Personal Data Protection & Cookies

Welcome to the website www.totalenergies.com.lb By connecting to or browsing the website, you agree that you have read, understood and accepted, without limitation or reservation, the Personal data and cookies charter (the “charter”) and our terms and conditions of use. Please note that other terms and conditions and Personal data and cookies charter apply to other TotalEnergies company websites, and we recommend that you read them carefully.

The charter aims to inform you of the rights and freedoms that you can exercise in respect of our use of your personal data and describes the measures that we take to protect these data.

TotalEnergies Marketing Lebanon is the “data controller” with responsibility for processing the personal data used to manage the website. These processing operations are carried out in accordance with the applicable law.

1. Purpose of processing, legal basis, the period of storage and types of data collected

When you visit the website, you may need to provide us with a number of items of personal data, such as your first name and surname, in order to use the services available.

You gave us your consent to process your data. This information is needed to enable us to process your request. Without it, the information cannot be processed. You can withdraw your consent at any time without jeopardizing any processing operations that have already been completed, by writing to the following address: [email protected]

Your personal data will not be processed subsequently[1] in a way that is incompatible with the purposes described above or below the collection forms. Your data are kept for no longer than5 years

2. Recipients of data

Your personal data may be communicated to one or more of the data controller's departments or to TotalEnergies company and one or more partners, independent distributors or subcontractors

3. Data Transfers

Any transfer of data to a country outside the European Economic Area shall be carried out in accordance with the applicable regulations and in such a way as to protect your data appropriately.

For the purposes of the services provided on this website, your data such as first name, surname or any other information that you provided may be transferred to the following TotalEnergies company and partners located outside the European Union: Lebanon, US and UK

For this reason, the Company has adopted “Binding Corporate Rules” (BCR) governing intra-Group transfers of personal data originating in the European Economic Area.

For data transfers not covered by the BCR, to countries outside the European Economic Area[2], other measures to ensure adequate protection are taken.

If you would like more information about our BCRs please click here https://totalenergies.com.lb/en/binding-corporate-rules. For more information about the other measures taken to ensure adequate protection, please write to the contact address specified below.

4. Data security and confidentiality

The data controller takes appropriate steps to preserve the security and confidentiality of your personal data, including to prevent them from being distorted, damaged or disclosed to unauthorized third parties.

5. Cookie management

5.1. Principle

A cookie is a file which enables a website to save information relating to your computer’s browsing of the website such as number of visits, number of pages viewed, etc., to make your visits to the website smoother.

You can at any time delete the cookies stored on your computer, object to the storage of new cookies and receive a notification before new cookies are stored by changing your browser settings using the instructions below (“Types of cookies, cookies and statistics, and settings”).

Please note that if you remove a cookie or object to the storage of cookies on your device, you may not be able to use some of the website's services.

5.2. Types of cookies, cookies and statistics, and settings.

The cookies that may be stored on your server when you browse the website are cookies which are intended solely to enable or facilitate electronic communication or which are strictly necessary to provide the service you are requesting (language cookies, login cookies, etc.), or statistics cookies or other cookies in accordance with the conditions below.

When cookies require your agreement before they can be saved, we ask you for this agreement via the “find out more” link displayed on the first page of the website that you land on, in which it is made clear that by continuing to browse the website you accept these cookies.

5.2.1. Which cookies are stored?

Cookies issued by the data controller

Cookie	Description	Category	Duration
has_js	Detection of Javascript, used by Drupal	Mandatory	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choices of GDPR related consent, used by Drupal	Mandatory	13 months
Drupal.language, Drupal_language_redirection	Choice of language of the site, used by Drupal	Mandatory	up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt the display of pages, used by Drupal	Mandatory	1 year
form-xx webform-123	Detection if form has already been submitted by the user, used by Drupal.	Mandatory	1 day
_cfduid	Performance optimization, used by the CDN CloudFlare.	Mandatory	Session

Cookies targeting/advertising

Cookie	Description	Category	Duration
_trossion, _troRUID, _troSYNC	Display offers on the internet personalized to the user points of interest, used by doubleclick.net a Google service.	Targeting/Advertising	up to 1 year and 1 month
utag_main	Used by Tealium	Targeting/Advertising	1 year
Nomsvariés	Added by Tealium tag management system.	Targeting/Advertising	Variable duration

Cookies social network

Cookie	Description	Category	Duration
1P_JAR, APISID, HSID, LOGIN_INFO, CONSENT, NID, PREF, SAPISID, SID, SSID, SIDCC, VISITOR_INFO1_LIVE, YSC, ANID	Added by Youtube or Google to save how a Youtube video is used. In case a user is connected to his Google account, these data are associated with him.	Social Network	up to 2 years
brainsonic	Added by Damdy to save how a video is used.	Social Network	Session

Statistical cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet.	Statistics	up to 1 year and 1 day
_ga, _gid, _utma, _utmz	Traffic analysis, used by Google Analytics	Statistics	up to 2 years
dtCookie, dtLatC, dtPC, dtSa, rxVisitor, rxvt, dtCookie, dtLatC	Measure of the site performance, used by Dynatrace.	Statistics	1 minute
idrxvr	Used by Xiti to analyze traffic.	Statistics	1 year

