What this policy covers

Last modified on March 15, 2025 - Your privacy is important to us, and so is being transparent about how we collect, use, and share personal data and other information about you in compliance with the applicable regulations of the European Union and France regarding the processing of personal data, including in particular the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of personal data (the “General Data Protection Regulation” or “GDPR”).

This data privacy policy (“privacy policy”) is intended to help you understand:

WHAT INFORMATION WE COLLECT ABOUT YOU
HOW WE USE INFORMATION WE COLLECT
HOW WE SHARE INFORMATION WE COLLECT
HOW WE STORE AND SECURE INFORMATION WE COLLECT
HOW LONG WE KEEP INFORMATION
HOW TO ACCESS AND CONTROL YOUR INFORMATION
OTHER IMPORTANT PRIVACY INFORMATION

This privacy policy covers the personal data we collect about you when you access and use our digital learning platform and attend online training sessions, watch or read training videos or materials, post messages on the forum of our learning platform, download documents or information or request for information. This Privacy Policy also explains your choices regarding the use of your information and the purposes of the processing we may make in respect of the data we collect about you. Your choices include how you can object to certain uses of information about you and how you can access and update certain information about you.

When we refer to "Murex," "we," or "us" in this Privacy Policy, we mean Murex S.A.S, which processes the information Murex collects when you use our services. The Murex digital learning platform (the “MXlearn Platform”) relies on the use ofa third party service provided and hosted by 360 Learning S.A.S (“360 Learning”) and the use of certain tools provided by other service providers. For the purposes of this Privacy Policy, “Training Services” refer to the access and use of the MXlearn Platform and related tools, the management of all requests to Murex relating to the use of the MXlearn Platform and more generally the Training Services provided by Murex to its customer base and partners in respect of the use of the Murex software products and services.

WHAT INFORMATION WE COLLECT ABOUT YOU

We collect certain personal data as defined in the GDPR related to MXlearn Platform users (including the personnel of clients and partners), as described below.

Information you provide to us

We collect information about you when you input it into the MXlearn Platform or otherwise provide it directly to us.

Account and profile information: We collect information about you, such as name, name of your organization and email address when you register for an account, create or modify your profile, set preferences and sign-in through the Azure authentication and login service to access the MXlearn Platform.

Contact information: We collect information such as your title, name, company, professional email, phone, address, and manager contact details (as applicable) when you access the MXlearn Platform, when you attend online training sessions, watch training videos or read other materials, post messages on the forum of the MXlearn Platform, download documents or information or request for information. We may also collect additional information related toyour past professional experience, Linkedin and Twitter profiles, should you choose to provide such information through the MXlearn Platform.

Content you provide through our MXlearn Platform: We collect content that you submit to our MXlearn Platform. For example, you provide content to us when you participate in any interactive features or events organized by Murex through the MXlearn Platform, when you submit survey data (including anonymous surveys), or when you participate in forums open to our customers and partners on the MXlearn Platform.

Information we collect automatically when you use the MXlearn Platform: We collect information about you when you use, browse and take certain actions on our MXlearn Platform.

Your use of the MXlearn Platform: We keep track of certain information about you when you visit and interact with our MXlearn Platform. This information includes the features you use; the pages viewed; the number and frequency; frequently used search terms; date and time of consultation.

Connection information: We collect information about standard information from your web browser (such as browser type and browser language) and your Internet Protocol (“IP”) address Services.

Information we receive from other sources: We receive information from other Murex systems, in particular regarding the name of your organization, and the Azure authentication and login service when you use it to access the MXlearn Platform.

HOW WE USE INFORMATION WE COLLECT

How we use the information we collect depends in part on which Services you use, how you use them, and any preferences you have communicated to us.

We collect and process information about you only where such processing is lawful under the GDPR and other applicable EU and national laws. The legal basis for the processing of your data depends on the Services you use and how you use them. This means that we collect and process your information only where:

• You give us consent to do so for a specific purpose.;
• The processing satisfies a legitimate interest as defined in the GDPR (which is not overridden by your data protection rights or interests) to improve our Services, to market and promote our products and Services, or to protect our legal rights and interests.;
• We need to process your data to comply with a legal obligation.; or

Below are the specific purposes for which we use the information we collect about you, either with your consent or based on the legitimate interest described above, as applicable:

To provide the Services and personalize your experience on the MXlearn Platform: We use information about you to provide the Training Services to you, including, authenticate you when you log in, provide support in respect of your use of the MXlearn Platform, and access to information and training materials dedicated to our clients and partners.

To improve our Training Services: We are always looking for ways to make our Training Services smarter, faster, secure, integrated and useful to you. We collect certain user data about how people interact with our MXlearn Platform, to identify trends, usage, activity patterns and areas for integration and improvement of your user experience, the Training Services and the functioning of the MXlearn Platform. We also test and analyze certain new features with some users before rolling the feature out to all users.

