PRIVACY AND CONFIDENTIALITY POLICY

Version in effect from April 11, 2022

This privacy and confidentiality policy hereinafter the "Privacy Policy" applies to information services for people over 14 years of age in Quebec and Canada for the purpose of helping them find information about films, filmmakers, and film artisans throughout the Canadian broadcasting ecosystem ("Services"). These Services are provided by Organisation Communications et Société OCS Inc. ("OCS") or ("we"), a non-profit corporation incorporated under the Companies Act, Part III (CQLR c C-38). We provide these services through our website at https://panoscope.ca/ ("Site") and describes, where applicable, the collection and processing of personal information from OCS users ("you" or "user(s)").

This Privacy Policy is intended to help you understand our practices regarding the collection, use, disclosure, and retention of personal information to provide you with our Services. We protect your privacy by ensuring the protection, confidentiality, non-alteration, availability and security of the personal information. you provide to us while browsing our Site, by email, in person or by telephone, and by doing so you agree to have it handled in accordance with this Privacy Policy.

By using OCS Services you are considered a "user" you agree to this Privacy Policy.

For the purposes of this Privacy Policy, "Personal Information" means any information about an individual that may directly or indirectly identify that individual.

As will be detailed in this Privacy Policy, you have the discretionary choice to decline to share your personal information.

In terms of Quebec, Canadian and European privacy laws, Martin Bilodeau is designated as the person responsible for the treatment of data within OCS.

By browsing the OCS Site, you acknowledge that you have read, understand and agree to this Privacy Policy

If you do not agree to this Policy, please do not disclose your personal information to us and/or stop using the Site. If you would like us to take steps to have your personal information deleted, you may send us an e-mail to the contact information listed in the section entitled "Communications."

1. Collection and Use of Your Personal Information

1.1 The personal information collected and generated by OCS is as follows, and is collected and used for specific and legitimate purposes as described below - Username: necessary for identification and personalization of the Services; - User's email: necessary for sending newsletters and for communication with the user; - IP addresses required for the following purposes: ◦ to improve the Site and the user experience ◦ for statistical purposes (Google Analytics) ◦ to display relevant information to the user (geolocation)

1.2 Voluntary disclosure of personal information. If you contact us using the contact information listed below in the "Communications" section, we will have access to the information you share with us, including your contact information and any questions or comments you may have. We will then collect this information to respond to you and, if necessary, react to the situation in question.

1.3 In the context of these communications and the voluntary disclosure of personal information by you, OCS undertakes:
• to keep it confidential;
• to store them in such a way that we cannot identify you and;
• to use them only in this format, for statistical purposes, to develop the Site, and to improve the Services.

2.1 Your consent. By providing us with your personal information, you consent to us collecting, holding and using your iersonal information in accordance with this Privacy Policy and applicable laws and regulations. As such, we will only collect and use your personal information as required by law.

2.2. Withdrawing your consent. You may withdraw your consent at any time by writing to the Privacy Representative using the contact information provided below in the "Communications" section. Your request will be processed within 30 days. Withdrawing your consent will not affect the lawfulness of the processing based on your consent prior to its withdrawal.

2.3 Non-disclosure. OCS will not disclose your personal information to third parties unless such disclosure is permitted by applicable law or you expressly consent to the disclosure. However, the anonymized reports they allow us to produce may be shared with institutions and members of the film industry for statistical and business intelligence purposes. No data or information is transmitted outside the borders of Canada.

3. User's rights: access, deletion and rectification of their personal information

3.1 Personal information collected is retained by OCS in full accordance with the purpose for which it was collected or until you request its deletion.

3.2 We will retain personal information provided to us for as long as we need it to fulfill the purposes for which it was originally collected and for no more than ten (10) years, unless otherwise required by applicable law. When the purpose for which the personal information was collected expires, we will destroy or anonymize it in accordance with industry-best practices. In the event that anonymized information is generated from your personal information, such information will only be used to serve serious and legitimate interests as required by law.

3.3 In accordance with applicable law, you have the right to request the deletion of any personal information. To do so, please contact our Privacy Officer using the contact information provided in the "Communications" section of this Privacy Policy. We will delete your personal information within a reasonable time. Note that certain regulations may require us to retain your personal information for a specific period of time. Also note that we may not be able to remove information that does not allow us to easily identify you. This would include information that has been separated from your identity and is used for quality improvement or analytical purposes. Once this data is anonymized, it may no longer be possible to determine which user it came from.

3.4 You have the right to request access to and rectify the personal information we hold about you. You may also ask us to provide a copy of your personal information. The user's identifying information, as known by the user, is accessible and correctable upon written request sent by email to the attention of the Privacy Officer using the contact information provided below in the "Communications" section.

