PRIVACY POLICY

Mitterand Events & Management Consultancy W.L.L. ("Mitterand", "we", "us", "our") is committed to handling your personal data responsibly and transparently. This Privacy Policy describes how we collect, use, store, share and protect your personal information when you interact with the Mitterand Ecosystem — including our website (bymitterand.com), web applications, platforms, Academy, marketplace, Brain CRM, and associated services. By using our services, you consent to the practices described in this Policy. If you do not agree, please do not use our services. This Policy covers only data actually collected by the Mitterand platform. We do not invent processing activities or claim data practices we do not carry out.

We collect the following categories of personal data, depending on how you interact with us: Account Data: Name, email address, password (stored securely), account preferences, and profile information provided during registration. Contact Data: Name, email, phone number, WhatsApp number, country, company name, and message content provided through contact forms, enquiry forms, or direct communication. Transaction Data: Payment information processed through our payment providers (we do not store full payment card numbers), billing address, transaction history, order details, and invoice records. Booking Data: Event booking enquiries, booking confirmations, service specifications, event dates and venue information provided in connection with event management services. Subscription Data: Subscription plan details, billing cycle, renewal status, and subscription history. Academy Data: Course enrolment records, course progress, completion status, assessment results and any certification data associated with Mitterand Academy. CRM Data: Contact and business data entered into Brain CRM by subscribers, including business contacts, deal records, notes, activities, and communication logs. Device and Technical Data: IP address, browser type, operating system, device identifiers, session data, and referring URLs collected automatically when you access our platform. Analytics Data: Usage patterns, pages visited, features used, session duration, click paths, and interaction data collected to improve platform performance. Cookie Data: Data collected through cookies and similar tracking technologies as described in our Cookie Policy at /cookies. Communications: Messages sent to us via email, contact forms, WhatsApp, or live chat, and our responses. Support Requests: Details of technical or service issues reported to Mitterand, including system information where relevant to resolving a support request. Third-Party Integration Data: Where you connect third-party services to Brain CRM or other Mitterand platforms, data shared between systems as configured by you.

We use your personal data for the following purposes: - To create and manage your account and provide access to our services. - To process payments, issue invoices and manage financial records. - To deliver event management, consultancy, Academy, marketplace and CRM services. - To respond to enquiries, support requests and communications. - To send transactional communications (booking confirmations, receipts, service updates). - To send marketing communications where you have opted in or where permitted by applicable law. - To improve, personalise and secure our platforms and services. - To comply with legal and regulatory obligations. - To detect and prevent fraud, abuse and security incidents. - To analyse platform usage and improve user experience.

We process your personal data on the following legal bases: Contract Performance: Processing necessary to fulfil our contractual obligations to you or to take steps before entering a contract. Legitimate Interests: Processing necessary for our legitimate business interests, including improving our services, managing our platform, and communicating with clients — where these interests are not overridden by your rights. Consent: Where you have provided specific consent for a processing activity (such as marketing emails), which you may withdraw at any time. Legal Obligation: Processing necessary to comply with applicable legal or regulatory requirements.

We may share your personal data with: Service Providers and Processors: Third-party vendors who process data on our behalf (e.g., payment processors, cloud hosting providers, email service providers, analytics providers) subject to data processing agreements. Authorised Partners and Distribution Principals: Where you engage with services facilitated through an authorised distribution relationship (such as drone show enquiries via Cyberdrone Dubai L.L.C.), relevant contact information may be shared with the principal provider to facilitate your enquiry. Third-Party Platforms: Where you have integrated third-party services with Brain CRM or other Mitterand tools, data may flow between systems as configured by you. Legal and Regulatory Bodies: Where required by applicable law, court order, regulatory requirement or law enforcement request. Business Transfers: In connection with a merger, acquisition or sale of Mitterand assets, your data may be transferred to the acquiring entity subject to equivalent privacy protections. We do not sell your personal data to third parties.

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including to comply with legal, accounting and regulatory obligations. Retention periods vary by data type and context: - Account data: Retained while your account is active and for a reasonable period following account closure. - Transaction records: Retained for the period required by applicable tax and financial regulations. - CRM data: Retained for the active subscription period and for a defined period following subscription termination. - Support and communications: Retained for a reasonable period to assist with follow-up queries and service improvement. When data is no longer required, we delete or anonymise it in accordance with our data management practices.

Depending on your jurisdiction and applicable data protection law, you may have the right to: - Access the personal data we hold about you. - Request correction of inaccurate or incomplete data. - Request deletion of your personal data, subject to applicable legal obligations. - Object to or restrict certain processing activities. - Request data portability in a machine-readable format where technically feasible. - Withdraw consent for processing based on consent, at any time. To exercise your rights or submit a data-related request, please contact us at management@bymitterand.com. We will respond within a reasonable timeframe and in accordance with applicable law.

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include access controls, encrypted connections and secure data storage practices. No method of data transmission or storage is completely secure. While we take data security seriously, we cannot guarantee absolute security of your data. In the event of a data breach that poses a significant risk to your rights, we will notify you and applicable regulatory authorities as required by law.

Our platform may contain links to, or integrations with, third-party websites, services, and platforms. This Privacy Policy applies only to data processed by Mitterand. Third-party services have their own privacy policies, and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you access through or alongside our platform.

We use cookies and similar tracking technologies on our platform. For a full description of the cookies we use, their purpose and how to manage your cookie preferences, please refer to our Cookie Policy at /cookies.

The Mitterand Ecosystem is not directed at children under the age of 18. We do not knowingly collect personal data from children under 18. If you believe we have inadvertently collected data from a child, please contact us at management@bymitterand.com and we will delete the relevant data.

We may update this Privacy Policy from time to time to reflect changes in our practices, services or applicable law. Updated policies will be published at /privacy with a revised "Last Updated" date. Where changes are material, we will provide reasonable notice via the platform or by email. Continued use of our services after an updated Policy becomes effective constitutes acceptance of the revised Policy.

For privacy-related questions, concerns, requests or complaints, please contact: Mitterand Events & Management Consultancy W.L.L. Email: management@bymitterand.com Phone: +973 3672 3570 Location: Manama, Kingdom of Bahrain