PREAMBLE

The company FRANCE BILLET, whose registered office is at FLAVIA, 9 rue des Bateaux Lavoirs – 94200 IVRY-SUR-SEINE, registered in the Créteil Trade and Companies Register under number B 414 948 695 (hereinafter "FRANCE BILLET"), manages and operates, together with the company FNAC DARTY registered under number B 918 926 163 (hereinafter "FNAC DARTY"), the website specialised in the sale of event tickets (hereinafter respectively "the Tickets" and "the Events"), accessible at the following address: www.fnacspectacles.com (hereinafter "the Website"), as well as the mobile application Fnac Spectacles (hereinafter "the Application").

FRANCE BILLET operates under an opaque mandate contract that grants it the authority to issue, produce, sell, and market tickets for the Organiser's Events, in its own name and on its own behalf. It is within this framework that FRANCE BILLET provides ticketing services and that FRANCE BILLET and FNAC DARTY process your personal data primarily for the execution of this service (hereinafter "the Services").

FRANCE BILLET and FNAC DARTY are committed to an approach that favours the protection of personal data. As such, FRANCE BILLET and FNAC DARTY are committed to compliance with the General Data Protection Regulation 2016/679 of 27 April 2016 (“GDPR”) and Law No. 78-17 of 6 January 1978 relating to information technology, files and freedoms (the “Information Technology and Freedoms” law) (collectively “the Data Protection Regulation”).

This personal data protection charter (hereinafter "the Charter") is part of a transparency and fairness approach towards the Client as defined below.

Thus, the Charter aims to present you with all the necessary information to understand how FRANCE BILLET and FNAC DARTY collect, process, and protect your personal data, as clients (hereinafter "the Client(s)") in the context of purchasing Tickets or browsing the Site or Application, and the options available to you in this regard.

ARTICLE 1 - Who is the data controller for your personal data?

FRANCE BILLET and FNAC DARTY are joint controllers of your personal data (hereinafter collectively referred to as "the Data Controllers").

ARTICLE 2 - What personal data is concerned?

FRANCE BILLET processes the following personal data:

- During your navigation on the Site:
o IP Address
o Cookies (see art.8)

FRANCE BILLET and FNAC DARTY process the following personal data: - When creating your account or ordering Tickets (hereinafter "the Account"):
o Your first name, last name, date of birth, email address;
o Password;
o Phone number;
o Postal address.

It is specified that creating an Account on the Site or the Application automatically results in the creation of an Account on Fnac.com, a website owned by FNAC DARTY.

- To proceed with the payment:>
FRANCE BILLET does not collect your payment data but only a payment identifier and the first 6 and last 4 digits of your card to allow you to recognise the card used for payment. All of your banking details are collected solely by our PCI-DSS certified payment service provider, which ensures payment security.

- For the postal delivery of tickets:>
To help you avoid input errors and ensure successful delivery through suggestions and precise address validation, FRANCE BILLET uses the Loqate service from our partner GB Group Plc. We therefore process your IP address as well as the postal address data you have entered. This processing is carried out on the basis of the performance of a contract within the meaning of Article 6, paragraph 1 of the GDPR.

ARTICLE 3 - For what purposes does FRANCE BILLET process your personal data?

Processing	Purpose	Legal Basis
Account Creation	Allow the Client to create an Account to proceed with the purchase of Tickets	Execution of the Contract
Contract Tracking	Track and retain proof of acceptance of the General Terms or any other contractual commitment between the Client and the Data Controllers.	Execution of the Contract
Customer service	Manage complaints and respond to Clients' assistance requests, enabling them to benefit from the services as contractually agreed	Contract execution
Compliance with social, fiscal, regulatory obligations	Respond to requests from administrations	Legal obligation
Litigation	Allow FRANCE BILLET and FNAC DARTY to organise their defence	Legitimate interest
Newsletter	Send commercial emails to the relevant individuals.	Consent
Payment	Process payments securely and manage payment incidents	Execution of the Contract
Fight against fraud	Secure orders and ensure optimal service quality.	Legitimate interest
Accounting billing	Establish accounting and present the relevant supporting documents upon request	Legal obligation
Order management and customer relationship	transmit the ordered Ticket(s) and facilitate customer relations	Execution of the Contract
Contact in case of cancellation/postponement of the Event	FRANCE BILLET will contact you for any modification/cancellation of the Event	Execution of the Contract

ARTICLE 4 - When do FRANCE BILLET and FNAC DARTY collect your data?

When you access the Services, you may be required to provide personal data, for example if you:
• create an Account on the Website or the Application;
• subscribe to one of our newsletters ('Newsletters');
• make a purchase on our Site or Application.
Providing this data may be mandatory to use some of our Services.

ARTICLE 5 - How long are your personal data processed by FRANCE BILLET and FNAC DARTY?

Your personal data is stored by FRANCE BILLET and FNAC DARTY and/or any service provider for the strict execution of the Services offered, and is retained for the duration strictly necessary to achieve the purposes for which it is collected, in compliance with the regulations in force.

Unsubscribing from one of the Newsletters does not automatically unsubscribe you from the other Newsletters.

The information related to each order/purchase is archived and kept for up to 5 years after the delivery of your order/purchase.

