Our Commitment to Privacy

Floreer, Lda. (“Floreer”, “we”, “us”) processes personal data with transparency and security. We apply this commitment in our daily relationship with our investors, business partners, customers and suppliers. Privacy and security of data entrusted to us is a priority.

We are committed to collect, store, process, transfer and erase personal data of our investors, business partners, customers and suppliers only in a transparent way and when they are needed to offer our best services. We inform you of how we use your personal data and for what purposes, assuring that we collect, share and store those data by applying security and data protection best practices.

When your personal data are collected, stored, processed, transferred or erased by third parties, we demand the same level of privacy and security.

We want you to feel confident that your data are safe with us since we will always be committed to protecting your privacy and take our responsibilities very seriously in the protection of your personal data.

Whenever you have any questions on the use we make of your personal data we will be available to help you through the following channels:

• Address: Rua Almeida e Sousa 33, RC Esq., 1350-008 Lisbon, Portugal
• Email: dpo@floreer.eu You may also contact our Data Protection Officer using the same address and email.

Who is Responsible for Your Personal Data

Floreer, with head office at Rua Almeida e Sousa 33, RC Esq., 1350-008 Lisbon, Portugal, registered with the Registrar of Companies with registration number 509373100, is responsible for processing your personal data under the terms of the General Data Protection Regulation and of related local data protection laws applicable in the countries in which it operates.

Personal Data We May Collect

Throughout this Privacy Policy, “Personal Data” means information relating to you which allows us to identify you, directly or indirectly. Your personal data may include, for example, your name, your tax number, your address or electronic mail, your transactions and your contacts with us.

We may receive your personal data from other companies when they collect, process or store them in a service agreement.

Floreer may collect the following categories of personal data:

• Investor/Shareholder identification and contact data – full or abbreviated name, identification number, tax number, address, telephone number, e-mail and number of shares held
• Customer identification and contact data – full or abbreviated name, address, telephone number, e-mail
• Supplier data – in the case of individuals, full name and tax number; in the case of companies, name and contact of representatives
• Business Partners data – in the case of individuals, full name and tax number; in the case of companies, name and contact of representatives

How and Why We Use Your Personal Data

We use your personal data for the following purposes:

To give you the information requested by you as an investor/shareholder and for internal reporting purposes To implement actions resulting from Corporate Social Responsibility partnerships To comply with regulatory reporting requirements To implement communication and brand initiatives and projects

For How Long Do We Keep Your Personal Data

We only keep your personal data for as long as we need to achieve the purposes stated in the previous paragraph and to comply with the law.

When the maximum retention period is attained, your personal data are anonymised or destroyed/erased in a secure manner.

How We Might Share Your Personal Data

The third parties with whom we may need to share personal information to help us provide services and products to you and to run our website include:

• Our advisors
• Our third-party service providers who process information on our behalf to help run some of our internal business operations including email distribution, IT services and marketing and events services
• Our business partners for publications and events co-organised by Floreer and them
• Law enforcement bodies in order to comply with any legal obligation or court order

How You May Exercise Your Personal Data Protection Rights

Under certain circumstances, you have the right to request from us:

• Additional information on how we use your personal data
• Access to your personal data
• That we transfer to a third party the personal data you gave us
• That we update your personal data
• That we erase your personal data
• That we suspend the processing of your personal data once you opposed to it
• That we limit how we use your personal data, whilst we correct them or we clarify any doubts we may have about their content or the way we use them
• That we provide adequate means to enable you to object to decisions based solely on the automated processing of your data You also have the right to withdraw, at any moment, the consent which you may have given us to use your personal data when this use is based on consent.

You may not exercise these rights when your personal data are used to protect the public interest, namely when used for crime investigation and prevention, or when subject to professional confidentiality.

To exercise your data protection rights or whenever you have any questions on the use we make of your personal data you should contact us through the following channels:

• Address: Rua Almeida e Sousa 33, RC Esq., 1350-008 Lisbon, Portugal
• Email: dpo@floreer.eu You may also contact our Data Protection Officer using the same address and email.

Should you be dissatisfied with how we use your personal data or with our response to your request to exercise your rights, you may file a complaint with Comissão Nacional de Proteção de Dados (CNPD):

• Address: Av. D. Carlos I, 134 - 1.º, 1200-651 Lisboa
• Telephone: +351213928400
• Fax: +351213976832
• Email: geral@cnpd.pt

How Do We Protect Your Personal Data

Floreer has implemented several security measures, in line with best national and international practices, which enable the protection of your personal data. This includes technological controls, administrative, technical and physical measures and procedures which ensure the protection of your personal data, and prevent improper use, unauthorised access and disclosure, loss, improper or negligent modification, or unauthorised destruction of personal data. In terms of data security, we apply the same principles of continuous improvement which we use in all our daily activities.

Amongst others, we highlight the following security measures:

• Access to your personal data is restricted to those who need them for the purposes stated above
• Personal data are stored and shared only using secure techniques
• Information systems are protected to prevent unauthorised access to your personal data
• Implementation of mechanisms to guarantee the integrity and quality of your personal data
• Continuous monitoring of information systems, with the aim of preventing, detecting and avoiding improper use of your personal data
• Redundancy of storage, processing and communication devices, to avoid availability loss

Updates to this Privacy Policy

This Privacy Policy may be updated from time to time. Updates will be made available on our website.