Rising Up is recognized as deeptech by the European Commission
10/11/2023

Personal data policy

Last updated: 01/10/2024

1- WHY IMPLEMENT A PERSONAL DATA POLICY?

This document is published by the Company Rising Up, SARL whose head office is located at 12 rue Vivienne 75002 Paris, registered with the RCS of Paris under number 828 053 348 in its capacity as publisher and manager of the RISING UP Platform accessible at https://thelab.risinguparis.com/login. In this context, we may process personal data

collected from any natural person of legal age, using the Platform (hereinafter the “User (s)”).

We take the respect of privacy and the protection of personal data very seriously. This is the reason why we are committed to protecting the privacy and data of our Users, in accordance with legal requirements, and in particular Regulation No. 2016/679 of 27 April 2016 relating to the protection of individuals with regard to the processing of personal data and the free movement of such data and the free movement of such data, and Law No. 78-17 of 6 January 1978 as amended relating to information technology, files and freedoms (hereinafter collectively, “Regulation in matters of personal data protection”). The purpose of this personal data policy (hereinafter the “Personal Data Policy”) is to inform you as best as possible about how your personal data is collected as part of the use of the Platform. You acknowledge that you have read the terms of the Personal Data Policy.

2. WHAT INFORMATION DO WE COLLECT?

These include:

Ø DATA FROM ANY SITE VISITOR: Any visitor to the Site sees the following information transmitted by default by their Internet browser, and we therefore collect it automatically:

o The operating system of your terminal (Windows, Mac, Mac, Android, iOS,

etc.);

o The Internet browser used and its language of use;

o Your IP address;

o The time at which the visit was carried out;

o Technical information on your type of terminal (computer, smartphone, etc.).

This information is automatically collected and is kept by our hosting provider: AMAZON WEB SERVICES EMEA SARL - 38 AVENUE JOHN F. KENNEDY, L- 1855 Luxembourg — R.C.S. Luxembourg — R.C.S. Luxembourg: B186284 — Luxembourg: B186284 — aws-EU-privacy@amazon.com, for

a period defined in accordance with its terms of use and confidentiality. The legal basis for the collection and processing of these personal data is the need for this collection and processing in order to carry out our missions.

Finally, if you leave your contact details on the Platform (name, surname, first name, email, telephone number, professional social networks) we are likely to use them for commercial prospecting purposes, which you can object to at any time in

compliance with the applicable regulations on personal data.

Ø THE PROCESSING OF DATA FROM OUR CUSTOMERS AND USERS OF THE

PLATFORM:

Access to the functionalities of the Platform is subject to registration, under the conditions detailed in the Rules of Use of the Platform. Registration on the Platform requires the communication of the following information, in order to be able to verify your identity, allow your access to the Platform and secure this access:

o Your name and first name;

o Your professional and/or personal email;

o Your age;

o Your gender;

o Your city, country and language;

o If applicable, your degree level and your photograph;

o The name of your business, if applicable;

o Your password, which we store in an encrypted and secure manner; and

o Your IP address, communicated automatically under the conditions indicated above, is also used to ensure that your Account is not shared with third parties.

3. FOR WHAT PURPOSES DOES RISING UP PROCESS THIS DATA?

In particular, this data allows RISING UP to know you better, to improve the use of the Platform and to ensure its security and to provide Users with a safe, optimal, effective and personalized experience; and this, in accordance with your life.

private. RISING UP processes Users' personal data for the sole purposes set out in the Personal Data Policy; and this in a lawful, loyal and transparent manner. The purposes for which we process data are as follows:

• improving navigation on the Platform;

• guarantee the defense of our rights, as Platform Manager;

• prevent and fight against computer fraud (spamming, hacking, etc.);

• guarantee the exercise of the User's rights;

• conduct communication campaigns.

4. WHAT IS THE DATA RETENTION PERIOD?

The data processed for the proper functioning of navigation on the Platform (connection data, identification data, logs) are kept for a period of twelve (12) months after your last visit to the site or your last click on a link in our emails, or from the date of the cancellation of your registration.

In the event of litigation, RISING UP reserves the right to keep the data that may be useful to it throughout the duration of the dispute and then place them in a separate archive for a period of five (5) years after the exhaustion of the channels of

recourse. At the end of these periods, the data is anonymized or deleted.

5. WHAT ARE YOUR RIGHTS AS A USER?

In accordance with the Personal Data Protection Regulation:

• You can access and obtain a copy of the personal data collected and processed about you;

• You have a right to data portability concerning you, provided, however, that the data has been processed automatically and provided that the processing is based on a contract or your consent;

• You can ask for your information to be rectified, updated, or completed;

• You can request the deletion of your data, under the conditions of article 17 of the RGPD;

• You can limit the processing of your personal data, under the conditions of article 18 of the RGPD;

• You can object to the processing of your personal data, for reasons relating to your particular situation;

• You can withdraw your consent to the processing of your personal data at any time when they are based on this legal basis;

• In accordance with the amended Data Protection Act, you can decide in advance the fate of your data after your death;

• If you are not satisfied with our answers, you can file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) or file a lawsuit in court;

• Any correction or deletion of your personal data or any limitation of processing carried out at your request will be communicated to each recipient to whom your personal data may have been transmitted in accordance with this information, unless such communication proves impossible or requires disproportionate effort.

6. HOW TO EXERCISE YOUR RIGHTS?

You can exercise your rights by contacting the RISING UP Data Protection Officer:

• by email: hicham@risinguparis.com

In the absence of a satisfactory response from RISING UP, you may contact the competent supervisory authority. In France it is the Commission Nationale de l'Informatique et des Libertés (CNIL) located at 3 Place de Fontenoy - TSA 80715, 75334 PARIS CEDEX 07.

7. WHAT ARE YOUR DUTIES AS A USER?

You undertake to keep your personal data up to date as necessary. You also undertake to ensure that the personal data concerning you is accurate, complete and truthful.

If, as part of the use of the Platform, the User is required to communicate personal data of other persons, he must obtain the agreement of the persons concerned before transmitting them on the Platform.

8. WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?

Your data is not subject to international transfer. By using service providers and subcontractors located in Europe, we keep your data in countries subject to the GDPR regulations.

9- HOW IS THE SECURITY OF YOUR DATA ENSURED?

We take all appropriate organizational and technical measures as well as all useful precautions to maintain the security and confidentiality of the information you entrust to us, in particular against any accidental loss, deformation, alteration

and against any unauthorized access, use, modification or disclosure. Penetration tests are regularly carried out in order to detect possible security breaches. Likewise, the technical bases and bricks as well as the libraries are regularly updated, in particular with the aim of correcting possible faults.

10- GENERALITIES

Ø CAN WE CHANGE THE PERSONAL DATA POLICY?

Yes.

We may modify the Personal Data Policy in order to take into account legislative or regulatory changes. In any event, if the Personal Data Policy is substantially amended, you will be informed directly via the Platform.

Version in force on October 1, 2024

By clicking on “Accept all cookies”, you agree that cookies may be stored on your device in order to improve site navigation, analyze site usage, and help us with our marketing efforts. Check out our cookie policy for more information.