Thales InFlyt Experience Online Portal Privacy Notice Effective Date: January 1, 2022

This Privacy Notice applies to the personal information we collect when you use our online portals.

The protection of your personal data is of high importance to THALES AVIONICS, INC. and its INFLYT EXPERIENCE business line, (“THALES”). Accordingly THALES takes all reasonable care to ensure that your personal data is processed safely and is protected by appropriate security measures.

In the context of your access to a THALES online portal, THALES will process personal information about you and will act as a data controller with respect to your personal information. Such information about you will consist of identifier type information and may include your name, email address, telephone number, business title, login credentials or passwords.

This data is used for providing authorized access to a THALES online portal and for managing the contractual relationship with your employer, (the “Purpose”). Please note that, in order to carry out the processing activities specified therein, THALES relies on its legitimate interest which consists in ensuring the proper management of its business relationships with its clients.

For the abovementioned purposes, your personal data will be kept for a period of five (5) years following the end of the commercial contract established between THALES and your employer that authorizes you to seek access to a THALES online portal.

In the context of such processing, the recipients of all or part of your personal information will be the personnel of THALES and other entities of the THALES group of companies responsible for the management of the commercial contract between THALES and your employer and, in some circumstances, it will include the personnel of third parties that provide services to THALES, in particular in relation to THALES information systems.

Your Personal Data will not be sold or transferred to other businesses or third parties for monetary or other valuable consideration outside THALES other than to service providers for a valid business purpose to help us to provide achieve the Purpose. We do not authorize these service providers to use or disclose your information except as necessary to perform services on our behalf or to comply with legal requirements.

THALES will comply with all applicable data protection laws. Please know that you have the right to access your personal data and to request that your personal data be rectified or deleted. You are also entitled to object to the processing of your personal data or to request restriction thereof.

In case of any request or complaint, please send an email to stay.secure@thalesgroup.com. You can also contact our Data Protection Officer by sending an email to the following address: dataprotection@thalesgroup.com. In any case, you also have the right to lodge a complaint with the competent data protection authority.