TO BETTER UNDERSTAND
WHAT WE DO WITH YOUR INFORMATION

We have done our best to explain clearly and simply what personal data we need from you and what we will do with each piece of personal data, as described in our Privacy Policies and in the summary of them that follows. Thus, we will tell you what types of personal data we may collect or hold about you, how we use it, with whom we share it, how we protect and keep it safe, and your rights to personal data under privacy and personal data protection laws.

LEAG GROUP is based in Switzerland and therefore operates under the Laws and Regulations of the Swiss Confederation, in particular under the Swiss Federal Data Protection Act (DPA).

Switzerland Brazil European Union

Furthermore, we are compliant with the Brazilian General Personal Data Protection Act Law No. 13,709/2018 (LGPD) and the European Union General Data Protection Regulation 2016/679 (GDPR).

We ask that, before using our platform, you read these Policies carefully. If you have any questions or concerns about your personal data, please contact us at data@leaggroup.com.

In addition, we are always available to answer any questions you may have by emailing leag@leaggroup.com.

1. What is personal data?

Personal data means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to that natural person's physical, physiological, genetic, mental, economic, cultural or social identity.

2. Who is this privacy policy about?

This privacy policy pertains to the data processing of LEAG GROUP Platform Users who fall under the territoriality of the Swiss Federal Data Protection Act (DPA), the Brazilian General Data Protection Act (LGPD), the European Union's General Data Protection Regulation 2016/679 (GDPR) and the United Kingdom's General Data Protection Regulation (UK GDPR), as well as to other Users coming from other regions where LEAG GROUP operates.

3. How will we secure your data?

To ensure your security, your personal data is transferred in encrypted form and stored on cloud servers provided by AWS Amazon in the United States, which is the partner company responsible for the storage and security of your data (we strongly recommend that you read the AWS Amazon Contracts and Policies, especially the Privacy Policies). In addition, we use security certificates, encryption, and a variety of security technologies and procedures to help protect User information. This gives them access to your data, only to store it once you have provided it to LEAG GROUP. If you have any problems with this, we ask you not to continue using the platform.

4. How will we secure and process your payment data?

In order to process information regarding payments for products and/or services offered directly by LEAG GROUP, your data will be sent via API and trafficked through independent partner platforms. The collection of financial data is never performed within the LEAG GROUP Platform, because LEAG GROUP does not store banking data of its Users, and only the card token is stored to generate recurring charges. Payments will be made through the following independent partner platforms:

- Payments in Real (R$), will be made by DLocal via smart fields integration in our platform.

- Payments in Dollar (US$), Euro (€) or Swiss Franc (CHF), will be made by Worldline (Six payment) via redirection to the virtual environment of the partner company.

- Through PayPal, in different currencies, via digital wallet.

5. What data do you need to tell us when you register on the platform?

The following information is required to register and use the LEAG GROUP Platform services:

- Network User: trade name; company name; CNPJ; complete address; name, CPF, telephone number and e-mail of the responsible Administrator.

- Member User: Company's / business' trade name; city, region / state and country; name and e-mail address of the administrator in charge.

- Team User: name, e-mail, and department.

- Optionally for all Users above: inclusion of a photo or image as identification of your login, in addition to registering additional data such as cell phone number, CPF, and complete address.

- Visiting User: no registration is required to browse the BUSINESS Pages in the web environment of LEAG GROUP Platform, but to participate in a videoconference or request a quote or contact will require: name, e-mail and company name for access. Filling out and sending the "Become a Member" form will additionally require the following information: area of activity, country, state, city and website address.

6. Who is the controller of your personal data?

Controller is a natural or legal person, of public or private law, who is in charge of decisions concerning the processing of personal data.

An operator is a natural or legal person under public or private law who processes personal data on behalf of the controller.

LEAG GROUP is the controller of the data of Network Users and of any User of its proprietary Networks (LEAG AGENCIES, LEAG ADVISORS, LEAG ATTORNEYS and LEAG ASSOCIATES) and of LEAG Platform (Local Markets) when not linked to a client Network.

