PREAMBLE

This privacy policy aims to inform you about:

• The data controller responsible for the collection and processing of your personal data;
• How your personal data is collected. “Personal data” refers to any information relating to an identified or identifiable natural person;
• Your rights regarding this data;
• The recipients of your personal data;
• The website’s cookie policy.

DATA CONTROLLER

We, Valid8, a Limited Liability Company with a share capital of €10,000, headquartered at Rua Soares Dos Reis, Nr. 1030, 5° 54, 4430 – 240 Vila Nova de Gaia, registered with the Commercial Registry of Vila Nova de Gaia under number 517 695 006, represented by Olivier MERIL as Manager, act as the data controller for your personal data. You can contact us as follows:

• By mail: Rua Soares Dos Reis, Nr. 1030, 5° 54, 4430 – 240 Vila Nova de Gaia
• By email: dpo@mv-group.fr

1. INFORMATION ABOUT PERSONAL DATA PROCESSING EXCLUDING COOKIES

2.1. Data processed excluding cookies

We may process contact data (such as *last name, *first name, *email, phone number, position, company) provided by you. The provision of this data is only mandatory for fields marked with an asterisk. Failure to provide the requested data in these fields would prevent us from contacting you and understanding the needs that require our services. We also collect data through cookies and other trackers, as detailed in the dedicated paragraph.

2.2. Purpose of this processing

We aim to respond to your inquiries, establish contact, and offer our services based on the data you share with us via the website contact form.

2.3. Lawfulness and legal basis of processing (Articles 6 and 7 of the GDPR)

Valid8 undertakes to use the collected data in strict compliance with applicable laws, including the General Data Protection Regulation (GDPR). We process personal data collected via the contact form based on our legitimate interest, especially in the context of our business relationships, to understand your needs and how we can address them.

2.4. Data retention

Data collected on the “giv-id.com” website, through our contact forms, are retained for a maximum of 36 months from the last contact with you. After this period, all data concerning you will be deleted.

2.5. Data security and processing (Article 32 of the GDPR)

Valid8 ensures the confidentiality of collected data and implements appropriate technical and organizational measures to preserve their security and integrity, including protection against accidental loss, alteration, disclosure, or unauthorized access.

2.6. Data breaches and notifications (Articles 33 and 34 of the GDPR)

In case of a personal data breach or suspected breach, Valid8 will notify the National Data Protection Commission (CNPD) within 72 hours of becoming aware of it. If the breach could result in a significant impact on your rights or cause you significant harm, we will notify you as soon as possible.

2.7. Data transfer outside the EU

The data you provide in the contact form is hosted on servers within the European Union.

2.8. Recipients of your data

Internal recipients of your data at Valid8: Only authorized employees of Valid8 may access your data.

External recipients of your data: The company MV GROUP, governing our website, may access the data you provide in the contact forms.

1. COOKIE MANAGEMENT POLICY

This “COOKIES” section informs you about the origin and use of navigation information processed when you visit our site and your rights in this regard. During your visit to our site, information about your browsing may be recorded in “Cookies” files stored on your device (computer, tablet, smartphone, etc.).

3.1. Cookies we issue

A technical cookie is automatically deposited on your computer upon entering our website to display the cookie consent banner and retain your choice (whether you consent or not). We also use a cookie from Google Analytics to track website traffic.

3.2. Data collected through cookies we issue

We collect:

• Navigation and traffic data from our website through our cookies;
• Your consent or refusal to accept cookies and other trackers.

3.3. Purposes of processing collected data through our cookies

The technical cookie we install on your device allows us to retain your consent and demonstrate compliance with the law to the CNPD. Performance cookies enable us to compile visit statistics (number of visits, page views, form abandonment rates, etc.) to monitor and improve the quality of our services. We use Google Analytics services for this website traffic tracking. We do not collect cookies for commercial purposes.

3.4. Duration of data retention from cookies

Traffic and navigation data obtained through cookies will be kept for a maximum period of one (1) year from their collection.

3.5. Recipients of data from cookies

Internal recipients: Only authorized employees of Valid8 may access your data.

External recipients: Our service provider Google Analytics and MV Group, governing our website, may access data from cookies.

3.6. Your choices regarding cookies

Your consent is required to track your navigation on our website. You are not obligated to provide your browsing information to navigate our website, but without it, we cannot improve our services to meet your needs. Several options are available to manage cookies. You can express and modify your cookie preferences at any time using the methods described below. The technical cookie is strictly necessary and automatically deposited on your device, allowing you to make choices about cookie placement. You can accept or reject all cookies or accept or reject each specific cookie issued. It is necessary for us to retain your consent or refusal to accept cookies and trackers. At any time, you can go to the bottom of our website to click on “Cookie Settings” to modify your cookie preferences.

3.7. Choices offered by your browser

You can configure your browser to store or reject cookies, either systematically or based on their issuer. You can also configure your browser to prompt you to accept or refuse cookies before they are stored on your device. We encourage you to configure your browser accordingly. Each browser’s configuration is different. Browser settings:

• For Chrome: https://support.google.com/chrome/answer/95647?hl=en
• For Internet Explorer: https://windows.microsoft.com/en-US/windows-vista/Block-or-allow-Cookies
• For Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store?redirectlocale=en&redirectslug=cookies
• For Opera: http://help.opera.com/Windows/10.20/en/cookies.html

3.8. Data transfer outside the EU

Valid8’s audience measurement providers may transfer your data outside the European Union (including to the United States via Google Analytics). In this regard, we ensure that such transfer is regulated by an adequacy decision (such as the Data Privacy Framework) or, failing that, by standard contractual clauses (SCCs) or binding corporate rules (BCRs) with our providers to ensure an adequate level of security and respect for your rights.

RIGHTS OF INDIVIDUALS

In accordance with the Data Protection Act and the GDPR, any individual may exercise their rights of access, rectification, opposition, limitation of processing, deletion, and portability of their personal data. Requests should be made by signed letter to Valid8’s headquarters: Rua Soares Dos Re