Total South Africa (Pty) Ltd (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company Total South Africa (Pty) Ltd and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of Total South Africa (Pty) Ltd;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by Total South Africa (Pty) Ltd or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

You may request the disclosure of your personal data and have the right to specify instructions on what to do with your personal data after your death.

Please send your request via the contact form customerservice@totalcustomercare.co.za or in writing to the following address:

Total South Africa (Pty) Ltd

Relevant Department: Corporate Affairs

Total House, No. 03 Biermann Avenue, Rosebank,

2196

South Africa

TotalEnergies Botswana (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or Totalenergies company companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Botswana and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Botswana ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Botswana or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

TotalEnergies Botswana

Private Bag 365, Gaborone, Botswana

Lot 22010, Kgomokasitwa Road, Industrial Sites, Gaborone West, Gaborone Botswana

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalEnergies Marketing Cameroun (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies Group companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Marketing Cameroun and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies [Country] ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Marketing Cameroun or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address serviceclient@totalenergies.cm.

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

Total Egypt (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or Totalenergies company as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Egyptand any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of Total Egypt;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by Total Egypt or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

Total Egypt

Marketing & Services

Corner 254 & 206 Degla, Maadi, Cairo

Egypt

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

Total Eritrea (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company Total Eritrea and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of Total Eritrea ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by Total Eritrea or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

TotalEnergies Eritrea

P.O.Box 871

or contacts@total-er.com

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalEnergies Swaziland (hereafter the« Company ») is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or Totalenergies company companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Swaziland and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Swaziland ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Swaziland or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

Total Swaziland (PTY) LTD

Sales & Marketing Department

P O Box 193, Manzini

Eswatini

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalEnergies Marketing Ethiopia S.C (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Marketing Ethiopia S.C and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Marketing Ethiopia S.C ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Marketing Ethiopia S.C or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

TotalEnergies Marketing Ethiopia S.C

Subcity Kirkose Werda 03 house number 069

Ethiopia, Addis Ababa

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalEnergies Ghana (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Ghana and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Ghana ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Ghana or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

Total Petroleum Ghana PLC

Legal & External Affairs Department

‘Total House’, 25 Liberia Road, Accra

Ghana

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

​​TotalEnergies Kenya (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or Totalenergies company companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Kenya and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Kenya ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Kenya or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

Total Kenya PLC

Strategy & Corporate Affairs Department

P. O. Box 30736 00100 Nairobi

Kenya

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalEnergies Marketing Malawi Limited (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies Group companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Marketing Malawi Limited and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Marketing Malawi Limited ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Marketing Malawi Limited or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

TotalEnergies Marketing Malawi Limited

M&S Africa

Off Chipemphere Highway, opposite Electrasales, Yiannakis, Limbe

Malawi

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalEnergies Namibia (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Namibia and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Namibia ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Namibia or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

TotalEnergies Namibia

P.O Box 4223, Windhoek,

Namibia.

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalEnergies Marketing Nigeria Plc (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Marketing Nigeria Plc and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Marketing Nigeria Plc ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Marketing Nigeria Plc or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

TOTALENERGIES MARKETING NIGERIA PLC

TOTALENERGIES HOUSE

4, Churchgate Street, Victoria Island, Lagos State, Nigeria.

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

Total Uganda Limited(hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company Total Uganda Limitedand any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of Total Uganda Limited;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by Total Uganda Limitedor by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

Total Uganda Limited

Human Resources & Corporate Affairs

Plot 4, 8th street industrial area

P.O. Box 3079, Kampala,

Uganda

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalEnergies Tanzania Limited (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Tanzania Limited and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Tanzania Limited ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Tanzania Limited or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

TotalEnergies Tanzania Limited

Marketing and Services

1720, Haile Selassie Road, Msasani Peninsular of P. O. Box 1503 Dar es Salaam.

Tanzania

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalEnergies Marketing Zambia (hereafter the « Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalEnergies Marketing Zambia and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalEnergies Marketing Zambia] ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalEnergies Marketing Zambia or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

TotalEnergies Marketing Zambia

No. F/LUSAK/1646505, Cnr. Great East Road & Mbiya Road, Northmead

P O Box 31724

LUSAKA

Zambia

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.

TotalZimbabwe (Pvt) Limited (hereafter the« Company »)) is the “data controller” of personal data relating to the management of the website. Personal data is processed in compliance with applicable law.

