta.clo

H31

Internal cookies

Unknown

This Privacy and

Cookie Policy

s7.addthis.com s7.addthis.com H8

Third-party

advertising

Unknown

room.myfeelback

.com

room.myfeelback.

com

H28

Internal cookies 360 days This Privacy and

Cookie Policy

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

Display name

Host name

Host

Purpose

Retention

period

pi.pardot.com

H11

Third-party

advertising

Session, a

few

seconds,

3,650 days,

3,650 days

https://www.salesfor

ce.com/company/pri

vacy/

pardot.com

Third-party

advertising

Session, a

few

seconds,

3,650 days,

3,650 days

https://www.salesfor

ce.com/company/pri

vacy/

netreviews.com

H33

Internal cookies

3,650 days,

3,650 days

This Privacy and

Cookie Policy

myfeelback.com

H27

Internal cookies

360 days

This Privacy and

Cookie Policy

mister-auto.com

H20

Third-party

advertising

Unknown https://www.mister-

auto.com/politique-

de-confidentialite/

linkedin.com

H19

Ensure connection and

integration with LinkedIn

Session, 1 day,

731 days, 30

days

https://fr.linkedin.co

m/legal/privacy-policy

kinsta.cloud kinsta.cloud H25

Third-party

advertising

Unknown Unknown

js.hs-banner.com js.hs-banner.com H29

Third-party

advertising

Unknown

js.hs- analytics.net

js.hs-analytics.net

H24

for the purpose of learning

how you use the Website,

widgets; applications and to

create a meaningful

Website and widgets

Unknown

hubspot.com hubspot.com H23

CRM

Unknown

https://legal.hubspo

t.com/privacy-policy

google.com google.com H10

Third-party

advertising

Unknown http://www.google.c

om/policies/privacy

get.skeepers.io

H36

Internal cookies

Unknown

This Privacy and

Cookie Policy

get.netreviews.com

H34

Internal cookies

Unknown

This Privacy and

Cookie Policy

facebook.com

H15

Ensure connection and

integration with Facebook

90 days https://fr-

fr.facebook.com/ab

out/privacy/

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

doubleclick.net

Google Marketing Platform

brings together your

analytics and advertising

solutions to help you reach

users effectively, gain more

detailed insights and drive

better marketing results.

Unknown

https://policies.goog

le.com/privacy?hl=e

Display name

Host name

Host

Purpose

Retention

period

dmxleo.com dmxleo.com H2 Third-party advertising

Unknown Unknown

dailymotion.com

Ensure connection and

integration with Dailymotion

https://legal.dailymo

tion.com/fr/politique

-de-confidentialite/

cookie-

cdn.cookiepro.com

cookie-

cdn.cookiepro.com

H32

Non-essential cookie

consent management

banner

6 months

This Privacy and

Cookie Policy

connect.facebook

.net

connect.facebook

.net

Ensure connection and

integration with Facebook

90 days

https://fr-

fr.facebook.com/ab

out/privacy/

avis-verifies.com

H14

Internal cookies Unknown This Privacy and

Cookie Policy

Verified Reviews

H13

Internal cookies

Unknown

This Privacy and

Cookie Policy

ads.linkedin.com

H17

Ensure connection and

integration with LinkedIn

Session https://fr.linkedin.co

m/legal/privacy-policy

addthis.com

Third-party

advertising

Unknown

https://www.addthis.

com/privacy/terms-of

service/

4. Processing of navigation data (trackers)

Whenever you consult the Site and especially when you access the contact form, Skeepers will collect the hardware and

software data from your computer. This data may include: your IP address and browser settings (type of browser used, browser

language, time zone, referring website, domain names of sites visited, and information about your online activity: dates and

times of access and website addresses from which you accessed the Site).

5. Management of applications and interviews (creation of a CV bank)

Any application received for a job offered within the Skeepers Group, or spontaneously, will be treated with the greatest care

and attention.

If, unfortunately, your profile has not been retained, we will keep your information (CV and cover letter) for 2 years, before

deleting it, unless you exercise your right to object or delete it before the end of this period.

Their processing is justified by the legitimate interest of the Skeepers Group to carry out recruitment as well as to constitute a

CV-library. The pre-contractual basis justifies the processing and retention of data when the candidate has been selected to join

the Skeepers Group.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

You have various rights over your information, including those of access, update, opposition and deletion, the methods for

exercising these rights are presented in section "5: Rights relating to personal data and its management".

B) Processing of personal data by Skeepers (processor) as part of its Ratings & Reviews, CX Management, Influencer

Marketing, Predictive Marketing Activation and Live Shopping solutions

Skeepers is required to process personal data as part of its Ratings & Reviews, CX-Management, Influencer Marketing,

Predictive Marketing Activation, and Live Shopping as a Processor on behalf of its Customers.

Its Customers, as Data Controllers, ensure compliance with the Principles relating to Processing of Personal Data (Article 5 of

the GDPR), i.e. the lawfulness, fairness and transparency of the personal data collected from Data Subjects, which they

subsequently transmit to the Skeepers Group.

