I. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

When a visitor browses the Falcon Portal (hereinafter the "User"), Dassault Aviation may obtain and process User’s personal data (hereinafter the “Personal Data”) within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and French law 78-17 of 6 January 1978 as amended (hereinafter collectively referred to as "GDPR").

The User may access some services from the Falcon Portal. Some of these services are accessible by the User solely if the User subscribes to the registered section of the Falcon Portal (hereinafter the "Registered User"). In addition, Dassault Aviation may use some text files which are downloaded to the User Device (hereinafter the “Cookies”) pursuant to Section III – 3 “USE OF COOKIES”.

User personal data are processed by Dassault Aviation acting as the Controller within the meaning of the GDPR. The contact details of the Data Protection Officer of Dassault Aviation are: 78, Quai Marcel Dassault - 92 210 Saint Cloud (France) and personaldata@dassault-aviation.com.

II. ABOUT DATA PRIVACY

1. CONFIDENTIALITY

Dassault Aviation shall process Personal Data with due care and diligence, in a confidential manner and in compliance with GDPR.

The processing of Personal Data shall be limited to Dassault Aviation’s employees having a strictly “need-to-know” in order to carry out their functions in connection with the services provided by Dassault Aviation.

Dassault Aviation shall not, directly or indirectly, totally or partially, disclose to any third party, reproduce or have reproduced any Personal Data without the prior written agreement of the User.

Notwithstanding the above, Dassault Aviation shall disclose such data to its suppliers, subcontractors and partners whose employees have a strictly “need-to-know” in order to carry-out their in connection related the services provided by Dassault Aviation.

2. SECURITY MEASURES

Dassault Aviation implements security measures in order to prevent unauthorized access and any disclosure, alteration or destruction of Personal Data.

For this purpose, Dassault Aviation ensures data security through physical and logical tools as well as managerial procedures such as:

• the “Secure Sockets Layer” (or “SSL”) encryption when collecting or transferring data. This security measure is guaranteed by the presence of the symbol of an intact key or a closed padlock (depending on the User browser);
• the introduction of secure authentication procedures;
• the implementation of a secure architecture using recommended devices (such as antivirus, firewall…);
• the control of access ensuring the provisions related to the confidentiality of data.
• the awareness of Dassault Aviation’s personnel regarding information security.
• The physical protection of premises hosting Personal Data.

In addition, Dassault Aviation requires from its service providers to be compliant with technical and organizational security principles pursuant to GDPR in order to protect Personal Data against any violation.

III. COLLECTION AND PROCESSING OF PERSONAL DATA

1. FALCON PORTAL

When browsing on Falcon Portal, the User may contact a “Falcon Representative” and also subscribe to the “Newsletter” of Dassault Aviation.

In order to deal with such requests, Dassault Aviation shall obtain and process Personal Data through a form to be completed by the User.

1.1. CONTACT « FALCON REPRESENTATIVE »

1.1.1. Legal basis

The collection of Personal Data through the “Falcon Representative” contact form is based on the User consent.

The request for consent is presented in a manner which is clearly distinguishable, in an intelligible and easily accessible form and using clear and plain language. Dassault Aviation is able to demonstrate that the User has consented to processing of Personal Data.

Dassault Aviation informs the User that the provision of Personal Data in the “Falcon Representative” contact form is necessary for Dassault Aviation in order to process the User’s request. The User is free to refuse to provide Dassault Aviation with Personal Data, being acknowledged that the User’s request will not be processed by Dassault Aviation.

1.1.2. Purpose

The purpose of the “Falcon Representative” service is to ensure that each User’s requests shall be processed and consequently improve the understanding of the User’s needs and profile.

1.1.3. Storage period

Dassault Aviation processes Personal Data for the duration of 1 year.

1.1.4. Recipients

The recipients of Personal Data, collected under “Falcon Representative” contact form, are Dassault Aviation’s employees, including its subsidiaries, suppliers, subcontractors and partners whose employees have a strictly “need-to-know” in order to carry out their functions in connection related the services provided by Dassault Aviation.

Concerning transfers outside of the European Economic Area, Personal Data are transferred pursuant to the Section V. Personal Data Transfers.

1.2. SUBSCRIBE TO THE NEWSLETTER

1.2.1. Legal basis

The collection of Personal Data through the “Newsletter” subscription form is based on the User consent.

The request for consent is presented in a manner which is clearly distinguishable, in an intelligible and easily accessible form and using clear and plain language. Dassault Aviation is able to demonstrate that the User has consented to processing of Personal Data.

Dassault Aviation informs the User that the provision of Personal Data in the “Newsletter” subscription form is necessary for Dassault Aviation in order to send the User the Newsletter. The User is free to refuse to provide Dassault Aviation with Personal Data, being acknowledged that the Newsletter cannot be sent without the User consent.