4. COOKIES

The Site uses cookies to facilitate your navigation on the Site. These cookies may collect personal information about you. You can change your browser settings to refuse cookies. Under no circumstances will this information be used to identify individuals or their browsing habits outside the Site. They will however be used for traditional digital advertising or remarketing. The Site also uses log files to collect statistics and to improve our Services. The information compiled is general in nature and does not include personal information. If you use a computer in a public place or share a computer with other users, be sure to erase your browsing history before ending each session. You can get more details by visiting our Cookie Policy.

5. Security measures

5.1 We implement reasonable measures required to maintain the security and confidentiality of your personal information. To this end, we only keep this information in a format that does not allow us to identify you. In addition, our site is hosted on secure and encrypted servers in Canada. Although we use technologies that are deemed adequate, the website and its content – like all technology – is neither infallible nor immune to unforeseen events. You should be aware that there is a risk associated with the use of any technology. We cannot guarantee that your use of the OCS Site or its content, or any third parties, will not be subject to data interception or any other uncontrollable event ("Security Incident").

5.2 OCS as well as its subcontractors have implemented several technical measures to optimize the security of the data collected via the Site, including the following: • Encryption of electronic devices hosting the data, stored data and saved data (as a backup) • Security protocols used to protect them are among the most reliable in the industry. They are accessible by username and password. • Limited access to data collected only by agency employees and technology vendors, bound to the agency by confidentiality agreements.

5.3 If you have any questions regarding the security of our Site, please contact our Privacy Officer using the contact information provided in the "Communications" section of this Privacy Policy.

6. Security incident

In the event of a security incident relating to any of your iersonal information ("Personal Data Breaches"), we will follow the procedures set forth in the applicable law and invite you to review our Privacy Incident Policy. In the event that such a privacy incident may cause you serious or grave harm under applicable law, we will take all reasonable steps to notify you of the incident, as well as implement any required corrective measures and notify any relevant authorities, as well as third-country authorities where applicable in accordance with applicable laws.

7. Hyperlinks

The content of the OCS Site includes links to external websites operated by third parties ("Hyperlinks"). It is important to understand that these hyperlinks are provided for information purposes only, and to facilitate your access to more information. By clicking on these hyperlinks, you will leave the Site for third party websites, which may have different privacy policies and practices. This Privacy Policy is no longer applicable once you have left our Site. Please review the privacy policies of those other sites to which you are redirected before providing them with personal information. We are not responsible for, and do not accept any liability for the personal information collection, use and disclosure practices of other entities that you may access through our Site. Indeed, we remind you that: • these resources are not controlled by us;
• We do not systematically validate their content and; • We cannot guarantee their content.

8. Other

8.1 Complete agreement. This Privacy Policy constitutes, together with the Terms of Use, the set of rules applicable to your use of the OCS Site and its contents.

8.2 Modification. Please note that we reserve the right to change this Privacy Policy and our Terms of Use at any time. These changes will be brought to your attention by a notice posted on the home page of the Site. 8.3 Prior to these amendments coming into effect. These changes will not have a retroactive effect on the above documents.

8.4 Acceptance. Your continued use of OCS following any changes that have been publicly disclosed or made known to you will be deemed your full acceptance of such changes; if you do not agree to such changes, you must discontinue using our Services and/or browsing the Site at the time such changes take effect.

Last modified: April8, 2022

8.5 Applicable Law and Jurisdiction. This Privacy Policy shall be interpreted in accordance with the laws of the province of Quebec and the laws of Canada applicable therein, excluding any principles that may lead to the application of foreign laws. You irrevocably agree, except as required by law, that any dispute arising out of these Terms of Use shall be submitted to a court of competent jurisdiction in the judicial district of Montreal, in the province of Quebec. 8.6 French and English language. if there is a problem of definition or interpretation between the English and French versions of this Agreement, the French version shall prevail.

8.7 Communications. You may contact the Privacy Officer, Martin Bilodeau, by the following information:

R61-2275 Holt, Montreal (QC), H2G 3H1

B 514-524-8522#120

Email: [email protected]

We will endeavor to respond to any communication within 30 days of a user's request, and no later than required by applicable law. If you are not satisfied with the response to your request, you may file a complaint with the Privacy Commissioner of your province or territory, or with the Office of the Privacy Commissioner of Canada. If you reside outside of Canada, and we are considered to be responsible for the processing of your information, you are free to address any complaints regarding the exercise of your rights to the appropriate authorities in your country of residence.