Online Privacy Policy

Your right to privacy is very important to us. AEC Daily Inc. and AEC Daily Corporation ("AEC Daily" or "we") have created this privacy policy in order to explain the manners in which each of the AEC Daily collect, use, and disclose personal information, as well as certain rights you have in respect of your personal information, it being noted that we have voluntarily elected to comply with the higher privacy standards stemming from the European Union's General Data Protection Regulation (the "GDPR" and "GDPR UK").This Privacy Policy is incorporated into, and is subject to, the Terms of Use. By using our website at https://www.aecdaily.com ("Website"), or by choosing to submit personal information to AEC Daily, you signify your consent to all of the terms of this Privacy Policy and the Terms of Use. If you do not agree with any terms of this Privacy Policy or the Terms of Use, you may not use this Website or submit any personal information to AEC Daily.

Please note that this Website contains links to other third party sites. AEC Daily is not responsible for the privacy practices or the content of such other sites. The relevant AEC Daily Entity acting as controller in respect of your personal information as customer is the one indicated on your contract and AEC Daily Corporation acts as controller as regards personal information collected through the Website.

What information do we collect and how will it be used and disclosed?

Personal information is information that is about an identifiable individual such as your name, address, telephone number, email address or payment information ("Personal Information"). We collect Personal Information when you provide it through our Website, or when you provide it to us through other means.

When you provide AEC Daily with your Personal Information, we will add this information to our client file. We may collect, use, disclose and otherwise information for the following purposes (and pursuant to the following legal bases under the GDPR):

• Allow you to register for and take a course offered by a course provider on our Site (GDPR legal basis: necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract). Please note that when you register for a course, your name and information about your performance in the course will be provided to the course provider.
• Operate our Website in accordance with its Terms of Use (GDPR legal basis: necessary for the purposes of the legitimate interests pursued by us in operating efficiently out Website).
• Facilitate, complete or confirm a purchase or registration you choose to make using the Website, including facilitating payment for your purchase (GDPR legal basis: necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract)
• Provide you with better and more efficient service (GDPR legal basis: necessary for the purposes of the legitimate interests pursued by us in improving our services);
• Respond to your questions or inquiries (GDPR legal basis: necessary for the purposes of the legitimate interests pursued by us in improving our services);
• Conduct market research and surveys (GDPR legal basis: necessary for the purposes of the legitimate interests pursued by us in improving our services);
• Conduct promotional activities, including contests (GDPR legal basis: necessary for the purposes of the legitimate interests pursued by us in promoting our services);
• Improve our products, services and Website (GDPR legal basis: necessary for the purposes of the legitimate interests pursued by us in improving our services or, as regards the installation and use of cookies, your consent);
• Send you informational or promotional communications (GDPR legal basis: necessary for the purposes of the legitimate interests pursued by us in promoting our services or, in case of electronic communications marketing goods or services not similar to those already purchased by you, your consent);
• Generate statistical information (GDPR legal basis: necessary for the purposes of the legitimate interests pursued by us in gaining insight on our market);
• Carry out other purposes that are disclosed to you and to which you consent (GDPR legal basis: consent);
• Carry out any other purpose permitted or required by law (GDPR legal basis: necessary for compliance with a legal obligation to which we are subject if the purpose is not compatible with a purpose listed above).

If you have an Instructor or Administrator account, other users in your company or organization may have access to your account and records of your activities on this and other AEC Daily sites. It is advised that you maintain your personal AEC Daily account (should one exist) separately from your Instructor or Administrator account.

We may also disclose your personal information to the following categories of third parties:

• Our affiliate(s).
• Third parties to which it is specifically stated that information you provide will be sent and you choose to provide that information to us.
• Third parties from which you request information through AEC Daily (e.g. requesting specifications from a manufacturer listed on AEC Daily).
• Third parties providing courses about which you browse information, to whom we may disclose your account information for their statistical and marketing purposes. You can enable or disable this sharing on your communication preferences page.
• Third parties providing a course that you take. (In order to register credit for a course, several organizations/individuals, including the course provider/instructor, need to be provided with your personal information, including your name, email address, company name, phone number, profession, and association number). As a result, you may be asked to agree to the privacy policy of the course provider/instructor. The privacy practices of course providers/instructors may differ from those of AEC Daily, so we encourage you to read these policies. AEC Daily is not responsible for the privacy practices, any other practices, of any course provider/instructor or any other third party.
• Third party service providers (for example, a company that helps us host our Website or process payments, a company helping us conducting investigations of possible breaches of law, lawyers helping us bring legal action against someone who may be violating an agreement they have with us).
• Third parties that would invest in our business (whether by way of merger, subscription of stock or bonds, grant of a loan facility or otherwise) or propose to do so.
• Government authorities in the context of the investigation of security breaches or a legal matter in respect of which our cooperation is requested.
• Police and judiciary authorities when necessary to protect our rights, safety or property.

