Privacy Policy

1. Scope and purpose of the policy

ProovStation International (hereafter "PSI") is a simplified joint stock company (société par actions simplifiée) with a share capital of €20,000, registered with the Trade and Companies Register of Versailles under number 106 241 425, with its registered office located at 4 avenue des 3 Peuples, 78180 Montigny-le-Bretonneux, France. PSI is responsible for the processing of your personal information collected through its website.

Personal data collected before April 2, 2026 by Proov Station SAS through the Website and in the course of its business relationships have been transferred to ProovStation International, which is now the data controller.

The overall objective of this Policy is to provide you information on:

• The collection and the use of your personal data;
• Your rights in relation with the processing of your personal data by PSI;
• All the measures implemented by PSI to ensure the security of your personal data.

The Privacy Policy applies to all PSI services, including but not limited to meetings and calls with the Sales Department or any other PSI service delivery.

The Privacy Policy may be updated in accordance with legislative changes or with the development of PSI's activities. We suggest you check this page from time to time to notice any possible changes.

2. Collection and use of your data

Under this Policy, the term "data" means any personal information allowing the identification directly or indirectly of a person visiting the website www.proovstation.com, including the prospects and customers of the ProovStation solution.

Your personal data are collected and processed by PSI for the purposes described below.

Business development and commercial relation

When you visit our website and fill in the contact form, PSI may collect and process the following data:

• Personal identification data such as name, surname and telephone number;
• Electronic identification data such as email address;
• Information related to your working environment such as company name, job position, etc.;
• Any other personal information that you communicate to us.

We may also collect this information from your business card if you agree to give it to a PSI employee.

These data are gathered in an automated file (CRM) and processed by PSI only for marketing and business development purposes. They are kept for 3 years from the date of the last contact with you.

This processing is based on PSI's legitimate interest in developing its business and maintaining its relationship with its professional customers and prospects (Article 6.1 f) of the GDPR) and, where applicable, on the performance of pre-contractual measures taken at your request (Article 6.1 b) of the GDPR). You may object at any time to receiving our commercial communications.

PSI's website is hosted in data centers located in the European Union.

3. Data transmission to third parties

PSI may transfer the collected data:

1. to its commercial partners inside and outside the European Union, to the companies of the ATERMES group to which it belongs, and to its suppliers and subcontractors involved in the provision of PSI's services, in accordance with the confidentiality obligations between PSI and its commercial partners;
2. to comply with the law in force or with a request from an administrative or judicial authority;
3. to ensure and protect the safety of people or the security of the ProovStation solution.

Where data are transferred to a country outside the European Economic Area that does not benefit from an adequacy decision of the European Commission, PSI frames this transfer with appropriate safeguards, in particular the standard contractual clauses adopted by the European Commission, a copy of which you can obtain by contacting us.

4. Cookies

The Website uses no audience measurement or advertising cookies. Only trackers that are strictly necessary for the Website to work and for its security may be stored on your device. In accordance with Article 82 of the French Data Protection Act (loi Informatique et Libertés), these trackers are exempt from consent.

Some third-party content, such as videos, is only loaded at your request. Its publishers may then store their own trackers, which are governed by their own privacy policies.

5. Data protection and security

PSI is responsible for the security of the collected data and implements the appropriate technical and organisational measures to maintain the confidentiality, integrity and availability of these data. In application of the need-to-know principle, access to personal data is strictly restricted to PSI employees who need it in the exercise of their professional functions. They are subject to a confidentiality obligation in accordance with their employment contract.

6. Exercise of your rights

PSI undertakes to comply strictly with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (the "GDPR"), of the amended French law no. 78-17 of 6 January 1978 on information technology, data files and civil liberties, and more generally with any regulations applicable to the processing of personal data. In accordance with the applicable regulations, you have the right of access, rectification, erasure, portability, restriction of processing and objection to the processing of your data collected and processed by PSI.

You can exercise your rights by contacting us via legal@proovstation.com or by postal mail to ProovStation International, Legal Department, 4 avenue des 3 Peuples, 78180 Montigny-le-Bretonneux, France. We will answer and respond to your request within one month of its receipt. This period may be extended by two months, taking into account the complexity or number of requests, in accordance with Article 12 of the GDPR. In case of a breach of your rights, you may also lodge a complaint with the CNIL (French data protection authority), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.