Relaer may process personal data regarding the Customer and/or any natural person representing theCustomer in its contractual relations with Relaer, for the following purposes: performance of Services,Customer relationship management and invoicing.

In this context, Relaer commits to observe the provisions of the General Data Protection Regulationn°2016/679 of April 27th, 2016 (“GDPR”) and of the French Law regarding personal data protection, n°78-17 of January 6th, 1978.

The personal data that are collected and processed for the above-mentioned purposes are the following:name, nationality, passport if necessary, position within the company, professional address and electronicaddress, professional phone number and fax number. These data are required for the conclusion andperformance of the contractual relation.

Personal data collected and processed by Relaer are only transmitted to Relaer authorized internalservices and to its accounting and Information technology (IT) service providers.

Personal data are stored for the duration of the contractual relation and for five (5) years after the end ofthis relation, in accordance with article L. 110-4 of French commercial Code. However, the accountingrecords and invoices including personal data are retained for ten (10) years, in accordance with article L.123-22 of French commercial Code.

Any person whose personal data are processed by and/or on behalf of Relaer is entitled to request access,rectification, restriction of processing, erasure, objection to processing and data portability regarding itspersonal data. These rights may be exercised by contacting Relaer at the following electronic address: ig@relaer.aero

Any person whose personal data are processed by and/or on behalf of Relaer is also entitled to lodge acomplaint with the CNIL (French national commission for personal data protection – www.cnil.fr) or thesupervisory authority in its own country, and/or to bring a claim before any competent jurisdiction.