WEBSITE AND APPLICATION COPYRIGHT AND INTELLECTUAL PROPERTY NOTICE

Elysium Lab Sagl (“Company” “we”, “us”, “our”) owns the intellectual property rights to its Android/IOS application platform (the “Application”) and website currently: https://www.elysiumlab.io/ (the “Website”). The Website and Application contents, texts, documents, trademarks, logos, names, images, graphics, arrangement, and adaptations are protected by the Federal Act on Copyright and Related Rights (Copyright Act, CopA) (Bundesgesetz über das Urheberrecht und verwandte Schutzrechte, URG) of 9 October 1992 and subsequent amendments. Intellectual property may also be protected by other applicable laws.

Within the Website and the Application there are also images, documents, logos, names and trademarks of parties who have expressly authorized their publication on the Website and the Application. Third party material is also protected by the aforementioned law and is covered by copyright. The use of our Website and Application and its contents is exclusively visual and no copy, reproductions or storage is permitted. It is forbidden to copy, archive, alter, distribute, publish or use the contents of the Website and Application without the express authorization of the Company.

PRIVACY POLICY FOR WEBSITE AND APPLICATION USERS

This Privacy Policy for Website and Application users, together with any other documents referred to, sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

1. Website and Application users

This document concerns data subjects (“Data Subject”, “you”, “your”) whose personal information is collected by us when you act as user of our Website and our Application or provide us your information as explained below. This Privacy Policy is based on the Swiss Federal Act on Data Protection (Data Protection Act, “FADP”) of 25 September 2020 (Status as of 1 September 2023) as amended, https://www.fedlex.admin.ch/eli/cc/2022/491/en The Company is authorized to treat and process personal data pursuant to those laws and regulations and by the Swiss Federal Data Protection and Information Commissioner

https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html

Furthermore, this Privacy Policy is also based on the General Data Protection Regulation (“GDPR”) as amended, https://eur-lex.europa.eu/eli/reg/2016/679/oj

In this document we shall refer to the above mentioned FADP and GDPR.

2. Personal data

Under the FADP personal data is defined as “all information relating to an identified or identifiable individual”. Under the GDPR personal data is defined as “any information relating to an identified or identifiable natural person (“Data Subject”), by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”.

Under the FADP a data controller is the private person or federal body that decides on the purpose and content of a data file. The Company is the data controller as defined by FADP (“Data Controller”).

Under the GDPR a data controller is the individual or legal person who controls and is responsible to keep and use personal data in paper or electronic files. The Company is the Data Controller.

3. Personal data we collect with your consent

Information that you made public or that you provide us by completing forms in writing, e-mail, through our Website and our Application, by registering to our events, or social media. This includes information provided at the time of registering with us, to use our Website and our Application, to connect with us via our LinkedIn page, to participate to our events (webinar, fair, conference), to receive commercial communication and newsletters, to request materials or information or to request further services, when you respond to a survey and/or when you report a problem with any of our communication channels or services.

We might collect the following classes of information:

• name(s), surname(s), address(es), e-mail, phone number(s) and other relevant (e.g. age group, subscriptions, company, work and etc.) personal details and preferred (e.g. activities, events, news);
• social media username such as LinkedIn or Twitter page;
• information about our relationship with you, correspondence, meeting notes, attendance at events;
• occupation, skills and professional activity, network(s) and interests where relevant to our needs;
• financial information where they may be relevant in relation to contracts with the Company;
• technical data, such as e.g. device type, operating system, screen resolution, language, country, and web browser type, internet communication protocol including IP address, addresses in URI/URL (Uniform Resource Identifier/Locator) notation, the time of the request, the type of request, the size of the outgoing packet, the status of the response given by the server (received, error, etc.) and other parameters relating to the operating system.

If you contact us, we may keep a record of that correspondence.

4. How we collect personal data

There are several ways in which we collect your personal data directly from you:

• that you provide to us;
• that you made public; and
• that we automatically collect because of sharing with other parties.

Personal data that you give to us may be through one of several ways. These may include:

• directly via our Website and our Application;
• e-mailing your CV to our HR team or via our e-mails;
• providing information via on-line forms, surveys, our Website, our LinkedIn, our Application, or contacting us;
• collecting your data through a contractual or commercial relationship with you e.g., for membership subscriptions, attending an event, being supplier or client, partner;
• via a form which could be online as part of our Website or our Application a form provided to us as a hard copy or electronically or when registering to our events or newsletter; and
• contacting us with enquiries or comments by telephone, e-mail or hard copy correspondence.

Personal data may be also given to us through another organization with which you have registered, and we may be required to process that data in order to fulfill services that you expect of us. This could include one of the following:

• via another authorized body with whom joint education or professional development takes place;
• via professional bodies with whom there is a sharing of registration for events or activities;
• company you are employed with for performance of contractual obligations between the Company and your company.

