Last update : 25 March 2025

Dear visitors, suppliers, B2B customers of the STUDIO TF1 Group,

We kindly request you to read our privacy policy, concerning the collection and processing by Group STUDIO TF1¹ of third parties personal data.

The policy, presented in Q&A form, provides a concise and comprehensive explanation of the personal data collected by Group STUDIO TF1 and how it is used. It also provides a reminder of your specific rights in respect of your personal data and explains how you can exercise those rights.

Your questions	Our answers
Who is the Data Controller for my personal data?	STUDIO TF1 or the STUDIO TF1 group entity (i) with which you have a contractual relationship or (ii) which you visit. For inquiries concerning the processing of your personal data, you can contact our Data Protection Officer at: dpo@studiotf1.com
Why do you need my personal data?	We use your personal data for the following purposes: the execution of the contract we have entered into with you ; your security on our premises ; the sending of messages following your request.
On what legal basis do you use my personal data?	We use your data for the performance of your contract or as part of our pre-contractual relationship, as well as on the basis of the legitimate interest of ensuring your safety on our premises.
How do you collect my data?	We may collect your personal data in the context of professional meetings, the creation of files, partnerships, your visit to our premises, your visit to our websites and pages and your use of our online services, particularly the contact form. We collect and process the data you provide directly to us (i) during your visit or (ii) throughout the performance of the contract we have with you. In addition, when you browse our websites, if you agree to its use, we will use, directly or via third parties, cookies and other tracers for audience measurement/statistical purposes.
What categories of personal data do you process concerning me?	We may process the following categories of data: Suppliers B2B customers Visitors For all suppliers (with or without on-site presence): Identity: last name, first name, address, APE / NAF code, telephone, fax, e-mail address, SIREN / SIRET number; INSEE number, intra-community VAT number ; Professional life: profession, economic category, activity ; Elements of billing : subscriptions, articles, products, services covered by the subscription, periodicity, amounts, conditions, orders and invoices, articles, products, services covered by the order and the invoice, quantity, price, number, date and amount of the order and the invoice, due date of the invoice, delivery conditions, payment, terms and conditions of payment (means of payment, bank or postal references, discounts, advance payments, rebates), credit conditions, duration, unpaid items, credit notes, receipts, deductions or oppositions. For suppliers with on-site presence only, we may process (depending on the site): d) Video surveillance: images, video, voice. a) Identity: title, surname, first names, address, telephone number (fixed and/or mobile), fax number, e-mail addresses, internal processing code allowing identification of the customer, IP addresses ; b) Data relating to means of payment: postal or bank details, cheque number; c) Transaction data such as the transaction number, details of the purchase, good or service purchased ; d) Data relating to the follow-up of the commercial relationship: requests for documentation, requests for trials, product purchased, service or subscription subscribed to, quantity, amount, frequency, delivery address, history of purchases and services, product returns, origin of the sale (vendor, representative, partner, affiliate) or order, correspondence with the customer and after-sales service, exchanges and comments from customers and prospects, person(s) in charge of customer relations ; e) Data relating to the payment of invoices: terms of payment, discounts, receipts, balances and outstanding payments ; f) The data needed to develop customer loyalty,carry out studies, surveys, product tests and promotions ; g) Data collected by means of cookies: statistics for measuring the audience of our sites and web pages, IP addresses ; h) Any other data that you have freely provided to us via the contact form available on our site. a) Identity: title, surname, first name, email address, ID, photo ; b) Video surveillance: images, video, voice.
Do you hold sensitive data2 concerning me?	No.
Do you commission processors to process my data?	We ensure, by contractual means, that all our subcontractors put in place the technical and organisational measures necessary for the security (confidentiality, integrity and availability) of your data, and more generally respect the legislation in force concerning the protection of personal data.
Who has access to my personal data?	Only authorised personnel of STUDIO TF1 and its subsidiaries, and their subcontractors, have access to your data. However, in certain cases and when it is strictly necessary or results from a legal or regulatory obligation, we are likely to transmit some of your personal data at the request of the competent authorities (in particular URSSAF, labour inspection, auditors, tax authorities, other administrative or judicial authorities within the framework of a court decision, etc.).
Where is my data stored? Is my personal data transferred outside the European Union3?	Your personal data is stored within the European Union. In the event that a transfer outside the European Union is applied to your data, we undertake to ensure that this transfer is covered by the European Commission’s Standard Contractual Clauses in force at the time of transfer.
