Privacy Statement — KRUSH Labs B.V.

Who We Are

KRUSH Labs B.V.

High Tech Campus 32
5656 AE Eindhoven
The Netherlands

Chamber of Commerce registration number: 867848364

What personal data We Process

KRUSH Labs processes personal data that you have provided to us. This may relate to personal data that you shared during your visit to our website, but also to personal data that you have provided to us (indirectly) through other channels or sources. Depending on your relationship with KRUSH Labs, we may process:

• Name, initials, preferred name;
• Job title, employer;
• Address, phone number, email address;
• Social media or professional profile information;
• CVs, application letters, attachments;
• Event or meeting registration data;
• Office visitor information;
• Dietary requirements (if voluntarily provided); and
• IP address, browser/device info, website interactions, cookies preferences and essential cookies.

How We Use Your personal data

We process personal data for several purposes:

• Communication and contacting you;
• Negotiating or performing agreements;
• Responding to inquiries;
• Projects, collaborations, and administration;
• Organizing events and workshops;
• Recruiting new hires;
• Processing job applications;
• Safety and security during office visits;
• PR, marketing, prospecting and newsletters (with consent when required);
• Finance, invoicing, and legal compliance; and
• Using, securing and improving our website, including measurement of website traffic.

Legal Bases for Processing

KRUSH Labs uses, processes, and stores personal data in accordance with legal bases defined in the GDPR and applicable laws and regulations. These legal bases could be:

• Contract or pre-contractual steps (e.g. entering into and performing a contract with you or the company you represent);
• Consent (e.g., marketing, photography, cookies);
• Legitimate interest (e.g. providing access to our website); or
• Legal obligation (e.g. information requests by public enforcement authorities).

Diligence and Security Measures

When you provide us with personal data, we take steps to ensure it is treated securely. KRUSH Labs takes the security of your data very seriously and works to protect your data from loss, misuse, and unauthorized access or disclosure.

We use industry-standard encryption to protect your data in transit. This is commonly referred to as transport layer security ("TLS") or secure socket layer ("SSL") technology.

Once we receive your data, we protect it on our servers using a combination of technical, physical, and logical security safeguards. This includes without limitation access to personal data, updated secure IT systems, and strict internal security policies.

Duration of Data Processing

We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

KRUSH Labs will not retain your personal data any longer than necessary to achieve the purposes stated in this Privacy Statement or to comply with statutory retention periods.

We will retain and use personal data in the case of:

• business relationships for 7 years after relationship ends;
• employment relationships for 2 years after relationship ends;
• recruitment relationships for 2 years after submission of an application (with a periodic reminder that a candidate can delete his/her profile at his/her convenience); and
• no active relationships for 1 year unless required longer by law or renewed with consent, unless provided otherwise.

Special legal retention rules may apply for specific documents.

Sharing personal data with Third Parties

We only disclose personal data to third parties in a restricted number of cases. Such cases exist when:

• We have your explicit consent to share your personal data (if required);
• We make use of trusted third-party service providers; or
• We determine that the access, preservation, or disclosure of your personal data is required by law to protect the rights, property, or personal safety of KRUSH Labs and users of our website, or to respond to lawful requests by public authorities, including national security or law enforcement requests.

KRUSH Labs does not share your personal data/personally identifiable information with third parties for the purpose of enabling them to deliver their advertisements to you.

KRUSH Labs does not sell or rent your personal data.

What type of trusted third-party service providers we use

To provide our services effectively, we work with trusted third-party service providers who process personal data on our behalf under a Data Processing Agreement (DPA).

We (may) share personal data with:

• IT and administrative system providers;
• Accountants and auditors;
• Event and registration platforms;
• Tally.so (website form processing) - https://tally.so/help/terms-and-privacy;
• Workable (HR recruitment, including job boards and applications) - https://www.workable.com/privacy.

Your Data Protection Rights Under the GDPR

According to applicable privacy laws, including the GDPR, your rights to protect your personal data include:

• The right to access, update, or delete the personal data we hold about you;
• The right to have your information rectified if that personal data is inaccurate or incomplete;
• The right to object to the processing of your personal data;
• The right to request that we restrict the processing of your personal data;
• The right to withdraw your consent at any time when we rely on your consent to process your personal data; and
• The right to request a copy of your personal data (data portability).

Cookies

KRUSH Labs currently uses only essential cookies that are necessary for basic website functionality. These cookies are automatically set by our website hosting provider (Framer) and cannot be disabled as they are required for the website to operate properly.

Essential/Functional Cookies (via Framer):

• Session management and website functionality;
• Security and fraud prevention;
• Load balancing and performance optimization;
• Content delivery optimization;
• No personal data collection or tracking; and
• Privacy-friendly analytics with hashed, non-persistent identifiers.

These cookies cannot be disabled and do not track you.

Links to Other Sites

Our website or social media accounts may contain links to other sites or social media accounts that are not operated by us.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites, accounts or services. We strongly advise you to review the privacy policy of every site you visit.

Children's Privacy

We do not intend to collect data from individuals under 18. If we become aware that we have collected personal data from children without verified parental consent, we take steps to remove that information from our servers.

Changes to This Privacy Statement

This Privacy Statement may be updated from time to time. We will inform you via email or by placing a prominent notice on our website before the changes become effective. Changes to this Privacy Statement are effective as of the moment they are posted on this page. This Privacy Statement is governed exclusively in accordance with the laws of the Netherlands.

Questions or Complaints

Contact us at privacy@krushlabs.tech or by mail at:

KRUSH Labs B.V.
High Tech Campus 32
5656 AE Eindhoven
The Netherlands

If unresolved, you may contact the personal data Authority (Autoriteit Persoonsgegevens).

Personal data Authority
PO Box 93374
2509 AJ The Hague
www.autoriteitpersoonsgegevens.nl
088 – 1805 250