5. How we use personal data

We will process any of your personal data, in accordance with our obligations under the FADP and GDPR, for the following reasons:

• to provide you with the services you have requested;
• to comply with the FADP and GDPR or other regulations, for instance AML/CFT;
• for administrative purposes;
• to assess enquiries; and
• to provide you with information about us and our services. If, at any time, you do not wish to receive further information about us and our services, contact us at info@elysiumlab.io or directly unsubscribe from the marketing email received.

Other personal information, such as, for example, information concerning the use of the Website or the Application (in particular: IP address of the user's device, unique identifiers of the user's mobile device, length of stay on the Website or Application, services used, links and messages activated, etc.) is analyzed to evaluate the introduction of new features, to improve the quality of the services offered and to optimize the usability of the Website or Application. The Website and the Application does not process or broadcast content or advertisements designed based on online behavior, profile users, or monitor the use of web resources or e-mail. The Website and the Application do not sell, rent, trade, and/or lend Personal Data to third parties.

6. Sharing your personal data

We may disclose your personal information to third parties if we are under a duty to disclose or share your personal data to comply with any legal or contractual obligation, or in order to enforce or apply any agreements and contracts, or to protect the rights, property, or safety of the organization, or other individuals. This includes exchanging information with other companies and organizations for the purposes of having the Website and the Application (web-design, manutention and hosting), safeguarding or other statutory regulations we must comply with.

7. Websites

Our Website may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

8. Protecting your personal data

The data that we collect from you will be processed at our servers in Switzerland. It may also be processed by organizations operating in the EEA that Company has instructed and with which data processing agreements have been implemented. If we send personal data to a country that does not have appropriate data protection legislation, nor is deemed as an adequate country under the adequacy rating of Switzerland or the European Commission, we will ensure an appropriate level of protection by employing contracts accordingly, or we will act on the basis of the following statutory requirements, consent, performance of the contract, execution or enforcement of legal claims, in accordance with the requirements imposed by FADP and GDPR. We may also use the binding corporate rules, standard contractual clauses or ad hoc contractual clauses that stipulate that the data will be processed in accordance with the FADP and GDPR. At any time, you have the right to request information about the contractual guarantees mentioned. However, we reserve the right to censor copies, or to supply them only in part to protect the privacy of any third parties mentioned or to protect our confidentiality duty.

9. Security of your information

To help protect the privacy of data and personally identifiable information you transmit through use of our Website and Application, we maintain physical, technical and administrative safeguards. We update and test our security technology on an ongoing basis. We restrict access to your personal data to those employees who need to know that information to provide benefits or services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information.

10. For how long we store the data

We store your personal data in accordance with our internal data retention policy. This policy is reviewed and updated internally to ensure we do not store your data for longer than is necessary. We also review how and where we store any data to ensure that we meet our obligation to store data securely. We process and store your personal data to the extent that it is required to fulfill our contractual and legal obligations or for the purposes pursued by the processing, which means, for example, for the entire duration of the business relationship (from the initiation and performance of a contract to its conclusion) and beyond that in accordance with legal obligations for storage and documentation. In any case we store your personal data for a period equal to 10 years after the provision of our services, except in cases where storage for a later period is necessary (e.g. for possible litigation, requests of the competent authorities or pursuant to the applicable legislation). Only with respect to commercial communication via e-mail and marketing operation your personal data could be stored for more than 10 years, if you do not wish to have your personal information used by us to promote or market our services, at any time you can opt-out by clicking the “unsubscribe” link on any e-mail you receive from us or by writing us at help@elysiumlab.io .

11. Disclaimer

Our data of any kind are never binding. We reserve the right to change or update the information on this site at any time without notice. Our company is not responsible for internet malfunctions, damage caused by third parties, data imports of any kind (viruses, worms, Trojan horses) nor for links from or other sites on the Web. We have no control over the content and form of external Web pages. We cannot guarantee the flawless operation of hardware and software. In no event shall our company be liable to you or any third party for any direct, indirect, special, or consequential damages of any kind whatsoever resulting from the use of the Application or the Website or another site linked to it. Any liability for loss of income, business interruption, loss of programs or other data in your computer systems is also excluded. The transmission of communications, documents and other information by e-mail is considered less reliable, secure and confidential than by letter or fax. Against viruses and spam we employ modern identification technologies. However, we recommend that you also employ a virus scanner and we disclaim any liability for any damage resulting from e-mails or loss thereof. We reserve the right to reject e-mails with potentially dangerous attachments. In principle by visiting our Internet page you do not leave any personal information behind. However, in some cases we need your name and address. For our part we are committed to protecting the confidentiality of your personal data. On this site we make available to you through links (links) contents or services of other Internet sites. Such other sites are not subject to our data protection guidelines. We recommend that you check each such site and ascertain how your data is protected.