LEAG GROUP's client Networks, on the other hand, when they digitalize their Network Communities on the LEAG GROUP Platform, uploading the initial registration data of their Member base, become the controllers of their respective Member Users' data.

7. With whom do we share your personal data?

Except for the cases mentioned in the Privacy Policies, in case of legal consent of the holder of the personal data and by force of a court order or legal determination, we will not share your data with third parties.

8. Will your access logs be collected?

When you log in to our platform, we collect your access logs, that is, the set of information regarding the date and time of use of a particular internet application from a particular IP address. This information will be kept by LEAG GROUP under confidentiality, in a controlled and secure environment, for at least six (6) months, in accordance with the Brazilian legislation - Law No. 12,965/2014, and Article 7, II, of Law 13709/18.

9. Is there indirect data collection?

In addition to access logs, we may collect information indirectly through cookies, as described in the Privacy Policies. Some of these cookies are essential to the operation of the platform.

We may also collect information such as login, behavior and preferences of the User and other information collected by Google Analytics.

Optional solutions from partners integrated into the LEAG GROUP Platform, such as the Doity event management platform, and payment methods (DLocal, Worldline and PayPal) may, at their discretion and responsibility, request additional data not accessed and managed by LEAG GROUP, which will be hosted by the respective requesting companies.

10. Will communication records be stored?

We store, in encrypted form and with complete privacy and security, all conversations you have with us or with other Users through the platform's native communication tools. This allows us to offer an effective and fluid communication solution with your contacts, preserving the conversation history and facilitating interactions. Files, photos or images that are attached to these messages are also encrypted and remain available for access by the receiver(s) of the message for up to 7 (seven) calendar days, after which time they are deleted from our database.

Messages exchanged with visitors or other users through independent third-party platforms, integrated into your BUSINESS Page on the LEAG GROUP Platform, are neither accessed nor stored by LEAG GROUP, following the security and privacy criteria of the respective solution provider.

11. How will your data be processed?

All your data is processed for specific purposes and in accordance with the Swiss Federal Data Protection Act (DPA), the Brazilian Personal Data Protection Act No. 13,709/2018 (LGPD), the European Union General Data Protection Regulation 2016/679 (GDPR) and the UK General Data Protection Regulation (UK GDPR). All of this information is described in a table, for ease of viewing, in our Privacy Policies.

12. What are your rights?

Even if you have already provided us with your personal data, you have the full right at any time to: confirm the existence of processing of your data; access your data; correct your data; anonymize your data; block or delete data that is unnecessary, excessive or processed unlawfully; request data portability to another provider; delete data, except those required by law; obtain information on with whom LEAG GROUP has shared data; obtain information on the possibility of not providing consent and the consequences of refusal; and go back and revoke your consent.

If you are established in Switzerland, here is the list of rights you have and how to apply. If you are based in the European Union, here is a list of rights you have and how to apply.

13. Can these Privacy Policies be changed?

Our Privacy Policies may change, but you can always access the most current version on our platform. Also, if we are going to take any action that the law requires your consent, you will receive advance notice so that you can accept or decline.

14. What are the contents of the Privacy Policies?

The following Privacy Policy is divided as follows to make it easier for you to access the information:

01. Date Posted

02. Data Controller

03. Privacy Communication Channel

04. Explanation of Technical or Foreign Language Terms

05. User Privacy and Third-Party Data Operators

06. Data Collection

07. Personal Data Processing

08. Sharing of User Data

09. Cancellation of Access Accounts and Deletion of Data

10. Rights of the Data Subject

11. How Long We Keep Your Personal Data

12. Information Security

13. Changes to Privacy Policies

14. Contact and General Provisions

LEAG GROUP.

PRIVACY POLICIES

We ask that, before using our platform, you read these Policies carefully. If you have any questions or concerns about your personal data, please contact us at data@leaggroup.com.

In addition, we are always available to answer any questions you may have by emailing leag@leaggroup.com.