The Skeepers Group requires its Customers to comply with the GDPR and, prior to any collection of their data and in

accordance with Articles 12 et seq. of the Regulation, to inform their Consumers, in order to avoid any confusion when

their personal data is processed by the SKEEPERS Group.

Personal data which is communicated to the Skeepers Group must be exact, adequate, relevant, and limited to what is

necessary according to the explicit and legitimate purposes determined by the Controllers. Skeepers, under its Ratings &

Reviews, CX-Management, Influencer Marketing, Predictive Marketing Activation, and Live Shopping, keeps this personal data

securely for a period not exceeding that necessary for the purposes for which it is processed.

Customers of the Skeepers Group remain solely responsible to Data Subjects for any lack of information, inaccuracy,

error or omission relating to their Data.

The Skeepers Group declines all responsibility in the event of a breach of these fundamental principles by its

Customers, and invites Data Subjects who feel that their rights have been violated, to contact the offending company

directly.

The table below details the data processing implemented by Skeepers under its Ratings & Reviews solution (Verified

Reviews) on behalf of its Customers:

Nature of the operations carried out on personal data

■

Receipt

■ Collection

■ Registration

■ Retention

■ Modification

■ Consultation/Access

■ Use

■ Erasure

■ Organization

■ Extraction

■ Communication

■ Dissemination

■ Provision

■ Destruction

Purposes of personal data processing operations carried

out by Skeepers on behalf of the Customer

•

Management, publication and dissemination of

consumer reviews on the Customer's website, as

well as on partner commercial sites and Search

engines;

• Receipt of Customer data;

• Sending email/SMS campaigns;

• Reception and management of the Consumer reviews

of the Customer;

• Extraction and analysis of verbatim, key words and

verbatim polarity;

• Allow the Data Controller to answer the

questions/needs of his customers in the event of

dissatisfaction with said purchase;

•

Publication of consumer opinions on the Customer's site

and on search engines.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

Categories of personal data processed

•

Consumer's last name;

• Consumer's first name;

• First name and first letter of the Consumer's last name

on the published Reviews;

• Consumer's email;

• Order number/reference;

• Order date;

• IP address;

• Verified Reviews Widget cookies;

• The date of publication of the Customer Review;

• The Product purchased;

• The place of Purchase (in case of Purchase in store).

• The ratings assigned by the Consumer to his

consumer experience;

• Their comments and observations on their

consumer experience;

• The date and time of submitting the Review;

• The Consumer's response(s) to the Customer's

comment(s) in relation to a Review;

• The response(s) from Consumers to questions asked

by Internet users on the Customer's site.

No sensitive data shall be accepted/processed.

Categories of data subjects (hereinafter "the Data subjects")

■ Customer's employees

■ Customer's customers

Retention period(s)

Personal data shall be stored for 18 months after sending the

VERIFIED REVIEWS email, if no

review is submitted, or 18 months

after submitting the Review, when a consumer has submitted a

Review.

Personal data attached to each Review shall be deleted by

automated anonymization.

Anonymized reviews are kept for a period of 5 years from the date

of their publication, for statistical purposes only.

They are deleted from the database and backups at the end of 5

years from the date of collection. The data deletion process will

take place over one (1) month.

The table below details the data processing implemented by Skeepers under its CX-Marketing solution (ex-

MyFeelBack and Mediatech) on behalf of its Customers

Nature of the operations carried out on personal data

■ Receipt

■ Collection

■ Registration

■ Retention

■ Modification

■ Consultation/Access

■ Use

■ Erasure

■ Organization

■ Structuring

■ Adaptation

■ Extraction

■ Communication

■ Dissemination

■ Provision

■ Interconnection

■

Destruction

Purposes of personal data processing operations carried

out by SKEEPERS on behalf of the Customer

Main purposes:

• Collection of information relating to the lived experience

of customers, prospects, partners, employees... of the

CUSTOMER's "customer insights": responses to the

collection of information relating to the lived experience

of customers, prospects, partners, employees... of the

CUSTOMER's "customer insights": responses to

surveys, reviews, information on lived experiences, etc.;

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

• Use of questionnaires, display of messages to visitors

and users according to their profile, their behavior on

the sites published by the CUSTOMER;

• Continuous enrichment of the CUSTOMER's

database by adding information to the CUSTOMER's

CRM tool.

Sub-purposes:

• Receipt of Customer data;

• Invitation of CUSTOMER contacts to participate in a

survey by sending messages;

• Improving the usability of customer insights by applying

enhancements, transformations, and analyses

determined by the CUSTOMER: data recoding,

transcription, translation, semantic analysis, etc.;

• Allow the CUSTOMER to react, according to the

insights collected, in order to address the

risks/opportunities and expectations of its customers,

prospects, partners, employees, etc.;

• Re-engagement of CUSTOMER contacts based on

collected insights;

• Analysis of the insights collected to improve the

customer experience, develop customer centricity

in their organization, etc.

• Communication of summary results of insights

analyses, and/or associated raw data.

• Management of Solution Users designated by the

Customer (assignment of access rights, as well as rules

for sharing of documents and results);

• Evaluation of the teams and people, internal or

external to the CUSTOMER's organization, thanks to

associated insights.

