PERSONAL DATA PROTECTION POLICY

Effective March 15, 2024

As part of the provision of the website accessible at club-pilates.fr (the "Site") to any Internet user consulting and/or using the services
the "Site") to any Internet user consulting it and/or using its services (the "User" or "you"), the company
or "you"), the company TMCP FITNESS FRANCE (the "Company" or "we") and the service providers
service providers it uses to ensure the operation of the Site and the services
services offered to the User and the independent franchisees of the CLUB PILATES
PILATES network collect and process the User's personal data.

The Company, whose contact details can be found on the "Legal information" page of the Site, acts in this capacity as the Data Controller.
as a Data Controller within the meaning of the General Regulation on Data
Protection des Données (RGPD).

The purpose of this personal data protection policy is to
inform you about the methods of collecting, processing, using, sharing, and protecting
of your personal data via the Site, the purposes pursued, as well as the rights
the rights you have with regard to said data.

When you create a personal account on the Site, when you consult the Site and when you
use the Site, you accept that your personal data may be collected and processed
collected and processed in accordance with the provisions of the present data protection
personal data protection policy. If you do not agree to the terms
If you do not consent to the terms of this Privacy Policy, you should not create or use an account on the Site.

We may make changes to this privacy policy, in particular to comply with
protection policy, in particular to comply with any changes in legislation,
changes in legislation, regulations, case law or technology. The version available for consultation on the Site is the
version in force; the date of its update will be clearly identified in the header of the
hereof. Any modification will be communicated to the User, who must accept it
must accept them if they wish to continue to use the Site and its associated services.

Article 1: What is personal data?

Personal data (hereinafter referred to as " Personal Data ") is any information that
information relating directly or indirectly to an identified or identifiable natural person
or identifiable individual (a surname, first name, telephone number, location data, etc.).

Article 2: How is your Personal Data collected and processed?
personal data?

As part of the provision of the Site, the Company and the IT and payment service providers
and payment service providers used by the Company to ensure the operation of the Site
and offer services to the User and the independent franchisees of the CLUB PILATES
CLUB PILATES network collect and process your Personal Data on the following bases
the following:
- the need to enable the performance of any contract concluded between you and one of the
Clubs listed on the Site;

- your consent, if you agree to receive promotional offers (whether targeted
according to the courses you have ordered or the Clubs you have visited) and/or
newsletters;

- our legitimate interests as a fitness brand, without prejudice to your rights and
rights and freedoms.

Article 3: What information is collected and how?

The Company, its service providers and the independent franchisees of the CLUB
PILATES network collect certain information directly from you, and others automatically, when you
automatically when you use the Site.

3.1 Information collected directly from you:

When you create a personal account on the Site, we collect from you, through
through the account creation form you fill in, the following Personal Data
Personal Data: last name, first name, e-mail address and telephone number.
The collection of the aforementioned Personal Data is mandatory for access to the services
offered by the Site. If any of this information is not provided, you will not be able to
will not be able to finalize the creation of your personal account, nor access the services
services offered via the Site.
When you make a purchase on the Site or use the course reservation service,
we and our IT and/or payment service providers and their subcontractors and
independent franchisees of the CLUB PILATES network also collect on the Website
the Site the following Personal Data relating to your orders and preferences
preferences:
- the Clubs you have ordered from,
- the classes you have ordered,
- your chosen method of payment,
- your bank details,
- payment history,
- the history of lessons booked, including those cancelled.

Only Personal Data that is adequate and necessary for the purposes pursued is
collected by the Company, its service providers, their subcontractors and the independent
independent franchisees of the CLUB PILATES network; the collection and processing of your
Personal Data is collected and processed in strict compliance with applicable regulations.

3.2 Information collected automatically

When you consult the Site, our IT service provider, the independent companies
franchised companies in the CLUB PILATES network and ourselves may automatically collect
Personal Data about you, in particular via web beacons (which are electronic images also
also known as "web beacons") or any other technology.

