PRIVACY & COOKIES POLICYTENSET PLATFORM

www.tenset.io

The Privacy Policy determines terms and conditions of the processing of Users' personal data, and also constitutes
an attachment to the Tenset Terms & Conditions Platform. All terms included herein shall be interpreted inaccordance with the Terms and Conditions, unless their different meaning has been clearly indicated herein.
I.

CONTROLLER AND PERSONAL DATA PROCESING

1.

Controller / Service Provider
The Controller of the personal data is PRO GLX INNOVATIONS SRL. The contact with the Controller isavailable at e-mail address: privacy@tenset.io.

2.

Governing Law
The Controller processes personal data in accordance with the requirements of applicable law. The Useris liable for providing false personal data. By accepting the Privacy Policy, the User agrees to terms andconditions of collecting, processing and securing personal data regarding the use of the Platform.
Also, the Controller processes personal data pursuant to European Parliament and Council regulation (EU)2016/679 dated 27th April 2016 on the protection of natural persons with regard to the processing ofpersonal data and on the free movement of such data and repealing Directive 95/46/EC (the General Data
Protection Regulation - hereinafter referred to as “the GDPR”).

3.

Respect for Privacy
The Service Provider makes every effort to ensure that personal data are processed with the greatest
respect for the privacy of the data provider and with the utmost care for the security of the processed
personal data, and in particular ensures to take all legal measures to safeguard the personal datacollections.

4.

Applied Measures
The Service Provider represents to apply technical and organizational measures to ensure protection ofprocessed personal data appropriate for the risks and a category of protected data, and in particular toprotect data against unauthorized sharing, processing as a violation of law and against their loss, damage
or destruction.

5.

Processing Scope and Purpose
The Service Provider processes personal data of the User with the purpose of:a) establishing, changing, executing or terminating the agreed relationship between the Service
Provider and the User;b) fulfilling legal duties of the Controller;c) marketing and advertising the Services, as well as sending commercial information;d) using ICT end devices and automatic trigger systems for marketing purposes;

6.

Data Profiling
Processing personal data includes profiling the Users according to their behavior, interests, payment
credibility and purchase preferences. Based on profiling, a specific content is conveyed to the Users, which
potentially may interest them.

7.

Data Sharing
To execute the Agreement, the Controller may disclose collected personal data with the entities including:employees, associates, delivery service, online payment system operators, entities providing operating,legal, accounting and IT services for the Service Provider, as well as entities personally or financiallyassociated with the Service Provider. In such cases the volume of disclosed information is limited to thenecessary minimum.
8.

Website Traffic Analyses
The Controller represents that it is allowed to use tools designed to analyze traffic within the Platform such
as Google Analytics and others similar. In particular, the Service Provider has the right to collectinformation on the User's activity and behavior, such as visiting the Platform and using the Services. The
Service Provider uses the data to research the market and traffic on the Platform, as well as to create
statistics, in particular, to assess the interest in the posted content, as well as to improve the Platform andfulfill obligations in the scope of counteracting money laundering and terrorist financing. The collected data
shall be processed in an anonymous manner and used only for statistical purposes or to ensure properuse of the Platform.

9.

Termination of the Service
Upon termination of the Agreement by the User, the Service Provider shall not process personal data of
the User except for:a) representations made by the User under the Terms and Conditions;b) advertising, market research and behavior purposes to improve the quality of the provided services;c) explanation of circumstances contrary hereto or the right to use the Website or the Services provided
within the Platform;d) authorized for processing under the agreement or separate provisions of law.

10. User Rights
The Service Provider ensures that the applied terms and conditions of processing personal data comply
with Users’ rights under the applicable law, in particular rights to access, correct, update, remove, limit
processing, transfer own data, to object, to withdraw the consent, to complain to the supervisory authority.
Notices regarding the Privacy Policy and personal data are examined according to the complaint procedure
specified in the Term and Conditions.
11. Scope of Data
The Service Provider processes or may process personal data of the User, appropriately to the data
provided by the User, in particular including identification and contact data.
12. Platform Browsing
Browsing the Platform does not require the User to provide personal data, unless the access to particular
content or services is conditional upon the data provision.
13. Data Processing Rules
The Service Provider shall comply with the following rules for the processing of personal data:a) recording collected personal data only on such storage media that are protected against third party
access;b) performing personal data security surveillance throughout the whole term during which they arepossessed to ensure in particular protection against unauthorized access, damage, destruction orloss;c) sharing personal data with competent authorities under applicable law;d) preserving the confidentiality of personal data.
The personal data processed by the Service Provider are not shared in a form that allows user identificationof any kind, unless the User has given a consent or if the obligation to disclose such information is basedon applicable law.
II.

COOKIES POLICY

Cookies are sent to web browsers, and then saved on the device's memory and read by the server eachtime you connect to a website. Cookies do not contain any information enabling third parties to get to know
your personal data or contact you, e.g. by email or phone. Saving cookies does not allow us or
unauthorized persons to access your private device.

1.

Types of Cookies
The Service Provider may use the following types of cookies on the Platform and Application:a) temporary, which are removed after leaving the Platform or after turning a web browser off;b) permanent that are stored on the User's end device for unspecified period of time, or until the Usermanually deletes them;c) statistical, which track traffic on the Platform;d) functional, allowing personalization of the site in relation to the User;e) advertising, which allow to provide the User with the content adjusted to his/her personal
preferences;f) obligatory and safety, which regard safety keeping rules within the Platform and authentication rules.