Categories of personal data processed;

Non-exhaustive list, depending on the requirements of the

Controller:

• Respondent's last name;

• Respondent's first name;

• Respondent's email;

• Account name;

• Customer ID;

• Logs :

o User login,

o Time at which the action was performed,

o Page on which the action was performed,

o Result of the action;

•

Customer feedback collected defined by the

CUSTOMER (level of satisfaction, comments, etc.) "Raw

insights";

• Insights to implement the re-

engagement actions

determined by the CUSTOMER;

• Cookies;

• Etc.

No sensitive data shall be accepted/processed.

Categories of data subjects (hereinafter "the Data subjects")

■

Respondents (determined based on the Customer's needs:

employees, the Customer's customers, prospects, partners, etc.) ;

■ Users.

Retention period(s)

Responses to questionnaires and the personal data attached to

them shall be active and available on the customer's account for a

period of 24 months. This retention period is justified in order to

complete the relevant statistical studies for the Customer.

At the end of the 24 months, the a

nswers to the questionnaires and

the personal data attached to them are kept for a further 12

months. These cannot be viewed by the Customer, their retention is

only justified by the activation of the reversibility clause which could

occur during this period and will allow their extraction.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

Beyond these 36 months, personal data will be anonymized.

The data is kept according to the following policy: SFTP servers:

30 days

User logins: 6 months

Database snapshots: 15 days backup retention

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

The table below details the data processing implemented by Skeepers under its Influencer Marketing solution

(ex-Hivency and Octoly) on behalf of its Customers

Nature of the operations carried out on personal data

■ Receipt

■

Collection

■

Registration

■

Retention

■

Modification

■

Consultation/Access

■

Use

■

Erasure

■

Organization

■

Extraction

■

Communication

■

Dissemination

■

Provision

■

Reconciliation

■

Interconnection

■

Destruction

Purposes of the personal data processing operations

carried out by Skeepers

Main purpose:

Connect the Customer with influencers and consumers, users of

the platform, in order for the latter to create content presenting

and/or mentioning the Customer's products/services on social

networks and/or on the Customer's websites,

according to the

campaigns chosen by the latter.

Sub

-purpose:

• Creation and management of influencers'

and consumers' review campaigns;

• Access to the community of Skeepers influencers

for its Customers (United States only);

• Targeting of influencers and consumers, based on

their interests, their profile and the social media

settings (profiling);

• Creation and mangement of influencer and consumer

accounts (password changes, etc.) ;

• Acceptance or rejection of influencers and

consumers;

• Delivery of products;

• Transmission to the Customer of the postal address

and e-mail address of the influencers and

consumers in the event that the Customer handles

the delivery of the products;

• Connecting influencers/consumers with Skeepers'

external business partners, in relation to an offer likely

to interest the influencer/consumer. : Transmission of

email address, name, postal address and phone

number to third parties. All additional information is

subject to the prior agreement of the

influencer/consumer;

• Influencer and Consumer Rating;

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

• Messaging on the platform;

• Sending the Newsletter (after collecting the consent of

the influencers/consumers): the latest campaigns,

including those that match the profile of the

influencer/consumer, commercial and promotional

offers, new features of the platform, etc.;

• Reporting dashboard integrated in the platform;

• Integration and training session;

• Continued account management:

○ Email and telephone assistance

○ Assistance in the campaign strategy and best

practices.

Categories of personal data processed

• Obligatory:

o Last name and first name;

o E-mail;

o Address/location;

o Telephone number;

o Age;

o Gender;

o If the Instagram API: Data posted by

Influencers/consumers on Instagram ("Instagram

Data" present on the Instagram account such as

the Instagram account title, username/identifier,

date and country of creation, images,

descriptions, stories, number of views, number of

photographs, number of comments, and number

of followers);

o If YouTube API: Data posted by

influencers/consumers on YouTube ("YouTube

Data" present on the YouTube account, such as,

but not limited to, YouTube channel title, date and

country of creation, images and description,

number of views, number of videos, number of

comments and number of subscribers);

o Any information or content that the

influencer/consumer has agreed to share with

Skeepers via his/her social networks, such as

his/her profile picture, email address or list of

friends, and generally speaking, any information

that he/she has made public via these social

networks;

o Video (image and audio).

• Non-obligatory:

o Skin color (consent required);

o Relationship status;

o Parenthood status;

o Number of children;

o Date of birth;

o Pets;

o Shopping habits;

o Skin type/tone and concerns;

o Beauty regime;

o Hair color/type;

o Household income;

o Diet;

o Eyebrow color;

o Glasses;

o Sizes;

o Lifestyle;

o Skin problems (consent required);

o Cookies.

Categories of data subjects (hereinafter "the Data subjects")

■ Influencers meeting the criteria determined by

Influencer Marketing and the Customer;

■

Consumers meeting the criteria determined by the

Customer.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

Retention period(s)

The personal data of influencers and consumers are kept for the

duration of their activity on their Creator space. It will be

anonymized 6 months after

closure of their account.

