Verlinvest Group SA (Place Eugene Flagey 18, 1050 Brussels) and its wholly owned subsidiaries
(collectively “Company”, “Verlinvest, “we”, “us”, “our”) are committed to safeguarding the personal data it
processes in connection with its business in accordance with fair information practices and applicable data privacy laws.

1. Scope
This notice (“Privacy Notice”) explains how the Company, acting as data controller, handles the personal
data of business contacts as well as services providers, agents, consultants, and website visitors (“you”,
“your”), in the course of its activities.

2. Personal Data We Collect
We may collect your personal data at the occasion of business events, meetings, networking events,
through public searches on professional or social-media databases or other similar occurrences where you access our offices or provide us or publicly disclose personal data.
We may collect personal data, either directly from you or from third parties. For example, our business
contacts, services providers, agents, consultants, and website visitors may provide us with information
about individuals other than themselves when interacting with us. If you are providing us with personal data.
of another individual, please ensure you have brought this Privacy Notice to their attention.
We may process your personal data via automated and paper-based data processing systems, as well as
through specific devices such as security cameras.

In the normal course of activities, we collect the following types of personal data:
• Contact information, such as your name, home and professional address, job title, company
affiliation, email address, date of birth, gender, phone number;
• Any due diligence information in connection with an actual or prospective corporate transaction or
investment, such as business contact information about your employer, your own company, your
business and your contacts;
• Any compliance and risk management information, such as information for fraud prevention,
identity documents where applicable;
• Relationship information that helps us do business with you and contact preferences, such as,
where applicable, your consent to receive direct marketing communications;
• Any information provided in correspondence or communication with us, such as via email, web
contact forms or on the phone;
• Where applicable and with your consent, any information provided as testimonials about your use
of our services;
• Where applicable, images taken by security cameras; or
• Where applicable, technical information about your devices automatically collected when you visit
our website, such as your IP address.

3. Use of Your Personal Data
We collect your personal data for a variety of purposes. The table below outlines, for each objective we
pursue the legal basis for processing:

Purposes of processing	Legal bases
Business relationship management Managing your ongoing business relationship with us, including by advising you on investment or divestments.	Fulfilling our contractual obligations Fulfilling our legal obligations, where applicable Legitimate business interests in maintaining our relationship with you
General business purposes We may use the information collected for other general business purposes, such as improving our business operations, conducting due diligence, obtaining professional advice related to our portfolio companies or the Company’s business and its employees and conducting internal or market research.	Legitimate business interests in increasing the efficiency of our operations
Marketing We use your Personal Data to provide you with information about our business activities. This can be done via means such as email, ads, SMS, phone calls and postal mailings to the extent permitted by applicable laws. Some of our campaigns are run-on third-party websites and/or social networks. This use of your Personal Data is voluntary, which means that you can oppose to the processing of your Personal Data for this purpose. For detailed information on how to modify your preferences about marketing communication, please see Sections 7 below.	With your consent (where required) Legitimate business interests in: – Working out which of business activities may interest you; or – informing current or prospective business relations and/or investors about the Company’s business activities.
Cookies When you visit our website, we may collect certain information by automated means, using technologies such as cookies or pixel tags. Please refer to section 9 below.	With your consent (where required) Legitimate interest in providing the functionalities available on our website
Complying with legal obligations We use your personal data as necessary or appropriate to comply with applicable laws and regulations (such as internal reporting and auditing, tax compliance or due diligence obligations), as well as to comply with lawful requests from competent law enforcement agencies, judicial or administrative authorities(such as to respond to subpoenas, requests for information, or otherwise in relation to liens or garnishments).	Legal obligation where applicable
Defense of the Company’s interests Protection of the Company, its workforce and the public against injury, theft, legal liability, fraud, abuse, or threat to the security of our networks, communications, systems, facilities and infrastructure. This includes, i.a.: Safeguarding the Company’s assets and ensuring its overall protection, such as by guaranteeing the security of our networks and systems or through camera surveillance; Protecting our rights, privacy, safety or property, and/or that of you or others; Instituting or responding to legal proceedings, such as by enforcing the terms of any agreement that govern our business activities or website; Activities related to fraud and liability detection, as well as any action to protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.	Fulfilling our legal obligations where applicable Legitimate interests in protecting our assets and staff
Merger/acquisition In the event that the Company or its assets are acquired by, or merged with, another company including through bankruptcy, we will share your Personal Data with any of our legal successors.	Fulfilling our legal obligations, where applicable Legitimate interests in protecting our assets and staff

We may also process your personal data for any purpose permitted by law and compatible with the initial
purpose of processing.

4. Disclosures and Categories of Recipients
We have taken measures to ensure that your personal data is processed in a manner that is compatible
with the purposes indicated above. For the stated purposes, your personal data may be disclosed to, or
received from, the following parties:
• Other Company entities, joint ventures, subcontractors, vendors, or suppliers who perform services
on our behalf for the aforementioned purposes;
• Professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the
course of the professional services that they render to us;
• A newly formed or acquiring organization if the Company is involved in a merger, sale or a transfer
of some or all of its business;
• Any recipient, if you have specifically consented to it (e.g. if you agree to provide a testimonial);
• Any recipient, if we are legally required to do so, such as by court order or applicable law; or
• Any recipient when reasonably necessary, such as in the event of a life-threatening emergency.

