LEGAL NOTICE

Identity of the publisher:

SAS EXCELIS Circuit Paul Ricard

2760 ROUTE DES HAUTS DU CAMP

83330 LE CASTELLET

Telephone: 04 94 98 36 66

Email address:

SAS with share capital of EUR 37,500,000

Registered with the Trades Register of Toulon

Siret: 422 801 795 00044

VAT ID no.: FR29 422 801 795

APE Code: 9311Z

Publication Director: Nicolas DESCHAUX

Identity of the web host:

Gandi SAS

SASU with share capital of €2,300,000.00, RCS Paris

Siret: 423 093 459 00042

APE Code: Data processing, hosting and related activities (6311Z)

Registered office: 63-65 BOULEVARD MASSÉNA 75013 PARIS

Telephone: +33.170377661

PRIVACY POLICY

1. PROTECTION OF YOUR PERSONAL DATA

1.1 What is personal data?

Personal data is any information concerning an identified or identifiable natural person. Any person who can be identified, directly or indirectly, by reference to one or more factors specific to his or her physical identity is deemed to be identifiable.

1.2 The information you give us

When you use our services, we collect certain information which is essential for us to deal with your request, in particular the functionalities you use, the way in which you use them, and the devices through which you access our services.

If you contact us via our contact form or in another way, we collect the information you give us as part of that interaction.

2. COOKIES AND OTHER SIMILAR TECHNOLOGIES

2.1 What is a cookie?

Cookies are small text files placed on your hard drive by the website visited, enabling it to save and store certain information about your computer, and also about you.

They are essential for the internet to work, because they enable smooth communication between two computers. The information collected is also used to run the applications you use on the website.

2.2 How do cookies affect me?

Some cookies also capture personal data about you that they pass on to third party companies. They may collect personal information you have not voluntarily shared on the internet, such as your browsing history, where you click on the website, a session ID, etc. Put together, the information collected makes it possible to create a picture of your personal life which can then be resold to advertisers. This is why we have to ask permission to install certain cookies on your computer, smartphone, tablet and other connected devices.

2.3 What cookies are subject to my express consent?

Not all cookies need express separate consent. Thus, “necessary” cookies which enable you to use the functionalities of this website and which use your personal data only for that purpose are presumed to have your agreement. Those which use your data for other purposes and which notably belong to service providers require your express agreement.

2.4 What are cookies used for on this website?

We use cookies on this website:

- to enable the smooth operation of the website,

- to contribute to the security of the service requested by the user,

- to provide the service requested by the user,

- to enable or facilitate your electronic communication,

- to measure the audience of the website,

- to log you in to social media,

- to advertise,

- to adapt the content of the website to your browsing habits.

2.5 What cookies on this website require my agreement?

a. audience measuring cookies

We use Google Analytics cookies to produce anonymous statistics limited to our website and our services. These do not allow us to identify you directly. This cookie is published by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America. It is then possible for Google to correlate your data collected here with those from other websites or sources in order to establish a profile and carry out automated profiling. Google Analytics cookies have a lifetime of 14 months and may transfer the data collected to its servers in the United States of America to reuse them for commercial purposes for other services, subsidiaries and commercial partners of Google.

Under Irish law, you can exercise your rights directly with the dedicated service or by writing to the following address: GOOGLE Ireland Ltd., Google Data Privacy Officer, Gordon House Barrow St, Dublin 4, Ireland.

b. social media cookies

We use Facebook Connect cookies to offer you personalised social experiences (like, comment, share) and log you in directly to that social network. This cookie is published by Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The personal data collected may be transferred to its servers in the United States of America and be reused for commercial purposes for other services, subsidiaries and commercial partners of Facebook. However, to be effective, this application correlates personal data to establish a profile. The lifetime of this cookie is 90 days. This cookie

may activate other cookies collecting personal data, notably Facebook Impressions. You can exercise your rights with the dedicated service or by writing to the following address: Facebook Ireland Ltd., Data Privacy Officer, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

We use YouTube cookies to show you videos and log you in directly to that social network. This cookie is published by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America. It is then possible for Google to correlate your data collected here with those from other websites or sources in order to establish a profile and carry out automated profiling. YouTube cookies have a lifetime that varies depending on their type, what Google uses them for, and the settings you have configured. The data collected may be transferred to its servers in the United States of America to be reused for commercial purposes for other services, subsidiaries and commercial partners of Google.

Under Irish law, you can exercise your rights directly with the dedicated service or by writing to the following address: GOOGLE Ireland Ltd., Google Data Privacy Officer, Gordon House Barrow St, Dublin 4, Ireland.

We use Twitter cookies to offer you personalised social experiences (like, comment, share) and log you in directly to that social network. This cookie is published by Twitter International Company One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland. The data collected may be transferred to its servers in the United States of America and be reused for commercial purposes for other services, subsidiaries and commercial partners of Twitter. It is then possible for Twitter to correlate your data collected here with those from other websites or sources in order to establish a profile and carry out automated profiling. The lifetime of a Twitter cookie is undefined.

