Protection of personal data This privacy policy informs you of the way in which 20STM collects, uses, exploits and protects your personal data that you transmit via the following URL: (link: https://www20stm.com text: https//:20stm.com) Data controller Your personal data is processed by 20STM Pictures, a company based in Enghien, France. Address: Rue des trippes 10, 7850 Enghien E-mail : (link: text: info@20stm.com)

Telephone number: 0485 29 17 58 Purpose of personal data collection 20STM may process your personal data in order to provide you with information or services (newsletters, white papers, personalized offers, competitions, promotional offers). Recipients of your personal data Your personal data is stored by 20STM. However, it may also be communicated to employees of our company or to service providers only at our request, following our instructions and with the exception of any other use.

Transfer of personal data outside the European Union Personal data may only be transferred outside the European Union, to countries applying a data protection policy corresponding to that in force within the European Union. Retention and deletion of your personal data The personal data collected will be kept for the time necessary to achieve the objectives. Once the objectives have been reached, the data will be deleted or rendered anonymous. Protection of your personal data 20STM is committed to protecting your personal data against unauthorized access and manipulation, through organizational and technical measures.

Your personal data will be treated confidentially by those authorized to do so, and only in order to achieve the required purpose. However, these days, there is a real risk that personal data may be leaked or compromised. In the event of an accidental or malicious leak, and in accordance with the General Data Protection Regulation (GDPR), (company name) undertakes to notify the problem directly to the Data Protection Authority. Your rights regarding your personal data The General Data Protection Regulation (GDPR), which came into force in May 2018 in Belgium, stipulates that when using your personal data, you have certain rights at all times: Right to erasure of your data Right to portability of your data Right of access to your data Right to rectification of your data Right to limit the processing of your data Right to object In accordance with Article 12 of the GDPR, to exercise your rights, you must contact the entity responsible for processing your personal data in writing, electronically or orally.

A copy of your identity card is also required and will not, however, be valid orally. From the date of receipt of your request, the entity responsible for processing your personal data must inform you of the measures relating to your case within a maximum period of one month. Please note that in certain cases where the request is more complex, the response time can be up to three months. In the latter case, you must be informed of the extension, and the party responsible for processing your personal data must also provide you with the reasons for the extension. In the event that the entity responsible for processing your personal data does not comply with your request, it must inform you and provide you with the reasons for its refusal within one month of receiving your request. You then have the right to take legal action by lodging a complaint with the Data Protection Authority (DPA).