The Personal Data collected in this way may include: your mobile phone's IP address
how you connected to the Site, the type and version of your Internet browser
operating system, the OS of your cell phone or tablet and/or other technical identifiers
or other technical identifiers, the URL address of your connections, including the date and time
time associated with them, as well as the content you access on the Site.

Article 4: Personal data of minors

Minors under the age of 18 may not create an account on the Site without the consent
consent given or authorized by their parent(s) or guardian(s) having parental authority.

In the event that a parent or guardian with parental authority becomes aware that his or her child
under the age of 18 has provided us with Personal Data without his/her consent,
we invite them to contact us in accordance with the procedures set out in Article 10 of the present
personal data protection policy.

We will take the necessary steps to delete this information from our database
in accordance with applicable regulations.

Article 5: How do we use your Personal Data?

Each processing of Personal Data has a specific purpose.

The Company, its IT and payment service providers and their sub
independent franchisees of the CLUB PILATES network collect your Personal Data for the following purposes

Personal Data for the following purposes:
- The provision of services accessible via the Site;
- The creation and management of an account on the Site;
- The execution of a contract concluded between you and one of the CLUB PILATES
referenced on the Site;
- The improvement of the services we offer via the Site, the production of statistics
surveys, in particular satisfaction surveys, commercial canvassing
commercial prospecting;
- Compliance with our legal and regulatory obligations.

More specifically, we may use your Personal Data for the purposes described
below:

➢ To be able to provide the services accessible via the Site and to enable
fulfill the orders you place via the Site:

- to enable you to book courses on a space-available basis;

- process payments for courses ordered via the Site;

- manage all your requests and complaints concerning the processing of your
the processing of your Personal Data, the operation of the Site, the provision of
services accessible via the Site;

- to send you targeted promotional offers (based on the products most
and newsletters. In this respect, if you wish the
Company to stop processing your Personal Data for the purposes of commercial and
communications, you have the right to withdraw your consent at any time.
consent in this respect, at any time, free of charge and without having to provide
justification. To exercise this right, simply follow the procedure
described in articles 9 and 10 of this policy.

➢ To improve our services:
- maintain a customer database that is as complete and representative as possible
possible;

- facilitate your browsing on the Site and improve its operation;

- personalize the Site according to your affinities;

- manage and improve our activities: in particular, the range of products and services
offered via the Site and/or the content present on the Site, by using
analysis and profiling techniques that enable us to carry out studies to
evaluate the effectiveness of our sales, marketing and advertising activities.
In this respect, your Personal Data may be used to draw up user profiles and statistics
user profiles and statistics, as well as to classify you in a group of consumers
group of consumers determined on the basis of your personal characteristics
(for example, gender and age) ("profiling"). Thanks to such
profiling techniques, we are able to send you personalized
personalized newsletters, promotions, tailored to your needs and/or more
and therefore offer you added value. The use of these
techniques will not have any legal or other significant consequences for you.
consequences for you. If you would like more information on the profiling techniques
profiling techniques used and classification into specific groups,
or if you have any objections, you can contact us in accordance with
article 9 and 10 of these terms and conditions.

Article 6: Who has access to your data?
Within the limits of their respective responsibilities, the following persons may collect and have access to your Personal Data
have access to your Personal Data:

- Within the Company: persons in charge of the marketing and IT departments
and their line managers;

- Our service providers, in particular in IT and payment services, and their sub
and independent franchisees of the CLUB PILATES network. From
when all or part of your Personal Data is collected and/or processed by our
by our service providers or franchisees, we ensure that the contracts signed with
mention the obligations incumbent upon them in terms of the protection, security and
protection, security and confidentiality of Personal Data, and specify in particular the
the security objectives to be met by them.

Should we decide to sell or transfer all or part of our business to another company
or transfer part or all of our business to another company, we may transfer the information
the information we have collected and stored (including your Personal Data) to the
Personal Data) to the transferee company.

Your Personal Data may be transferred outside the European Union. In
the Company has taken the necessary and appropriate measures to ensure a high level of
a level of protection and security of Personal Data equivalent to that offered within the
within the European Union and this in accordance with the RGPD. The Company thus undertakes
in particular to impose on the recipient concerned strict obligations in terms of
confidentiality and security of Personal Data prior to any transfer.