To communicate with you about the Services: We may use your contact information to send communications to you via email and/or through the MXlearn Platform, including in response to your comments, questions and requests for information, and by sending you technical notices, updates, and administrative messages. If you object to the processing of your personal data, we might not be able to fulfil your requests or to inform you about changes regarding the Training Services.

To drive engagement with the Training Services: We may use your contact information to send communications regarding the Murex software products and training services that may be of specific interest to you as an employee of a company with whom we have a business relationship, including by email, based, in particular, on the past training session you attended or training materials you accessed. These communications are aimed at driving engagement and maximizing the value of our Training Services for our clients, prospects and business partners, including information about new features, survey requests, news, and events we think may be of interest.

To protect our legitimate business interests and legal rights: Where required by law or where we believe it is necessary to protect our legal rights, interests and the interests of others, we use information about you in connection with legal claims, compliance, regulatory, and audit functions.

HOW WE SHARE INFORMATION WE COLLECT

We are not in the business of selling information about you and we will not sell your information with advertisers or other third parties for commercial purposes.

We share information we collect with our personnel, with our affiliated companies and, in some cases, with certain subcontractors, to the extent necessary for the fulfillment of the Training Services.

Relevance: Only the relevant personnel of Murex or its affiliates who needs to be given access to the information for the purposes mentioned above will be given access to your information. This includes the Murex personnel in charge of administering and supporting the MXlearn Platform, the authors of the online courses attended by users of the MXlearn Platform, the Murex (or, where applicable, Murex clients′ or partners′) instructors or coaches providing the Training Services through the MXlearn Platform.

Members of your own organization: Information and communications that you decide to post or share on certain sections or dedicated spaces of the MXlearn Platform may be visible to other members of your own organization or its affiliates who also have access to the same sections or dedicated spaces, including instructors in your organization who may be involved in the provision of training sessions for the benefit of your organization via the MXlearn Platform. We may also provide aggregated results from user surveys following Training Services delivered to your organization.

Service providers: From time to time, in order to provide you with our Training Services, we may work with subcontractors, including 360 Learning, who provide application development, hosting, maintenance, backup, storage, infrastructure, and analysis or other services for us, which may require them to access or use information about you. If a service provider needs to access information about you to perform services on our behalf, they do so under instruction from us, including abiding by policies and procedures designed to protect your information and a strict confidentiality obligation.

International transfers of information we collect: The information that we collect is stored in accordance with applicable data privacy laws. For the Services, we may share your information with affiliates or certain service providers located outside the European Union, including in countries that may not have equivalent privacy and data protection laws to E.U. regulations on data protection. In this case, we process your information in accordance with standard contractual clauses on data protection, whose terms have been approved by the European Commission, to safeguard the transfer of information we collect from the European Economic Area and Switzerland. We can provide further information upon request (see 'Contact us' below).

Links to Third-Party sites: The Services may include links that direct you to other websites or services whose privacy practices may differ from ours. Your use of and any information you submit to any of those third-party sites is governed by their privacy policies, not this one. You should review carefully the privacy policy of such third parties.

Compliance with enforcement requests and applicable laws; enforcement of our rights: In exceptional circumstances, we may share information about you with a third party if we believe that sharing is reasonably necessary to (a) comply with any applicable law, regulation, legal process or governmental request (b) enforce our agreements, policies and terms of service, (c) protect the security or integrity of our products and services, (d) protect Murex, our customers or the public from harm or illegal activities.

HOW WE STORE AND SECURE INFORMATION WE COLLECT

Murex is committed to the protection of the personal data that you have provided us with in order to preserve their confidentiality and prevent any unauthorized access, use, alteration or destruction of your personal data.

Information storage and security

The personnel of Murex and its affiliates who is given access to your personal data for the purposes set out above in this privacy policy is bound by a strict confidentiality obligation, whose breach can be sanctioned by disciplinary action and/or other sanctions in accordance with applicable labor laws.

As part of the information security policy implemented by Murex for the protection of its own sensitive information and its clients′ information, Murex applies organizational and technical measures to ensure appropriate security of the personal data we collect, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, and to ensure that such personal data can only be accessed by the authorized personnel of Murex or its affiliates, and only for the purposes described in this privacy policy.

Though Murex considers that it applies sophisticated measures, in particular, for the protection of the information system environment on which the data we collect are stored, it remains that no transfer of data via the Internet can be fully protected from unlawful access by third parties. Communications via the Internet may potentially be intercepted, lost or modified and such risks remain beyond Murex′s reasonable control.

Accordingly, you acknowledge and accept that Murex may not be held liable, for any reason whatsoever, for any damage of whatever nature resulting from the transmission of personal data, and that all communication to the MXlearn Platform is at your own risk.

HOW LONG WE KEEP INFORMATION

How long we keep information we collect about you depends on the type of information, as described in further detail below. After such time, we will either delete or anonymize your information or, if this is not possible (for example, because the information has been stored in backup archives), then we will securely store your information from any further use until deletion is possible.