The table below details the data processing implemented by Skeepers under its Predictive Marketing

Activation solution (ex-Advalo) on behalf of its Customers:

Nature of the operations carried out on personal data

■ Receipt

■

Collection

■

Registration

■

Retention

■

Modification

■

Consultation/Access

■

Use

■

Erasure

■

Organization

■

Structuring

■

Extraction

■

Communication

■

Dissemination

■

Provision

■

Reconciliation

■

Interconnection

■

Destruction

Purposes of the personal data processing operations

carried out by Skeepers

Main purpose:

Allow the

Customer to follow the online and offline path of its

consumers.

Sub

-purposes:

• Collect and clean consumer data from

a brand;

• Measure site traffic and have a complete view of all

consumer interactions in a single unified database (the

One-to-One Marketing Platform, hereafter the "PULSE

Platform");

• Reconcile web data with data from transactional

systems in order to reconcile identities;

• Facilitate Customer knowledge by enriching

customer data with qualifications;

• Facilitate customer knowledge by enriching customer

data with segmentation;

• Facilitate customer knowledge by enriching customer

data with product recommendation

;

• Determine which consumers are most likely to

receive a communication based on an objective

(statistical or probabilistic models);

• Implement a marketing campaign for a list of eligible

consumers;

• Personalize consumer content when sending out

a marketing campaign;

• Measure the performance of marketing campaigns;

• Automate marketing campaigns for eligible

consumers;

• Commercial prospecting operations;

• Send the campaign data to partners selected

by the end customer.

Categories of personal data processed

Within the scope of the implementation of the PULSE Platform, the

Customer may collect:

•

Data identifying persons: last name, first name, date of

birth;

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

•

Data relating to personal life: email, telephone number,

postal address, town/city, number of children, spouse's

name;

•

Data relating to transactions of products and services

purchased: date of

purchase, purchase amount, list of

products purchased;

•

Data related to browsing: cookies and tracers via the

Tag;

•

Interaction data from social networks: traceability of

clicks on publications, for example.

•

Other types of data: Customer identifiers.

Categories of data subjects (hereinafter "the Data subjects")

■ Consumers

Retention period(s)

Unless otherwise instructed by the Customer, the data is kept by

Skeepers for the duration of the contractual relationship.

Within the scope of the proposed services, the Customer is entitled to utilize applications developed by third parties. These entities

may be recipients of personal data when an ADVALO Customer uses them.

The various connectors and potential data recipients are:

• Xandr (AppNexus)

• Adwords (Google)

• Splio

• Mailchimp

• Mailjet

• Facebook

• Salesforce

• Digitaleo

• … see partners page

The table below details the data processing implemented by Skeepers under its Live Shopping solution (ex-

Spockee) on behalf of its Customers

Nature of the operations carried out on personal data

Processing specific to the "Shopping Party Video" service:

■ Receipt

■ Collection

■ Registration

■ Retention

■ Consultation/Access

■ Use

■ Erasure

■ Communication

■ Dissemination

■ Provision

■ Destruction

Processing specific to the "Connexions One to One" service:

■ Receipt

■ Collection

■ Registration

■ Retention

■ Modification

■ Consultation/Access

■ Use

■ Erasure

■ Organization

■ Communication

■ Dissemination

■ Provision

■ Destruction

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

Purposes of personal data processing operations carried

out by Skeepers on behalf of the Customer

Purposes shared by the "Connexions One to One" and

"Shopping Party Video" services:

Principal purpose:Provision of tools for the Customer for the

purpose of linking potential buyers with sellers and/or the advisors

of the Customer, with the aim of triggering purchases on their

online sales platform.

Sub-purposes:

• Connecting potential buyers on the Customer's

online sales platform with sellers and/or advisors

of the Customer;

• Creation of a virtual shopping cart, called "pre-

purchase process", to allow the finalization of the

purchase on the Customer's online sales platform,

according to the purchase process offered by the

Customer.

• Provision of a function allowing the Customer's

employees to block people who are ill-intentioned or

who have behaved inappropriately or written offensive

material or material of a racist or sexist nature and

which is generally considered illegal in the countries

concerned ("moderation" function in the chat).

Processing specific to the "Shopping Party Video" service:

• Measurement of the performance of the services,

generation of statistics for the Customer via the Tag;

• Registration, housing and conservation of videos, to

allow them to be replayed on the websites and pages

identified by the Customer;

• Broadcast of the replay on the channels chosen by

the Customer;

• Management of subscriptions of potential buyers who

would like to be notified of the Customer's Live

Shopping via the Customer's form;

• Transfer of potential buyers' information (telephone

number or email address) to the notification

management partner by email or SMS;

• Automated sending of SMS and emails to data subjects

by our service provider to remind them of the Live

Shopping option.

Processing specific to the "Connexions One to One" service:

• Receipt of the list of Customer employees in charge

of video meeting requests;

• Management of Live Video appointments via the

Spockee application calendar on the webpage of the

Customer's platform;

• Transfer of potential buyers' information (telephone

number or email address) to the notification

management partner by email or SMS;

• Automated sending of SMS and emails to data subjects

by our service provider to remind them of the meeting.