How long do you keep my data for?	The length of time we keep your data depends on the purpose of the processing. We keep your data for the following periods: Suppliers B2B Customers Visitors For the management of the relationship: 5 years from the end of the commercial relationship. For accounting management: 10 years from collection. For the management of connection data: 6 months from the date of collection. For on-site suppliers only: For personal security (video surveillance): 1 month from collection. For customer management: 3 years from the end of the commercial relationship. For prospect management: 3 years from the last contact. For accounting management: 10 years from collection. For the management of connection data: 6 months from the date of collection. For any freely provided data: we will destroy them without delay if we have no use for them. For personal security (video surveillance): 1 month from collection.
Is my data used for automated individual decision-making or profiling4?	No.
What are my rights regarding my personal data?	As a natural person, you have the following rights: Right of access You can request us to directly provide you with all your personal data. This right of access enables you to check the accuracy of the data and, if necessary, request us to rectify or erase it if inaccurate or obsolete. Right to rectification You can request us to rectify any inaccurate information concerning you. This right enables you to prevent us from releasing or processing any inaccurate information concerning you. Right to erasure (“right to be forgotten”) You can request us to erase your data on grounds provided for by law. Right to object You can object, on legitimate grounds, to your data being released, forwarded, or kept. Concerning cookies: you can configure your browser to deactivate cookies. Please note that the configuration process for each browser is different. Please read the instructions in your browser to know how to modify your consent concerning cookies. To help you through the configuration process, you can consult the help page specific to the browser you use: Microsoft Internet Explorer: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies Google Chrome: https://support.google.com/chrome/answer/95647?hl=en&co=GENIE.Platform%3DDesktop Safari: https://support.apple.com/kb/PH21411?viewlocale=fr_FR&locale=fr_FR Safari iPhone / iPad: https://support.apple.com/en-us/HT201265 Firefox: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop Opera: http://help.opera.com/Windows/10.20/fr/cookies.html Some browsers also provide a “Do Not Track” option. Right to restriction of processing This right enables you to request us to temporarily suspend the processing of your data on grounds provided for by law. Right to data portability You can request to be sent the data you provided us with, in a structured, currently used, and machine-readable format. Your data can thus be easily stored or sent from one IT system to another with a view to its re-use, and you can keep control over it. Postmortem rights You can give instructions as to what becomes of your personal data after your death in terms of its retention, erasure, and disclosure. You can modify or withdraw your instructions at any time. NB: These rights are not absolute: you can exercise them within the legal framework provided for and within the limits of such rights. In certain circumstances, we may not be able to respond favorably to you request (due to a legal obligation, compliance with our commitments towards you, etc.). In that case, we will inform you of the reason(s) for such a refusal. A copy of your identity papers will be requested and kept, solely as proof of the exercise of your rights or to fulfill a legal obligation. For further information on your rights, please consult the CNIL’s (French data protection authority’s) website (in French): https://www.cnil.fr/fr/comprendre-vos-droits.
What happens if I refuse the processing of my personal data?	Certain personal data is required for the purposes of performing the contract or complying with a legal obligation. If you refuse the processing of such data or if you request its erasure, we will contact you if your request is not compatible with those purposes.
How can I exercise my rights and who do I need to contact?	You can exercise your rights by writing to the Data Protection Officer at the following email address: dpo@studiotf1.com If you have any issues, you can file a complaint directly on the CNIL’s website (in French): https://www.cnil.fr/fr/plaintes.

1 “Group STUDIO TF1 ” refers to STUDIO TF1, a simplified joint stock company (société par actions simplifiée) registered under number 505 327 940 and headquartered at 123 boulevard de Grenelle – 75015 Paris (France), and all companies present or to be established, controlled directly or indirectly by STUDIO TF1 within the meaning of article L233-3 of the French Commercial Code

2 Sensitive data means: (i) personal data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs or trade-union membership, genetic data, biometrical data used to identify a specific individual, personal health data or personal data concerning the sex life or sexual orientation of an individual, and (ii) personal data concerning offences and criminal convictions.

3 EU member states as of September 14, 2021: Austria, Belgium, Bulgaria, Cyprus, Croatia, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden.

4 The term “profiling” means any form of automated processing of personal data consisting in using personal data to evaluate certain personal aspects of a natural person, particularly to analyze or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.