Beyond that, the following will be carried out:
• Either to the secure deletion or destruction of data;
• Either to the strict anonymisation of data, for exclusively statistical purposes.

ARTICLE 6 – Who are the recipients of your personal data?

Your personal data is intended for the Data Controllers and may be disclosed to third parties under certain conditions.

Your personal data is processed by the Data Controllers for the purposes described above. Your personal data may be:

• transmitted to any third-party company that the Data Controllers have designated as a processor to carry out on their behalf any of the activities described above, it being specified that your personal data will remain under the control and direction of the Data Controllers.
• Provided to the Event Organiser or the owner of the venue where the Event is held.

Your data may also be transmitted to the following recipients:

Our partners, if you agree
Third parties may use your personal data only if you have agreed to it. If you tick a box offering to receive offers from our partners, or if you actively respond to any form of proposal explicitly expressing your willingness to receive such offers, your data will be transmitted to the relevant partner(s) to enable them to send you their product or service offers, by email or SMS, where applicable.

Any previously accepted partner may send you such offers until you inform them, under the conditions described by them, of your wish to no longer receive offers from them via email or SMS, if applicable. These partners are fully responsible for processing your personal data once it has been shared with them with your consent. It is their responsibility to comply with the applicable law and to consider your rights and any requests you may have.

If you consent, your data may be transmitted to a third party issuing a cookie stored on your device (e.g.: an external advertising agency, another publisher).

Third parties authorised by law
In certain cases provided for by law, your personal data may be transmitted to third parties legally authorised to access it upon specific request: judicial authority, administrative authority.

We may also be required to share your personal data with third parties if such a measure is necessary to protect and/or defend the rights of the Data Controller, to enforce these provisions, or to protect your rights and/or interests or those of the public, provided that this transmission is authorised by law.

In the event that all or part of the Data Controller is sold to a third party, we reserve the right to transfer your information as a sold or assigned asset.

ARTICLE 7 - The protection of your personal data in case of international transfers

The Data Controllers may transfer your personal data to internal or external recipients who may be located in countries offering different levels of personal data protection than those provided within the European Union.

The Data Controllers implement appropriate measures to secure the transfer of your personal data to an external recipient located in a country offering a level of protection different from that provided in the country where the personal data is collected.

Data flows to countries that do not have equivalent personal data protection can be governed by the standard contractual clauses from controller to processor defined by the European Commission.

ARTICLE 8 - What cookies are used?

A 'cookie' is a tracker, placed on your device when visiting a website, and it allows, among other things, the analysis and improvement of the use of the Site or the Application through a list of tools as defined in the settings. We invite you to consult the 'Cookie Settings' section for detailed information on the use of cookies and other comparable technologies and to see the choices available to you.

Cookies are retained for a maximum duration of thirteen (13) months from their collection.

ARTICLE 9 - What are your rights regarding the use of your personal data?

Your rights
You have rights over your personal data.

In accordance with Data Protection Regulations, and within the limits set notably by Articles 12 to 22 of the GDPR, you:

• you have the right to request access to the personal data concerning you, as well as the rectification or erasure of such data – you can directly access and rectify some of your personal data from your Account;
• you also have the right to object to the processing of your personal data, to request its restriction, and the right to the portability of the personal data provided.

Similarly, we remind you that you have, in any case, the right to define general or specific directives regarding the fate of your personal data after your death.

Finally, you have the right to contact the CNIL or any other competent supervisory authority if you believe that the data controllers have not complied with certain rules provided by the Data Protection Regulation.

Exercise of your rights
The simplest way is to send us your request online. You can exercise these rights by:
• filling out the form accessible via this link.

Your consent to the processing of your personal data can only be withdrawn once the Event has passed. Any request made between the purchase of one or more Tickets and the Event cannot be favourably processed by France Billet.

The withdrawal of consent does not affect the lawfulness of processing based on consent carried out before the withdrawal.

If you are unable to access, modify or delete your information online, you can make your request by post at the following address:

Customer Service – France TICKET – OPTIMA – 27/35 rue Victor Hugo – 94200 Ivry-sur-Seine

In order to prevent any unauthorised access, modification or deletion, or to avoid any identity theft, please, as far as possible, include proof of your identity with your request. If there is any doubt about your identity, we will ask you to send us – in addition – a copy of an identity document.

Some clarifications
Any abusive, manifestly unfounded or excessive request may be rejected. The request must also specify the address to which the response should be sent; otherwise, it will be sent to any address known to us, if applicable. A response will then be sent to you within 1 month following the receipt of the request. This period may be extended by 2 months, taking into account the complexity and number of requests. We remind you that our partners are responsible for the use they make of your personal data and for considering your rights, including the right to no longer receive offers from them. In the event of the deletion of your personal data, you acknowledge the impossibility for you to access and/or order products on the Site or the Application.

It is also reminded that FRANCE BILLET will be obliged to retain your data until the Event has taken place. Consequently, any request made before the Event cannot be honoured by FRANCE BILLET.

ARTICLE 10 - Update

The Data Controllers may amend the Charter at any time, in line with changes or additions made, particularly to comply with any regulatory, case law, editorial and/or technical developments. It is recommended that you refer to the latest version of the Charter before any browsing.

You will be informed of the modification by any means such as, notably: email or notification on the Site and/or the Application.

The current version of this policy is always accessible on the Website and the Application.