Categories of personal data processed

For processing common to "Connexions One to One

" and "Shopping Party Video":

• Session ID;

• Username and password of the Customer's

employees for logging into the back office;

For processing specific to the "Shopping Party Video"

service:

• Video: image and audio of the Customer's employees;

• The telephone numbers OR email addresses of

potential buyers who would like to be notified of the

Customer's Live Shopping via the Customer's form.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

For processing specific to the "Connexions One to One"

service:

• The list of employees who will respond to the video

appointment requests sent by the Customer, containing

their first names and a photo (a pseudonym and an

avatar are recommended for data minimization);

• Telephone numbers OR email addresses of potential

buyers requested via the calendar to schedule

appointments and to be able to notify appointment

reminders to potential buyers and employees chosen

by the customer to respond to appointment requests

(module accessible on the Customer's online sales

platform).

Categories of data subjects (hereinafter "the Data subjects")

• The Customer's sellers and/or advisors (Customer's

employees);

• the potential buyers.

Retention period(s)

For processing common to "Connexions One to One

" and "Shopping Party Video":

• Session ID "Customer ID": assigned to each user during

a visit to the Customer's site, it is kept for the entire

duration of the Contract in order to carry out

performance metrics (examples of data: number of

viewers, products put in the shopping cart, type of

audience, number of messages, number of hearts,

average duration of viewing per viewer, duration of the

event, etc.) ;

• Applications logs: 6 months;

• Username and password for logging into the back

office: Duration of Contract

For processing specific to the "Shopping Party Video"

service:

• Spockee stores and retains videos allowing them to be

replayed on the websites and pages identified by the

Customer for the full Duration of the Contract;

•

The information collected to notify potential buyers of

the Live Shopping, to which

they have subscribed, shall

be deleted 24 hours after the Live Shopping date and

time.

For processing specific to the "Connexions One to One"

service:

• Information about the meeting will be deleted 24 hours

after the date and time of the meeting;

• The videos are not recorded/stored.

C) Processing of personal data by Skeepers and its Customers (Joint Controllers) as part of the User Generated

Videos and Influence solution

Customers using Skeepers' User Generated Videos (ex-Teester) and Influence (ex-Hivency) solution acknowledge that they are

acting as Joint Controllers as defined in Article 26 of the General Data Protection Regulation ("GDPR"). By way of exception,

they may also be qualified as separate Data Controllers. They must, in any event, comply with their legal obligations and have a

common interest in maintaining the confidentiality and security of the Data they share (hereinafter “Shared Data”).

The Joint Data Controllers have decided to formalize an Agreement on the specific conditions under which each of them will act

as joint/separate Data Controller for processing Shared Data. According to Article 26 of the GDPR, the outline of this agreement

must be made available to data subjects within, for example, the privacy policies or other relevant documents of the Joint

Controllers, in order to comply with their duty to inform, which they undertake to do.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

From then, the joint/separate Data Controllers particularly undertake to:

 collect and process personal data in accordance with the regulations in force, in compliance with the principles

relating to the processing of personal data (article 5 of the GDPR). The legal basis for the processing of data by

Skeepers under its User Generated Videos and Influence solutions is the contractual basis (Article 6 §1 b) of the

GDPR);

 comply, in advance and throughout the duration of the processing, with the laws and regulations applicable to the

protection of personal data and in particular the GDPR;

 implement organizational, technical, software and physical measures aimed at protecting the Data against alteration,

destruction and unauthorized access;

 ensure that the persons authorized to process the Data undertake to respect confidentiality or are subject to an

obligation of confidentiality;

 guarantee Users the effectiveness of the exercise of all the rights available to them under the GDPR;

 not to use personal data for any purposes other than those expressly determined between them;

 to never transfer personal data and files or make these available to any third parties for any purpose whatsoever and

in particular for commercial prospecting purposes without the prior consent of the User;

 keep personal data only for a period strictly necessary.

For the complete list of Customers with which the Skeepers Group is joint/separate Controller, please write to

privacy@skeepers.io

The table below details the data processing implemented by Skeepers under the User Generated Videos

solution (ex-Teester)

Nature of the operations carried out on personal data

■ Receipt

■ Collection

■ Registration

■ Retention

■ Modification

■ Consultation/Access

■ Use

■ Erasure

■ Extraction

■ Communication

■ Dissemination

■ Provision

■ Interconnection

■ Destruction

Purposes of the personal data processing operations

carried out by Skeepers

Main purpose:

Creation, processing and distribution of promotional videos on the

Internet.

Sub-purposes:

• Management of participation in Campaigns, delivery of

Rewards;

• Receipt of data from the Customer's employees

and/or customers;

• Collection of information from Users of the User

Generated Videos platform;

• Sending of communications to Users;

• Processing of information from Users of the User

Generated Videos platform for the management of

applications;

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

•

Transfer of personal data to the Customer for the

selection of Users;

• Management of the order and distribution of the

Products sent to the selected Users (unless otherwise

requested by the Customer who wishes to deliver the

products himself, in this case, the email address, the

postal address, and the telephone number of the Users

will be communicated to the Customer);

• Reminder for Users who have not produced Videos by

any means (email, telephone, mail);

• Processing of information from Users of the User

Generated Videos platform for the production of

videos;

• Receipt of personal information from the

Customer's employees to provide access to a

platform;

• Export of personal information of Users of the User

Generated Videos platform linked to the Customer;

• Management of image rights;

• Distribution of videos;

• Data analysis, identification of usage trends;

• Marketing and statistical analyses.

