Europe and United Kingdom Notice

1.SPECIFIC RIGHTS FOR RESIDENTS OF THE EUROPEAN ECONOMIC AREA, SWITZERLAND AND THE UNITED KINGDOM (“EEA, SUI & UK”)

This Europe and United Kingdom Notice  provides additional information for users in the EEA, SUI and UK. Unless otherwise set forth in this Europe and United Kingdom Notice  all other terms and principles in NACREOUS’s Global Privacy Policy continue to apply.

Users in the EEA and UK have certain privacy rights as specified under applicable law, including the General Data Protection Regulations (“GDPR”), SUI Article 13 of the Swiss Constitution and Federal Act on Data Protection (DPA) and UK Data Protection Act 2018. The Policy and the privacy controls we offer to all users are in line with these laws. As a resident of the EEA, SUI & UK, you also have certain specific rights regarding your personal data. You are free to exercise any of these rights by contacting us or as specified herein:

• Access. You have the right to request a copy of the personal data that we process about you. However, there are exceptions to this right, so that access may be denied if, for example, making the information available to you would adversely affect the rights and freedoms of another person, or if we are legally prevented from disclosing such information.

• Accuracy. We aim to keep your personal data accurate and complete. We encourage you to keep us informed about changes that you would like reflected in our records.

• Objecting. In certain circumstances, you have the right to object to processing of your personal data. You may ask us to block, erase or limit the use or other processing of your personal data.

• Rectification. You have the right to request the rectification of inaccurate personal data and, taking into account the purposes of the processing, to complete your personal data.

• Data Portability. Provided further legal requirements are fulfilled, you have the right to request that some of your personal data is provided to you, or, where technically feasible, to have your personal data transmitted to another provider should you wish to stop using our Services in favor of another, in a structured, commonly used and machine-readable format.

• Erasure. You have the right to erase or request that we erase your personal data as far as legal requirements for erasure are fulfilled, such as when your personal data is no longer necessary for the purposes for which it was collected.

• Automated Decision-Making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you as far as further legal requirements are fulfilled.

• Complaints. You have the right to issue a complaint with the applicable data protection authority

• For France, you also have the right to provide guidelines relating to the retention, deletion and communication of your personal data after your death

The specific further legal requirements for the exercise of these rights depend on the applicable statutory data protection laws. For your protection, we only fulfill requests for the personal data associated with the email address that you identify in your request, and we may need to verify your identity before fulfilling certain requests. As an EEA, SUI or UK data subject, you may access your rights with respect to NACREOUS by communicating as directed in the Contact Us section of the Policy

1. SUBMITTING COMPLAINTS

If you are resident in the EEA, you have the right to make a complaint at any time to the regulator in your jurisdiction. To find out how to contact your local regulator, please visit https://edpb.europa.eu/about-edpb/about-edpb/members_en.

If you reside in the UK, you have the right to make a complaint at any time to the Information Commissioner’s Office (“ICO“), the UK regulator for data protection issues. You can make a complaint via the ICO’s website (https://ico.org.uk/make-a-complaint/). This website also provides additional contact details for the ICO.