PERSONAL DATA PROTECTION POLICY

REACH BEYOND is a company incorporated under Cameroonian law, specializing in the collection of commercial debts and advice.

In the context of our relations, your personal data are subject to special attention during their processing. This policy:

• describes the commitments implemented by our company, as data controller, in order to ensure the protection of your personal data;

• informs you about the risks and precautions related to the transmission of personal data to our company;

The purpose of this policy is also to inform you of how your personal data is collected and used throughout your relationship or interaction with our company.

This policy is an integral part of the GENERAL CONDITIONS associated with our due diligence, it applies uniformly to all the services we offer and concerns any natural or legal person with whom we interact.

Article 1 - What precautions should you take when transmitting personal data to us?

The client or prospect (or any other third party with whom we interact) preparing for a transmission of personal data to our company, must ensure compliance with the regulatory requirements relating to this transmission of personal data.

The author of the transmission of personal data to our company engages his legal and criminal liability in the event that the personal data transmitted to our company contain sensitive information, information subject to professional secrecy, information subject to defense secret , trade secret information, information protected by confidentiality, etc., whether this data was transmitted to us voluntarily or accidentally.

When required by law (or when contractual provisions require it, for example in the case of the relationship between the author of the transmission of personal data and his own partner), the client or prospect (or any other third parties with whom we interact) must ensure that they first inform the owner of the personal data or the entity concerned, obtain their agreement in writing, before transmitting this personal data to us. Obtaining this written agreement is the sole responsibility of the originator of the transmission of personal data.

Any breach of legal and regulatory requirements during the transmission of personal data to our company, engages the responsibility of the author of the transmission of this personal data, including when this personal data received has been used by our company. as part of its contractual due diligence.

The personal data transmitted to our company are at the risk and peril of the author of the transmission of this data, including in the event of legal proceedings against our company for possession, interception, or illegal use of this personal data. .

By transmitting your personal data to us by any means (physical transmission, electronic transmission, telephone transmission, etc.), you confirm that you have read this policy carefully, as well as your agreement and your unreserved adherence.

Article 2 - What personal data are processed?

Our company makes sure to collect only the personal data strictly necessary for the purpose for which they are processed.

Our company processes personal data (such as your first name, your last name, the name of your company, your address, your telephone number, your e-mail address as well as your bank details etc.) which have been communicated in such a way voluntarily or which have been obtained as follows:

• By our clients, in the context of carrying out the missions they have entrusted to us,

• By the debtors during our exchanges with them during our mission,

• Via the contact forms, when entering into a relationship,

• Via data from your exchanges with our company: telephone calls (which are not automatically recorded by our company), e-mails, visits,

• Through our research,

Without express consent being requested, personal data is processed by our company:

• For the fulfillment of our contractual obligations with our customers;

• Possibly, for the exercise of the rights of our company, at the request of a judge or a judicial authority, for example in the case of our defense in the event of questioning of our responsibility.

We may collect information through third parties or from publicly available sources (e.g. trade and personal property credit register, court registries, taxpayer file, public employer files, etc.) relating to:

• Commercial entities: names of legal representatives (for example, executive directors such as chairman of the management board, manager.) as well as information relating to your solvency (for example your balance sheets and other public accounting and financial documents),

• Sole proprietorships, traders carrying out their activity in their own name: name, e-mail address, address, sector of activity, legal form, names of representatives (for example directors) as well as information relating to your solvency (for example your balance sheets and other public accounting and financial documents).

• Individuals: Surname, first name, postal address and email address, etc.

Article 3 - For what purposes are your personal data used?

The purpose of a processing is defined as the objective pursued, the need to which it responds for our society. The processing carried out meets an explicit, legitimate and determined purpose, which is based on the proposal, establishment or performance of a contract, compliance with a legal or regulatory obligation.

Article 4 - Who are the recipients of your personal data?

For the performance of our debt collection missions, you are informed that the personal data that you have communicated to us will be transmitted according to need and necessities, in an honest manner, and without your prior consent to the following persons:

• Our collaborators working on your files;

• Our lawyers:

◦ For the requirements of judicial recovery when that is agreed with you,

◦ In the event of a dispute between our company and the creditor entity,

◦ In the event of a dispute between our company and the entity that transmitted personal data to us

◦ In the event of legal proceedings brought by the debtor entity against our company;

• To the debtor entities subject of our mission (knowing that no debtor entity will receive the personal data of any other debtor entity in our portfolio);

• To "auxiliary entities" in connection with the debtor entity, when the auxiliary entity is involved in the processing of invoices or in the process of payment of invoices from suppliers of the debtor entity:

◦ Case of company agencies having the head office as an auxiliary entity when the latter is in charge of paying supplier invoices;

◦ Case of subsidiaries or branches having the parent company as an auxiliary entity when the latter is in charge of paying supplier invoices;

◦ Case of public administrations having as auxiliary entity the Ministry of Finance (or its attached services) in application of administrative circulars, when the Ministry of Finance is in charge of the payment of their suppliers;

• Our lawyers:

◦ (subject to your formal agreement) for the requirements of judicial recovery when this is agreed with you;

◦ (in accordance with Articles 2, 20, 22, 29, 42(1), 72, of Law No. 90/59 of December 19, 1990 on the organization of the legal profession) to safeguard our interests in the event of dispute between our company and the following entities: the creditor entity, the debtor entity, or the entity having transmitted personal data to us;

◦ (In accordance with Articles 76 and 83(1) of Law No. 2016/007 of July 12, 2016 on the Penal Code) in the event of a judicial requisition;

The personal data received is also archived by our company, and will not be transferred for purposes other than those described above, or in the event of a judicial requisition.

Article 5 - What are the security measures guaranteeing the protection of your personal data?

The protection of your personal data is subject within our company to organisational, technical and physical security measures in order to preserve its integrity, confidentiality and availability. Our company strives to protect personal data taking into account their sensitivity and the purpose of their processing.

Article 6 – How to contact us?

If you have any concerns or questions relating to our company's personal data protection policy, please contact us exclusively by email at the following address:

Email: info@rbeyond.com

(The title of your message should include the words "For the attention of the Data Protection Officer)

Article 7 - Modification of the personal data protection policy

Our company may make changes to this personal data protection policy, in particular due to regulatory, technological or processing purpose changes.

In the event of a change to this policy, our company will update it on our website.