These Policies are intended to inform you what types of personal data we may collect or hold about you, how we use it, with whom we share it, how we protect and keep it secure, and your rights regarding personal data in accordance with privacy and personal data protection laws.

LEAG GROUP is based in Switzerland and therefore operates under the Laws and Regulations of the Swiss Confederation, in particular under the Swiss Federal Data Protection Act (DPA).

Furthermore, we are compliant with the Brazilian General Personal Data Protection Act Law No. 13,709/2018 (LGPD) and the European Union General Data Protection Regulation 2016/679 (GDPR) and the United Kingdom.

The use of our platform is permitted only for persons over eighteen (18) years old.

1. DATE OF AVAILABILITY OF THE TEXT

1.1. The present version of this document was made available on XX/XX/XXXX.

2. DATA CONTROLLER

2.1. This platform, whose name is LEAG GROUP Platform, is owned, maintained and operated by LEAG GROUP S.A, a company registered under the IDE CHE 292.051.064, with head office at Château de Vaumarcus, Le Château 3, Vaumarcus 2028, La Grande Beroche, Switzerland.

2.2. The Controller is a natural or legal person, governed by public or private law, who is responsible for decisions concerning the processing of personal data.

2.3. The operator is a natural or legal person under public or private law who processes personal data on behalf of the controller.

2.4. The LEAG GROUP is the controller of the data of Network Users and any User of its proprietary Networks (LEAG AGENCIES, LEAG ADVISORS, LEAG ATTORNEYS and LEAG ASSOCIATES) and of LEAG Platform (Local Markets) when not linked to a client Network.

2.5. When networks that are clients of LEAG GROUP digitalize their Network Communities on the LEAG GROUP Platform by uploading the initial registration data of their Member base, they become the data controller of their respective Member Users.

3. COMMUNICATION CHANNEL ON PRIVACY

3.1. LEAG GROUP informs you that, due to its nature and size, it is exempt from appointing a data controller, pursuant to Resolution CD/ANPD No. 2 of January 27, 2022, and Article 37 of the European Union's General Data Protection Regulation (GDPR).

3.2. However, it emphasizes that your privacy remains a priority, and therefore makes available the following channel for communication on any matter involving personal data: data@leaggroup.com.

4. EXPLANATION OF TECHNICAL OR FOREIGN LANGUAGE TERMS

4.1. Below are the meanings of the technical nomenclatures and terms in English language:

- API: It is a set of routines and programming standards for accessing a Web-based software application or platform. The acronym API refers to the term "Application Programming Interface".

- Controller: A natural or legal person, under public or private law, who is responsible for decisions concerning the processing of personal data;

- Cookies: Small text files that are stored on the internet user's computer and can be retrieved by the site that sent it during navigation. They are used mainly to identify and store information about visitors.

- Cryptography: Set of principles and techniques to encrypt writing, making it unintelligible to those who do not have access to the combined conventions.

- Personal data: Information related to an identified or identifiable natural person;

- Sensitive personal data: Personal data regarding racial or ethnic origin, religious conviction, political opinion, membership of a union or religious, philosophical or political organization, data concerning health or sex life, genetic or biometric data, when linked to a natural person;

- DPO: Person appointed by the controller and operator to act as a communication channel between the controller, the data subjects and the Data Protection Authority of the countries in which we operate.

- IP (or Internet Protocol): Unique identification for each computer connected to a network.

- Operator: A natural or legal person, under public or private law, who carries out the processing of personal data on behalf of the controller;

- Smart Fields: Are user interface components pre-created by some payment processors that make it possible to provide payment forms that securely collect card information from customers without sensitive data passing through our servers.

- Credit card token: Card tokenization provides a more secure digital payment experience because it replaces the card number with an alternate number, called a token, by associating it with a specific card and a pre-defined e-commerce. In this way, you can verify the origin of a token and restrict its use to a single device or e-commerce, enabling recurring charges for subscriptions without the need for the vendor to store the card's data.

- Data Processing: Any operation carried out with personal data, such as those related to the collection, production, reception, classification, use, access, reproduction, transmission, distribution, processing, filing, storage, elimination, evaluation or control of the information, modification, communication, transfer, dissemination or extraction.