Article 7: How long are your Personal Data kept?

The Company and/or its service providers and/or franchisees store your Personal Data
strictly necessary for the purposes for which they were collected.
collected.

We may retain all or part of your Personal Data for longer than the period
the table above, in the following cases:

- In the event of an unresolved claim or dispute with the User;
the User's Personal Data will be kept until the dispute has been resolved.
resolution of the dispute, subject to the applicable legal statute of limitations
applicable,

- In the event of use for statistical purposes after anonymization.

Personal Data relating to orders placed via the Site are kept for 2 years following their date of validation on the Site, subject to the reservations stipulated above.
above.

Article 8: How is your Personal Data secured?

The Company implements the appropriate physical, technical and organizational measures
to guarantee a high level of security and confidentiality of Personal Data, and to prevent
and to prevent, as far as possible, any alteration or loss of your Personal Data or any
Personal Data or any unauthorized access thereto.

The measures we have put in place are manifold: the adoption of internal rules, the supervision of processing
security and protection measures.

In the event of a breach of your Personal Data, i.e. if the Personal Data
for which we are responsible is subject to a security incident that results in a breach
their confidentiality, availability or integrity, we will notify the Commission
Commission Nationale de l'Informatique et des Libertés, as well as to any competent national
authority, if applicable, under the conditions prescribed by the applicable regulations.

Article 9: What are your rights?

You have the right to access, rectify, delete and port your
Personal Data.

You also have the right to limit the processing of your Personal Data and the right to
right to object to such processing at any time.

You also have a right to information in the following situations:

- Information within one (1) month of the measures taken in response to a request
(right of access, rectification, limitation, deletion, etc.),

- Information as soon as possible in the event of a Personal Data violation
likely to result in a high risk to your rights or freedoms.

You may withdraw your consent to the processing of your Personal Data at any time.
your Personal Data. This will not affect the lawfulness of any processing carried out
prior to such withdrawal.

You also have the option of organizing the retention, deletion and communication of your Personal Data after your death.
of your Personal Data after your death, through the adoption of general or specific
which may be registered with a trusted digital third party certified by the
certified by the CNIL.

Article 10: How to contact us

You may inquire about your Personal Data or exercise your rights by contacting us.
please note that all requests must be accompanied by a copy of your identity document
identity document so that we can check that the person making the request is indeed the person
person concerned by the processing:

- By post to

Club Pilates
32 Boulevard de Vaugirard
75015 PARIS

- By e-mail: Club Pilates

cpfrance@club-pilates.fr specifying "personal data" in the subject line of your email.
personal data" in the subject line.

If you believe that the processing of your Personal Data constitutes a breach of the
RGPD, you have the right to lodge a complaint with a supervisory authority, in
in particular in the European Union Member State of your place of habitual residence,
of your place of work or of the place where the violation occurred.

You can also lodge a complaint with the Commission nationale de l'informatique et
l'informatique et des libertés (CNIL) in France:

- By post to the following address

CNIL - Service des plaintes
3, place de Fontenoy
TSA 80715
75334 PARIS CEDEX 07

- Or online at

https://www.cnil.fr/fr/cnil-direct/question/844

https://www.cnil.fr/fr/plaintes

Article 11: What is the applicable law? Which courts have jurisdiction?

This personal data protection policy is governed by French law.
French law. Notwithstanding the foregoing, if the User is a consumer and has his or her
residence is located in a European Union country other than France, the mandatory
the mandatory provisions of the User's country of residence will apply.

In the event of any dispute relating to this policy, the French courts shall have jurisdiction.
to settle it. Notwithstanding the foregoing, if the User is a consumer and his/her habitual
residence is located in a European Union country other than France, the mandatory
the mandatory provisions of the User's country of residence will apply.

In the event that a legislative or regulatory change, or a court ruling
invalidate a clause of this personal data protection policy, the other clauses shall remain
other clauses remain valid.