How do we collect information through technological means?

We may use your IP address and cookies strictly necessary to operate our website and thus for which no consent is required under the GDPR:

• User‑input cookies (session-id) such as first‑party cookies to keep track of the user's input when filling online forms, shopping carts, etc., for the duration of a session or persistent cookies limited to a few hours in some cases;
• Authentication cookies, to identify the user once he has logged in, for the duration of a session;
• User‑centric security cookies, used to detect authentication abuses, for a limited persistent duration;
• Multimedia content player cookies, used to store technical data to play back video or audio content, for the duration of a session;
• Load‑balancing cookies, for the duration of session;
• User‑interface customisation cookies such as language or font preferences, for the duration of a session (or slightly longer);
• third‑party social plug‑in content‑sharing cookies, for logged‑in members of a social network.

Your IP address is used to help identify you and your shopping cart and to gather broad demographic information. We may also collect other general information (such as the type of browser you use, which pages you view, and the files you request). The amount of information that is sent by your web browser depends on the browser and settings you use. Please refer to the instructions provided by your browser if you want to learn more about what information it sends to websites you visit, or how you may change or restrict this. Your browser also gives you the option to reject cookies. However, setting your browser to reject cookies generally hinders the browser's performance and will adversely affect your experience while using our Website.

Analytics: We use analysis software to look at IP addresses and cookies for (i) determining the number of hits in order to assess the content being viewed and the ergonomy of the website or application, (ii) segmenting the traffic statistics in groups in order to assess the effectiveness of editorial choices without this leading to target a specific individual and (iii) modifying the global dynamics of a site. This information is not used to develop a personal profile of you, nor is it combined with customer data, traffic data of another app of website or data used for other processing activities. As regards this specific purpose, we use the IP address only to identify the geographic area where the user is located (accurate only to a city level) and this IP address is not stored in the log file dedicated to this purpose. Cookies have an expiry period of 13 months (and are not automatically extended upon each visit). The log files are purged after a maximum of 25 months. The relevant cookies used for this purpose are:

What cookies are in use on our website?

You can withdraw your consent to the use of these cookies by clicking 'cookie settings'.

Alternatively, you can block them on your web . Visit the browser website for information on how to do this.

At this time, we do not otherwise track our users' Personal Information over time and across third-party websites. We therefore do not respond to browser Do Not Track signals.

Our Website may include social media features, such as the Facebook Like or Share button and Widgets ("Features"). These Features may collect your IP address, which page you are visiting on our website, and may set a cookie to enable the Feature to function properly. They may also allow third-party social media services to provide us information about you, including your name, email address, and other contact information. The data we receive is dependent upon your privacy settings with the social network. Features are either hosted by a third party or hosted directly on our site. Your interactions with these Features are governed by the privacy statement of the company providing it. You should always review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the Service.

How is my information protected?

AEC Daily will take reasonable physical, organizational, and technological precautions to help protect your privacy and the personal information we collect. Personal Information may be accessed by persons within our organization, or our third party service providers, who require such access to carry out the purposes indicated above, or such other purposes as may be permitted or required by the applicable law. Personal Information we collect is maintained in our secure hosting facility.

Although we have taken measures to help protect our Website, computer systems and Personal Information that we have collected from unauthorized use, access, disclosure, misuse, alteration or destruction, no security measures can provide absolute protection. We cannot ensure or warrant the security of any information you provide to us.

Some or all of the Personal Information we collect may be stored or processed on servers located outside your jurisdiction of residence, including in the United States, whose data protection laws may differ from the jurisdiction in which you live. As a result, this information may be subject to access requests from governments, courts, or law enforcement in those jurisdictions according to laws in those jurisdictions. We however make sure that any service provider established outside the European Economic Area is located in a country or territory that ensures, at least for the relevant sector, an adequate level of protection within the meaning of article 45 of the GDPR (such as organisations in Canada governed by the Personal Information Protection and Electronic Documents Act and organisations in Andorra, Argentina, Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, the United Kingdom and Uruguay as well as possibly South Korea). Where it is not the case, unless one of the exemptions of article 49 of the GDPR avails, we make sure we enter into a data transfer agreement containing the standard contractual clauses set out in the European Commission's decision 2021/914 of 4 June 2021 (as such may be replaced from time to time) with such service provider and implement any required supplementary measures. We require by contract our service providers to do the same with their own service providers to whom they could transfer your Personal Information. A copy of any standard contractual clauses in place can be requested.