Under Irish law, you can exercise your rights directly with dedicated service or by writing to the following address: Twitter International Company, Data Protection Officer, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland.

c. tracking cookies

We use DoubleClick cookies to offer you advertising and personalised content. These do not allow us to identify you directly. This cookie is published by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America. It is then possible for Google to correlate your data collected here with those from other websites or sources in order to establish a profile and carry out automated profiling. DoubleClick cookies have a lifetime that varies depending on their type, what Google uses them for, and the settings you have configured. The data collected may be transferred to its servers in the United States of America to be reused for commercial purposes for other services, subsidiaries and commercial partners of Google.

Under Irish law, you can exercise your rights directly with dedicated service or by writing to the following address: GOOGLE Ireland Ltd., Google Data Privacy Officer, Gordon House Barrow St, Dublin 4, Ireland.

2.6 How to refuse cookies

Some cookies are essential to the smooth operation of the website. By configuring the browser to refuse all cookies necessary to the smooth operation of the website, some functionalities, pages and areas of the website will not be accessible.

In compliance with Article 82 of the French “Data Protection Act” of 6 January 1978, you can accept or refuse the cookies which are not necessary to the smooth operation of the website by clicking on the “Cookie Settings” icon at the bottom of the website.

3. HOW WE USE YOUR PERSONAL DATA

3.1 Main purposes

We use your data for the following main purposes:

- To deal with your requests through our contact forms,

- To send you our newsletter, if you have subscribed to it,

- To access your account,

- To save your orders,

- Legitimately for the improvement and development of our services,

- Legitimately for the contribution to the security of our services and to avoid any fraudulent, illegal or unauthorised activity,

- To fulfil our legal, social and tax obligations.

When we collect data which are not justified by our legal or contractual obligations, our legitimate interest, or to respond to your request, we will ask you for your consent and specify the purpose.

3.2 Confidentiality and conditions of sharing your data

We consider that the data you give us are confidential. However, to be able to provide you with these messages, we have to share the data you give us with our hosting and site security subcontractors. These partners are subject to a confidentiality obligation and may only use your data to fulfil their mission. When a legal obligation compels us or when we want to assert our rights, we may have to disclose some of your personal data.

4. HOW LONG DO WE KEEP YOUR DATA?

We keep your personal data only for as long as we need to, to the extent permitted by the legislation in force.

5. CONTACT FORM

The contact form constitutes data processing under the responsibility of Circuit Paul Ricard. It enables you to interact with us about any request you may have. The fields marked with an asterisk must be completed so we can respond to your request. The recipients of these data are our communications department and our subcontractors as part of their hosting mission. The contact form enables our communications department to deal with your request or to forward it to the relevant department. The data are entered in the dedicated fields in the form by the person wanting to interact with the Circuit Paul Ricard communications department. Only the personal data you voluntarily and expressly provide are processed, and they are covered by consent in compliance with Article 6.1 of the GDPR. The following data are collected: surname and forename or company name, email address, postal address, telephone number, and content of the message. The data marked with an asterisk are mandatory to process your request, and we assure you that no automated decision will be made on the basis of that data collected. The data are not transferred outside of the European Union. We keep the mandatory data until we have finished dealing with your request. To find out how to exercise your rights, see Article 9 of this policy.

6. NEWSLETTER

The newsletter service constitutes data processing under the responsibility of Circuit Paul Ricard. As part of the management of this newsletter mailing, we manage the subscriptions and compile statistics linked to this service. The data are entered on the dedicated registration form on this website by the person wanting to subscribe to the service. Only the personal data voluntarily and expressly provided by persons wishing to subscribe to the newsletter service are processed, and they are covered by consent in compliance with Article 6.1 of the GDPR. The following data are collected: email address, date of subscription, statistics linked to the newsletter service, date of unsubscribing. These data are mandatory to receive our service and we assure you that no automated decision will be made on the basis of that data collected. The recipients of these data are our communications department and its subcontractors within the framework of their mission of webmaster, hosting and mailing of the newsletter. The data are not transferred outside of the European Union. We keep your email address until you unsubscribe via the unsubscribe link found in each newsletter. To find out how to exercise your rights, see Article 9 of this policy.

7. ORGANISATION OF EVENTS

The events organisation service constitutes data processing under the responsibility of Circuit Paul Ricard. It enables you to interact with us about any request you may have. The recipients of these data are our communications department and its subcontractors within the framework of their hosting mission. The mailing to your email inbox enables our communications department to

deal with your request or to forward it to the relevant department. The data are sent in an email by the person wanting to interact with Circuit Paul Ricard. Only the personal data you voluntarily and expressly provide are processed, and they are covered by consent in compliance with Article 6.1 of the GDPR. The following data are collected: email address, subject and content of the email. These data are mandatory to deal with your request and we assure you that no automated decision will be made on the basis of that data collected. The data are not transferred outside of the European Union. We keep the mandatory data until we have finished dealing with your request. To find out how to exercise your rights, see Article 9 of this policy.

