PureTech ApS Personal Data Policy

1. Registration and processing of customer personal data

   PureTech ApS, Traverbanevej 10, 2920 Charlottenlund, CVR.nr. 41606126 (“PureTech”), is responsible for the storage and processing of the personal data that is registered and processed in connection with the customer’s purchase and offer/order activity as well as correspondence with PureTech in connection therewith. PureTech’s registration and processing of the customer’s personal data is subject to the terms of this Personal Data Policy.

2. What personal data is stored and used?
   PureTech processes the following categories of personal data about the customer:

   – General contact information (name, email, telephone number and address) of the customer, the customer's employees, family members and others involved in PureTech's delivery of its services,
   – Payment information,
   – Information regarding a real estate property owned and/or used by the customer, including information about the customer's use of the real estate,
   – IP address
   – Information provided in connection with a possible complaint or dispute Personal data is processed in digitalized and written form.

3. Purposes of processing
   PureTech processes the customer's personal data for the following purposes:

   – Delivery of agreed services, including when using subcontractors
   – Receiving payment via the payment systems used by PureTech,
   – Communication with the customer in connection with the provision of PureTech's services and customer follow-up
   – Studies, statistics and analyses to improve PureTech's services
   – Processing in connection with any legal claims or other disputes that may arise in relation to the customer's purchase

   Processing of personal data will be limited to what is necessary to fulfill the purpose in question.

4. Collection of personal data about the customer

   Personal data about the customer will be disclosed by the customer in correspondence and discussions with PureTech, by PureTech's investigations of the customer's premises and by collection from third parties or public sources, including the internet, public registers, the relevant

municipality etc.

5. Basis for processing customer personal data

   PureTech's processing of personal data is carried out to fulfill the customer's agreement with PureTech, as well as measures to prepare for this. PureTech's processing of personal data also takes place in certain cases where it is necessary for PureTech to pursue a legitimate interest, where the interests of the customer do not take precedence.

6. Sharing of customer personal information
   The following persons will be able to access customer personal information:

   – PureTech's employees who are engaged in the relevant services and PureTech's systems for this
   – PureTech's subcontractors, including craftsmen/craft companies and laboratories permanently affiliated with PureTech
   – External IT supplier to PureTech, external accountant and administrator of PureTech's financial system, as well as PureTech's auditor and lawyer, Public authorities, if required by law, including in specific cases for the purpose of combating online fraud and other criminal activities or attempts thereto. The customer's personal data is stored in data centers (data processors) located within the EU.

7. Duration of storage

   PureTech continuously deletes customers' personal data when it is no longer necessary to fulfill the purpose for which it was originally collected. However, PureTech deletes the personal data after 5 years at the latest, unless it is deemed necessary to store the personal data longer in order to meet a legal claim or similar.

8. Safety measures

   PureTech secures the customer's personal information through both technical and organizational security measures in order to protect the customer's information against unauthorized access, manipulation, destruction/deletion or loss of information.

9. Customer rights
   As a customer of PureTech, the customer has the following rights regarding the personal data registered by PureTech:

   – Access to information about the customer’s personal data registered by PureTech – Right to have incorrect information about the customer registered by PureTech corrected
   – Right to have information about the customer deleted when the registration is no longer necessary to fulfill the purposes in clause 3 and is not prevented by a task/duty incumbent on PureTech pursuant to Danish or EU legislation or agreement with the Customer

   – Access to receive or transmit the information that the customer has provided to PureTech in a structured, common and machine-readable format, possibly by e-mail

10. Changes to the personal data policy
    
    This personal data policy may be adjusted by PureTech on an ongoing basis to comply with the personal data regulations in force at any time. 11. Contact If the customer has objections to PureTech's unlawful processing of the customer's personal data, the customer is encouraged to contact PureTech at: info@puretech.dk The customer also has the right to complain to the Danish Data Protection Authority in relation to the customer's rights and about PureTech's processing of the customer's personal data. For further information, please refer to the Danish Data Protection Authority's website www.datatilsynet.dk.