PRIVACY AND DATA PROTECTION POLICY

Last updated: 28 September 2026

AZERBOSS® places particular importance on privacy and the protection of personal data.

This Privacy Policy explains what data may be collected when you use www.azerboss.com, why it is used, how long it may be retained, with whom it may be shared and what rights you have.

1. DATA CONTROLLER

The controller responsible for processing carried out through the website is:

AZERBOSS® Digital growth agency for Tourism, Events and premium Brands SIRET: 912 717 212 00027 Intra-Community VAT number: FR49912717212 78 Avenue des Champs-Élysées 75008 Paris — France

Email: contact@azerboss.com Telephone: +33 7 74 02 46 85 WhatsApp: +33 6 56 68 38 74 Website: www.azerboss.com

2. DATA THAT MAY BE COLLECTED

Depending on how you use the website and your relationship with AZERBOSS®, we may process your first and last name, job title, company, business address, email address, telephone number, information contained in your enquiries, audit or appointment information, commercial information, billing data and information relating to the contractual relationship.

Technical data may also be collected during browsing, such as IP address, device type, browser, pages viewed, website interactions, audience-measurement data and certain information from cookies or similar technologies.

AZERBOSS® applies the data-minimisation principle and seeks to collect only data relevant to the intended purpose.

3. DATA SOURCES

Data may be collected directly from you when you complete a form, request an audit, download content, book an appointment, contact AZERBOSS®, speak with its teams or become a client.

For business prospecting, certain professional contact details may also come from publicly available sources, business directories, company websites, professional networks or partners authorised to provide that information.

Where data has not been collected directly from you, AZERBOSS® complies with the information obligations imposed by applicable law.

4. PURPOSES OF PROCESSING

Data may be used to respond to enquiries, carry out an audit or initial contact, arrange an appointment, prepare a commercial proposal, manage prospects, perform ordered services, manage client relationships, issue quotations and invoices, process payments, manage accounting, improve services, secure the website and measure its performance.

It may also be used to communicate about AZERBOSS® services, send professional content or conduct prospecting where permitted by law.

5. LEGAL BASES

Processing carried out by AZERBOSS® may rely on different legal bases depending on its purpose.

Requests for quotations, audits, appointments and steps taken before a potential engagement rely in particular on pre-contractual measures requested by the individual concerned.

The management of services, orders and client relationships relies on performance of a contract.

Billing and retention of certain documents rely on applicable legal obligations.

Certain activities necessary for operations, security, business development and service improvement may rely on AZERBOSS®’s legitimate interests, subject to the rights and freedoms of the individuals concerned.

Where the law requires consent, particularly for certain cookies, communications or specific processing, it is requested in advance and may be withdrawn.

6. B2B COMMERCIAL PROSPECTING

AZERBOSS® mainly provides services to professionals.

In this context, commercial communications may be sent to professionals where their subject relates to their business or professional responsibilities, under the conditions permitted by law.

Every recipient must be able to object easily and free of charge to further communications.

Any objection may be sent to contact@azerboss.com or made through the unsubscribe method included in communications where available.

7. RECIPIENTS

Data is accessible only to people who need it for their duties within AZERBOSS® and to authorised service providers required to operate its services.

These may include providers of hosting, cloud storage, databases, CRM, messaging, automation, appointment booking, audience analytics, digital advertising, payments, accounting, cybersecurity or technical support.

These providers access data only as necessary to perform their duties and must comply with applicable data-protection obligations.

Data may also be disclosed to an administrative or judicial authority where required by law.

AZERBOSS® does not sell users’ personal data to third parties.

8. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA

Some technology providers used for digital activities may be located, or process certain data, outside the European Economic Area.

Where such transfers occur, AZERBOSS® ensures that they rely on a mechanism authorised by the GDPR, such as a European Commission adequacy decision or appropriate contractual safeguards where required.

9. RETENTION PERIODS

Data is retained only for as long as necessary for the purposes for which it was collected, then may be archived where the law requires or permits further retention.

Prospect data used for commercial prospecting may in particular be retained for up to three years from collection or the prospect’s latest active contact, unless they object earlier.

Client data needed for the business relationship is retained for the duration of the contract. Certain data may then be retained for three years for prospecting, subject to the right to object.

Accounting documents and invoices are retained for periods required by law, which may in particular extend to ten years.

Information required to manage a commercial objection may be retained to avoid contacting someone who has exercised their right to object.

Technical data and cookies are retained for periods consistent with their purposes and applicable regulatory requirements.

10. COOKIES AND TRACKERS

The website may use cookies or similar technologies.

Some are strictly necessary for operation or security and may be used without consent where permitted by law.

Other trackers, particularly those related to certain audience-measurement, advertising, social-network or third-party functions, are activated only where your consent is required and obtained.

You must be able to accept, reject or customise trackers subject to consent.

Your consent may be withdrawn at any time through the cookie-management mechanism provided on the website.

Refusing non-essential cookies must not prevent normal access to the website’s main features that do not depend on them.

11. ADVERTISING AND PERFORMANCE MEASUREMENT

With your consent where required, certain tools may enable AZERBOSS® to measure campaign effectiveness, understand website interactions or deliver more relevant advertising communications.

These features may involve sending technical identifiers or browsing data to partner platforms.

No tracker requiring consent must be activated before a valid choice has been expressed.

12. FORMS

Information requested in forms is used to process your enquiry.

Fields marked as required are necessary to process it. Failure to complete a required field may prevent AZERBOSS® from responding to the enquiry.

Where a form is also used for commercial communications requiring consent, appropriate information or a suitable mechanism must be displayed when the data is collected.

13. SECURITY

AZERBOSS® implements reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration, destruction or unauthorised disclosure.

However, no IT infrastructure or Internet transmission can guarantee absolute security.

14. YOUR RIGHTS

Under the conditions set out in the GDPR and French law, you may have rights to access, rectify or erase your data, restrict or object to processing and, where the conditions are met, data portability.

Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

In particular, you may object at any time to your data being used for commercial prospecting.

15. EXERCISING YOUR RIGHTS

To exercise your rights or ask a question about your personal data, write to:

contact@azerboss.com

or by post:

AZERBOSS® 78 Avenue des Champs-Élysées 75008 Paris — France

To protect your data, proof of identity may be requested only where necessary to verify the requester’s identity.

AZERBOSS® responds to requests within the time limits prescribed by law.

16. COMPLAINT TO THE CNIL

If, after contacting AZERBOSS®, you believe your data-protection rights have not been respected, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés — CNIL at www.cnil.fr.

17. THIRD-PARTY LINKS AND SERVICES

The website may contain links, videos, embedded content or services operated by third parties.

These services have their own privacy policies and AZERBOSS® recommends reviewing them before providing personal data.

18. POLICY UPDATES

This Privacy Policy may be updated to reflect regulatory, technical or organisational developments.

The date at the top of the page indicates the latest update.

19. CONTACT

AZERBOSS® SIRET: 912 717 212 00027 Intra-Community VAT number: FR49912717212 78 Avenue des Champs-Élysées 75008 Paris — France

Email: contact@azerboss.com Telephone: +33 7 74 02 46 85 WhatsApp: +33 6 56 68 38 74

www.azerboss.com