nexus: PRIVACY POLICY

iOS version 15 and Android™ version 8

Last modified: May 14, 2024

INTRODUCTION

EDC Retail B.V. ("Company" or "We") respect your privacy and are committed to protecting it through our compliance with this policy. This policy describes:

The types of information we may collect or that you may provide when you download, install, register with, access or use the EASY CONNECT App (the "App").
Our practices for collecting, using, maintaining, protecting and disclosing that information.

This policy applies only to information we collect in this App and in e-mail, text and other electronic communications sent through or in connection with this App. This policy DOES NOT apply to information that:

1.We collect offline or on any other Company apps or websites, including websites you may access through this App.
2.You provide to the Company, or is collected by any third party.

Our websites, our other apps and third parties may have their own privacy policies, which we encourage you to read before providing information on or through them. Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, do not download, register with or use this App. By downloading, registering with or using this App, you agree to this privacy policy. This policy may change from time to time. Your continued use of this App after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

INFORMATION WE COLLECT AND HOW WE COLLECT IT

We collect information from and about users of our App:

1.Directly from you when you provide it to us during registration
2.Automatically when you use the App.

Information You Provide to Us.

When you download, register with or use this App, we may ask you provide information:

1.By which you may be personally identified, such as state and country of residence, e-mail address, or ANY OTHER INFORMATION THE APP COLLECTS THAT IS DEFINED AS PERSONAL OR PERSONALLY IDENTIFIABLE INFORMATION UNDER AN APPLICABLE LAW ("Personal Information").
2.That is about you but individually does not identify you, including information such as your username, your unique device identifier, your gender, month and year of birth, relationship status (e.g. "single" or "attached").

This information includes:

1.Information that you provide by filling in forms in the App. This includes information provided at the time of registering to use the App, subscribing to our service and posting and/or sending material,
2.We may also ask you for information when you report a problem with the App.
3.Records and copies of your correspondence (including e-mail addresses and phone numbers), if you contact us.

When you download, access and use the App, it may use technology to automatically collect:

Usage Details. We do NOT collect activity data such as individual pattern usage, connectivity time, location, connections made or duration of those connections.
Device Information. We may collect information about your mobile device including the device's unique device identifier. Details collected by Android or iOS may include your operating system, and the mobile network information. We use this for troubleshooting purposes only in the event of app performance issues.
Stored Information and Files. The App also may access metadata and other information associated with other files stored on your device. This may include, for example, photographs to populate your profile picture.

THIRD-PARTY INFORMATION COLLECTION

When you use the App or its content, certain third parties may use automatic information collection technologies to collect information about you or your device. These third parties may include:

1.Your mobile device manufacturer.
2.Your mobile service provider.
3.App store and platform providers.
4.Wireless network providers.

These third parties may use tracking technologies to collect information about you when you use this App. The information they collect may be associated with your Personal Information or they may collect information, including Personal Information, about your online activities over time and across different websites, apps and other online services websites. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. We do not control these third parties' tracking technologies or how they may be used. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

HOW WE USE YOUR INFORMATION

We use information that we collect about you or that you provide to us, including any Personal Information, to:

1.Provide you with the App and its contents, and any other information, products or services that you request from us.
2.Fulfill any other purpose for which you provide it.
3.Carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection, if applicable.
4.Notify you when App updates are available, and of changes to any products or services we offer or provide though it.

DISCLOSURE OF YOUR INFORMATION

We may disclose Personal Information that we collect or you provide:

1.To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of the Company's assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which Personal Information held by the Company about our App users is among the assets transferred.
2.For any other purpose disclosed by us when you provide the information.
3.With your consent.
4.To comply with any court order, law or legal process, including to respond to any government or regulatory request.
5.To enforce our rights arising from any contracts entered into between you and us, including, but not limited to, the App terms and conditions, and for billing and collection, if applicable.

ACCESSING AND CORRECTING YOUR PERSONAL INFORMATION

You can review and change your Personal Information by logging into the App and visiting your account profile page. You may also send us an e-mail at klantenservice@edc.nl.com to request access to correct or delete any personal information that you have provided to us. We cannot delete your Personal Information except by also deleting your user account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

DATA SECURITY

We have implemented measures designed to secure your Personal Information from accidental loss and from unauthorized access, use, alteration and disclosure. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access our App, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. Unfortunately, the transmission of information via the internet and mobile platforms is not completely secure. Although we do our best to protect your Personal Information, we cannot guarantee the security of your Personal Information transmitted through our App. Any transmission of Personal Information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures we provide.

