Privacy Statement

KONCENTRIQ INNOVATION CONSULTING, SLU the controller and is located at C\Isaac Albéniz 59, 2B – 28222 Majadahonda (Madrid – Spain). You can contact us at +34 695 888 222 or at hello@koncentriq.com.

This Privacy Statement applies to all people whose personal data are processed by KONCENTRIQ, except for people working at KONCENTRIQ. Personal data means any data that contains information about people through which those persons are identifiable.

Thus, this Privacy Statement applies to:

• Customers.
• Potential customers (“leads”) with whom KONCENTRIQ has made or wants to make contact.
• Visitors to our website at http://www.koncentriq.com.
• Recipients of newsletters and commercial e-mails from KONCENTRIQ.
• Any other person who contacts KONCENTRIQ or whose personal data are processed by KONCENTRIQ.

This Privacy Statement does not apply to employees, temporary workers, student trainees and applicants.

By processing personal data, we mean: collecting, recording, organising, storing, updating, modifying, retrieving, consulting, using, providing by means of forwarding, distribution or any other form of posting, bringing together, linking together, and to protect, erase or destroy your personal data.

We process personal data that you have provided to us, personal data generated during your visit to our website, reading our newsletters and personal data that we have derived from other sources, such as business meetings, social media platforms and business cards.

Personal information provided by you:

• Contact details and other personal data needed to handle your assignment by a consultant.
• Contact details and other personal data entered on contact forms or other web forms.
• Contact information provided during introductory talks, meetings, events, seminars, etc., such as information on business cards.

Personal data obtained through- or generated by our website, electronic newsletters, commercial e-mails or related technologies:

• IP number.
• Your surfing behaviour on the website, such as data about the first visit, previous visit and current visit, the pages viewed and the way in which the website is navigated.
• Whether you open a newsletter or commercial e-mail and on which parts you click.

See our Cookies Statement.

Personal data obtained from other sources:

• Personal data available on public business social media platforms such as LinkedIn.
• Personal data obtained from the Trade Register of the Chamber of Commerce.
• Personal data available on public business websites.

Our website may contain hyperlinks to websites of other parties and 'social media buttons'. Nor is KONCENTRIQ responsible for the content of those websites or the services of referred platforms. Neither is KONCENTRIQ responsible for the privacy policy and the use of cookies on those websites and platforms.

We use your personal data for different purposes. These are listed and elaborated on below:

• The execution of a contract in which you have engaged us for the purpose of delivering innovation and financial consulting services by our consultants

The execution of a contract in which you have engaged us for the purpose of delivering innovation and financial consulting services by our consultants

• Compliance with legal obligations.
• Maintaining contact with you.

Your contact data are kept in EU located relationship management system and may be used for the purpose of sending newsletters, updates, invitations to events and seminars and sending information you requested from us. Also, for improving our product and service information and carrying out targeted marketing campaigns.

Your contact data are kept in EU located relationship management system and may be used for the purpose of sending newsletters, updates, invitations to events and seminars and sending information you requested from us. Also, for improving our product and service information and carrying out targeted marketing campaigns. We analyse the following information:

• Interaction data: Obtain personal data and contact between KONCENTRIQ and you. For example, about your use of our website or supported applications. This also applies to offline interactions, such as how often and when there is contact between KONCENTRIQ and you.
• Behavioural data: Personal data that KONCENTRIQ processes about your behaviour, such as your preferences, opinions, wishes and needs. We can derive this data from your surfing behaviour on our website, reading our newsletters or by requesting information. But also, through contact, incoming telephone calls and e-mail contact with our employees. Information obtained through tracking cookies, we collect and use only with your permission, which you can always withdraw. See our Cookies Statement www.koncentriq.com/cookie-policy.
• Performing and analysing research on client satisfaction.
• Sometimes we ask clients to cooperate in a client satisfaction survey. This is done through an online questionnaire. Participation is voluntary. Prior to each client satisfaction survey, you will receive further information about the working method and the way we deal with the information gathered.
• Improving and securing our websites like www.koncentriq.com.
• Creating user statistics. The user statistics of the website enable us to track the number of visitors, the duration of the visit, which parts of the website are being viewed and the click-behaviour. It concerns generic reporting, without information about individuals. We use the information obtained to improve the website.
• Access control and company security.
• If you visit our office, we will note your name on arrival. In addition, camera images may be made on the outside of the office, at the reception desk and at the entrance to the meeting rooms. We do this to know in case of emergencies who is in the building and to ensure that unauthorised people do not have access to the office. Camera images are in principle destroyed after 10 working days.

