Personal data protection policy APEM

At APEM SAS (hereinafter "APEM" or "We"), We take the protection of your personal data and the respect of your privacy very seriously.

In this respect, and in accordance with the applicable regulations, such as the French Data Protection Act n°78-17 of January 6, 1978 relating to Data Processing, Files, and Freedoms, and the European regulation n°2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter the “Personal Data Protection Regulation”), this Personal Data Protection Policy of APEM (hereinafter the “Policy”) aims to provide you with clear and transparent information regarding how APEM collects, uses, shares, and processes your personal data.

This Policy covers the processing performed for:

• The management of data We collect when you browse the APEM website (www.apem.com), hereinafter referred to as the “Website”, “APEM Website” or “Our Website”) and use the associated services (registration on the Website, subscription to our newsletter, document downloads, contact form, browsing analysis, etc.).

• The management of contact data We collect for the monitoring and maintenance of our business and contractual relationships.

Within this framework, APEM SAS, a company registered with the Trade and Companies Register of Montauban under number 342 898 384, and whose registered office is located at 55 avenue Edouard Herriot 82300 Caussade France, is the entity responsible for processing your personal data.

For any questions regarding the way we process your personal data, you can contact us at the following address: fr.apem.privacy@apem.com

Within the framework defined above, We may collect and process the following categories of information about you, such as:

• Data related to your identity or civil status (name, first name, etc.)

• Contact information (e-mail address, phone number, etc.)

• Geographical or physical location data (country, postal address, etc.)

• Website navigation data (connection logs, IP address, browsing history, user behaviour, data related to the equipment, and browser used data, etc.)

• Professional data (company, company address, position, department, etc.)

The use of your data is carried out for the purposes described below, each purpose being based on a legal basis that authorizes us to process your data.

• Internal recipients:

The personal data We collect may be shared within our various services or with the different companies in the Group, but only when necessary for achieve the purposes described in this Policy.

• External recipients:

We may engage or be required to engage third parties outside the companies of APEM group for the performance of certain services such as the hosting, maintenance, and security of Our Website, the implementation of communication or marketing operations, or for the monitoring and maintaining our commercial and/or contractual relationships. Thus, in order to fulfill of the purposes stated in this Policy, and only when necessary for their proper execution, We may be required to provide your personal data to external suppliers and/or service providers, subcontractors and/or other business partners.

We would like to clarify that this use of your personal data is conducted solely within the framework of our business activities and that no commercial transactions of your personal data is carried out with these third parties.

The personal data that We collect for communication and marketing purposes as well as for Website management and security is retained for a duration of five (5) years.

The information collected to send the newsletter is retained for a period of three (3) years from the withdrawal of your consent or from your last exchange with us.

When our system identifies you as one of our business contacts with your log in, your personal data will be retained in accordance with our contact management procedure (see below).

The personal data We collect for an administrative management of contacts is retained for a period of five (5) years:

• From the date of the last interaction with the contact; or

• From the date of the change of contact; or

• From the end of the contractual relationship (if applicable).

A Website user is considered as a business contact and/or is contractually engaged with us and will be subject to the contact administrative management procedure for the duration of their personal data retention.

We implement appropriate technical and organizational measures to protect your personal data against any destruction, loss, alteration, or theft. All personal data We collect is stored on our secured servers.

With the enforcement of the Personal Data Protection Regulation, your personal data receives the same level of protection across all member states of the European Union and the European Economic Area. We can therefore freely share your data when the recipients of your data are located in the European Union territory and the European Economic Area.

We may also be required to share your data in countries outside a member state of the European Union or the European Economic Area. In such cases, We ensure that the measures put in place to protect your personal data comply with the legal obligations in force within the European Union. Thus, We proceed to secure your data, in particular by relying on adequacy decisions issued by the European Commission or by implementing appropriate safeguards such as standard contractual clauses or data protection clauses.

The APEM Website may contain links to third-party websites (business partners, service providers, etc.). If you follow a link to any of these websites, please note that they have their own privacy policies, and We recommend reading the privacy policies and the terms of use of these sites to understand how your personal data is collected, used, and shared. We do not make any warranties as to the compliance with the Personal Data Protection Regulation by these third-party websites and We are in no way responsible for the use of your personal data by these third-party websites.

We, and our third-party partners, collect certain types of usage data, using cookies placed on your device, when you visit Our Website. To learn more, We invite you to read our cookie use policy.

In accordance with the provisions of the Personal Data Protection Regulation, you have rights concerning our use of your personal data.

You can exercise your right of access to identify your personal data and understand how it is being used. You also benefit from the right to rectify inaccurate or incomplete personal data, in asking us to correct or complete them.

When the provisions of the Personal Data Protection Regulation apply, you have the right to have your data erased or to obtain from us a restriction of processing of your data, as well as their portability.

Right to object
Under the conditions set by the Personal Data Protection Regulation, you have the right to object to the use of your personal data when:

- the processing of personal data is based on public interest or legitimate interest,

- your data is processed for marketing purposes.

You have the right at any time to withdraw your consent granted for the processing your data.

You can write to the following address to exercise your rights or for any questions regarding the processing We carry out on your personal data: fr.apem.privacy@apem.com

If you have any doubt on the processing of your personal data, you also have the possibility in accordance with Personal Data Protection Regulation to lodge a complaint with the supervisory authority of your country of residence, or with the supervisory authority We are subject to, namely, the CNIL.

We may change or update this privacy policy from time to time. Please check this page regularly as updates will apply to your future use of our services.

Last update: April 2, 2026