PRIVACY NOTICE FOUNDATION SHAHBANOU FARAH PAHLAVI

This privacy notice explains how the Foundation Shahbanou Farah Pahlavi (hereinafter “the Foundation”, “we”, “us” and “our”) processes your personal data. The processing of data is carried out in accordance with the General Data Protection Regulation.

1. Data Controller

The entity responsible for the processing of your personal data is:

Fundação Shahbanou Farah Pahlavi

Avenida Fontes Pereira de Melo, 43

1050-119 Lisboa

Portugal

contact@farahpahlavifoundation.com

2. Description of the processing

The Foundation processes personal data in the conduct of its activities as a foundation as described in its articles of association and for the achievement of its statutory purpose.

3. Transfers to countries outside the EU/EEA

We may transfer personal data countries outside the EU/EEA, including the USA.

Shahbanou Farah Pahlavi Foundation has chosen to partner with the Chapel & York US Foundation, Inc.

The European Commission may not have deemed the recipient countries to have an adequate level of protection of personal data. We will ensure a legal basis for the transfer, such as by providing appropriate safeguards for the transfer through the use of model clauses for the transfer of personal data to third countries, as published by the European Commission.

4. Your rights

You have the following rights:

• You have a right to obtain further information about how the personal data which the Foundation processes and stores about you and you may be entitled to obtain a copy of your personal data.

• You have the right to object to the processing of your personal data and have the processing of your personal data restricted. In particular, you have an unconditional right to object to the processing of your personal data for direct marketing purposes.

• If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing carried out before you withdrew your consent.

• You have the right to receive your personal information in a structured, commonly used and machine-readable format (data portability).

• You may always lodge a complaint with a data protection supervisory authority, such as the Portuguese Data Protection Agency.

You may take steps to exercise your rights by contacting us at contact@farahpahlavifoundation.com.

These rights may be subject to certain conditions or limitations. For example, you may not have the right to obtain data portability in certain