Privacy Policy — Exercise of Data Subject Rights (GDPR)

1. Identity and Contact Details of the Data Controller

Aegide SAS, a société par actions simplifiée with a share capital of EUR 6,796,100, having its registered office at 3 Boulevard Romain Rolland, 75014 Paris, France, and registered with the Paris Trade and Companies Register under number 401 397 765 (the "Data Controller"), processes personal data on its own behalf and jointly with its subsidiaries Domitys and Domitys Invest in accordance with Article 26 GDPR.

2. Contact Details of the Data Protection Officer

DPO – Legal Department
3 Boulevard Romain Rolland
75014 Paris, France

3. Purposes of Processing and Legal Bases

• Management of data subject rights requests (legal obligation – Article 6(1)(c) GDPR)
• Maintenance of suppression lists (legitimate interest – Article 6(1)(f) GDPR)
• Preparation of statistics and reports (legitimate interest – Article 6(1)(f) GDPR)

4. Categories of Data Subjects

Natural persons submitting requests to exercise their GDPR rights.

5. Categories of Personal Data Processed

• Identification data (name, surname)
• Contact details (postal address, email, telephone)

6. Recipients of the Data

Authorized employees of Aegide, Domitys and Domitys Invest, and processors acting under Article 28 GDPR.

7. International Data Transfers

Personal data are processed exclusively within the European Union.

8. Retention Period

Five (5) years from closure of the request.

9. Data Subject Rights

Right of access, rectification, erasure, restriction, and objection under Articles 15–21 GDPR.

10. Right to Lodge a Complaint

CNIL – 3 Place de Fontenoy, 75334 Paris Cedex 07, France.