We protect personal data through technical and administrative security measures to minimise the risk of loss, misuse, unauthorised access, disclosure, and modification. You can think of security software such as a virus scanner and firewalls, a secure internet connection, encryption of data and physical and administrative access controls to data and servers.

We do not store your personal data for longer than is strictly necessary for the execution of the purposes. If legal regulations apply to the storage, the personal data will not be kept longer than prescribed by law.

We process personal data based on one of the following legal grounds:

• Permission.
• Because of an agreement or in the run up to the conclusion of an agreement.
• Legal obligation
• In connection with a legitimate interest

A controller may only process personal data if this can be based on one of the limitative enumerated legal grounds in the General Data Protection Regulation (AVG). The legal bases on which KONCENTRIQ relies are:

• Permission: If we have requested your permission to process your personal data and you have given this permission, then you also have the right to withdraw this consent.
• Agreement or in the run up to the conclusion of an agreement: If you give us an assignment to provide innovation or financing consultancy services, we process personal data if and insofar as this is necessary for the execution of the assignment.
• Legal obligation: We only provide personal data to supervisors of investigative authorities if this is legally required. We will take measures in such cases that are reasonably necessary to ensure that your personal data is protected as good as possible.
• Justified interest : We may also process personal data if we have a legitimate interest and do not therefore disproportionately infringe your privacy. For example, we use your contact information to invite you for seminars and events.

We may use service providers (processors) for the processing of your personal data that only process personal data in our order. We conclude a processor agreement with these processors that meets the requirements set by the General Data Protection Regulation (AVG).

For example, we work with service providers that offer SaaS solutions (software as a service) or provide hosting services. Furthermore, there are ICT service providers who offer us support in keeping our systems safe and stable. We also use third-party services for sending newsletters and commercial e-mails. These are examples of parties that can be designated as (sub) processors as referred to in the General Data Protection Regulation (AVG).

Sometimes it is necessary to share your personal data with third parties, which – depending on the circumstances of the case – are necessary in the handling of your dossier. There are also legal obligations that lead to personal data being passed on to third parties. In the following cases personal data will be provided to third parties:

• When processing a dossier, it may be necessary to share your personal data with third parties. For example in probing or asking for funding to a government, or the conclusion of an agreement with further parties.
• If a court decision obliges us to provide personal data to third parties, we will have to comply with this.
• Your personal data will not be shared with third parties for commercial purposes. There is one exception to this. Sometimes we organise a joint activity with another organization, such as an event or seminar. In that case, only the necessary contact details are exchanged.
• Personal data can also be provided to third parties, in the event of a reorganisation or merger of our company or sale of (a part of) our company.
• We never sell your personal data to third parties and do not make automated decisions that could have significant consequences for you.

Under the General Data Protection Regulation (AVG), personal data may only be passed on to parties outside the EEA when an appropriate level is guaranteed for the protection of the personal data or when a specific deviation applies. We may pass on personal data to a party outside the EEA when necessary for the execution of the contract on provision of innovation- or financing consultancy services.

Every person can exercise certain rights with respect to his or her personal data based on the law. This gives you the right to inspect, rectify and delete personal data. You can also object to the use of your data or request that the use is restricted. In certain cases, you can request your data and take it to another party. For all these questions contact us on +34 695 888 222 or by email via hello@koncentriq.com

If you have complaints about how we handle your personal data, you can contact us by sending a mail to hello@koncentriq.com or call +34 695 888 222 . We are happy to help you find a solution within a period of four weeks after receiving your request. If that does not work, you can always contact the Spanish Data Protection Authority.

Developments go fast and as a result, there may also be changes in the personal data we request from you and the way in which we use your personal data. Regulations can also change. In that case, we will update this Privacy Statement. We therefore invite you to regularly check the Privacy Statement so that you are kept informed. In the event of major changes, we will also make you aware of this via our website.

Last check in March 3rd, 2021