1. Purpose, basis, and duration of processing collected data

By using the website, you may provide us with personal data in order to benefit from the services offered by the website. Among the personal data that we collect and process, there may be the data listed in the following table:

Purpose of processing and types of personal data	Legal basis	Duration of storage
Registration and creation of the User Account (identification data allowing you to submit a file: name, first name, e-mail address, etc.) In our online forms, mandatory fields are marked with an asterisk. If we do not answer the mandatory questions, we will not be able to allow you to participate in the Startupper Challenge of the Year.	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Manage your participation in the Startupper Challenge on the website (including but not limited to confirmation of registration, management of the Challenge, communication, publication of finalists' information, etc.).	Contract (Execution of the Terms and Conditions, and of the Startupper Challenge Rules)	Up to 3 years after the end of the Challenge
Send a suggestion to participate in the next event that might interest you (e.g. the next Startupper of the Year Challenge))	Legitimate interest	Within 3 years after the organisation of the Challenge
Answer to your questions or requests, if any, (including requests for assistance or reporting a problem with the website or the Startupper of the Year Challenge) and inform you of changes made to the Site.	Legitimate interest	1 year after receiving the request
Preserve and ensure the operation and security of the website	Contract (General terms of use)	1 year
Compliance with legal and regulatory obligations	Legal obligation	We may retain your personal data for a longer period of time in accordance with applicable legal and regulatory requirements.

2. Data recipients

Your personal data may be communicated to certain departments of the data controller or TotalEnergies companies as well as to certain partners or acting on behalf of the Company and only for the purposes of the Challenge Startupper.

• a subcontractor responsible for sending e-mails;

• a subcontractor responsible for moderating and technical assistance;

• a subcontractor for analysis, evaluation and communication

Personal data may also be communicated to jurors or partners for the purposes of the Startupper Challenge.

Personal data collected from Users may be communicated to its related companies for the purposes of the Startupper Challenge. Related companies" means the parent company TotalZimbabwe (Pvt) Limited and any legal entity.

• 1/ which holds or would hold directly or indirectly more than 50% of the shares conferring immediate voting rights at the ordinary meetings of TotalZimbabwe (Pvt) Limited ;

• 2/ of which more than 50% of the shares conferring immediate voting rights at ordinary meetings are or would be held directly or indirectly by TotalZimbabwe (Pvt) Limited or by an entity related to it as defined in indent 1/ above

3. Data transfers

For hosting and analysis purposes, personal data may be transferred to France, Ireland or any other country within the European Union.

In the case of international transfers of personal data, these are governed by the Binding Corporate Rules ("BCR") approved by the European supervisory authorities and deployed within the Totalenergies company to which the Company belongs. For transfers of personal data that are not covered by BCRs and made to countries outside the European Economic Area, other measures are put in place to ensure adequate data protection.

If you would like more information on our BCR please click here. For information on the other measures in place to ensure adequate protection please write to the contact address below.

The Company is committed to complying with the applicable local regulations on the processing of personal data.

4. Security and confidentiality of your data

The data controller implements appropriate measures to maintain the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorised parties.

5. Cookie management

A cookie is a file that records information about your browsing and facilitates your use of the Site.

Cookies are text files that are deposited on your terminal. They allow access to different information about you. Some of them belong to the editor of the Website (First-party), others to third party operators (Third-party).

The table below gives a detailed view of each cookie/tracker.

We activate cookies and other trackers once you have given your consent, with the exception of technical cookies and trackers that are essential for the provision of the service you request on the Site.

• Cookies provided by the data controller

Cookie	Description	How to decline it	Duration
Login (standard)	Allows the user to be recognised and their account to be displayed after login	See article 5.2.2	30 days
has_js	Javascript detection, used by Drupal	Required	Session
cookie_agreed, cookie-agreed, authorized_cookies_config	Choice of GDPR consent, used by Drupal	Required	13 months
Drupal.language, Drupal_language_redirection	Choice of website language, used by Drupal	Required	Up to 1 year
Drupal.tableDrag.showWeight	Browser version to adapt page display, used by Drupal	Required	1 year
form-xx webform-123	Detection of form submission by the user, used by Drupal	Required	1 day
_cfduid	Performance optimisation, used by CDN CloudFlare	Required	Session

• Cookies offered by third parties

Cookie editor	Description	How to decline it	Duration
Facebook Twitter LinkedIn	Login cookies	See article 5.2.2	30 days

• Statistics cookies

Cookie	Description	Category	Duration
atidvisitor, atuserid, xtant, xtat, xtvrn	Traffic analysis, used by AT Internet	Statistics	Up to 1 year and 1 day

• How to withdraw your consent?

When you first connect to the Site, you may or may not give your consent to the use of cookies and/or proceed to a parameter setting. If you subsequently wish to change your choices, you can display the "Cookies and other tracers" dialogue box.

To delete the cookies already installed, please refer to the operating instructions provided by your operating system (Windows, OS...).

6. Your rights/Contact

You have the right to access, rectify, oppose and delete your personal data. You may also request the restriction of the processing and/or the portability of your personal data. You may also withdraw your consent to the processing of your personal data at any time, if the processing is based on this legal basis. Finally, you may obtain the communication, in an accessible form, of your personal data. The Company reserves the right to refuse any request that is considered improper or unfounded.

If you wish to exercise your rights and ask us about the processing of your personal data, you can send a request to this address

TotalZimbabwe

1 Auckland Road ,Southerton

Harare

If you feel, after contacting the Company, that your rights are not being respected, you may submit a complaint to the relevant supervisory authority.