Leap Years^® Privacy Policy

---

Leap Years / Animal Bioscience (hereafter referred to as “Leap Years”) places great importance on protecting the privacy and data of the users of its sites.

The purpose of this confidentiality policy (hereafter referred to as “the Policy”) is to clearly, simply, and fully inform you of the way in which Leap Years collects and uses certain personal data concerning you, namely via or in relation with its sites or mobile applications, and the methods available to you to control this use or exercise your related rights.

1. WHEN IS YOUR PERSONAL DATA COLLECTED?
   Leap Years may be required to collect your personal data on various occasions (online or physically).Occasionally, Leap Years may collect your data through forms, in which the fields marked with an asterisk “*” are considered as mandatory and must be completed. Failing this, access to certain services and their use shall be impossible.
   The data you provide to us when creating your account on our websites or mobile applications
   If you wish to use certain sites, you must identify yourself by creating an account. When creating an account on our websites or mobile applications, you will be requested to provide us with certain personal data, namely your identification data. This data allows us to manage the creation of your profile and manage your account. This processing is based on the pursuit of the legitimate interests of the data controller.

   The data we collect when you use our websites, mobile applications or other digital services
   When you use our mobile applications, we may record your IP address, browser type, operating system, referring site and browsing or application usage behavior.

   The data you communicate to us to respond to a job offer or in an unsolicited application
   In the context of recruitment management, Leap Years collects the personal data of applicants, namely through their CVs and covering letters; interviews with Leap Years; where applicable, the results of psycho-technical tests, as well as the responses to the questions asked in the form, are also intended for this use.The data provided shall be used exclusively by Leap Years and its subsidiaries in the context of the processing of your application. The legal basis for the processing is based on the execution of precontractual measures and on the legitimate interest of Leap Years who must manage the recruitment.

   Data collected automatically when you visit our websites
   When browsing our sites, cookies may be stored on your terminal (computer, smartphone, tablet), subject to the options you choose, which you may modify at any time. A cookie is a small text file containing information relating to browsing on these sites, the main objective of which is to improve the browsing experience and allow personalized services to be offered.When browsing our websites, Leap Years has access to page view cookies. The page view cookies allow us to better understand the way in which the sites are used, analyze their ergonomics and detect and resolve technical problems. These cookies are subject to the consent of the User.

   The data you provide to us when signing up to our newsletters
   Leap Years has set up newsletters that allow you to be regularly updated on news regarding Leap Years.

   By providing your email address, you consent to receive these newsletters from Leap Years.
   You may withdraw your consent and unsubscribe from the Newsletter at any time, by following the unsubscribe link that appears at the bottom of the newsletter.

   The data you provide to us when communicating through the contact forms
   Leap Years has set up contact forms. The data to be provided through this form allows us to respond to your requests. This processing is based on our legitimate interest in order to answer your request. Your personal data is not used for any other purpose.

   Legal or regulatory requirement
   Leap Years may be required to collect or communicate your personal data in order to comply with requests of a legal or regulatory nature, court decisions, summons, or legal proceedings, if so required by the legislation in force.

   Data sent via social networks
   If you have an account on a social network and you identify yourself on a Leap Years site or mobile application using this functionality, without prior registration on the site or mobile application, Leap Years may receive information from the social network. This information allows you to be authenticated and your account to be created.

   The conditions for the sharing and communication of this information are provided for within the social network registration conditions and, in any case, are subject to your prior consent. Data collected in the context of commercial prospecting Leap Years may process your personal data in order to carry out commercial prospecting by e-mail or telephone based on our legitimate interest.

   Data collected in the context of the commercial relationship Leap Years processes personal data provided by its customers in the context of the commercial relationship between the parties for the management of contracts (and the management of orders, delivery, performance of services and supply of goods). This processing is based on the legal basis of the performance of the contract between Leap Years and its customer.

2. WHAT IS OUR POLICY REGARDING DATA CONCERNING MINORS?Leap Years places great importance on the protection of the personal data of minors. Our websites are not intended for minors under 18 years of age, and we do not collect personal data from these persons. Minors under 18 years of age must have the authorization of a parent or guardian before providing personal data.

   If we see that personal data of minors under 18 years of age has been collected without the prior authorization of parents, we shall immediately destroy this data.

3. WHAT IS THE DATA RETENTION PERIOD AND WHAT IS THE ERASURE PROCEDURE?
   Leap Years only retains personal data for the time necessary for the fulfillment of the intended purpose, subject to the legal possibilities of archiving, retention obligations for certain data and/or anonymization.

   These retention periods are defined based on the purpose of the processing and, in particular, consider the applicable legal provisions that impose a specific retention period. As an example, please find below the applicable retention periods:

   • Manage your registration for an account: your data shall be processed until the moment you decide to delete your account. You may delete your account at any time by accessing your account settings.

   However, if you have not connected to our site for three years, we will delete your account.

   • Contact form: we will process your data for the period required to process your request. In any case, your data shall be deleted at the end of a 2-year period from your date of last contact.
   • Newsletter: we will process your personal data until you unsubscribe or cancel your subscription to the newsletter.
   • Application: your personal data shall be retained for a maximum period of 2 years from the date of last contact unless the applicant refuses this storage.
   • Data necessary for commercial prospecting: the data is kept for 3 years from the last contact of the persons with Leap Years.
   • Customer data: the data collected in the context of the commercial relationship necessary for the management of contracts is kept for the duration of the commercial relationship.
4. TO WHOM CAN WE TRANSFER YOUR PERSONAL DATA?
   As your personal data is confidential, only the persons duly authorized by Leap Years due to their roles may access your personal data, without prejudice to the potential transfer thereof, as required by the applicable legislation.
   Leap Years undertakes to take all appropriate technical and organizational measures to preserve the security, integrity, and confidentiality of data. We do not sell personal data to third parties.

   Your personal data may be sent to companies belonging or engage in providing services to Leap Years’ parent company, Animal Bioscience. Our authorized service providers may also be required to process your personal data that is strictly necessary for the fulfillment of the services we entrust to them: more specifically, these are the service providers in charge of the management of customer relations, the organization of games and competitions, the management of loyalty programmers, the sending of emails for marketing purposes, the storage of data, etc.

5. HOW IS YOUR PERSONAL DATA KEPT SECURE?
   Leap Years undertakes to protect and secure your personal data in order to guarantee the confidentiality thereof and prevent it from being deformed, damaged, destroyed, or disclosed to unauthorized third parties.When the disclosure of data to third parties is necessary and authorized, Leap Years guarantees that these third parties shall grant the data concerned the same level of protection as that offered by Leap Years, by demanding contractual guarantees that include the provision that data can only be processed for the authorized purposes, with all the required confidentiality and security.

   Leap Years implements technical and organizational measures to ensure that personal data is stored as securely as possible, for the period necessary to fulfill the intended purposes, in accordance with the applicable law.
   Although Leap Years takes all reasonable measurements to protect your personal data, no transfer or storage technology is completely infallible. In accordance with the applicable law, in the event of proven breach to personal data regulation liable to create a significant risk to the rights and liberties of the persons concerned, Leap Years undertakes to inform the competent supervisory authority of this violation and, when required by the aforementioned regulation, the persons concerned.

   Without prejudice to the above, it is your responsibility to exercise prudence to prevent any unauthorized access to your personal data and your terminals (computer, smartphone, tablet, etc.), namely by choosing a strong password.