1.2.2. Purpose

The purpose of the processing of Personal Data for the need of the “Newsletter” service is to send the “Newsletter” to each User who has subscribed to the service.

1.2.3. Storage period

Dassault Aviation processes Personal Data for the duration of the service.

The User remains free to unsubscribe from the "Newsletter" at any time. Personal Data will be deleted at that time.

1.2.4. Recipients

The recipients of Personal Data, collected under “Falcon Representative” contact form, are Dassault Aviation’s employees, including its subsidiaries, suppliers, subcontractors and partners whose employees have a strictly “need-to-know” in order to carry out their functions in connection related the services provided by Dassault Aviation.

Regarding transfers outside of the European Economic Area, Personal Data are transferred pursuant to the Section V Personal data transfers.

2. REGISTERED SECTION OF FALCON PORTAL AND MOBILE DEVICES APPLICATIONS

Through the registered section of Falcon Portal or mobile devices applications the User accesses information and services provided by Dassault Aviation.

The registered section of Falcon Portal is only available for the User having subscribed to a specific account (the “Registered User”).

Some services provided by Dassault Aviation under the registered section of Falcon Portal to the Registered User are also available on the mobile devices applications.

2.1. Access the registered section of Falcon Portal

2.1.1. Legal basis

The collection of Personal Data, such as the name, first name, telephone number, e-mail address, is based on the registered User’s consent.

2.1.2. Purpose

The purpose of the processing is to enable Dassault Aviation to complete the registration of the User and provide the User with an access to the registered section of Falcon Portal.

2.1.3. Storage Period

Dassault Aviation processes Personal Data of the Registered User for the duration of the possession of the aircraft by the customer.

2.1.4. Recipients

The recipients of Personal Data of the Registered User are Dassault Aviation’s employees, including its subsidiaries, suppliers, subcontractors and partners whose employees have a strictly “need-to-know” in order to carry out their functions in connection with the services provided by Dassault Aviation.

Concerning transfers outside of the European Economic Area, Personal Data are transferred pursuant to the Section V Personal data transfers.

2.2. Services provided through the registered section of Falcon Portal

2.2.1. Legal basis

The services provided through the registered section of Falcon Portal and/or the mobile device applications imply the processing of the Registered User’s Personal Data. Such Personal Data processing is necessary for the performance of the contract that the Registered User has concluded with Dassault Aviation.

2.2.2. Purpose

The purpose of such processing is to manage:

• documentation & information browsing;
• information & contact requests;
• order parts & services;
• Fleets data collections.

2.2.3. Storage Period

Dassault Aviation processes Personal Data of the Registered User for the duration of the subscription by the Registered User to each of the services.

3. USE OF COOKIES

When browsing on the Falcon Portal, Personal Data may be collected through Cookies.

3.1 Definition

Cookies are small text files that a web server stores on a dedicated area of the visitor’s device when visiting websites or applications. Cookies allow websites to recognize the visitor and facilitate navigation.

3.2 Purposes

Dassault Aviation uses different types of Cookies for different purposes. Some are essential to the use of the Falcon Portal and therefore to the navigation.

Dassault Aviation uses Cookies for the following purposes :

• The system administration needs, such as operate the website as requested, facilitate the navigation of the User or improve the functionality of the website.
• To measure traffic statistics in order to determine how the website is browsed and enhance the User experience.

3.3 Storage period

Cookies are stored on the User’s device for a duration of :

• Ninety (90) days for the public website,
• Twelve (12) months for the registered section.

3.4 Settings Cookies

The storage of Cookies in the User’s device depends of User’s will.

User may refuse cookies by adjusting freely its internet browser settings at any time; being acknowledged that refusal of cookies may partially or totally disable Falcon Portal functionalities.

IV. RIGHTS OF USERS

Any User has the right to obtain access and rectification or erasure of its Personal Data, the right to request restriction of processing concerning the User or to object to processing, as well as the right to data portability. Users also have the right to withdraw consent at any time.

All these rights may be exercised by simple written request to the Data Protection Officer of Dassault Aviation whose contact details are: 78, Quai Marcel Dassault – 92 210 Saint-Cloud (France) or personaldata@dassault-aviation.com

The User also has the right to lodge a complaint with the French Data Protection Authority (“CNIL”).

V. PERSONAL DATA TRANSFERS

Personal Data processed for the need of the services provided by Dassault Aviation may be shared with Dassault Aviation subsidiaries, their suppliers and subcontractors if required by the purposes of each service or by law.

The processing operations may involve transfers of Personal Data to third country that is not a country member of the European Economic Area. Such transfer operations are carried out with appropriate safeguards to ensure the security and the confidentiality of Personal Data.