12. Communications via e-mail

The user is made aware of that (i) the use of e-mail does not ensure the confidentiality and integrity of data in transit, (ii) many e-mail service providers are located or hold their data in countries that do not guarantee adequate protection of personal data, (iii) the use of such an e-mail service results in the transfer and storage of data in a country that does not guarantee adequate protection of such data.

The user authorizes the company to transmit by ordinary (non-secured) e-mail documents and/or information, including those containing personal and/or confidential data, using the e-mail address provided by the user in response to user requests received by fax, telephone or e-mail. The user, in full awareness of the risks mentioned above, releases the company from any liability in the event of unauthorized access by third parties to personal and/or confidential documents and/or information transmitted or received via e-mail from the company.

13. Changes to privacy policy

The Company reserves the right to vary this Privacy Policy from time to time. Such variations become effective on posting on our Website and Application. Your subsequent use of our Website and Application or submission of personal information to the Company will be deemed to signify your acceptance to the Privacy Policy and its variations.

14. Complaints

Pursuant to the DPA and GDPR, as a direct data subject you have the following rights:

• be informed if your personal data is being processed;
• revoke consent to the processing of data that you have previously given;
• obtain rectification of inaccurate or outdated personal data:
• prevent the disclosure of personal data worthy of special protection to third parties;
• request that the processing of data be stopped, that its communication to third parties be prevented, or that personal data be rectified or destroyed.

If you think we are not handling your personal data in accordance with this Privacy Policy and with the relevant data protection framework outlined in this Privacy Policy, please contact us at help@elysiumlab.io Pursuant to the FADP, you may also contact the

https://www.edoeb.admin.ch/edoeb/it/home/deredoeb/kontakt/anzeigeformular_betroffene.html Swiss Federal Data Protection and Information Commissioner, Feldeggweg 1 CH - 3003 Berne.

Last Update: June 19 2024

PRIVACY POLICY – EVENTS

This policy provides information regarding the use of personal data disclosed when registering for our conferences and events ("Event").

The data processed are personal (first and last name, company and role) and contact data (e-mail address and phone number) collected directly through the user's ("Interested Party") completion of the Event registration form, transmitted by the Interested Party via e-mail, or delivered by the Interested Party directly during the Event.

Objectives

Personal data provided by the Interested Party are processed for the following purposes:

1. finalization and management of the registration to the Event (automatic sending of a confirmation message to the e-mail address provided by the Interested Party);
2. sending of organizational information or otherwise related to the Event (realization of ingress badges, preliminary or follow-up communications);
3. compliance with security requirements related to the Event (verification of the validity and correctness of the information provided during registration for the Event and verification of unauthorized registrations); 4. conducting direct marketing operations and sending commercial communications and offers related to services and other corporate events;
4. statistical purposes.

Audio-video recordings and photographs

To document and promote the Event and the company, audio-video recordings and photographs in general may be made during the Event. The promotion of the Events through our communication channels is part of our legitimate interest. The data thus collected will be treated according to the principles of fairness, lawfulness, transparency and confidentiality and will not harm in any way the honorability of the person filmed or photographed. For documentation and promotion purposes, such data may be disseminated through the communication channels of the Owner and related to the Event (e-mail, websites and social profiles). By participating in the Event, the Interested Party consents to filming and photography. The Interested Party waives any compensation for the rights assigned to audio-video recordings and photographs. If the Interested Party does not wish to be filmed or photographed, he/she may make an express request to do so by writing to the e-mail address.

Legal basis

Personal data will be processed on the basis of one or more of the following conditions provided by the applicable legislation:

• consent of the Data Subject, which can be revoked at any time by writing to the e-mail address; • need to execute the Data Subject's requests for the provision of a service;
• to a proportionate extent, the legitimate interest of the Data Controller, such as processing for the purposes indicated above.

Communication and dissemination

The personal data collected will not be disseminated without the explicit consent of the Interested Party, with the exception of audio-video recordings and photographs, as well as the possible communication to third parties duly designated as data processors for purposes strictly related to the operational and organizational needs of the Event.

Data transfer abroad

The information we collect is processed in Switzerland. Even in selecting our suppliers, we ensure that they operate in countries that offer an adequate level of data protection.

Storage period

Personal data will be kept for the period of time necessary to achieve the purposes of processing and, in any case, for a maximum of 2 years after collection, unless the Data Subject still wishes to receive updates.

Last Update: June 19 2024

‍