1. Name/Contact Details of the Controller and the Data Protection Officer

This data protection information applies to data processing by the following controller ("Controller"):

5U AI B.V., Anthonetta Kuijlstraat 49 B, 3066GS Rotterdam, the Netherlands, email: legal@5u.ai

2. Collection and Storage of Personal Data and the Nature and Purpose of Their Use

We collect the following customer data when an order is placed:

• title(s), first name(s), surname(s);

• e-mail address(es);

• address(es);

• telephone number(s) (landline, mobile).

This data is collected:

• to be able to identify you as our customer;

• in order to be able to offer you our services appropriately;

• for the purpose of correspondence with you;

• for the purpose of invoicing;

• for the purpose of asserting any claims against you.

The data processing takes place at your request and is required in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR for the stated purposes for the appropriate processing of the order and for the mutual fulfillment of obligations arising from the contract. The personal data collected by us for the assignment will be stored until the expiry of the statutory retention obligation and then deleted, unless we are obliged to store it for a longer period in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR or you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

3. Disclosure of Data to Third Parties

Your personal data will not be transferred to third parties for purposes other than those listed below. Insofar as this is necessary for the fulfillment of the contract with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, your personal data will be passed on to third parties. This also includes any necessary disclosure to courts and other public authorities for the purpose of correspondence. The data passed on may be used by the third party exclusively for the stated purposes.

4. Rights of Data Subjects

You have the right:

• in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future;

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;

• in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller; and

• to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at the registered office of the Controller.

5. Right of Objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. If you wish to exercise your right to object, simply send an email to legal@5u.ai