Statistics cookies are used[3] to measure the number of visits, the number of pages viewed, users’ activity on the website and how often they return. The used statistics tool,AT internet generates a cookie with a unique identifier, which is stored for no longer than 7 months. Your IP address is also collected in order to determine the town/city from which you are accessing the website. Your IP address is immediately anonymized after use so that you cannot be identified as a natural person. The statistical data on website visits are collected by the provider AT internet and subsequently transferred to the data controller in an aggregated and anonymized form in a web interface to which it alone has access. The data collected are not transferred to third parties or used for other purposes. You can block these cookies at any time by opting out as described above by clicking the linkhttp://www.xiti.com/en/optout.aspx[5].

5.2.2. How do you delete cookies, receive notification of their storage or change your browser settings?

How do you delete cookies already stored on your computer?
- On your workstation:
- On the C:\ drive select the Windows folder;
- Open the “Temporary Internet Files” folder;
- Select all files (CTRL A);
- Choose the “delete” option.

How do you change browser settings to reject or be informed of the storage of cookies?

In the Internet Explorer 5 (Microsoft) browser: Select “Tools”, and then “Internet Options”. Click on the “Security” tab, then “Custom level” and scroll down to the “cookies” section. Next to “Allow cookies that are stored on your computer” select “Ask” to be notified or “Disable” to decline all cookies;
In the Internet Explorer 6, 7 or 8 (Microsoft) browser: Select “Tools”, “Internet Options”, “Privacy”, then the level you wish to apply;
In the Firefox browser: Click on “Tools” and select “Options”. In the “Privacy and security” tab, untick the box “Accept cookies from websites”;
In the Chrome (Google) browser: Click “Customize and control Google Chrome” and select “Settings”. Under “Privacy and security”, click on “Content settings” and enable “Block third-party cookies” ;
In the Safari browser: Select “Preferences” then “Privacy” and select one of the following options regarding “Cookies and website data”: “Always block”, “Allow from current website only”, “Allow from websites I visit”.

6.Your rights /Contact

In accordance with current regulations, you have the right to access, rectify, delete and object to the use of your personal data.

You can ask for your personal data to be sent to you and you have the right to give instructions for the use of your personal data after your death. You can also ask for restriction of the data processing,

You can exercise your rights and ask us about the processing of your personal data by contacting: [email protected]

Finally, you can lodge a complaint with the authority responsible for compliance with personal data protection obligations.

Appendix 2: Glossary of terms for the privacy charter

Terms	EXPLANATIONS/EXAMPLES
1. IDENTITY OF THE DATA CONTROLLER (DC)
TotalEnergies Marketing Lebanon as data controller, processes your personal information in accordance with applicable regulations.
2. ULTIMATE PURPOSE AND LEGAL BASES FOR PROCESSING DATA
Data is processed for the purpose of answering a query or sending out a newsletter. In accordance with your consent and are necessary for us to be able to process your request, without which, your request cannot be processed.
3. IF COLLECTING USING A FORM WITH REQUIRED FIELDS: MANDATORY NATURE OF REQUESTED INFORMATION
Any mandatory fields to be completed are marked with an asterisk.
4. USERS OF PERSONAL DATA
In order to satisfy the ultimate purposes indicated above, your data is sent to *TotalEnergies company*
5. DURATION OF CONSERVATION
Your data will be kept for the period of time necessary for the ultimate purpose of the processing, that is 5 years
6. IF DATA IS TRANSFERRED OUTSIDE OF THE EUROPEAN UNION
TotalEnergies Marketing Lebanon transfers data concerning first and last name or any other information shared by you for the purpose of *answering a query, sending a newsletter* to the following category(ies) of end users outside of the European Union: *TotalEnergies company subcontractors* Transfers are authorized by If the end user is a Total Group entity: the existence of Binding Corporate Rules (BCR)
7. RIGHTS OF CONCERNED PERSONS
In accordance with current regulations, you have the right to access, correct, delete your data and the right to *data portability, as well as the right to define the directives concerning the fate of your personal data after your death. You have the right to withdraw your consent at any time without calling into question the data processing activities made earlier. You can also request a limit or oppose the processing of your data and/or institute a claim with the competent supervisory authority. You can exercise your rights and question us about your data processing by contacting: [email protected]**

You will find below in this link the summary of TotalEnergies’s Binding Corporate Rules: https://lb.totalenergies.com/en/binding-corporate-rules

[1]Confirm that there is no subsequent processing operation, otherwise delete

[2]In this regard, please note that even a maintenance system which enables remote access to data outside the EU is regarded as a data transfer

[3] This information is mandatory under French law and must be adapted if the law is applicable

[4]For example : Xiti : “http://www.xiti.com/en/optout.aspx” ; Google analytics : “https://tools.google.com/dlpage/gaoptout/”