TERMS & CONDITIONS

## Cancellation policy:

## Cancellation is not permitted/refunded.

## Change in participants:

## Potential changes to the (number and details of) participants are possible, as long as they are communicated up until one (1) day prior to the webinar.

## Payment:

Payment should be made prior to the seminar in one of the following bank accounts (please specify in reason for payment the name of your company/organization, as well as the webinar code: 5174 alternatively you may send the payment receipt via email to safety@excelya.com). Payment must be net of all charges and bank charges must be borne by the payer. Invoice will be issued.

## BENEFICIARY NAME: ΝΑΜΕ: BANK ACCOUNT NUMBER: IBAN: SWIFT: BANK ADDRESS:

## EXCELYA GREECE CRO S.A. PIRAEUS BANK S.A. 5014-005451-549 GR61 0172 0140 0050 1400 5451 549 PIRBGRAA 221 Kifissias Av.,151 24 Maroussi, GR

## EXCELYA GREECE CRO S.A. ALPHA BANK 184-00-2320-000597 GR89 0140 1840 1840 0232 0000 597 CRBAGRAA 79 Democratias Ave., 151 27 Melissia, GR

## Photographing/recording of the seminar is not permitted.

DATA PROTECTION INFORMATION

This notice aims to provide you (hereinafter, “data subject”) the information required under Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, (“GDPR”) and other applicable laws regarding the processing of personal data. Personal data will be processed by Excelya Group SAS (hereinafter, “Excelya” or “controller”), as a controller. The contact details of the controller and of its Data Protection Officer (DPO) for any issues related to data protection, are dpo@excelya.com or 738 rue Yves Kermen 92100 Boulogne Billancourt.

Your personal data will be processed for the following purpose(s) and in accordance with the following legal bases: (i) managing and carrying out webinars, trainings, and corporate events (hereinafter, “events”) that you have signed up for, for the performance of a contract to which you are a party and (ii) inviting you to other events organised by Excelya, if you give us your consent in the attendance form above. Where information is not provided, or it is incomplete or inaccurate, this will affect our ability to adequately enable you to attend the event(s).

In both cases, personal data may be shared and/or disclosed: (i) within Excelya group companies for internal administrative purposes; (ii) with processors and sub-processors (third-party providers); and (iii) where legally required or where required in the context of regulatory inspections or audits, with competent authorities, clients, auditors, or other legally foreseen recipients. In the context of the systems and applications used for the aforementioned purposes, personal data may be processed in third countries outside of the European Economic Area. In this regard, the mechanisms used to transfer data may include adequacy decisions (art. 45 GPDR) or standard data protection clauses (“SCCs”) (art. 46.2 GDPR).

Moreover, your personal data will be stored and processed for the time necessary to adequately manage and carry out the event(s) and, if we have your consent, to invite you to other events organised by Excelya, for a period of two (2) years after the end of the event you signed up for. In addition to the aforementioned cases, your data will be kept until you exercise your rights (e.g., you withdraw your consent), or for the establishment, exercise, or defence of legal claims.

In relation to your personal data, you have the right to access, rectification, erasure, restriction, data portability, and to withdraw your consent. Please note that such rights are not absolute and may be limited or restricted in certain circumstances, where there is a legal ground for such limitation or restriction or depending on the applicable legal basis for processing. In order to exercise your rights, you may do so by contacting dpo@excelya.com. In certain cases, additional information may be requested to confirm your identity. You also have the right to lodge a complaint with a supervisory authority, in particular, in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.