Cookie

PRIVACY POLICY AND COOKIES APPLICABLE TO THE WEBSITE AND SOCIAL NETWORKS

Version dated 22 August 2023
 1. Preamble This privacy and cookies policy applicable to the Website and social networks (the "Privacy Policy") describes how your information is processed in connection with the site accessible at the URL < https://watchlibrary.org/> (the "Website") and with our pages available on the following social networks: LinkedIn, Instagram, Twitter, managed by The Watch Library Foundation (the "Foundation", "we", "us", "our"), whose registered office is c/o Europa Star HBM SA, route des Acacias 25, 1227 Acacias. Please read this Privacy Policy carefully before using the Website and our dedicated pages on social networks. This Privacy Policy explains how information relating to an identified or identifiable person ("Personal Information") is collected, used and protected. By browsing the Website or our pages available on social networks, you acknowledge and agree to the processing of your Personal Data as described in this Privacy Policy. If you do not wish your Personal Data to be processed in accordance with the terms of this Privacy Policy, please do not use the Website or our dedicated pages on the social networks.

2. DATA CONTROLLER The Watch Library Foundation, whose registered office is c/o Europa Star HBM SA, route des Acacias 25, 1227 Acacias, acts as data controller in relation to the processing of Personal Data collected via its Website and its dedicated pages on social networks.

3. General principles 3.1 Our website and our pages available on social networks contain the following information and services: (i) information about our Foundation and its activities ; (ii) information about our partners ; (iii) links to other third-party websites and the possibility of sharing content on social networks; (iv) different ways of contacting us (i.e. by sending an e-mail to [email protected]); (v) subscribe to our newsletter.

3.2 This Privacy Policy does not apply to offline services.

4. The personal data we collect and the purposes for which it is collected Collection sources 4.1. The Personal Data that we collect via our Website and our pages available on social networks fall into two categories: (i) Cookies (infra B.) ; (ii) Personal data you provide to us (infra C.). (iii) Personal data available and collected from the public domain (infra D.)

Cookies 1. What are cookies and what information do they collect? 4.2. Cookies are files containing a small amount of data that are sent from a website to your browser and stored on your device (computer or mobile device). Other tracking technologies, such as beacons, tags and scripts (the "Similar Technologies"), may also be used to collect and track information and to improve and analyse our Website. 4.3. By means of Cookies and similar Technologies, we may collect Personal Data when you visit our Website or our pages available on social networks. In particular, we may identify certain usage data when you browse or click on content. 4.4. The following information and Personal Data are collected using Cookies and similar Technologies: (i) the IP address of the device able to connect to the Internet and requesting the connection ; (ii) essential information about the device with which you consult our Website, in particular its model and operating system; (iii) the date and time of the connection ; (iv) location, if activated on the device ; (v) the resources you access on the Website, in particular the keywords used in the search bar and the search filters used; (vi) the duration of your visit to our Website; (vii) the choice of language on our Website ; (viii) the name and URL of the file consulted ; (ix) the website/application from which the connection was established (reference URL); (x) the browser you are using and, if necessary, the operating system of your device capable of accessing the Internet, as well as the name of your access provider.

4.5. To control/limit the collection of this information, you can : (i) if this function is available, configure your browser so that it refuses all Cookies and similar Technologies or indicates when a Cookie or similar Technology is being used; or, (ii) delete Cookies and similar Technologies and clean up your browsing data directly from your browser settings. If you do not accept certain Cookies or similar Technologies, you may not be able to access certain functionalities of our Website. 4.6. List of Cookies and similar Technologies we use on the Website : Designation: OptanonConsent Supplier: OneTrust Function: This cookie is set by the OneTrust cookie compliance solution. It stores information about the categories of cookies that the Site uses and whether visitors have given or withdrawn their consent for the use of each category. Shelf life: 12 months Type: Required

Designation: _ga Supplier: Google LLC and amplifyapp.com (Amazon Web Services) Function: Used to analyse data relating to users, sessions and campaigns, and tracks the use of the Website in order to create a Website analysis report. Shelf life: 2 months Type: Performance (statistics) Country of transmission of cookies: United States

Designation: OptanonAlertBoxClosed Supplier: OneTrust Function: It is set once the visitor has seen the cookie information notification and, in some cases, only when they actively close the notification. This allows the Website not to show the message more than once to a user. Shelf life: 12 months Type: Required

Designation: _ga_xxxxxxx Supplier: Google LLC Function: Used to analyse data relating to users, sessions and campaigns, and tracks the use of the Website in order to create a Website analysis report. Shelf life: 2 months Type: Performance (statistics) Country of transmission of cookies: United States

Designation: wteid_292330999892453 Supplier: MAPP Function: This cookie is used for the video player. Shelf life: 6 months Type: Required Country of transmission of cookies: Germany Designation: wtsid_292330999892453 Supplier: MAPP Function: This cookie is used for the video player. Shelf life: Session Type: Required Country of transmission of cookies: Germany

Designation: wt_nbg_Q3 Supplier: MAPP Function: Used to ensure that the video player works properly. Shelf life: Session Type: Required Country of transmission of cookies: Germany

