RGPD – Ellipse Animation

Charter for the protection of personal data

Preamble

Under the brand Ellipse Animation, the company Ellipsanime Productions produces animated series
and films (hereinafter “the Services”).
Data Controller is involved in a process to protect personal data. As such, the Data Controller is
committed to compliance with the General Data Protection Regulation of 27 April 2016 (“GDPR”) and
Law No. 78-17 of 6 January 1978 on data processing, data files and individual liberties (“Data Protection
Act”) (together referred to hereinafter as “Data Protection Regulations”).
This Charter for the Protection of Personal Data (hereinafter “the Charter”) is one element in a larger
process of transparency and loyalty intended for your benefit.
Thus, the purpose of this Charter is to present you with all of the information necessary to understand
how the Data Controller collects, processes and protects your personal data in the context of our
relationship and the related options available to you.
The Data Controller may modify the Charter at any time, according to the changes or additions made,
in order to comply with any regulatory, jurisprudential, editorial and/or technical changes. You are
advised to refer to the latest version of the Charter before any navigation.
ARTICLE 1. In what context and for what reasons are your personal data processed?
Personal data is any information that identifies you as a natural person, directly or indirectly. This
includes, for example: last name, first name, date of birth, sex, postal address, email address, telephone
number, commentary showing your contact details, social security number, AGESSA or Maison des
Artistes registration number, etc.
Providing this data may be required within the scope of our relationship in order to communicate,
transfer information to various public administrations, pay you, etc.
The purpose of collecting and processing your persona data is:
– subscribe to one of our newsletters;
– subscribe to one of our Services;
– take part in a competition that we organize;
– apply to a job post on our website;
– submit a spontaneous application;
– take a survey;
– transfer a link or content from our Services to one of your contacts, etc.
Providing this information may be required to use some of our Services.
The purpose of collecting and processing your personal data is to :
– to allow you to benefit from our Services;
– to contact you to inform you of your possible winnings in the context of competitions;
– respond to your requests;
– to inform you of news about our Services and our offers;
– establish statistics on the frequentation of the various parts of our Services;
– to comply with the legislation in force in the event that you participate in contribution spaces
moderated a posteriori (forums, notices, loading of any digital element…);
– identify abusive uses of our Services.

ARTICLE 2. Who may use your personal data?

Your personal data is collected when you subscribe to our Services. They are intended for Data
Controller, and may be communicated to third parties under certain conditions.
❖ Data Controller
Your personal data is processed by Data Controller for the purposes described above.
Your personal data may be :
– communicated by the Data Controller to its subsidiaries or to the subsidiaries of the Media
Participations Group;
– transmitted to any third party company that Data Controller has appointed as a processor to
carry out any of the activities described above on its behalf, it being specified that your
personal data will remain under the control and direction of Data Controller.
❖ Third parties authorized by law:
In certain cases provided for by law, your personal data may be transmitted to third parties legally
entitled to access it upon specific request: judicial authority, administrative authority, your Internet
service provider, or a third party issuing a cookie recorded in your terminal (an external advertising
agency, another publisher, etc.).
We may also be required to communicate your personal data to third parties if such a measure is
necessary to protect and/or defend the rights of the Data Controller, to enforce these provisions, or
to protect your rights and/or interests or those of the public, provided that such transmission is
authorised by law.
In the event that all or part of the Data Controller is sold to a third party, we reserve the right to transfer
your information as a sold or assigned asset.

ARTICLE 3. How to access, modify and/or delete your personal data?

❖ Your rights
You have rights to your personal data.
In accordance with the Data Protection Regulations, and within the limits set out in Articles 12 to 22
of the GDPR:
– you have the right to ask us for access to your personal data, as well as for their correction or
deletion;
– you also have the right to object to the processing of your personal data, to request its
limitation, and the right to the portability of the personal data provided.
Finally, we remind you that you have the right, in any event, to define general or specific directives
concerning the fate of your personal data after your death.
❖ Exercising your rights
You may exercise these rights by writing to us at the following address : h.salle@ellipseanimation.com
– using the tools provided for this purpose and made available to you as part of our Services;
– writing to us at the following address: rgpd@company.com
Furthermore, at any time, if necessary, you may withdraw your consent to the processing of your
personal data by clicking on a hypertext link dedicated to this purpose in the messages we send you.
Any withdrawal of consent shall not affect the legality of the processing operation based on the
consent furnished prior to withdrawal.
If you are unable to access, modify or delete your information online, you may submit your request by
mail to the following address: Ellipse Animation, 57 rue Gaston Tessier, 75019 Paris, FRANCE
In order to prevent any unauthorized access, modification or deletion or identity theft, please include
proof of your identity with your request whenever possible. In the event of any doubt about your
identity, we will ask you to provide – in addition to your request- a copy of your proof of identity.

❖ Clarification
Any abusive, manifestly unfounded or excessive request may be rejected.
The request must also specify the address to which the reply will be sent; otherwise it will be sent to
the address known to us, if any. A reply will be sent to you within one (1) month of receipt of the
request. This deadline may be extended by two (2) months, depending on the complexity and number
of requests.
We remind you that our partners are responsible for any use they make of your personal data and for
taking into account your rights, including the right to no longer receive offers from them.
If your personal data is deleted, you acknowledge that it will be impossible for you to access and/or
order products on the Site.

ARTICLE 4. How long is your personal data processed by the Data Controller?

Your personal data are stored by the Data Controller and/or any service provider for the strict
performance of our relationship, and are kept for the duration strictly necessary to achieve the
purposes for which they are collected, in accordance with regulations in force.

For example, the data collected when you subscribe to one of our newsletters is kept to send you such
newsletters as long as you have not unsubscribed.
The information relating to each application is archived in any case after 2 months and is kept for up
to 5 years after the delivery of your application.
Beyond said duration, the following will transpire:
– Either the deletion or secure destruction of data;
– or the strict anonymization of the data, exclusively for statistical purposes, and absent any other
exploitation of any kind whatsoever.

ARTICLE 5. Where is your personal data stored and processed?

As a matter of principle, the Data Controller attaches great importance to the protection of personal
data and compliance with the framework set out in the Data Protection Regulations.
Thus, your personal data is processed by us or our service providers on the territory of the European
Union/in France and Belgium and is, as far as possible, not transferred to third countries.
In this case, Data Controller has ensured that appropriate safeguards are in place to ensure that the
level of protection of individuals guaranteed by the Data Protection Regulation is not compromised.
These guarantees can be consulted on request at the following address: Ellipse Animation, 57 rue
Gaston Tessier, 75019 Paris, FRANCE
ARTICLE 6. Who can you contact about your data?
For any questions related to your personal data, you may contact the Data Protection Officer
appointed by Groupe Media Participations, duly authorised to deal with all issues relating to the

protection of personal data. You may contact said individual at the following e-mail address : mp-dpo@media-participations.com

In the absence of a satisfactory response to your request, you may file a complaint with the
Commission Nationale de l’Informatique et des Libertés, the regulatory authority responsible for
enforcing the Regulation on the protection of personal data in France, directly via its website
https://www.cnil.fr/fr/agir or by mail at the following address: Commission Nationale de
l’Informatique et des Libertés, 3 Place de Fontenoy – TSA 80715, 75334 PARIS CEDEX 07.