ARRISE PRIVACY POLICY

Welcome to our Privacy Policy, effective from October 7, 2024. This policy relates to the event “Night
of the Companies” being held on the 16th and 17th October 2024 (the “Event”) in which Arrise shall
be a partner.

ARRISE respects privacy, security, and online safety, and are committed to protect personal data from
the risks of theft, disruption, and unauthorised access to users’ online information and activities. This
Privacy Policy is designed to inform you about how we collect, use, and share your personal data when
you interact with us through the submission of the form found at
https://www.noapteacompaniilor.ro/bucuresti/arrise/ .
We may change this Privacy Policy at any time, and if we do, we will notify you of the changes to this
page as well as the date that the changes take effect.

We encourage and recommend all participants of the Event to read this document in full.

1. Introduction
1.1 This Privacy Policy sets out the way in which ARRISE (the “company”, “we” or “us“, “our”), a
company incorporated and registered in Romania, collects and processes Personal
Information. If you have any questions about this Privacy Policy or the processing of your
Personal Information, please contact us at privacy@arrise.com.
1.2 Through the submission of sign up form, you acknowledge ARRISE (and any companies in our
Group) will process your Personal Information in accordance with this Privacy Policy. If you do
not wish to provide your Personal Information on the basis set out in this Privacy Policy, you
should not enter the relevant information on the website forms, or otherwise provide us with
any of your Personal Information. However, if you do not provide this Information, we may not
be able to provide support regarding your queries.
1.3 Capitalised terms are defined in this Privacy Policy and shall have the meaning assigned to
them under the GDPR.
2. The information we collect
2.1 As part of the sign up process for the Event, we collect your Personal Information. “Personal
Information” means any information from which you can be personally identified, such as
name, age, email address, home or business address, telephone number, internet protocol (IP)
address, browser type and version, browser actions and patterns, time zone and location,
information about operating system, platform and other technologies on the device you use
to access the form, usage data, device data, survey replies.
2.2 We collect the Personal Information which you provide to us, including when you register
interest on our registration forms.
3. How we use your Personal Information
3.1 In accordance with data protection laws, we will only process your Personal Information where
we have a lawful basis for doing so. In respect of your Personal Information, via
the https://www.noapteacompaniilor.ro/bucuresti/arrise/ page, we collect information about
your device (through cookies and other tracking technologies) to understand how our site is
used and to assist in making continuous improvements.
4. Disclosure of your Personal Information
4.1 We may, for the identified stated purposes, disclose your Personal Information to any of the
following recipients:
4.1.1 any company within our Group (including to its employees and sub-contractors) which
assists ARRISE in fulfilling the stated purposes or which otherwise has a need to know such
information;
4.1.2 any third party which assists ARRISE in fulfilling the stated purposes, including (but not
limited to) providing support through Human Resources, Legal, Commercial, Compliance
or our Information Security teams;
4.1.3 any third party which assists ARRISE in monitoring use of our website, including the
detection and prevention of fraud and collusion;
4.1.4 any contractors or other advisers auditing any of our business processes or who have the
need to access such information for the purpose of advising ARRISE;
4.1.5 any law enforcement body which may have any reasonable need to access your Personal
Information;
4.1.6 any potential purchaser of our business or any investors in it or in any company within our
Group (including in the event of insolvency);
4.2 If at any time you wish us to stop processing your Personal Information, please contact us
at privacy@arrise.com.
5. Marketing Preferences
5.1 ARRISE or any company within ARRISE Group will not send you unsolicited information
regarding any third party’s products or services.
6. Transfer of your Personal Information outside of the EEA
6.1 Your Personal Information will be transferred outside of the European Economic Area, both to
us and other members of our Group. This includes, but is not limited to, the Ukraine, Isle of
Man, Guernsey, India, or any location where you have applied for a position. Where we
transfer your personal data outside of the EEA, we will put in place adequate measures to
ensure that your Personal Information is kept secure (and such adequate measures shall
include: (i) transferring to a jurisdiction which the European Commission recognises as
providing adequate protection for the rights and freedoms of data subjects in connection with
the processing of their personal data; and (ii) transfers pursuant to standard contractual
clauses in accordance with European Commission decisions on transferring personal data).
7. Updating your Personal Information
7.1 You may request an update or deletion of your Personal Information at any time by
contacting privacy@arrise.com.

8. Your Data Subject Rights
8.1 You have the following rights in relation to your Personal Information:
8.1.1 a right to access your Personal Information as held by us (also known as a subject
access request);
8.1.2 a right to receive certain Personal Information in machine-readable format;
8.1.3 a right to object to processing where the lawful basis relies on our legitimate
interests, however, please note that we may still process your Personal Information
where there are other relevant lawful bases or where we have compelling grounds
to continue processing your Personal Information in our interests which are not
overridden by your rights, interests or freedoms.
8.1.4 a right to have inaccurate Personal Information rectified;
8.1.5 a right to have certain Personal Information erased where it is no longer necessary
for us to process it or where erasing your Personal Information is required in
accordance with a legal obligation;
8.1.6 a right to request an explanation of the logic involved where we make decisions
about you solely through automated means;
8.1.7 a right to complain to the National Supervisory Authority for Personal Data
Processing at www.dataprotection.ro, if you have any complaints regarding Data
Protection
8.1.8 where we have specifically requested your consent to process your Personal
Information and have no other lawful conditions to rely on, you have the right to
withdraw this consent; and
8.1.9 a right to object to direct marketing, which can be done by opting out of direct
marketing via the communication itself. You also have a right to object to any
profiling to the extent that it relates to direct marketing only.
8.2 If you are unsure about your rights or are concerned about how your Personal Information
may be processed, you should contact your national data protection regulator.
8.3 If you would like to exercise any of your rights, then you can do so by contacting us as described
below. Please be aware that while we will try to accommodate any request you make in
respect of your rights; they are not absolute rights. This means that we may have to refuse
your request or may only be able to comply with it in part.
8.4 Where you make a request in respect of your rights, we will require proof of identification.
We may also ask that you clarify your request. We will aim to respond to any request within
one month of verifying your identity. If we receive repeated requests or have reason to believe
requests are being made unreasonably, we reserve the right not to respond.

9. Retention of your Personal Information
We will retain your Personal Information for the period necessary for us to comply with our legal
and regulatory responsibilities and fulfil our legitimate business interests, or until you withdraw

your consent. Accordingly, where it is no longer necessary for us to process your Personal
Information, we will delete it sooner.
10. Contacting us
If at any time you believe that we have not adhered to this Privacy Policy, please contact our privacy
team at privacy@arrise.com.
11. Security
11.1 We are committed to ensuring that your Personal Information is secure. To prevent
unauthorized access or disclosure, we have put in place suitable physical, electronic and
managerial procedures to safeguard and secure the Personal Information that we collect.
11.2 All the Personal Information that you provide us is stored in a secure computing environment
protected by secure firewalls to prevent unauthorized access. We control access so that only
people who need to access the Personal Information can. All staff are provided security
training and are required to adhere to a comprehensive set of security policies, procedures,
and standards related to their jobs.
11.3 Where your Personal Information needs to be disclosed to our service providers, we require
them to process and protect your Personal Information in a manner consistent with this
Privacy Policy and applicable laws.

12. Your Obligations
By providing your Personal Information when submitting the registration form with us, you
acknowledge that you are required to provide your actual, accurate and complete Personal
Information as requested by the company. Furthermore, you must inform us of any changes to your
Personal Information so as to ensure it is kept up-to-date and accurate.