5. International Transfers
We may transfer your personal data to countries outside the European Economic Area (EEA) that have not
been found by the European Commission to provide adequate protection. Where such transfers occur, we
will ensure that adequate protections are applied either through appropriate contractual arrangements or
as otherwise required by law to maintain the confidentiality, integrity, and security of your personal data.
Please contact us if you would like to receive further information on the specific mechanism used by us
when transferring your personal data out of Europe.

6. Information Security
We take precautions to protect personal data from loss, misuse, and unauthorized access, disclosure,
alteration, and destruction. We have taken appropriate technical and organizational measures to protect
the information systems on which your personal data is stored, and we contractually require our suppliers
and service providers to protect your personal data.

7. Your Personal Data Rights
You have the right to:
• Access your personal data and to learn the origin of the data, the details of the data controller(s),
the data processor(s) and the parties to whom the data may be disclosed;
• Withdraw your consent at any time where your personal data is processed with your consent. If you
withdraw your consent, we may not be able to provide certain products or services to you. We will
advise you if this is the case at the time you withdraw your consent;
• Update or correct your personal data so that it is always accurate;
• Delete your personal data from our records under certain circumstances, for example if it is no
longer needed for the purposes indicated in this notice;
• Restrict the processing of your personal data in certain circumstances, such as where you have
contested the accuracy of your personal data, for the period enabling us to verify its accuracy;
• Object to us processing your personal data or to tell us to stop processing your personal data. Once
you have informed us of this request, we shall no longer process your personal data unless
permitted by law; and
• Obtain your personal data in an electronic format and to request that we transmit this data to
another company.

There may be legal or other reasons why we cannot, or are not obliged to, fulfil a request to exercise your
rights. We will use available lawful exemptions to your individual rights to the extent appropriate. If we
decline your request, we will tell you why, subject to legal restrictions.
You may exercise these rights free of charge. However, Verlinvest may charge a reasonable fee or refuse
to act on a request if it is manifestly unfounded or excessive, in particular because of its repetitive character.
In some situations, Verlinvest may refuse to act or may impose limitations on your rights if, for instance,
your request is likely to adversely affect the rights and freedoms of others, prejudice the execution or
enforcement of the law, interfere with pending or future litigation or infringe applicable law.
If you wish to exercise any of these rights or have any complaints, please contact us using the details
provided under “How to Contact Us” below. You also have the right to file a complaint with the relevant data
protection authority.

8. Personal Data Retention
Your personal data will be retained (i) as long as necessary to achieve the processing purposes stated in
this notice, such as as long as required to enable Verlinvest to defend or assert a right in court, or (ii) in
accordance with our legal and regulatory obligations, such as where applicable, local statute of limitation
periods.
To determine the appropriate retention period for personal data, we consider the amount, nature, and
sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your
personal data, the purposes for which we process your personal data and whether we can achieve those
purposes through other means, and the applicable legal requirements.

9. Cookies and linked sites
When you visit our website, we may collect certain information by automated means, using technologies
such as cookies or pixel tags. Cookies are small text files created by a web server that can be stored on
your device. In most instances, the information we collect using cookies or similar technologies is used in
a non-identifiable way. You can learn more about cookies and how to manage them at
www.allaboutcookies.org and www.youronlinechoices.eu.
We may use the following cookies:
• Strictly Necessary: We may use cookies that are necessary for the website to function and that
enable you to navigate and use features.
• Analytics: with your consent, we may use cookies to gather statistics in order to enhance the
performance of the website.
• Marketing / Advertising: with your consent, we may use cookies to provide more relevant
messaging and marketing communications to you.
• Youtube: with your consent, we may use cookies for analytics, and marketing purposes.

Type	Name	Purpose	Expiration
Strictly necessary	__cmpcccu	Managing your privacy choices	365 days
Strictly necessary	__cmpconsent	Managing your privacy choices	90 days
Analytics	_ga	Measuring your use of the website	730 days
YouTube	__Secure-ROLLOUT_TOKEN	Registers a unique ID to keep statistics of what videos from 180 days YouTube the user has seen	180 days
YouTube	VISITOR_INFO1_LIVE	To detect and resolve problems with the service	Session
YouTube	YCS	Youtube comment search	Session
YouTube	VISITOR_PRIVACY_METADATA	Stores the user’s video player preferences using embedded YouTube	395 days

You may change your choices of cookies at any time via the cookie manager tool, which is accessible by
clicking on checkmark icon at the bottom right of the page.
You should also be aware that when you are on our website, you may be directed to other websites or
content that belong to third parties which we have no relationship. We are not responsible for any third party website, content or services. You should review the privacy policy of each third party.

10. 10. How to Contact Us
        If you have any questions, requests or complaints related to how we process your personal data, please
        contact our Legal Department at legal@verlinvest.com or +32.2.626.98.70.

10. 10. Updates
        We may regularly review this Privacy Notice and may update it from time to time to reflect any changes to
        the way in which we treat personal data. We will post the updated Privacy Notice on our website.
        This Privacy Notice was last updated on 14 April 2025