Account information: We retain your account information until you delete your account. We also retain some of your information as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, to support business operations and to continue to develop and improve our Services.

Information you share on the Training Services: If your account is deactivated or disabled, some of your information and the content you have provided will remain to allow your team members or other users in your organization to make full use of the Services.

Data deletion policy

We will normally delete your personal information in accordance with our normal IT policy on the deletion of personal data after the deactivation or termination of your account on the MXlearn Platform, or earlier upon written request. Our IT policy prescribes the deletion of personal data collected in connection with training services after two (2) years unless we need to keep such data for the purposes of the services we provide to you.

HOW TO ACCESS AND CONTROL YOUR INFORMATION

You have certain choices available to you when it comes to your information. Below is a summary of those choices, how to exercise them and any limitations. We will respond to requests about this within a reasonable timeframe.

Control of your information and withdrawal of your consent

Here are the choices you have to control your information or where you want to withdraw your consent to the processing of your information:

Opt-out of communications: You may opt out of receiving communications from us about news, events and product and services by using the unsubscribe link within each email, updating your preferences within our preference center, or by contacting us as provided below to have your contact information removed from our email list. Even after you opt out from receiving these messages from us, you will continue to receive operational messages from us regarding our Services.

Turn off Cookie controls: Relevant browser-based cookie controls are described in our Cookies and Tracking Notice at the end of this privacy policy.

Send "Do Not Track" signals: Some browsers have incorporated "Do Not Track" (DNT) features that can send a signal to the MXlearn Platform you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the DNT signal, our Services do not currently respond to browser DNT signals.

Your other rights regarding your data

You have the right to request a copy of your information, to object to our use of your information (including for marketing purposes), to request the deletion or correction of your information or otherwise to request that our processing of your information be restricted. Please note that we may not be able to provide the Services to you if we cannot access or use your information.

We remind you that you also have the right to lodge a complaint with the CNIL (www.cnil.fr), which is the competent supervisory authority in France in respect of data privacy, if you consider that Murex has acted in violation of applicable laws and regulations on data privacy in respect of your personal data that you have submitted through the Services and that Murex has failed to address your request regarding your personal data.

You may contact us as provided in the Contact Us below to request assistance.

OTHER IMPORTANT PRIVACY INFORMATION

Our policy towards children

The Services are not directed to individuals under 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please ask his parents / legal guardians to request for deletion by contacting our Marketing department in the 'Contact us' details.

Changes to our privacy policy

We may change this privacy policy from time to time. We encourage you to review our privacy policy whenever you use the Services to stay informed about our data privacy practices.

Contact Us

For all requests, including to exercise your right to request access to, rectification or erasure of your personal data, or to object to, or request a restriction to, the processing of your data, please contact the [Training Department] of Murex by email, at the following address: mxlearn-admin@murex.com, or otherwise by mail at the following address: Murex SAS, Learning, 15-25 boulevard de l’Amiral Bruix, 75116 PARIS, FRANCE.

We will use reasonable efforts to respond to your request within a reasonable period of time, depending on the nature and context of your request.

Where you make the request by email, and unless otherwise specified in your request, the information that you are requesting will be provided to you by email.

To contact our DPO officer: If you have questions or complaints regarding Murex′s privacy policy, or more generally our practices regarding data protection, or if you have a reason to believe that Murex has failed to respond to your requests regarding your personal data or that the personal data you provided on the MXlearn Platform has been misused or compromised, you can contact Murex′s Data Protection Officer by email at the following address: MurexDPO@murex.com.

Murex is an Equal Opportunity Employer. All job opportunities are open to both men and women without distinctions. Applicants are considered for employment solely on the basis of qualifications and ability, and regardless of their race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), age, national origin, disability, family medical history or genetic information, political affiliation, veteran status or any other category protected by law.

Murex est un employeur qui garantit l’égalité des chances. Tous les postes sont ouverts aux hommes et aux femmes sans distinction. Les candidats sont uniquement considérés sur la base de leurs qualifications et de leurs compétences. Murex applique strictement le principe de non-discrimination. Ainsi aucun candidat ne peut être écarté en raison de son origine, de son sexe, de ses mœurs, de son orientation sexuelle, de son identité de genre, de son âge, de sa situation de famille ou de sa grossesse, de ses caractéristiques génétiques, de son appartenance ou de sa non-appartenance, vraie ou supposée, à une ethnie, une nation ou une prétendue race, de ses opinions politiques, de ses activités syndicales ou mutualistes, de ses convictions religieuses ou en raison de son état de santé, de sa perte d'autonomie ou de son handicap et plus généralement de tout autre motif prévu par la loi.

French Gender Equality Index

Murex SAS (Murex France) received a score of 88/100 in the French Gender Equality Index during the fiscal year 2024. The score is equal to the sum of points obtained for each of the following indicators: