PureTech ApS Personal data policy

1. Registration and processing of the customer's personal data

   PureTech ApS, Traverbanevej 10, 2920 Charlottenlund, CVR no. 41606126 ("PureTech"), is responsible for the storage and processing of the personal data that is registered and processed in connection with the customer's purchase and offer/order activity as well as correspondence with PureTech in connection therewith. PureTech's registration and processing of the customer's personal data is subject to the terms of this Personal Data Policy.

2. What personal data is stored and used?
   PureTech processes the following categories of personal data about the customer:

   – General contact information (name, email, telephone number and address) of the customer, the customer's employees, family members and others who are involved in PureTech's delivery of its services,
   – Payment information,
   – Information regarding real estate belonging to and/or used by the customer, including information about the customer's use of the real estate,
   – IP address
   – Information provided in connection with a possible complaint or dispute Personal information is processed in digitized and written form.

3. The purposes of processing
   PureTech processes the customer's personal data for the following purposes:

   – Delivery of agreed services, including when subcontractors are used
   – Receipt of payment via the payment systems used by PureTech,
   – Communication with the customer in connection with the offer of PureTech's services and customer follow-up
   – Surveys, statistics and analyzes to improve PureTech's services
   – Processing in connection with any legal claims or other dispute in relation to the customer's purchase

   Processing of the personal data will be limited to what is necessary to fulfill the purpose in question.

4. Collection of personal data about the customer

   Personal data about the customer will be disclosed by the customer in correspondence and discussions with PureTech, during PureTech's investigations of the customer's premises and when obtained from third parties or public sources, including the Internet, public records, the relevant

municipality etc.

5. Basis for processing the customer's personal data

   PureTech's processing of personal data takes place in order to fulfill the customer's agreement with PureTech, as well as measures for its preparation. PureTech's processing of personal data also takes place in certain cases where it is necessary for PureTech to safeguard a legitimate interest, where consideration for the customer does not precede this.

6. Sharing of the customer's personal data
   The following persons will be able to access the customer's personal data:

   - PureTech's employees, who are engaged in the relevant services and PureTech's systems for this
   - PureTech's subcontractors, including craftsmen/craft companies and laboratories permanently associated with PureTech
   - External IT supplier to PureTech, external bookkeeper and administrator of PureTech's financial system, as well as PureTech's accountant and lawyer, Public authorities, if required by law, including in specific cases with a view to combating online fraud and other criminal activities or attempts thereof. The customer's personal data is stored in data centers (data processors) located within the EU.

7. Duration of storage

   PureTech continuously deletes customers' personal data when it is no longer necessary to fulfill the purpose for which it was originally collected. However, PureTech will delete the personal data after 5 years at the latest, unless it is deemed necessary to store the personal data longer in order to be able to meet a legal claim or the like.

8. Safety measures

   PureTech secures the customer's personal data through both technical and organizational security measures in order to protect the customer's information against unauthorized access, manipulation, destruction/deletion or loss of information.

9. The customer's rights
   As a customer of PureTech, the customer has the following rights regarding the personal data registered by PureTech:

   - Access to information about which personal data about the customer has been registered by PureTech - Right to have incorrect information about the customer registered by PureTech corrected
   - Right to have information about the customer deleted when the registration is no longer necessary for the fulfillment of the purposes in point . 3 and is not prevented by a task/duty incumbent on PureTech pursuant to Danish or EU legislation or agreement with the Customer

   – Access to having the information handed over or sent to PureTech by the customer himself in a structured, common and machine-readable format, possibly by e-mail

10. Change of personal data policy
    
    This personal data policy will be continuously adjusted by PureTech in order to comply with the personal data rules applicable at any time. 11. Contact If the customer has objections to PureTech's processing of the customer's personal data illegally, the customer is encouraged to contact PureTech at: info@puretech.dk The customer also has the right to complain to the Danish Data Protection Authority in relation to the customer's rights and about PureTech's processing of the customer's personal data. For further information, please refer to the Danish Data Protection Authority's website www.datatilsynet.dk.