Categories of personal data processed

•

Last name;

• First name;

• Photo;

• Video;

• Date of birth;

• Email;

• Telephone number;

• Postal address;

• Areas of interest;

• Information published on social networks;

• IP address;

• History and details of participation in

the Campaigns;

• Number and dates of Videos and Content published on

the Platform;

• Reviews and votes on the Videos.

Categories of data subjects (hereinafter "the Data subjects")

■ Users of the User Generated Videos platform;

■ End customers/consumers or prospects of the Customer;

■ Contacts and business partners of the Customer;

■ Employees or external employees hired by the Customer.

Retention period(s)

The retention period will be that necessary for:

• The performance of the Services as defined in the

main Contract;

• Respect of the applicable laws and regulations;

• Any other purpose stipulated in the main Contract and

the Contract.

It is 18 months for platform user data, except for the transfer of

their images, in which case it is 20 years.

The table below details the data processing implemented by Skeepers' Customers under the User

Generated Videos solution (ex-Teester)

Nature and purpose of the Processing

• Selection of the winning Users of the Campaigns;

• Distribution and downloading of videos;

• At the Customer's

discretion: Management of the

order and distribution of Products sent to the selected

Users;

•

At the Customer's discretion: Publication of videos on

the Customer's website, application and social media;

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

• Marketing and statistical analyses.

Categories of personal data processed,

• Last name;

• First name;

• Video;

• Email;

• Telephone number;

• Postal address.

Categories of data subjects

• Users of the User Generated Videos platform;

• Skeepers' employees.

The table below details the data processing implemented by Skeepers under the Influence solution (ex-

Hivency)

Nature of the operations carried out on personal data

■ Receipt

■ Collection

■ Registration

■ Retention

■ Modification

■ Consultation/Access

■ Use

■ Erasure

■ Organization

■ Extraction

■ Communication

■ Dissemination

■ Provision

■ Reconciliation

■ Interconnection

■ Destruction

Purposes of the personal data processing operations

carried out by SKEEPERS

Main purpose:

Connect the Customer with influencers, users of the platform, in

order for the latter to create content presenting and/or

mentioning the Customer's products/services on social networks

and/or on the Customer's websites, according to the campaigns

chosen by the latter.

Sub-purposes:

• Creation and management of influencer

review campaigns;

• Targeting of influencers based on their interests,

their profile and the social media settings

(profiling);

• Creation and mangement of influencer accounts

(password changes, etc.) ;

• Display of influencers' profiles on the Platform (name,

age, gender);

• Acceptance or rejection of influencers;

• Delivery of products;

• Transmission to the Customer of the postal address

and email address of the influencers where the

Customer handles the delivery of the products;

• Influencer's rating;

• Messaging on the platform;

• Sending the Newsletter (after collecting the consent

of the influencers): the latest campaigns, including

those that match the profile of the influencer;

commercial and promotional offers; new features of

the platform, etc.;

• Reporting dashboard integrated in the platform;

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

• Integration and training session;

• Continued account management:

○ Email and telephone assistance

○ Assistance in the campaign strategy and best

practices.

Categories of personal data processed

• Obligatory:

o Last name and first name;

o E-mail;

o Password;

o Address/location;

o Telephone number;

o Age;

o Gender;

o If the Instagram API: Data posted by Influencers on

Instagram ("Instagram Data" present on the Instagram

account, such as Instagram account title,

username/identifier, date and country of creation, images,

descriptions, stories, number of views, number of

photographs, number of comments, and number of

followers);

o If YouTube API: Data posted by influencers on

YouTube ("YouTube Data" present on the YouTube

account, such as, but not limited to, YouTube channel

title, date and country of creation, images and

description, number of views, number of videos, number

of comments and number of subscribers);

o Any information or content that the influencer has

agreed to share with Skeepers via his social networks,

such as his profile picture, his email address or the list of

his friends, and in general, any information that he has

made public via these social networks;

o Video (image and audio).

• Non-obligatory:

o Skin color (consent required);

o Relationship status;

o Parenthood status;

o Number of children;

o Date of birth;

o Pets;

o Shopping habits;

o Skin type/tone and concerns;

o Beauty regime;

o Hair color/type;

o Household income;

o Diet;

o Eyebrow color;

o Glasses;

o Sizes;

o Lifestyle;

o Skin problems (consent required).

Categories of data subjects (hereinafter "the Data

subjects")

■ Influencers fulfilling the criteria determined by

Skeepers and the Customer.

Retention period(s)

Influencers' personal data is kept for the duration of their activity

on their Creator space. They will be anonymized 6 months after

closure of their account.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

D) Processing of personal data by Skeepers (Contoller) with regard to its Customers

As part of the subscription to one or more solutions of the Skeepers Group, then as part of this collaboration, Skeepers processes

the personal data of its Customers.