Designation: _ga Supplier: Google LLC Function: Used to analyse data relating to users, sessions and campaigns, and tracks the use of the Website in order to create a Website analysis report. Shelf life: 2 months Type: Performance (statistics) Country of transmission of cookies: United States

Designation: _ga_xxxxxxx Supplier: Google LLC Function: Used to analyse data relating to users, sessions and campaigns, and tracks the use of the Website in order to create a Website analysis report. Shelf life: 2 months Type: Performance (statistics) Country of transmission of cookies: United States

2. For what purposes do we collect information using Cookies (purposes)? 4.7. We use Cookies and similar Technologies that we collect in order to : (i) authorise access to our Website; (ii) make certain functionalities of our Website accessible and to offer you additional functionalities; (iii) register your consent to the use of cookies ; (iv) improve the Website and our pages available on social networks; (v) ensure the security of the Website; (vi) create statistics on the use of our Site in order to improve it.

3. Reason for treatment 4.8. With regard to Cookies and similar Technologies that are necessary for the operation and maintenance of our Website, the grounds on which we justify the processing of your Personal Data is our overriding private interest in the operation of our Website and its functionalities. 4.9. In the case of Cookies and similar performance technologies, which are used for statistical purposes in connection with our Website, the basis on which we justify the processing of your Personal Data is your consent, which is obtained by means of the Cookies banner displayed on the Website. Personal data you provide to us 1. What personal data do you share with us? 4.10. We collect Personal Data from you on a voluntary basis when, through our Website, you : (i) send us an email ; (ii) you subscribe to a newsletter. 4.11. This Personal Data may include your first and last name and your e-mail address. 4.12. Please note that when you use the annotations function on our Website, these annotations are not saved on the Website's servers, but only locally on your premises. Consequently, we have no access to your annotations. 2. For what purposes do we collect Personal Data? 4.13. We use the Personal Data you provide for the following purposes: (i) to reply to your messages; (ii) to send you our newsletter in accordance with your request. 3. Reasons for treatment 4.14. The grounds on which we justify the processing of your Personal Data are: an overriding private interest when we reply to your messages and your consent when you subscribe to the newsletter. Personal data available and collected in the public domain 4.15. Our archives and content made available on our Website may contain Personal Data - freely available in the public domain - of persons connected with the world of watchmaking. We collect such Personal Data in order to safeguard the documentary heritage of watchmaking and make it available to the public. 4.16. The grounds on which we justify the processing of this Personal Data is an overriding private interest.

5. Personal data collected by third parties (links to other websites or social networks) 5.1. This Privacy Policy does not cover how your Personal Information is handled by third parties when we link to their websites. We encourage you to read the privacy policies of the other websites you visit. 5.2. When you establish a connection with a social network or other website, your browser connects directly to the server of the service provider concerned. Through this connection, the website receives the information accessed by your browser on the corresponding page of our Website or on our pages available on the social networks. This information (including your IP address) is transmitted from your browser directly to the service provider's server and stored there. If you interact with our pages available on social networks, for example by clicking on the "Like" or "Share" icon, this information will also be transmitted directly to the server of the provider of the social network concerned and stored there. 5.3. Please refer to the privacy policy of the social network or website concerned for any information relating to the purpose and scope of the collection of Personal Data by the service provider concerned, the subsequent processing and use of such Personal Data by the service provider concerned, as well as the rights associated therewith and the adjustment options to enable the protection of your Personal Data.

6. disclosure of your personal data to third parties 6.1. We may give access to the Personal Data that you have communicated to us through our Website or our pages available on social networks to certain independent co-contractors and affiliated companies in order for them to assist us in the operation of said Website or said pages available on social networks. To date, these co-contractors are as follows: (i) Website operating service provider: Cross Systems SA, located in Geneva, Switzerland; (ii) Website host: Amazon Web Services EMEA Sàrl, located in Frankfurt, Germany.

6.2. We take all necessary steps to ensure that your Personal Information is treated securely and in accordance with this Privacy Policy and applicable law. All our co-contractors undertake to protect Personal Data using procedures similar to ours, unless otherwise provided for in this Privacy Policy. 6.3. The purpose of sharing your Personal Data with the aforementioned third parties is to ensure our activity, as well as to maintain and seek to constantly improve our Website and the services offered to our users. Therefore, the justification for this processing is our overriding private interests.

7. communication of your personal data to the authorities 7.1. We may disclose your Personal Information (including your communications) if we consider this necessary for security reasons, to investigate a potential breach or other violation of this Privacy Policy and/or to prevent harm to other users of our Website or social network pages. Consequently, we may need to communicate your Personal Data in order to investigate, respond to or resolve a complaint or dispute in relation to our Website or one of our pages available on a social network. 7.2. We may be required to disclose your Personal Information where we are required to do so by law or where we believe in good faith that such disclosure is necessary in order to: (i) to investigate, prevent or take action in relation to potential or actual illegal activities or to assist the administrative enforcement authorities; (ii) execute an agreement binding us to you ; (iii) investigate and defend us against any complaint or allegation made by a third party; (iv) to protect the security and integrity of our Website or our pages available on social networks; or (v) exercise and protect the rights and safety of our users, employees or others. 7.3. We endeavour to notify users of third party requests for their Personal Data where this is appropriate in our view and where it appears technically feasible, except where we are prohibited from doing so by law or by a decision of an authority or where the request is urgent. We may challenge such requests where, in our sole discretion, we consider that they are too broadly worded, too vague or unfounded, but we do not guarantee to challenge any request. 7.4. The purpose of sharing your Personal Data with the aforementioned authorities is to meet our obligation to comply with a legal obligation to which we are subject.