CHANGES TO OUR PRIVACY POLICY

We may update our privacy policy from time to time. If we make material changes to how we treat our users' Personal Information, we will post the new privacy policy on this page. From time to time we will also provide a notice to you when the privacy policy has been updated in the form of an in-App alert to notify you that changes to the policy have occurred. The date the privacy policy was last revised is identified at the top of this page. You are responsible for periodically visiting this privacy policy to check for any changes.

CONTACT INFORMATION

To ask questions or comment about this privacy policy and our privacy practices, contact us at: Phoenixweg 6, 9641 KS Veendam | The Netherlands

In Detail:

Responsible for the processing of data is:

EDC Retal B.V.

Phoenixweg 6, 9641 KS Veendam | The Netherlands

2. Data processing for the purposes of processing the contract, establishing contact

2.1 Data processing for the purposes of performing the contract

For the purpose of performing the contract (including enquiries regarding the processing of any existing warranty and performance fault claims as well as any statutory updating obligations) in accordance with Art. 6 (1) (b) GDPR, we collect personal data if you provide it to us voluntarily as part of your order. Mandatory fields are marked as such, as in these cases we necessarily need the data to process the contract and we cannot send the order without their specification. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, in particular on the forwarding of the data to our service providers for the purpose of order, payment and shipping, can be found in the following sections of this privacy policy. After complete processing of the contract, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with Art. 6 (1) (c) GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy policy.

2.2 Customer account

Insofar as you have given your consent to this in accordance with Art. 6 (1) (a) GDPR by deciding to open a customer account, we will use and store your data for the purpose of opening the customer account as well as for further future orders on our website. Deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy policy.

2.3 Establishing contact

As part of our customer communication, we collect personal data in order to process your enquiries in accordance with Art. 6 (1) (b) GDPR if you voluntarily provide us with this data when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases we necessarily need the data to process your enquiry. Which data is collected can be seen from the respective input forms. After your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy policy.

7. Use of cookies and other technologies for web analytics and advertising purposes

7.1 Use of Google services for web analysis and advertising purposes

We use the following technologies of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision with respect to the USA by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is collected using Google technologies, it will be shortened by activating IP anonymisation before being stored on Google's servers. Only in exceptional cases will the full IP address be transferred to a Google server and shortened there. Unless otherwise specified for the specific technologies, data processing is based on an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 GDPR. Further information about data processing by Google can be found in Google's privacy policy.

Google Analytics

For the purpose of website analytics, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information as well as information on your use of our website), from which usage profiles are created using pseudonyms. Cookies can be used for this purpose. Your IP address will not be merged with other data from Google. The data processing is based on a data processing agreement with Google.

Google Fonts

For the purpose of a uniform presentation of the contents on our website, data (IP address, time of visit, device and browser information) are collected by the script code "Google Fonts", transmitted to Google and then processed by Google. We have no influence on this subsequent data processing.

YouTube Video Plugin

In order to integrate third party content, data (IP address, time of visit, device and browser information) are collected via the YouTube Video Plugin in the expanded data protection mode used by us, transmitted to Google and then processed by Google only when you play a video.

7.2 Use of Microsoft services for web analytics and advertising purposes

We use the technologies of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (hereafter "Microsoft"). The data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR. The information automatically collected by Microsoft technologies about your use of our website is usually transferred to a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and stored there. There is no adequacy decision for the United States by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission. For more information about Microsoft's data processing practices, please see Microsoft's privacy policy.

For website analytics and event tracking purposes, we use Microsoft Advertising Universal Event Tracking (UET) to measure your subsequent usage behavior when you arrive on our website via a Microsoft Advertising ad, from which usage profiles are generated using pseudonyms. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information as well as information on your use of our website based on events specified by us, such as a visit to a website or newsletter registration) may be collected, from which user profiles are created using pseudonyms. As long as your Internet-enabled devices are linked to your Microsoft account and you have not disabled the "Interest-based Advertising" setting in your Microsoft account, Microsoft can generate reports on usage behavior (especially cross-device user numbers), even if you change your device, so-called "cross-device tracking". In this respect, we do not process personal data, we only receive statistics based on Microsoft UET.