The table below details the data processing implemented by the Skeepers Group with regard to its

relationships with its Customers:

Nature of the operations carried out on personal data

■

Receipt

■ Collection

■ Registration

■ Retention

■ Modification

■ Consultation/Access

■ Use

■ Erasure

■ Extraction

■ Communication

■ Dissemination

■ Provision

■ Interconnection

■ Destruction

Purposes of the personal data processing operations

carried out by Skeepers with regard to its relationships

with its Customers

• Listening and recording telephone conversations

and videos in the context of incoming and outgoing

calls with prospects/customers in order to improve

the quality of the service provided;

• Manage the contractual/business relationship;

• Create and manage the Customer's Back Office;

• Allow access and use of the Platform and its

services;

• Perform all operations related to the Services,

•

Communicate with the Customer in the context of the

execution of the Services or for information purposes

in the event of changes to the General Conditions;

• Provide support service;

• Conduct marketing and statistical

analyses;

• Analyze the data, type of audience and usage

trends;

• Conduct statistics in order to improve functionality

and optimize the Platform;

• Analyze Data, Audit, and identify usage trends

• Maintain the Platform in its proper functioning

and in a secure environment;

• Resolve any technical incidents encountered;

• Send commercial information in relation to the

Services subscribed;

• Request payment for the subscribed Services;

• Manage unpaid debts, disputes and

disagreements;

• Detect, prevent, and combat fraud and

cybercrime;

• Maintain general and auxiliary accounts;

• Responses to official requests from public or legal

authorities, duly authorized for these purposes;

• Acquisition audit by potential buyers.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

Categories of personal data processed

•

Last name;

• First name;

• Professional email address;

• Professional telephone number;

• Image (if video interview);

• Voice (if video/audio interview);

• Username;

• Password;

• Connection logs;

•

Bank details.

Categories of data subjects (hereinafter "the Data subjects")

•

Employees, assimilated or externally hired by the

Customer

Legal bases (according to the intended purpose)

• Precontractual/contractual

• Skeepers' legitimate interest

•

Legal obligation

Retention period(s)

Five (5) years from the end of the contractual relationship

between the SKEEPERS Group and the Customer

(prescription of common law in civil and commercial matters).

Three years (3) from the last contact in the context of

commercial prospecting.

Retention for a maximum of 6 months from the recording of

the audio or video interview. Data from analysis documents

(reports and analysis grids) are kept for one (1) year from the

time of their collection.

Conservation for the duration of the litigation, deletion of the

data once all remedies have been exhausted, and the decision

or prescription of legal action has become enforceable.

In the event of an amicable settlement of the dispute, deletion

on settlement.

Retention during the current accounting year, increased by ten

(10) years from the closing date.

Personal data is only processed within the Skeepers Group by the competent departments, which need to know the information

for the proper execution of their tasks. They are subject to a Non-disclosure Agreement.

3 : Sharing of collected personal data

At Skeepers, your personal data is not, and will never be, sold to third parties.

However, it is important that you know that Skeepers shares your personal data with third parties and wants you to be fully

informed of this. Skeepers indeed uses third-party companies to:

- Maintain the technical functionality of its Platform and its services;

- Perform certain services on its behalf.

These processors and partners may have limited access to some of your personal data, within the strict context of the

performance of their services. They have a contractual obligation to use them in accordance with the provisions and regulations

applicable to the protection of personal data.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

The Skeepers Group is committed to verifying that all of its processors and partners scrupulously comply with

Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and to entering into

contracts with them that include a Data Processing Agreement and a Non Disclosure Agreement.

In this context, all processors and partners of the Skeepers Group are required to provide sufficient guarantees demonstrating

that the applicable technical and organizational security measures for the protection of personal data have been taken (Article

32 of the GDPR).

If you would like to have a complete and up-to-date list of processors and service providers, you can contact the Skeepers' Data

Protection Officer by email at the address: privacy@skeepers.io.

The Skeepers Group may also be required to share your information if it considers that its disclosure is necessary:

- To follow up on any claims made against the Skeepers Group and to comply with administrative and legal procedures (e.g:

legal authorities);

- To comply with a legal obligation (e.g. public bodies such as URSSAF);

- Due to a merger, acquisition, disposal of assets or court-supervised receivership proceedings.

Skeepers is committed to processing and hosting your data within the European Union and within the European

Economic Area. However, with the express written consent of its Customers, who wish to benefit from certain specific

Skeepers' services operated outside the territory of the European Union and the European Economic Area, a limited amount of

your personal data may be shared with service providers in countries that are outside the European Union and which are not

considered to offer adequate data protection under the GDPR.

In this case, Skeepers ensures that Standard Contractual Clauses, in their latest version in force, are signed with said third-

country providers, and that additional technical measures are implemented in order to be able to present a sufficient level of

protection in the sense of the supervisory authorities, including the European Data Protection Board in its

"Recommendations 01/2020 on measures that supplement transfer tools to ensure compliance with the EU level of protection of

personal data."

It is possible, through certain Skeepers' Solutions (Influencer Marketing, Influence, User Generated Videos) to connect

your account on our Platforms to other third-party accounts. When you connect your account to other third-party accounts,

you acknowledge and accept the continuous communication of your information to other parties (in accordance with the

confidentiality settings that you have defined on these third-party sites). If you do not want your Data to be shared in this way, do

not use this feature.

