Privacy Policy

1. Preamble

Aware of the importance of preserving data confidentiality, the law firm Carbonnier Lamaze Rasle (hereinafter the "Firm") is strongly committed to the protection of personal data. Therefore, this personal data protection policy aims to inform you about the commitments and practical measures taken by the Firm to ensure the protection of your personal data. This personal data protection policy may be updated in accordance with changes in the legal and regulatory context and the guidelines of the CNIL (French Data Protection Authority).

2. Data collected

The Firm ensures that it collects and processes only data that is strictly necessary for the purpose for which it is processed (data minimization).

3. Purposes of the collection

The data processing carried out by the Firm serves an explicit, legitimate, and specific purpose. When using the website www.carlara.com (hereinafter the "Site"), your data is processed primarily for the following purposes:

• improving your browsing experience on the Site; • optimizing the Site's functionalities; • subscribing to the Firm's newsletter.

4. User Information

In accordance with data protection regulations, the Firm informs you about the processing of personal data it carries out. Therefore, the Firm informs you clearly, during each collection of personal data, in particular:

• the identity and contact details of the data controller; • the contact details of the data protection officer; • the purposes of the processing for which the personal data are intended and the legal basis for the processing; • where applicable, the legitimate interests pursued by the Firm; • the recipients of the personal data; • where applicable, the fact that the Firm intends to transfer personal data to a third country; • the period for which the personal data will be stored; • the existence of the right to request from the Firm access to, rectification or erasure of, or restriction of processing of personal data, or to object to processing and the right to data portability, as well as the possibility of defining the fate of one's data after death; • the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; • the right to lodge a complaint with a supervisory authority (CNIL - Complaints Department - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07);

5. Cookies

By browsing the Site, users accept the use of cookies under the conditions described below. Definition Cookies are data stored on a user's terminal equipment and used by the website they visit to send information to the browser, and allowing that browser to send information back to the originating website. They generally contain the name of the server that placed them, a unique identifier, and an expiration date. Cookies allow state information to be retained for the duration of the cookie's validity when a browser accesses different pages of a website or when that browser returns to the website later. Reading or modifying the information contained in a cookie is the sole responsibility of its issuer. Purpose In order to offer services adapted to the user's terminal (computer, mobile phone, or tablet), the cookies used by the Firm serve the following purposes:

• the collection of information relating to user navigation; • the analysis of the traffic and use of the Site.

Use of cookies by the Firm The cookies used on the Site are as follows:

• Session cookies, which record technical information while navigating from one page to another on the Site and disappear as soon as the user leaves the Site; • Functionality cookies, which allow the Site to recognize the user upon a return visit and adapt the Site accordingly. These are persistent cookies that remain on the user's device until their expiry date or until they are deleted using the browser's settings. • Google Analytics audience measurement cookies: these cookies are used to collect information, anonymously, about website users. These cookies allow us to count visitors and identify how they use the Site. These cookies are placed and read on the user's device as soon as they access a website using the "Google Analytics" service.

You can consult Google's privacy policy via this link: https://support.google.com/analytics/answer/6004245?hl=fr

6. Data Recipients

The firm only shares your personal data with authorized and designated recipients. These recipients are the relevant departments within the firm.

7. Data retention

The Firm retains your data only for the period necessary for the operations for which it was collected and in compliance with applicable legislation.

8. Security

The Firm ensures the security of your personal data by implementing enhanced data protection through the use of physical and logical security measures.

9. Your rights

In accordance with the Data Protection Regulation, you have the right to access, rectify, erase, limit processing, data portability and to define the fate of your data after your death with regard to all data concerning you which can be exercised with the Data Protection Officer by email at the following address: mrasle@carlara.com or by post to the following address, Carbonnier Lamaze Rasle – 61 rue des Belles Feuilles – 75116 Paris, accompanied by a copy of a signed identity document.

10. Contact

For all inquiries regarding the Firm's personal data protection policy, you can contact mrasle@carlara.com