Updated version on 30/11/2018

This Data Privacy Policy describes how we collect, use, and process information about you, including personal information, in connection with your access to and use of the VRC XP Virtual Reality Experience Catalog and Ticketing Services. What we collect We collect two categories of information: information you provide to us, and information automatically collected from your use of our services. Information you provide to us

• Account Information. When you register on the platform, we need your first and last name and your e-mail address.
• Profile information. We may also ask you to provide additional profile information to use certain features of the VRC XP service, such as profile picture or phone number.
• Payment Information. We do not collect payment card numbers from users. This banking data may be stored by one or more third party payment service providers or digital payment companies located inside or outside the user’s country of residence, including outside the European Economic Area (EEA).

Information automatically collected from the use of our services

• Usage data. We collect information about interactions with the platform, such as experiences played, game times per experience, amounts consumed.
• Experience data. When using the platform, we may collect information about the level reached on a specific experiment.
• Log data. We automatically collect login information when using the platform, even in the case of users who are not logged in or who have not created an account. This information includes: details on the use of the platform, IP address, duration of the session, frequency of visits, information on the hardware and software used to access the platform (device, type of browser, etc.), information on consultation events.
• Cookies and similar technologies. When you access our platform, VR Connection (and partner companies) may place small data files on the computer or other device used by the user. These data files may be cookies, clear gifs, web beacons, e-tags, flash cookies, or other local storage provided by the browser or related applications (referred to herein as “Cookies”).

How we use what we collect. We use, store and process this information to provide and improve our services and ensure a safe, secure and reliable experience. For example, we may use this information to: Provide and improve our services

• Enable you to access and use the VRC XP services
• Send you service, support and administration messages, reminders, technical notifications, updates, security alerts and information. We do this through email or notifications;
• Enable remote intervention on computers to solve a technical problem;
• improve our services, including customising your user experience;
• measure the performance of our services and improve content and layout;
• To provide anonymised statistics including economic gains to the operator.
• To provide anonymised data to partner sites to promote the delivery model enabled by the VRC XP platform.

Ensure a secure, safe and reliable experience

• Verify the identity of Catalogue user members or authenticate information provided by our users, including account creation and password reset processes;
• resolve problems;
• detect, prevent and/or correct fraud, abuse, security incidents or other potentially harmful, prohibited or illegal activities;
• detect, prevent and/or correct violations and enforce our terms and policies;
• manage and protect our technical infrastructure;
• conduct investigations and risk assessments;
• comply with our legal obligations, resolve any disputes we may have with any of our users, and enforce our agreements;
• in this regard, we may do any or all of the foregoing with or without further notice to our users, where permitted by applicable law.

Data retention We retain the information collected for as long as reasonably necessary and relevant to our operations. We automatically close our members’ accounts and anonymise their personal data after 2 years of inactivity. If you request that we close your account, the data is anonymised, as set out in the “Your Rights” section below. Dissemination User Profiles and Other Information User profiles and information are for the exclusive use of VR Connection. VR Connection does not share any of its customers’ data with third party marketing partners. Service Providers VR Connection may share information with vendors and service providers engaged or working with us in connection with the processing of payments, operation of our services, and customer support functions and who need access to this information to perform their work. In some cases, the service provider may collect information directly from users on behalf of VR Connection. These service providers may be located inside or outside the users’ country of residence, including outside the EEA. By way of example, service providers may help us to: (i) verify your identity, (ii) verify information against public databases, (iii) implement fraud prevention and risk assessment, (iv) provide customer or payment service. These service providers have limited access to your information in the course of performing these tasks on our behalf and are contractually obliged to protect and use it only for the purposes for which it was disclosed and in accordance with this Privacy Policy. Your rights By accepting the present TOS, the user shall be aware of his rights and obligations towards VR Connection, and in particular those concerning the protection of Personal Data. By accepting and/or filling in the box provided for each Personal Data, the user validly consents that he/she was duly informed and freely authorizes VR Connection to store, process and, if necessary, transmit the data in question to third parties authorized by a competent authority, strictly as far as they are concerned, in accordance with these GTC. The user also agrees to receive electronic messages from VR Connection on the email address used for registration on the application, as long as each message sent gives the necessary information allowing the identification of the sender, as well as an exclusion mechanism allowing the removal from the distribution list. The user expressly agrees that each use of the Service entails authorization for VR connection to collect and retain Personal Data, for the duration of the TOS. As a user, you can exercise the following rights attached to your personal data.

• Right of access
• Right to rectification
• Right to erasure (right to be forgotten)
• Right to limitation of processing
• Right to data portability
• Right to object

To exercise any of these rights, you can write to contact@vr-connection.com. We will reply as soon as possible. You also have the possibility of lodging a complaint with the Commission Nationale Informatique et Libertés (CNIL). Security All documents containing personal or financial information are considered our property and are treated as confidential at all times. We work hard to protect this personal or financial information from unauthorised access, use, modification or destruction. All such electronic information is stored on restricted database servers and is generally retained until you ask us to change or delete it, as described below. We disclose this information to our employees, contractors or affiliates only when a) they need to know that information to provide VR Connection services, and b) they have agreed not to disclose it to others. All interactions with our Services use TLS / SSL (Transport Layer Security / Secure Sockets Layer). Important Information This section describes other important privacy information related to your use of our Services. Change of ownership If we merge with or are acquired by another company, we may share information with them in accordance with our privacy standards and applicable law. Sensitive Information We ask that you not send us, or disclose, any sensitive information unless specifically requested (such as social security numbers, racial or ethnic origin, political opinions, religion, trade union or other affiliation, beliefs, health, biometrics, or genetic characteristics). Children’s privacy Our platform provides access to regulated audience experiences. Warnings relating to epilepsy, health, and RSI syndrome should be brought to the attention of users of the platform and/or players participating in VR experiences (present in the installation and user manual). If a child has already provided us with information, his or her parent or guardian may contact us with the goal of deleting that information or closing an account. Third Party Privacy Practices This Privacy Policy addresses only the use and disclosure of information collected by VR Connection. This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of third parties, including third parties operating a site or service to which the Services link. The inclusion of a link on our services does not imply endorsement of the linked site or service by us or our affiliates. If you disclose your information to others or are directed to a third party website, their privacy notices and practices will apply. Logging In If you log in to our platform using an email address and password, your session will expire after 30 days unless you log out. If you are using a public or shared computer, you must log out and/or clear your cookies when you are finished using the VRC XP software to protect your account and information. If you do not log out, any other user of the computer/browser you are logged in on could see and access your account. Changes to this policy We may change this Privacy Policy from time to time. Please refer to the “last revised” date at the top of this page to see when this privacy policy was last revised. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy. Your use of the Services following such changes means that you agree to the revised Privacy Policy. If you do not agree with these changes, you may contact VR Connection customer service to close your account. You will then only be bound by the previous version of the Privacy Policy. Contact us For any questions regarding personal data you can contact us at the following address: GIE VR Connection, 58 avenue de Wagram, 75017 Paris, France Or use contact@vr-connection.com