The French company Prismatic, being required in this capacity to access personal data, hereby acknowledges the confidentiality of said data. Prismatic therefore undertakes, in accordance with Articles 34 and 35 of the French Data Protection Act of January 6, 1978, as amended, and Articles 32 to 35 of the General Data Protection Regulation of April 27, 2016, to take all precautions consistent with established practices and industry standards within the scope of its duties to protect the confidentiality of the information it accesses, and in particular, to prevent its disclosure to unauthorized persons. Prismatic specifically commits to: - not use the data it accesses for purposes other than those intended within its scope of duties; - only disclose this data to individuals duly authorized to receive it due to their professional duties, whether they are private or public persons, physical or legal entities; - refrain from making any copies of this data unless necessary for the performance of its duties; - take all precautions consistent with established practices and industry standards within its scope of duties to prevent the misuse or fraudulent use of this data; - take all precautions consistent with established practices and industry standards to ensure the physical and logical security of this data; - ensure, within the scope of its duties, that only secure communication channels are used to transfer this data; - upon termination of its duties, fully return all data, digital files, and any information media related to this data. This confidentiality commitment shall remain effective indefinitely after the cessation of its activities, regardless of the reason, as long as it pertains to the use and disclosure of personal data. Prismatic has been informed that any violation of this commitment may result in disciplinary and criminal sanctions in accordance with applicable regulations, particularly Articles 226-16 to 226-24 of the French Penal Code.