In this Privacy and Cookie Statement, (i) ‘we’ means: KPD SERVICES NV, with its registered office at 3545 Halen, Stadsbeemd 1013, and registered with the Crossroads Bank for Enterprises under number 0475.885.562, www.kpd.be and derivatives and (ii) ‘you’ means any natural person who uses our website and/or our online platform.

Personal data

Protection of personal data

Personal data: any information relating to an identified or identifiable natural person; identifiable is considered to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements characterizing the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. We attach due importance to respecting and protecting your privacy and the confidentiality of your personal data. This privacy and cookie statement aims at informing you about the modalities related to the use of personal data and about the protection rules established to preserve the confidentiality of these personal data. We undertake to use personal data with discretion and to protect its confidential and private character. All this in accordance with the General Data Protection Regulation (GDPR), the Law of December 8, 1992 on the protection of privacy with respect to the processing of personal data (as amended) (hereinafter “the Law of December 8, 1992”) and the other relevant legal regulations in force. We have taken legal and technical precautions to the best of our ability to prevent unauthorized access to and use of your personal data. Where it is impossible to guarantee security completely, we will provide appropriate technical and organizational measures to protect personal data.

What personal data is collected, why and for what purposes?

Processing: an operation or set of operations involving personal data or a set of personal data, whether or not carried out by automated means, such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction of data. “Confidential processing” means that we process personal data confidentially in accordance with the legal requirements in force in Belgium, in particular the General Data Protection Regulation (GDPR) and the Law of December 8, 1992. You are free to visit our website and collect the necessary information about our services without providing us with any personal data. We may process the following personal data (e.g. name, first name, national registration number, telephone number, address, e-mail address, account number, picture, family composition, education, function, etc.) of the following data subjects(e.g.: customers, customer contacts, etc.)based on the following legal grounds(consent of the

data subject, necessity for performance of the agreement, legal obligation, protection of vital interests, task of general interest or legitimate interest) for the following purposes (e.g. to fulfill legal obligations (customer management, etc.), to execute the agreement, to provide the data subject with informative news about the company, to improve the quality of services or information, etc.) :