Agora Health processes your personal data in compliance with the General Data Protection Regulation (GDPR), which came into effect on May 25, 2021. Transparency and public information about how personal data is used are two fundamental objectives of this regulation.

Thus, through this policy, Agora Health ("we", "our") is committed to protecting and respecting your privacy. This privacy policy describes how we collect, use, process, and share the personal data you provide to us or that we collect about you when you use our website.

What personal data do we collect?

Agora Health may collect, store, and exploit different types of personal data, detailed as follows:

• Data related to your computer hardware, including, for example, your IP address, geographic location, type and version of your Internet browser, and your operating system.
• Information about your visits to and use of our website, including the referral source, length of your visit, pages you viewed, and navigation paths you took on our site.
• Personal information, such as your name and email address, which you provide to us for the purpose of receiving communications from Agora Health or when you ask us questions.
• The content of the messages you send us when you have questions.
• Your personal identification information, your telephone number, your resume and cover letter when you apply for a job with us.
• Information contained in all communications you send to us, whether by email or via our website, including the content of the communication itself and the associated metadata.
• Any other personal information that you choose to communicate to us.

It should be noted that if you wish to disclose personal information about another person, you must obtain that person's consent beforehand. This consent must cover both the disclosure of the information in question and its processing in accordance with this policy.

How is your personal data collected?

Agora Health collects and processes your data in the following situations:

• When you fill out our contact form to get additional information.
• When you request to receive communications from Agora Health.
• When you apply for a job within our company.
• When you browse our website, some of your personal data is also collected.

In this way, most of the data we collect comes directly from you and the information you provide to us.

Who processes your personal data?

The information we collect is intended to be used by:

• Agora Health team members;
• Our third-party service provider partners, as part of the agreements we have established with them;
• Public and government authorities, as part of our legal obligations.

Why do we collect your personal data?

The purpose of processing personal data by Agora Health aims to:

• Improve and secure our website;
• Process and respond to your requests and inquiries;
• Manage our communications, such as sending newsletters, informing you about our products and services (note that you can unsubscribe at any time);
• Review and manage your application when you apply for a position within our company;
• Comply with our legal obligations.

How long is your personal data retained?

The retention of your personal data by Agora Health is carried out according to the following principles:

• For queries or requests: they are kept as long as necessary to respond to them or to meet other fundamental needs.
• For subscriptions to our newsletters: they are kept for the duration of the subscription (please note that you can unsubscribe at any time).
• For job applications: your data is kept for a period of 2 years, accessible to all our HR teams, unless you object. Subsequently, to comply with our legal obligations, we archive this data for an additional 4 years.
• For demonstration requests: your data is kept for the time necessary to process the request.

What are our legal bases for processing your personal data?

Legitimate Interests

We will process some of your personal data based on our legitimate interests in the following cases:

• When you visit our website: we may install certain cookies for the proper functioning of our website, for which we do not need your consent.
• When we process your question or request.

Consent

We will process some of your personal data with your consent in the following cases:

• When we send you newsletters.
• When you accept specific types of cookies.

Contract or intention to enter into a contract

We will process some of your personal data based on your application when:

• We manage your application form, resume, and cover letter.

Legal obligation

In certain circumstances, we will process personal data not for objectives we have defined or that the party for which we process the data has defined, but to comply with applicable legal or regulatory requirements.

What are your rights in terms of personal data protection?

Agora Health wants to make sure you are fully aware of all your data protection rights. Each user has the following rights:

• The right of access: You have the right to know if your personal data is being processed and to request copies of your personal data from Agora Health.
• The right to rectification: You have the right to ask Agora Health to correct any information you consider to be inaccurate or incomplete.
• The right to erasure: You have the right to ask Agora Health to delete your personal data, under certain conditions.
• The right to restrict processing: You have the right to ask Agora Health to restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to Agora Health processing your personal data, under certain conditions.
• The right to data portability: You have the right to ask Agora Health to transfer the collected data to another organization, or directly to you, under certain conditions.

How can you contact us?

If you have questions about Agora Health's privacy policy, the data we hold on you, or if you would like to exercise one of your data protection rights, do not hesitate to contact us in the following ways:

• Send us an email at the following address: privacy@agorahealth.co
• Or write to us at the following address: Data Protection Officer, Agora Health, 1 Parvis Notre-Dame - Pl. Jean-Paul II, 75004 Paris.

Do we transfer your personal data?

Agora Health is likely to process and store your personal data in France. However, it should be noted that this data may be transferred outside the European Union through our third-party service providers.

How do we secure your personal data?

To ensure the security of your personal data, Agora Health commits to implementing appropriate technical measures, such as logical and physical securities, and organizational measures, notably training employees on the importance of confidentiality and security. The objective of these measures is to prevent any loss, inappropriate use, unauthorized modification, or accidental destruction of your personal data.