In this privacy and cookie statement, (i) “we” refers to ACEVE BELGIUM NV, with registered office at 3545 Halen, Stadsbeemd 1013, registered with the Crossroads Bank for Enterprises under number 0475.885.562, www.kpd.be and its affiliates, and (ii) “you” refers to any natural person using our website and/or online platform.

Personal Data

Protection of Personal Data

Personal data: any information relating to an identified or identifiable natural person; an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical,
physiological, genetic, mental, economic, cultural or social identity of that natural person.

We attach great importance to respecting and protecting your privacy and the confidentiality of your personal data. This privacy and cookie
statement aims to inform you about how personal data is used and the protective measures implemented to ensure its confidentiality.

We undertake to use personal data discreetly and to safeguard its confidential and private nature. This is done in accordance with the General Data Protection Regulation (GDPR), the Belgian Law of 8 December 1992 on the protection of privacy in relation to the processing of personal
data (as amended), and all other applicable legal provisions.

To the best of our ability, we have taken legal and technical precautions to prevent unauthorized access to and misuse of your personal data. Where it
is impossible to guarantee complete security, we implement appropriate technical and organizational measures to protect personal data.

What personal data is collected, why and for what purposes?

Processing: any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated
means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by
transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

“Confidential processing” means that we process personal data in a confidential manner in accordance with applicable Belgian legislation,
including the General Data Protection Regulation (GDPR) and the Law of 8 December 1992. You are free to visit our website and obtain information about our services without providing any personal data.

We may process the following personal data (e.g. name, first name, national registration number, telephone number, address, email address, bank account
number, image, family composition, education, function, etc.) of the following data subjects (e.g. customers, contact persons, etc.) based on
the following legal grounds (consent, necessity for the performance of a contract, legal obligation, protection of vital interests, public interest
or legitimate interest) for the following purposes (e.g. compliance with legal obligations, customer management, execution of agreements, sending
informative newsletters, improving service quality, etc.):

Personal Data + Data SubjectLegal BasisPurpose
Name, first name, address, phone number, email address of the customerLegal obligationCustomer file management
Name, first name, address, email address of the customerLegal obligationIssuing invoices
Name, first name, address, phone number, email address of the customerNecessity for the performance of a contractTo properly execute the agreement between parties
Email address of the customerConsent of the data subjectSending informative newsletters