Accessing, Correcting and Exercising other Right in respect of your Personal Information

Providing AEC Daily with updated information allows us to provide you with more efficient service. You have a right to request access to your Personal Information and to request a correction to it if you believe it is inaccurate. We are also committed to providing you the other rights available under the GDPR including the right to request from the controller erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability, subject to the conditions set out in the GDPR for the exercise of these rights.

If you have submitted Personal Information to AEC Daily and would like to have access to it, or if you would like to have it corrected or exercise another of your GDPR rights, please email us at info@aecdaily.com or visit our Contact Us section.

We may require you to verify your identity before allowing you to access your Personal Information or exercise one of your other rights.

Children

AEC Daily does not knowingly collect Personal Information from children. If a child has already provided us with Personal Information, his or her parent or guardian may contact us for the purpose of asking us to delete this information.

Your California Privacy Rights

California Civil Code Section 1798.83 permits residents of the State of California to request from certain businesses with whom the California resident has an established business relationship a list of all third parties to which the business, during the immediately preceding calendar year, has disclosed certain personally identifiable information for direct marketing purposes. We are required to respond to a customer request only once during any calendar year. To make such a request you should send a letter to AEC Daily Corporation, Attn: California Privacy Rights, 266 Elmwood Avenue, Suite 511, Buffalo, New York 14222, USA. In your request, please attest to the fact that you are a California resident and provide a current California address for our response. Please be aware that not all information sharing is covered by the California Privacy Rights requirements and only information sharing that is covered will be included in our response.

To Contact Our UK GDPR Representative

AEC Daily Inc., which processes the personal data of individuals in the United Kingdom, in either the role of 'data controller' or 'data processor', has appointed DataRep as its Data Protection Representative for the purposes of UK GDPR, as part of The Data Protection Act 2018 (as amended) (hereafter the "UK GDPR") in the UK.

If AEC Daily Inc. has processed or is processing your personal data, you may be entitled to exercise your rights under UK GDPR in respect of that personal data. For more details on the rights you have in respect of your personal data, please refer to the UK Information Commissioner's Office.

If you want to raise a question to AEC Daily Inc., or otherwise exercise your rights in respect of your personal data, you may do so by:

• Sending an email to DataRep at datarequest@datarep.com quoting 'AEC Daily Inc.' in the subject line
• Contacting us through this online webform
• Mailing your inquiry to:

DataRep
107-111 Fleet Street,
London,
EC4A 2AB,
United Kingdom
(Ensure your request is addressed to 'DataRep' and not AEC Daily Inc.)

Data Retention Period

Data used for the following purposes is deleted or anonymised after the following retention periods:

Type of Data	Retention Period (or criteria used to determine the retention period)
Account information (name, payment details, courses taken, etc.)	Information will be kept in our active database 5 years after the last date the account has been used or any outstanding payment has been made (whichever the latest). After this time period, we will archive this information for the purposes of using it should we need it to assert our legal rights before an administrative or judiciary authority and keep it until the latest between the expiry of the applicable limitation period or the date a final decision is made which is not subject to any recourse
Newsletter subscription and other marketing data	3 years since last contact by user
Website/app use analytics data	25 months

Changes to this Policy

AEC Daily reserves the right to modify this Privacy Policy at any time. We will reflect any such modifications to this Privacy Policy on our Website and will indicate the date this Privacy Policy was last amended. Your continued access to and/or use of the Website after any such changes constitutes your acceptance of, and agreement to, this Privacy Policy, as revised. Please periodically review this Privacy Policy so that you know what personal information we collect, how we use it, and with whom we may share it.

Contacting AEC Daily

If you have any questions about this privacy statement, the practices of this website, or your dealings with AEC Daily, you can contact:

AEC Daily Inc.
17817 Leslie Street
Suite 49
Newmarket, Ontario
L3Y 8C6
Canada
Toll-Free Phone: 1-877-566-1199
Toll-Free Fax: 1-877-261-2252
info@aecdaily.com

AEC Daily Corporation
266 Elmwood Avenue, Suite 511
Buffalo, New York 14222
USA
Toll-Free Phone: 1-877-566-1199
Toll-Free Fax: 1-877-261-2252
info@aecdaily.com