2.

Purposes of Using
The Service Provider uses cookies for the following purposes:a) to optimize and increase efficiency and quality of the Services;b) to configure features available within the Platform and Application correctly;c) to personalize displayed contents and adjust advertisements to visitors of the Platform andApplication;d) after logging in, to maintain the User’s sessions on the Platform and Application so the User does
not have to re-enter the login and password on each subpage;e) to keep safety and reliability of the Platform and Application;f) collecting and using general and publicly available statical data through analytical tools.

3.

Analysis
To ensure the highest quality, cookies are analyzed to determine which subpages are visited the most,which browsers are used by visitors and whether the Platform structure is free of errors.

4.

Cooperation with Entities
Cookies stored on the User's end device may be used by other entities that affect the quality of the provided
Services. The User may change own cookie settings any time by specifying the conditions of storing andgranting access to cookies on the User’s device. The User is allowed to change the settings referredhereinabove by using the settings of the web browser or by configuring the Service. These settings may
be changed in a way to block automatic cookies activity in a web browser or to inform the User of placing
a cookie on the User’s device.

5.

User Rights
The User is allowed to remove cookies at any time by using the settings available in the used web browser.
Restricting or blocking cookies via the used web browser shall not make it impossible for the Users toparticipate in the Platform, however, this may cause difficulties or irregularities in the Platform operation
for which the Service Provider is not liable. It is recommended to use software that enables cookies
operation.
III.

WHAT IS THE PURPOSE OF PROCESSING PERSONAL DATA?

Personal data are processed with the purposes of:a) execution of the Agreement or taking action at the request of the data provider before the conclusionof the Agreement;b) compliance with Controller’s legal obligations, including obligations under anti-money launderingand counter-terrorist financig (AML/CT) legislation;c) handling notifications and complaints;d) conclusion and execution of the Agreement, including the provision of particular services;e) sending system messages or notifications to the User;f) developing statistics related to the User's activity on the Platform;g) storing or archiving documentation for the purposes of examining, processing or settling claims;IV.

HOW DO WE OBTAIN PERSONAL DATA?

We collect personal data directly from Users. We may collect personal data indirectly only by using theTenset Platform.

V.
If:a)
b)

c)

d)

e)

WHAT DATA DO WE PROCESS AND FOR HOW LONG?

you are browsing the Website: IP address (for static purposes), cookies. We store the data until thecookies expire;you make a claim or hand a complaint: data contained in the document. We store data for the periodrequired by law for the purpose of investigation, processing or defense against legal claims. The
complaint is considered within 14 days;
you order paid Services: data necessary to provide the Service. If it is access to content, we do notprocess more data than related to the payment process. The payment service is provided by thepayment operator. The card details are not processed by the Service Provider. The data isprocessed for the duration of the provision of the Service, and after this period for the time necessary
to investigate, process or defend against legal claims - including accounting, legal and IT services;
you receive system messages or notifications: username, e-mail address. However, the data shallbe processed for archiving purposes for a period of up to 36 months or longer (if it is necessary forthe purposes of investigation, processing or defense against legal claims);
data is collected for the purposes of complying with obligations of anti-money laundering andcounter-terrorist financing (AML/CT) legislation - we store the data for the required by current
legislation period (5 years);

We keep records or archives for the purposes of examining, processing or settling claims: data necessary
for a given process. We delete data after the process is completed.
If we write that we store data for the period required by law for the purpose of research, processing or
defense against legal claims, we mean the period indicated by law as the required period.
VI.

WHAT NOTIFICATIONS AND SYSTEM MESSAGES DO WE SEND?

The Platform may send notifications (so-called web push notifications) if you give your consent to it fromthe browser level. In this case, you shall receive notifications visible from your device.
The website may send notifications visible after logging in. The user may set the frequency of sending
information. Messages may be sent daily, weekly, or they may be turned off. By default, the sending ofnotifications is disabled and the user is asked to select a frequency setting.
The Service Provider may send system messages to the User's email address. These messages are sentwhen necessary and relate to information connected with the Platform.
VII.

DO WE DISCLOSE PERSONAL DATA?

Recipients of data may only be authorized employees of the Service Provider or associates providing
services related to customer service or IT support, or accounting, or legal services.
VIII.

OUR RIGHTS RELATED TO PERSONAL DATA

Each data provider has the right to access, rectify, update, transfer, delete or limit processing, the right toobject, the right to withdraw consent at any time (however, withdrawal of consent does not affect thelawfulness of the processing which has been carried out on the basis of consent prior to its withdrawal),
the right to place a complaint with the competent authority according to the registered office of theController in matters related to personal data. In order to exercise the rights, an appropriate request shallbe sent by e-mail to the following address: contact@tenset.io.
We shall consider your request immediately, but no later than within 1 month of receiving the request fromthe User. However, if the performance of the request within the indicated period is not possible, e.g. dueto the complex nature of the request or the number of requests, we reserve the right to extend the deadline
for considering the request, but not longer than 2 months. We shall inform you by email about the possible
need to extend the time to consider your request.