Privacy Policy

The protection of your personal data is very important to us. We naturally comply with applicable data protection laws and in particular with Nevada's Privacy Law ("DPA") and the EU`s General Data Protection Regulation ("GDPR"). Accordingly, all technical precautions are constantly reviewed and kept up to date and our data protection practices comply with the DPA and the GDPR.

Responsible party and contact

The responsible party within the meaning of the DPA and GDPR is:

Autosome

Tøndergade 84, 8000 Aarhus C

Web: www.autosome.dk

E-Mail: kontakt@autosome.dk

Facebook, Instagram

If you wish to object to the collection, processing, or use of your data by us or if you would like to enforce any of your rights, please contact us at any time.

Use of your personal data

All personal data that we obtain from you via the services will be processed for the purposes described in more detail below. This is done within the framework of the respective legal regulations mentioned above or with your consent. In particular, only when data processing is permitted and if:

• you have given your consent,
• the data is necessary for the fulfillment of a contract / pre-contractual measures,
• the data is necessary for the fulfillment of a legal obligation or
• the data is necessary to protect the legitimate interests of our company, provided that your interests are not overridden.

Autosome processes and stores your personal data only for the period of time required to achieve the respective processing purpose or for as long as a legal retention period (in particular commercial and tax law) exists. Once the purpose has been achieved or the retention period has expired, the corresponding data is routinely deleted.

Consent

By providing your Personal Data to us, you consent to the collection, use and disclosure of your Data by us for the purposes set out in this Privacy Policy.

Where any Personal Data relates to a third party, you represent and warrant that the Personal Data is up-to-date, complete, and accurate and that you have obtained the third party's prior consent for our collection, use and disclosure of their Personal Data for the Purposes. You agree that you shall promptly provide us with written evidence of such consent upon demand by us.

Each use of our services by you shall constitute a fresh agreement for us to collect, use and disclose the Personal Data in accordance with this privacy policy.

You may withdraw your consent and request us to stop using and/or disclosing your Personal Data for any or all of the Purposes by submitting your request to us in writing. Should you withdraw your consent to the collection, use or disclosure of your Personal Data, it may impact our ability to proceed with your transactions, agreements, or interactions with us. Prior to you exercising your choice to withdraw your consent, we will inform you of the consequences of the withdrawal of your consent. Please note that your withdrawal of consent will not prevent us from exercising our legal rights (including any remedies) or undertaking any steps as we may be entitled to at law.

Uses Made of your Personal Data

We use information held, including Personal Data, in the following manner:

• to ensure that content from our Platform is presented in the most effective manner for you and for your computer;
• to provide you with information, or services that you request from us, and to otherwise carry out our obligations arising from any contracts entered into between you and us;
• to provide you with information or services which we feel may interest you, where you have consented to be contacted for such purposes;
• to allow you to participate in interactive features of our service, when you choose to do so;
• to notify you about changes to our services;
• to investigate any complaints relating to the use of our Platform or any suspected unlawful activities;
• complying with any applicable laws, regulations, codes of practice, guidelines, or rules, or to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority;
• any other purposes for which you have provided the information; and
• carrying out whatever else is reasonable or related to or in connection with the above and our provision of goods and/or services to you.

Processing of Automatically Collected Data

a) Hosting

To provide our platform, we use the services of Amazon (AWS) who process the below-mentioned data and all data to be processed in connection with the operation of our platform on our behalf. The legal basis for the data processing is our legitimate interest in providing our platform.

b) Collection of access data and log files

We also collect data on every access to our platform. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Log file information is stored for security reasons (e.g., for the clarification of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is necessary for evidentiary purposes is exempt from deletion until the respective incident is finally clarified. The legal basis for the data processing is our legitimate interest in providing an appealing platform.

c) Use of cookies

We use so-called cookies on our web site. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and saved by your browser. For further information please refer to our Cookie Policy. The legal basis for the use of cookies is your consent as well as our legitimate interest.

d) Visitor Analytics

We use Visitor Analytics and the Visitor Analytics tool works without cookies and does not collect any personal data. The Visitor Analytics tool triggers other tags, which in turn may collect data. Visitor Analytics does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Visitor Analytics.

We commission Visitor Analytics to use this anonymized information to analyze the use of the website and to compile reports on website activity. In doing so, we aim to make our website more attractive and informative for you. The legal basis for this processing is our legitimate interest and your consent.

f) Google Fonts

We use Google Fonts on our website to display external fonts. This is a service provided by Google Inc. To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed. The connection to Google established when you call up our website enables Google to determine which website sent your request and to which IP address the display of the font is to be transmitted. The legal basis for the data processing is our legitimate interest.

Data processing when you submit it to our platform and when you use our services

When you contact us through our platform or use our services, some data is collected and processed by us or on our behalf by our selected third-party providers.

a) Contacting us

If you contact us, we process the following data from you for the purpose of processing and handling your request: first name, last name, e-mail address, and, if applicable, other information if you have provided it, and your message. The legal basis for the data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligationsand/or our overriding legitimate interest in processing your request.

b) Data management and customer support

For optimal customer support, we use first name, last name, e-mail address, and the data related to your contract with us. This data processing is based on our legitimate interest in providing our customer service.

c) Contract processing

We process your first name, last name, e-mail address, and the data related to your contract with us data to handle the contractual relationship between you and us. The legal basis for the data processing is the fulfillment of our contractual obligations and, in individual cases, the fulfillment of our legal obligations.

d) Data that you provide to us when using our services and webapp

Any collection, use, and management of personal information by the social networks, including Facebook, Instagram, Twitter, LinkedIn, and TikTok (collectively, the "Social Networks") are governed by their respective privacy policies and terms. When using Social Networks, you are required to comply with their privacy policies and terms. We recommend you carefully review their privacy policies and terms, as we are not responsible for the Social Networks.