- Upload: English term that means the action of sending data from a local computer to a remote computer or server, generally through the Internet.

- User(s): The one(s) that use(s) the platform.

5. USER PRIVACY AND THIRD-PARTY DATA OPERATORS

5.1. Protecting your privacy is very important to us. Your personal data is transferred in encrypted form and stored on cloud servers provided by AWS Amazon in the United States - responsible for storage and security, access to which is restricted. In addition, we use security certificates, encryption, and a variety of security technologies and procedures to help protect User information.

5.1.1. These servers are independent and unrelated to this text. We therefore recommend that you also read the terms of use and privacy policies of that platform and see if you agree with all provisions before using our services.

5.1.2. Your personal data may be transferred to, accessed and stored at a destination outside Switzerland, Brazil or the European Union. Although some countries do not have laws or an adequate level of laws governing the protection of personal data, we will ensure that reasonable steps are taken to ensure that third parties comply with the commitments set forth in these Privacy Policies, for example, by reviewing the privacy and security standards of the third parties and/or by entering into appropriate agreements.

5.1.3. In order to process information regarding payments for products and/or services offered directly by LEAG GROUP, your data will be sent via API and trafficked through independent partner platforms. The collection of financial data is never performed within the LEAG GROUP Platform, because LEAG GROUP does not store data of a banking nature of its Users, and only the card token is stored to generate the recurring charges. Payments will be made through the following independent partner platforms:

- Payments in Real (R$), will be made by DLocal via smartfields integration on our platform.

- Payments in Dollar (US$), Euro (€) or Swiss Franc (CHF), will be made by Worldline (Six payment) via redirection to the virtual environment of the partner company.

- Through PayPal, in different currencies, via digital wallet.

5.2. If you are in Brazil, please be aware that the servers used by LEAG GROUP are located in the United States and are equipped with mechanisms capable of ensuring the security of your data and are used so that LEAG GROUP can perform its service properly and securely, as per Article 33, IX Brazilian General Law of Personal Data Protection Law No. 13,709/2018 (LGPD). If you are established in the European Economic Area, the United Kingdom or another jurisdiction outside the United States, please be aware that the information we collect will be processed and stored in the United States through the AWS Amazon Standard Contractual Clauses.

5.3. All access records, set of information regarding the date and time of use of a given Internet application from a given IP address, will be kept by LEAG GROUP, under confidentiality, in a controlled and secure environment, for a minimum period of 06 (six) months, in accordance with the Brazilian legislation - Law No 12,965/2014, and Article 7, II, of Law 13709/18.

5.4. The User must take responsibility and declare himself exclusively responsible for all actions, as well as for all information and the veracity of the content that he inserts in the platform.

6. DATA COLLECTION

6.1. Data provided by the User:

6.1.1. Network User: trade name; company name; company Taxpayer Identification Number; complete address; name, individual Taxpayer Identification Number, phone number and e-mail of the account manager (Admin).

6.1.2. Member User: Member company's trade name or business; city, region / state and country; name and e-mail of the account manager (Admin).

6.1.2.1. Team User: name, e-mail and department.

6.1.3. Optionally for all Users above: inclusion of a photo or image to identify your login, in addition to complementary data such as individual Taxpayer Identification Number, cell phone number and full address.

6.1.4. Visitor User: No registration is required to browse the BUSINESS Pages in the web environment of LEAG GROUP Platform, but to participate in a videoconference or request a quote or contact will require: name, e-mail, phone number and company name for access. Filling out and sending the "Become a Member" form will additionally require the following information: area of activity, country, state, city and website address.

6.2. Information we collect indirectly:

6.2.1. In addition to access logs, we may collect information indirectly through cookies, as described in the Privacy Policies. Some of these cookies are indispensable for the operation of the platform.

6.2.2. We may also collect information such as login, behavior and preferences of the User and other information collected by Google Analytics.