7.3 Use of Facebook services

Facebook Ads (Ad manager)

We use Facebook Ads to promote this website on Facebook (by Meta) and other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the exact implementation, in particular the decision on the placement of the ads with individual users. Unless otherwise specified for the individual technologies, data processing is based on an arrangement between joint controllers in accordance with Art. 26 GDPR. The joint controllership is limited to the collection of data and its transmission to Meta Platforms Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this arrangement.

8. Social Media

8.1 Social Plugins by Facebook (by Meta), Twitter, Instagram (by Meta), Pinterest

Social buttons by social networks are used on our website. These are only integrated into the page as HTML links, so that no connection to the servers of the respective provider is established when our website is accessed. If you click on one of the buttons, the website of the respective social network will open in a new window of your browser. There you can click e.g. the Like or Share button.

8.2 Our online presence on Facebook (by Meta), Twitter, Youtube, Instagram (by Meta), Pinterest

If you have given your consent to the respective social media provider in accordance with Art. 6 (1) (a) GDPR, when you visit our online presence on the social media mentioned above, your data will be automatically collected and stored for market research and advertising purposes, from which user profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the respective social media provider, as well as a contact option and your rights and settings options for the protection of your privacy, please refer to the provider's privacy policies linked below. Should you still require assistance in this regard, please contact us.

Facebook (by Meta) is provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (hereafter "Meta Platforms Ireland ") The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. There is no adequacy decision for the United States by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing in the context of a visit to a Facebook (by Meta) fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (information on Insights data) can be found here.

Twitter is provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("Twitter"). The information automatically collected by Twitter about your use of our online presence on Twitter is generally transmitted to and stored on a server at Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. There is no adequacy decision for the United States by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Instagram (by Meta) is provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (hereafter "Meta Platforms Ireland ") The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is typically transferred to and stored on a server at Meta Platforms Inc, 1 Hacker Way, Menlo Park, California 94025, USA. There is no adequacy decision for the United States by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing in the context of a visit to an Instagram (by Meta) fan page is based on an agreement between joint controllers in accordance with art. 26 DSGVO. Further information (information on Insights data) can be found here.

YouTube is provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (hereafter "Google"). The information automatically collected by Google about your use of our online presence on YouTube is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. There is no adequacy decision for the United States by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Pinterest is provided by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereafter "Pinterest"). The information automatically collected by Pinterest about your use of our online presence on Pinterest is usually transferred to and stored on a server of Pinterest, Inc, 505 Brannan St, San Francisco, CA 94107, USA. There is no adequacy decision for the United States by the European Commission. Our cooperation is based on standard data protection clauses adopted by the European Commission.

9. Contact options and your rights

9.1 Your rights

Being the data subject, you have the following rights according to:

• art. 15 GDPR, the right to obtain information about your personal data which we process, within the scope described therein;

• art. 16 GDPR, the right to immediately demand rectification of incorrect or completion of your personal data stored by us;

• art. 17 GDPR, the right to request erasure of your personal data stored with us, unless further processing is required

o to exercise the right of freedom of expression and information;

o for compliance with a legal obligation;

o for reasons of public interest or

o for establishing, exercising or defending legal claims;

• art. 18 GDPR, the right to request restriction of processing of your personal data, insofar as

o the accuracy of the data is contested by you;

o the processing is unlawful, but you refuse their erasure;

o we no longer need the data, but you need it to establish, exercise or defend legal claims, or

o you have lodged an objection to the processing in accordance with art. 21 GDPR;

• art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;

• art. 77 GDPR, the right to complain to a supervisory authority . As a rule, you can contact the supervisory authority at your habitual place of residence or workplace or at our company headquarters.

Right to object

If we process personal data as described above to protect our legitimate interests that are overriding in the process of balancing of interests, you may object to such data processing with future effect. If your data are processed for direct marketing purposes, you may exercise this right at any time as described above. If your data are processed for other purposes, you have the right to object only on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for such purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

This does not apply to the processing of personal data for direct marketing purposes. In such a case we will no longer process your personal data for such purposes.

9.2 Contact options

If you have any questions about how we collect, process or use your personal data, want to enquire about, correct, restrict or delete your data, or withdraw any consents you have given, or opt-out of any particular data use, please contact us.