8. No communication of your Personal Data for commercial purposes 8.1. We do not sell your Personal Data to third parties. We do not share or otherwise make available your Personal Data to third parties, except as otherwise provided in this Privacy Policy.

9. transborder communication of personal data 9.1. If, as a result of certain services provided by third parties, we are required to transfer your Personal Data to one of their databases outside the European Economic Area, and/or Switzerland, potentially to a country which does not have a level of protection of Personal Data comparable to that prevailing in Switzerland or the European Economic Area, unless otherwise provided for in this Privacy Policy, we undertake to enter into an agreement with the third party service provider in order to ensure an adequate level of protection of your Personal Data.

10. Protection of your personal data and notification of a personal data breach 10.1. We undertake to use all commercially reasonable means to prevent any exposure or disclosure of your Personal Data. In particular, we implement and maintain measures (including administrative, physical and technical measures) to manage cases of unauthorised disclosure or exposure of your Personal Data. 10.2. In the event of an actual or suspected Personal Data breach, we will (i) use our best efforts to notify you without delay, where technically feasible, and (ii) co-operate with you in investigating and resolving the breach, including, without limitation, providing reasonable assistance in notifying affected third parties. We undertake to give you access, without delay and upon reasonable request, to our files relating to the breach of your Personal Data, provided however that this does not give you access to files which belong to other users or which could compromise their security. 10.3. In the event of an actual or suspected breach of Personal Data, we undertake to notify the competent authority under the applicable law.

11. Managing your personal data (your rights) 11.1. Right to access, update and delete your Personal Data: Wherever possible, you may access, update or request the deletion of your Personal Data by sending us an e-mail to: [email protected]. 11.2. Right of rectification: You have the right to obtain rectification of your Personal Data if it is inaccurate or incomplete. 11.3. Right to object: Within the limits of the law, you have the right to object to the processing of your Personal Data. 11.4. Right to limit processing: Within the limits of the law, you have the right to obtain a restriction on the processing of your Personal Data. 11.5. Right to portability of personal data: You have the right to obtain a copy of your Personal Data in a structured, commonly used and machine-readable format. 11.6. Right to withdraw consent: Within the limits of the law, you have the right to withdraw your consent at any time where the processing of your Personal Data is based on your consent. It should be noted, however, that such withdrawal: (i) does not affect the lawfulness of any processing carried out prior to such withdrawal and based on your consent; and (ii) may result in you no longer being able to use certain features of the Website or our pages on social networks. 11.7. Right to complain to an authority: You have the right to complain to any competent authority about the collection and use of your Personal Data. 11.8. We may ask you to prove your identity before responding to a request based on the aforementioned rights or linked in any other way to your Personal Data.

12. Retention of your personal data 12.1. We retain the Personal Information you provide to the extent required to access and use our Website and our social networking pages and the features found therein (such as the newsletter), as well as to the extent necessary to comply with our legal obligations (for example, if we are required to retain your Personal Information under applicable law), to resolve a dispute or to enforce our agreements and internal policies. 12.2. The retention period for Cookies and similar Technologies depends on their purpose and is always the same regardless of the person to whom the Personal Data relates. 12.3. We reserve the right to retain data in a de-identified (i.e. anonymous) form after the deletion of your Personal Data.

13. Security of your Personal Data 13.1. We attach great importance to the security of your Personal Data. However, no method of communication over the Internet or method of electronic storage can guarantee 100% security. Consequently, although we endeavour to use commercially acceptable technical and organisational means to protect your Personal Data, we cannot guarantee its absolute security.

14. Changes to this Privacy Policy 14.1. We may change this Privacy Policy at any time by publishing, without prior notice, a new version on this page or on a deeper page. If we do so, we will notify you by posting a notice on the home page of our Website. By continuing to access or use our Website or our pages available on social networks after the entry into force of this modification, you acknowledge and agree to the processing of your Personal Data in accordance with the revised Privacy Policy. If you do not wish your Personal Data to be processed in the manner described in the revised Privacy Policy, please do not use our Website and our pages available on social networks. 14.2. The new version of the Confidentiality Policy comes into force on the day of its publication, the day mentioned at the top of this Confidentiality Policy corresponding to the date of entry into force.

15. question? 15.1. Please do not hesitate to contact us by e-mail at [email protected] if you have any questions in relation to this Privacy Policy. 15.2. You can also contact us by post at the following address: The Watch Library Foundation, route des Acacias 25, 1227 Acacias.