Privacy Statement INC.LEGAL B.V.

• Data Controller

INC., as data controller, respects your personal data and ensures that personal information is treated confidentially. Personal data refers to any information relating to an identified or identifiable person. This is broader than one might initially think—information that indirectly reveals something about someone is also personal data. This privacy statement fulfills INC.’s obligation under the GDPR to inform you, as a data subject whose personal data is processed by INC.

• Why does INC. process personal data?

We process personal data to provide and improve our services and to communicate with you personally. Additionally, as a data subject, you may choose to provide personal data for optional services, such as subscribing to a newsletter or other communications from INC.

• Purposes of processing

INC. processes personal data solely for the following purposes:

• Legal advice and all other activities necessary for your matter (under our agreement), including supporting various projects, registering intellectual property rights, and conducting legal proceedings
• Billing
• Mediation and referral (to other specialists)
• Compliance with legal obligations
• Marketing and communication
• Recruitment and selection

• Which personal data?

We process personal data necessary for our services or provided by you. This may include your name, address, contact details, financial information (e.g., bank account), or other personal data, as well as data of third parties relevant to a matter. Public registers, such as the Dutch Chamber of Commerce and the Land Registry, may also be consulted. Personal data may be obtained from you, third parties, or public sources.

• Legal grounds

INC. processes personal data based on the following grounds under Article 6 of the GDPR:

• Legal obligation
• Performance of a contract
• Consent from the data subject(s)
• Legitimate interest

• Third parties

Your personal data is shared with third parties only when necessary for our services and for the purposes listed above. This may include referrals to other specialists, expertise assessments, or engaging third parties on behalf of INC., such as IT providers. Data may also be shared with authorities as required by law. Third parties processing personal data on behalf of INC. are bound by a data processing agreement and must comply with the GDPR. Third parties acting as independent controllers, such as accountants or notaries, are themselves responsible for GDPR compliance.

• Security

INC. values the security and protection of your personal data and implements appropriate technical and organizational measures, considering current standards, to ensure adequate protection. Third-party service providers engaged by INC. are contractually obligated to implement sufficient security measures.

• Retention period

Personal data is retained only as long as necessary for the purposes described or as required by law.

• Privacy rights

You may request access, correction, restriction, objection, data portability, deletion of your personal data, or withdrawal of consent via the contact details below. INC. will respond within four weeks. Certain requests may not be fully executable due to legal obligations, including attorney confidentiality or statutory retention periods.

Requests should be addressed to:

INC.

Attn: Martina van Eldik

Lange Viestraat 2b

3511 BK Utrecht

info@thisisinc.nl

To verify your request, please provide a copy of a valid passport, driver’s license, or ID with the photo and BSN number obscured. INC. only processes requests concerning your own personal data.

Complaints regarding the processing of personal data can be directed to the contact above. If unresolved, you may contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

• Social media

INC.’s websites (including thisisINC.com, thisisINC.nl, and weareINC.nl) contain buttons or links to third-party websites and social media platforms such as Twitter, LinkedIn, or Instagram. INC. is not responsible for the processing of your personal data by these third parties. Use of such platforms is at your own risk.

• Statistics and cookies

INC. collects usage data for statistical purposes. Data collected is generally anonymized and not sold. Cookies are used to enhance website functionality. You may disable cookies, but this may limit functionality. Google Analytics cookies track user behavior to improve the site. By using INC. websites, you consent to processing by Google as described. Cookies from social media buttons/links are also placed by third parties, not controlled by INC.

• Changes

INC. may update this privacy statement at any time without prior notice. Changes will be published on our websites. Please review regularly.

For questions or comments about the processing of personal data or this privacy statement, contact Martina van Eldik at info@thisisinc.com