6.2.3. The optional solutions of partners integrated into the LEAG GROUP Platform and the means of payment (DLocal, Worldline and PayPal) may, at their discretion and responsibility, request additional data not accessed and managed by LEAG GROUP, which will be hosted by the respective requesting companies.

6.3. Contact history:

6.3.1. We store, in encrypted form and with complete privacy and security, all conversations you have with us or with other Users through the platform's native communication tools. This allows us to offer an effective and fluid communication solution with your contacts, preserving the history of conversations and facilitating interactions. Files, photos or images that are attached to these messages are encrypted and remain available for access to the receiver(s) of the message for up to 7 (seven) calendar days, after which time they will be deleted from our database.

6.3.2. Messages exchanged with visitors or other Users via independent third-party platforms, integrated into your BUSINESS Page on the LEAG GROUP Platform, are neither accessed nor stored by LEAG GROUP, following the security and privacy criteria of the respective solution provider.

7. TREATMENT OF PERSONAL DATA

7.1. By accepting this privacy policy, the User understands that the platform processes his/her personal data, according to the information presented in the table below (Users living in Brazil).

7.1.1. To access the legal basis table related to Users located in Switzerland, click here.

7.1.2. To access the table of legal basis related to Users located in the European Union, click here.

Type of Personal Data	Legal Basis	Purpose
Name / Department / Corporate Name / Trade Name / Business	Necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13.709/2018).	a) Related to the Individual: Used for User identification and logged search in communication channels according to the contracted subscription plan, as well as presentation on the Company / Business' own page on the platform. b) Related to the Legal Entity: Used for identification of the company on the platform, on search engines, on the URL of the page on the platform.
E-mail and Phone number	a) Necessary for the execution of a contract or preliminary procedures related to a contract to which the data subject is a party, at the request of the data subject (Art. 7, V, Law No. 13.709/ 2018). b) Necessary for the fulfillment of the legitimate interest of the controller (Art. 7, IX, Law No. 13.709/ 2018).	a) Used for login and validation of registration on the platform, as well as a means of communication with the User for notifications of access, contacts and interactions throughout the journey of use of the platform. Also, in the case of the telephone, it will be used as a means of contact in cases of default. b) Used for marketing actions, notifications on the program and news, informing about changes in our terms, services or policies.
Individual and company Taxpayer Identification Number and address	Compliance with legal or regulatory obligation by the controller (Art. 7, II, Law No. 13.709/ 2018).	Used to issue an invoice for the services provided by the platform.
Photo	Necessary for the fulfillment of the legitimate interest of the controller. (Art. 7, IX, Law No. 13.709/ 2018).	Used to bring network relations closer, presenting it in the logged communication channels and on the Company / Business page on the platform according to the contracted subscription plan and by User action.
Location	Necessary for the fulfillment of the legitimate interest of the controller. (Art. 7, IX, Law No. 13,709/ 2018).	Introduces Users to the origin of the Company or Business and is used for continuous analysis and optimization of our pages and content, improve your experience on our websites and applications, technical and operational support and ensure the functionality of our services.
Access logs	Compliance with legal or regulatory obligation by the controller (Art. 7, II, Law No. 13.709/ 2018).	Obedience to Article 15 of Law No. 12,965/2014, which imposes the duty of LEAG GROUP to keep the respective access records to internet applications, under secrecy, in a controlled and secure environment, for at least 6 (six) months.
Country, state and city	a) Necessary for the performance of a contract or preliminary procedures related to the contract of which the holder is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018). b) Necessary for the fulfillment of the legitimate interest of the controller (Art. 7, IX, Law No. 13,709/2018).	a) It is used in the User's profile, as it presents to the community the origin / general location of the Company or Business, including visually identifying on the network map and the Member User's BUSINESS Page. In addition, it enables users to search the platform by region. b) Can be used for continuous analysis and optimization of our pages and content, improve your experience on our websites and applications. Also used for marketing actions and identification of offers and partnerships.
Area or segment of activity	Necessary for the performance of a contract or preliminary procedures related to the contract of which the holder is a party, at the request of the data subject (Art. 7, V, Law No. 13,709/2018).	We use, according to criteria established by the Network, to categorize members and offer a search system facilitated by filters.
Url of the website	Necessary for the fulfillment of the legitimate interest of the controller (Art. 7, IX, Law No. 13,709/ 2018).	Used by the Network to allow it to learn more information about Companies/Businesses and their Managers that want to participate in a Network Community.

