The policy set out below applies to the processing of personal data by SAMKA PRODUCTIONS, a simplified joint stock company governed by French law with a capital of 45,000 euros, registered in the Paris Trade and Companies Register under number 450 336 672, having its registered office at 5 rue Lespagnol, 75020 Paris, represented by Mr Samuel KAMINKA, duly authorised in his capacity as Chairman.

1 - General provisions

The following provisions apply to all processing of personal data by the controller, unless otherwise specified in the specific provisions.

> Legal framework - compliance with the DGPS and French law

The controller declares that he/she processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the DGPS) and French Law No 78-17 of 6 January 1978 on data processing, files and freedoms (amended).

> Data controller and other parties involved

The controller is identified above. His contact details are: SAMKA PRODUCTIONS, 5 rue Lespagnol, 75020 Paris, 0156039630, samka@samka.fr, www.samka.com.

The representative of the controller is Mrs Myriam KAMINKA, born on 7 February 1964 in Chêne-Bougeries, 1224 Switzerland, of French nationality, residing at 339 rue Saint-Martin, 75003 Paris, whose profession is General Manager. Her contact details are: m.kaminka@samka.fr.

> Recipients of personal data

The recipients of the data are the website administrators, the human resources department, and any department of SAMKA PRODUCTIONS that may be interested in these data, in accordance with the specific provisions hereof.

> Data transfer

The controller does not intend to transfer personal data to a third country or to an international organisation.

> Storage period for personal data

The data will be kept for a period of 10 years from the date of collection.

> Rights of the person whose data are collected

The person whose personal data are collected has the right:

- to request the controller to grant access to personal data, to rectify or delete them, or to limit the processing of the data relating to the data subject,

- to oppose the processing,

- the portability of its data,

- to file a complaint with a supervisory authority,

- to withdraw its consent at any time, without prejudice to the lawfulness of the processing operation based on the consent given prior to its withdrawal, which right exists exclusively where the processing operation is based on Article 6(1)(a) or Article 9(2)(a) of the DGPS, i.e. on the data subject's consent to the processing of his/her personal data for one or more specific purposes.

> Automated decision making - profiling

Unless otherwise specified in the specific provisions, no profiling will be carried out and, more generally, no automated decisions will be taken on the basis of the data

2 - Specific provisions

The following provisions are specific to each type of personal data processing.

> Management of the relationship with our contacts and users

Personal data processed - We process the following personal data: title, first name, surname, telephone number, e-mail address, postal address, profession, company, education and university degrees, professional experience, interests.

Purposes - The processing of personal data is intended for the management of the relationship with our contacts and users. In particular, this processing aims to make the company's audiovisual content available to our professional users, to provide the data subject with information on news about our organisation, products and services, to organise recruitment sessions and to store the information of candidates for recruitment.

Legal basis - This processing of personal data is based on the consent of the data subject (Article 6(1)(a) of the DGPS). The data request is of a contractual nature. The data subject is not required to provide these data. If the data subject does not provide the data or withdraws his or her consent to the processing of data, he or she will not be able to receive information on the latest news from our organisation, products and services, nor access certain features of the website.

> Procedure for accepting our users

Personal data processed - We process the following data: title, first name, surname, telephone number, e-mail address, profession, organisation (company, company or other), functions.

Purposes - This data processing is intended to secure access to the content we offer to audiovisual professionals, to store information from candidates for recruitment and to comply with our legal, tax and accounting obligations.

Legal basis - This processing operation is necessary to comply with the legal obligations to which the controller is subject. It is based on Article 6(1)(c) of the DGPS. The data request is a condition for the creation of a user account, in accordance with applicable laws and regulations. The data subject is required to provide these data if he/she wishes to establish this relationship. If the data subject does not provide the data, we will not be able to validate the creation of his user account.

> Analysis and improvement of our products and services

Personal data processed - We process the following data: title, first name, surname, telephone number, e-mail address, postal address, profession, organisation (company, company or other), functions, training and school and university diplomas, professional experience, interests, date and place of birth, nationality, content consulted.

Purposes - This processing is used for the purpose of analysing and statistically studying the use of our website and our products and services, in particular using the Google Analytics tool.

Legal basis - The processing is necessary for the purposes of the legitimate interests we pursue, consisting in improving and optimising the services of the site www.samka.com. It is based on Article 6(1)(f) of the DGPS.

> Security and prevention of illegal activities

Personal data processed - We process the following data: title, first name, surname, telephone number, e-mail address, postal address, profession, organisation (company, company or other), functions, training and school and university diplomas, professional experience, interests, date and place of birth, nationality, content consulted.

Purposes - The processing is intended to ensure the security of our content and to prevent illegal activities related to it.

Legal basis - This processing is necessary for compliance with the legal obligations to which the controller is subject (Article 6(1)(c) of the DGPS) and is necessary for the legitimate interests we pursue, namely to ensure the security of our content and to prevent illegal activities (Article 6(1)(f) of the DGPS). The data request complies with applicable laws and regulations. The data subject is required to provide this data if he or she wishes to benefit from our products or services.