You can disconnect your account from a third-party account at any time. You can learn how to disconnect your accounts from

any third-party site by visiting the information page on your Account.

In the event of merger/acquisition or merger/absorption, Skeepers will inform you prior to the operation, and of the transmission

of your personal data to the new entity.

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

4 : Security and confidentiality of personal data

The SKEEPERS Group only retains and stores your personal data for the period that is strictly necessary for the

purposes defined in the section "2: Processing of Personal Data of the Skeepers Group".

In any event, the Skeepers Group ensures the strict confidentiality of the personal data collected and processed. To this end,

Skeepers has implemented organizational, technical, software and physical measures, described in its Information Systems

Security Policy (ISSP) as well as in its Secure Assurance Plan (SAP): these aim to protect your Data against alteration,

destruction and unauthorized access in compliance with Article 32 of the GDPR.

More specifically, it consists of the following measures:

- Regular backup of personal data with regularly validated restoration processes, in technically and physically

separate backups;

- Limited and controlled access to data (authentication and authorization control), subject to confidentiality;

- Secure hosting (certified ISO 27001 for technical measures, ISO 27017 for security in the cloud, ISO 27018 for

privacy in the cloud, SOC 1, SOC 2 and SOC 3, PCI DSS level 1, Common Cloud Computing Controls Catalog (C5) of

the BSI, ENS High.) ;

- Data encryption (KMS encrypt) in transit and at rest;

- A thorough security analysis to evaluate its level. It should be noted that if the required level is not reached, a new

design phase is initiated in order to reach the level required by the Skeepers Group.

In addition, the Skeepers information system is monitored by internal software to ensure its proper functionality and ensure that

no vulnerabilities are present.

The Skeepers' information system includes centralized and protected logging devices for the use of services making it possible

to detect any intrusion or fraudulent use, to attempt to identify the causes and origins and to further avoid any contamination of

other sites and finally to restore the system.

The level of security of the Skeepers Group's information systems is tested every 6 months to ensure that no inherent security

breach is accessible.

In accordance with Article 33 of the GDPR, the Skeepers Group undertakes to notify the CNIL, as soon as possible, of any data

breach likely to create a risk for the rights and freedoms of the Users. The Skeepers Group undertakes to notify the Data

Subjects, as soon as possible, of any breach of Data likely to give rise to a high risk for their rights and freedoms.

6: Rights relating to personal data and their implementation

In accordance with the regulations applicable to the Skeepers Group regarding the protection of personal data, you have, at any

time and for any reason, various rights with regard to the processing of the data of which you are the data subject.

These include the right of access, rectification, erasure and objection, the right to limitation of processing, the right to data

portability, the right not to be subject to an automated individual decision (including profiling), the right to define guidelines

regarding the retention, erasure and communication of your personal data after your death.

For a better understanding of these rights and their usefulness, visit: https://www.cnil.fr/fr/les-droits-pour-maitriser-vos-donnees-

personnelles

SKEEPERS SAS with a capital of €9,133,750

18/20 Avenue Robert Schuman - CS 40494 - 13002 Marseille

RCS Marseille 879 038 990 - NII FR01879038990 - Siret: 879 038 990 00 21

http://www.skeepers.io

The Skeepers Group guarantees to any person visiting its Site and/or using its Solutions and services, the exercise of

these rights in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27,

2016 (GDPR) and the Data Protection Act (LiL).

For the processing of personal data based on your consent, you have the right to withdraw this at any time, without it affecting

the lawfulness of the processing, which was based on your consent prior to its withdrawal.

We do not voluntarily collect personal data from minors under the age of 15, however, if you are a parent or legal guardian of a

minor and you believe that we are holding data specific to that minor, you may request the deletion of that data upon proving

your identity and parental authority over that minor.

For any request to exercise your rights, you must, in your message:

1) Specify the address (email or postal) at which you wish to receive a response from Skeepers;

2) Include a means of identifying yourself (order number, customer identifier, etc. if the means communicated do not seem

sufficient to prove your identity, a copy of your identity document may be required);

3) Specify, if possible:

- the context in which the collection of your data was carried out,

- and the relevant Solution (Ratings & Reviews, CX-Management, Predictive Marketing Activation,

Influencer Marketing, Live Shopping and/or User Generated Videos).

This information is important so that the Data Protection Officer can respond to you as quickly as possible.

You can then write to the Data Protection Officer of the Skeepers Group at the following email address:

privacy@skeepers.io

or by post, to the address given below:

SKEEPERS

Legal Department - Data Protection Officer 18-

20 Avenue Robert Schuman

CS 40494

13002 Marseilles

Skeepers would like to inform you that no request will be processed by telephone.

A response will be sent to you as soon as possible, which may not exceed one (1) month from the date of receipt of your

request.

A two (2) month extension is possible, in the event of a complex request, or if a large number of requests have been received.

Your request, as well as any data useful for processing your request, will be kept for a period of three years (five years where

the right of opposition applies) from receipt of your request. If you have been asked to provide a supporting document, or if you

have sent one spontaneously, it will be kept for a period of one year.

If you believe, after having contacted the Data Protection Officer, and after a period of one month has elapsed, that your GDPR

rights have not been respected, send a complaint to the CNIL.