7.2. The information described in the table above refers to the purposes and legal basis used by the LEAG GROUP Platform. Network Users and Member Users may use the data they collect through the platform, or that they enter in the platform, as natural controllers, for their own purposes to be informed by them in an appropriate document.

8. SHARING OF USER DATA

8.1. Only people strictly necessary to provide the service, such as administrators, sales, user service, financial or accounting management of operations, may have internal access to User information, for which the signature of a secrecy and confidentiality agreement is required.

8.2. Also, when strictly necessary, the Users' data will be shared by LEAG GROUP with the following persons and companies for the following purposes:

8.2.1. AWS Amazon: since the personal data is stored on its servers;

8.2.2. Google Analytics: since they are responsible for indirectly collecting data to measure and monitor access to the platform;

8.2.3. Jivochat: since they are responsible for the online chat solution on the BUSINESS Page and for storing the conversations;

8.2.4. Calendly: since they are responsible for the solution of scheduling meetings and for storing the agendas programmed by the Users;

8.2.5. Jitsi: once they are responsible for providing the videoconference and video call solutions performed in the platform;

8.2.6. DLocal: since they process payments in Reais (R$);

8.2.7. Worldline: once they process payments in dollars (US$), euros (€) or Swiss francs (CHF);

8.2.8. PayPal: once they process payments in Dollar (US$) or other currencies in the different countries in which we operate;

8.2.9. Developers: since they are responsible for the development and maintenance of the systems and tools of the LEAG GROUP Platform.

8.2.10. Network Users: since they are the administrators of a Network Community and, for such, they access their restricted area with quantitative information and reports on the activities, frequency of use of the tools and interactions of their respective Members with other Users on the platform, always preserving the confidentiality of the messages as described in item 6.3;

8.2.11. LEAG GROUP will also share Users' data with third parties (service providers) directly involved in data processing on behalf of LEAG GROUP, for which it is required to sign a Secrecy and Confidentiality Agreement.

8.2.12. As soon as these people and companies have access to this data, they become responsible for the security, processing and proper sharing of this information and may not disclose it for other purposes, in breach of current legislation or of these Privacy Policies, under penalty of being liable for all punishments, especially those of a civil, criminal nature and those applied by the Data Protection Authority of the countries in which LEAG GROUP operates.

8.3. Except in the cases mentioned, in case of legal consent of the holder of the personal data and by force of a court order or legal determination, we will not share your data with third parties.

9. CANCELLATION OF ACCESS ACCOUNTS AND DELETION OF DATA

9.1. Cancellation of access accounts by LEAG GROUP: LEAG GROUP may, at its sole discretion, block, restrict, disable or impede the access of any User on the platform, whenever illicit or prohibited conduct is detected, or conduct that is not in conformity with the terms of use and privacy policies of the platform.

9.2. Cancellation of access accounts by the Member User: To cancel the platform services, the User should access the User's menu, where there is access to the item "Support" and then the function "Cancel My Account".

9.3. The Network User may, at its sole discretion, request LEAG GROUP to exclude a Member from its Network Community on the platform. In such cases, LEAG GROUP may offer this Member the option to transfer his or her details and continue his or her participation on the platform in another Network Community that accepts him or her.

9.4. Cancellation of Network access accounts: In order to cancel the services of a Network subscription to the platform, the Network User must request in writing to LEAG GROUP at least 60 (sixty) days before the end of the contract, observing specific conditions defined in the commercial proposal and contract agreed between the parties.