8. APPLYING FOR A JOB

The job application form allows you to send your application for a position within our group. It constitutes data processing under the responsibility of CIRCUIT PAUL RICARD and is forwarded to our human resources department. The data are sent in an email by the candidate wanting to interact with CIRCUIT PAUL RICARD. Only the personal data you voluntarily and expressly provide are processed, and they are covered by consent in compliance with Article 6.1 of the GDPR. The following data are collected: name, email address, subject and content of the message, information about the applicant’s professional life. These data are mandatory to deal with your request and we assure you that no automated decision will be made on the basis of that data collected. Your application will be kept for two years and then destroyed, unless you expressly object thereto.

To find out how to exercise your rights, see Article 9 of this policy.

9. YOUR RIGHTS OVER YOUR PERSONAL DATA

9.1 What are your rights?

Within the framework of your interactions with us via this website, you have a right of access, enquiry and rectification of your data so that, if necessary, we can have your personal data rectified, supplemented, updated, locked or deleted where they are inaccurate, incomplete, ambiguous or expired, or the collection, disclosure or storage of which is unlawful.

You also have a right to object to the processing of your data for legitimate reasons. This means that in case of objection we may not be able to agree to your request.

9.2 How to exercise your rights and contact us

If you have a question about the protection of your data, you can contact our legal department:

• via the email address ;

• through the contact form at https://www.circuitpaulricard.com/fr/contactez;

• by post to Circuit Paul Ricard RGPD 2760 Route des Hauts du Camp, 83330 Le Castellet.

For your protection and the protection of all our users, we may ask you to provide proof of identity before we can respond to your request. Additionally, we may not be able to respond positively to certain requests where a user objects to the processing of their personal data, particularly when those requests would no longer enable us to provide our services or fulfil a legal obligation.

You can also lodge a complaint with the competent supervisory authority of your country of main residence, which is the CNIL for French residents.

GENERAL CONDITIONS

Provisions relating to consumer rights under the CHATEL Act

Customer services for this website can be accessed from Monday to Friday from 9 am to 12 pm and from 2 pm to 5 pm at the following telephone number (standard rate): +33 4 94 98 36 66.

The right to withdraw available to consumers making purchases online – e-commerce – cannot be exercised under this agreement, pursuant to Article L121-20-4 of the Consumer Code which lays down said exclusion in respect of "the supply of accommodation, transport, catering and leisure services to be provided at specific dates or periods".


The publisher's newsletter

Members hereby recognize that the publisher may send them, at a frequency that it will determine and in a form at its choosing, a newsletter including information about activities or news.

Subscribers can unsubscribe from the newsletter by clicking on the link provided for this purpose to be found on each newsletter.


Partners' newsletters

Members that have accepted to give their email address to third party partners of the publisher of this website may receive newsletters from said partners, at a frequency and in the form that they have specified. Members can unsubscribe by clicking on the link in the newsletters or, alternatively, by contacting those publishing said newsletters.


Notice pertaining to the Data Protection and Civil Liberties Act of 6 January 1978

Contact details for customers, members and users of the website that have subscribed shall be stored in compliance with the provisions of the Data Protection and Civil Liberties Act of 6 January 1978. In accordance with said Act (declaration n° 1338049), they have a right to access, withdraw, amend or correct data that they have supplied. In order to do this, they can send a request to the following email address:

The publisher, the custodian of said data, undertakes not to communicate it to third parties without the consent of the owner and undertakes, to the best of its ability, to respect privacy. The only exception to this principle concerns requests for such personal information to be communicated to authorized competent authorities.

Users recognize and accept without reservations the use of cookies and the collection of their IP address by the website publisher, with the sole aim of optimizing its functioning.

Intellectual property rights relating to items published on this website.

All items on this website are owned by the publisher. Any copying of logos, text, pictographic, photographic or video content, without this list being limiting, is strictly prohibited and considered as infringement. Any member that is guilty of infringement may have their account closed without notice or compensation. Said closure may not be held to constitute damage, and may lead to subsequent legal action taken against the member, either initiated by the website publisher or its agent.

Photographs published on this website may not be used without authorization from the Paul Ricard track and the copyright holder. Photography credits are as follows: HTTT, Eric Damagnez, Raymond Papanti, Jean-Claude Blanc, Bernard Biancotto, Patrick Berchery, Loïc Kernen, Sevan Callians, Marc Jobin, Jean-François Galeron, Damien Rouvière, John Walzl. Ricard SA, ORECA, LAT, AMG, DPPI.


Miscellaneous clauses

These General Conditions are subject to the application of French law.

These General Conditions may be amended at any time by the website publisher or its agent. The General Conditions applicable to the user shall be those in force on the day of their order or their connection to this website. Naturally, the publisher undertakes to keep all lapsed general conditions and to send them to any user that makes a request.

Except for provisions relating to public order, any dispute arising as part of the performance of these General Conditions may, prior to any legal action, be submitted for appreciation by the website publisher with a view to settlement on an amicable basis. It is hereby expressly stated that requests for settlement on an amicable basis shall not suspend deadlines relating to the filing of legal action. Except where there are provisions to the contrary relating to public order, any legal action concerning the performance of this agreement shall fall under the jurisdiction of the Courts of Toulon.

If one of the clauses in these General Conditions were declared null and void by a legal ruling, said nullity shall not nullify any of the other clauses, which shall continue to produce their effects.


March 2022