When you use our services, you can decide for yourself what data you provide to us. This includes the information you provide in your social media profile(s), such as details about your personality, lifestyle, interests, and other details about you, as well as content such as photos and videos.

We also collect information about you and others that you provide to us in your chats with other users, as well as the content that you post as part of the operation of the Services. Likewise, other users may provide information about you when they use our Services.

Some of the information you provide to us may be considered "special" or "sensitive" under the DPA and GDPR, such as your racial or ethnic origin, sexual orientation, and religious beliefs. By providing us with this information, you consent to the processing of this data.

Finally, we collect information about your activities on our Services, such as how you use them and how you interact with other users (e.g., which users you connect and interact with, time and date of your exchanges, number of messages you send and receive). The legal basis for data processing is the fulfillment of our contractual obligations and your consent.

e) Advertising and Marketing

Insofar as you have also given us your separate consent to process your data for marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to.

You may give us your consent in a number of ways including by selecting a box on a form where we seek your permission to send you marketing information, or sometimes your consent is implied from your interactions or contractual relationship with us. Where your consent is implied, it is on the basis that you would have a reasonable expectation of receiving a marketing communication based on your interactions or contractual relationship with us.

Direct Marketing generally takes the form of e-mail but may also include other less traditional or emerging channels. These forms of contact will be managed by us, or by our contracted service providers. Every directly addressed marketing sent or made by us or on our behalf will include a means by which you may unsubscribe or opt out.

f) Financial Information

To make a purchase, you may need to provide a valid payment method (e.g., credit or debit card). Your payment information will be collected and processed by our authorised payment vendor Stripe. We do not directly collect or store credit or debit card numbers ourselves in the ordinary course of processing transactions. Accordingly, the data is processed on the basis of our contractual relationship.

Data Intermediary

Where we process your Personal Data as a data intermediary on behalf of a third party, we will process your Personal Data in accordance with the instructions of the third party and shall use it only for the purposes agreed between you and the third party. All such Personal Data will be protected and retained in accordance with this privacy policy and the terms of the DPA and GDPR.

We will take steps to inform the third party of any requests, complaints, or questions that you may have regarding such Personal Data.

Duration of data storage

We only store personal data for as long as it is necessary for the purposes for which it is processed or for as long as any consent you have given us has been revoked by you. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, irrespective of the processing purposes.

Transfer of personal data

We will not disclose or otherwise distribute your personal data to third parties unless this:

• is necessary for the performance of our services,
• you have consented to the disclosure,
• or the disclosure of data is permitted by relevant legal provisions.

However, we are entitled to outsource the processing of your personal data in whole or in part to external service providers acting as processors within the framework of the DPA and GDPR. External service providers support us, for example, in the technical operation and support of the platform, data management, the provision and performance of services, marketing, as well as the implementation and fulfilment of reporting obligations.

The service providers commissioned by us however will process your data exclusively in accordance with our instructions and we remain in accordance with the DPA and GDPR responsible for the protection of your data. Doing so we always make sure that service providers commissioned by us are carefully selected, follow strict contractual regulations, technical and organizational measures, and additional controls by us.

We may also disclose Personal Data to third parties if we are legally obliged to do so e.g., by court order or if this is necessary to support criminal or legal investigations or other legal investigations or proceedings at home or abroad or to fulfil our legitimate interests.

Automated decision-making

Automated decision-making including profiling in the sense of the DPA and GDPR do not take place at Autosome.

Direct marketing in the context of a customer relationship

Insofar as you have also given us your separate consent to process your data for consulting, marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to.

Your data subject rights

These rights are standardized in the DPA and GDPR. These include:

• the right to information,
• the right to rectification,
• the right to erasure,
• the right to restriction of data processing,
• the right to data portability,
• the right to object to data processing,
• the right to revoke any consent you have given, and
• the right to lodge a complaint with the competent supervisory authority.

Please contact us at any time with questions and suggestions regarding data protection and to enforce your rights as a data subject.

We encourage you to contact us if you have any information requests, requests for information or objections about data processing or concerns. However, you also have the right to file a complaint with your local supervisory authority. However, we would appreciate it if you would contact us with your concern before turning to a supervisory authority.

Security

State-of-the-art internet technologies are used to ensure the security of your data. During the online enquiry process, your details are secured with SSL encryption. For secure storage of your data, the systems are protected by firewalls that prevent unauthorized access from outside. In addition, technical and organizational security measures are used to protect the personal data you have provided against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.

Updating your information

If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting us. For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests.

Keep in mind, we may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user. Also, we may not be able to accommodate certain requests to object to the processing of personal information, notably where such requests would not allow us to provide our service to you anymore.

Third Party Policies

Our Platform may, from time to time, contain links to and from the websites of our partner networks, business partners and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Data to these websites.

Personal information and children

Our services are aimed at people aged 18 and over. We will not knowingly collect, use or disclose personal information from minors under the age of 18 without first obtaining consent from a legal guardian through direct offline contact.

Online presences in social media

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, e.g., write posts on our online presences or send us messages.

Changes and updates to the privacy policy

We kindly ask you to regularly inform yourself about the content of our privacy policy. We will amend the privacy policy as soon as changes to the information processing activities we carry out make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.

Concerns and Contact

If you have any concerns about a possible compromise of your privacy or misuse of your personal information on our part, or any other questions or comments, you can contact us.

Who should I contact for more information?

If you have any questions or comments about our Privacy Policy or wish to exercise your rights under applicable laws, please contact us.

This Privacy Policy was last updated on Tuesday, November 29, 2022.