9.5. Deletion of data: At the time of account cancellation, when the purpose of data treatment ends or in the face of request, the User will have all his data deleted immediately and permanently, except data whose maintenance is required by law or regulation, the data necessary for the regular exercise of rights in judicial, administrative or arbitration proceedings, such as access records (set of information regarding the date and time of use of a particular Internet application from a particular IP address), which will be kept, under secrecy, in a controlled and security environment, for a period of 6 (six) months, under Brazilian Law no. 12.965/2014 and with the legal basis of art. 7, II, of the General Law of Protection of Personal Data.

10. RIGHTS OF THE PERSONAL DATA OWNER

10.1. The holder of personal data is entitled to obtain from the controller, in relation to the data processed by him, at any time and upon request:

10.1.1. confirmation of the existence of data processing;

10.1.2. access to the data

10.1.3. correction of incomplete, inaccurate or out-of-date data;

10.1.4. anonymization, blocking or deletion of unnecessary, excessive data or data treated in disagreement with the provisions of Law 13.709/2018;

10.1.5. portability of data to another service or product provider, upon express request, in accordance with the regulations of the national authority, observing commercial and industrial secrets;

10.1.6. Deletion of data processed with the consent of the holder, except in the cases provided for in Law 13.709/2018;

10.1.7. Information of public and private entities with which the controller has shared data use;

10.1.8. Information on the possibility of not providing consent and the consequences of refusal;

10.1.9. revocation of consent.

10.2. If you are established in Switzerland, here is the list of rights you have, and how to apply.

10.3. If you are established in the European Union, please see here the list of rights you have, and how to apply.

11. HOW LONG WE KEEP YOUR PERSONAL DATA

11.1. Your personal data will be kept only for as long as it is necessary for us to provide the services you have requested or to fulfill our legal or commercial obligations.

11.2. The criteria we use to determine the retention period for your personal data include:

11.2.1. the purpose for which we hold your personal data;

11.2.2. our legal and regulatory obligations in respect of that personal data;

11.2.3. fulfilling your requests, such as the provision of our services/contracts;

11.2.4. your active participation or involvement on our platform;

11.2.5. any specific requests from you regarding the deletion of your personal data; and

11.2.6. our legitimate business interests in relation to managing our own rights, for example the defense of claims or for security purposes.

11.3. If we no longer need to use your personal data, it will be removed from our systems and records, or anonymized so that you can no longer be identified from it.

12. INFORMATION SECURITY

12.1. We are committed to preserving the stability, security and functionality of the platform through technical, administrative and legal measures compatible with international standards and by encouraging the use of good practices. However, no service available on the internet has total guarantee against illegal invasions. In cases where unauthorized third parties illegally invade the system, LEAG GROUP will do its best to find the person responsible for the illegal action, but is not liable for the damage caused by them.

13. CHANGES TO THE PRIVACY POLICY

13.1. LEAG GROUP may unilaterally add and/or modify any clause contained in these Privacy Policies. The updated version will be valid for the use of our platform carried out as of its publication. Continued access or use of the website after publication will confirm the validity of the new Privacy Policies by the Users.

13.2. In case the change requires the User's consent, the User will be presented with the option to freely, unequivocally and informedly accept the new text or to refuse it.

13.3. If the User does not agree with the change, he/she may not provide consent to specific acts or may terminate his/her link with LEAG GROUP altogether. Such termination shall not, however, exempt the User from complying with all obligations assumed under previous versions of the Privacy Policies.

14. CONTACT AND GENERAL PROVISIONS

14.1. LEAG GROUP provides the e-mail address leag@leaggroup.com as a channel to clarify doubts and obtain suggestions from its Users.

14.2. LEAG GROUP has a specific text to regulate the license of use, rights, duties, guarantees and general provisions: the Terms of Use. All these documents are inseparably part of these Privacy Policies.

14.3. LEAG GROUP never sends links or e-mails to update registration data with executable files in extension (.exe; .com; .scr; .bat) or links for downloading.

14.4. The User declares to be aware of all the privacy conditions set forth herein, exempting LEAG GROUP from any liability in case of noncompliance with these Policies by Users of the LEAG GROUP Platform or third parties.

TO BETTER UNDERSTAND WHAT WE DO WITH YOUR INFORMATION