Acropolis Docs LLC ("AcropolisDocs") is committed to honoring the privacy and security of personal data of its website users, job applicants, business contacts, and other individuals whose data we will collect ("user(s)" or "you").

This Privacy Policy informs you how we will collect, store and use personal information, when you make use of our websites or otherwise communicate with us in the course of our business activities. It also tells you the choices you can make about how the information you provide to us is used.

What type of information we collect

When you make use of our websites or otherwise communicate with us, we collect the following types of information, which may also include individually identifiable information, namely information that identifies an individual or may - with reasonable effort - identify an individual ("Personal Information"):

• when you register online or make an inquiry regarding our products and services, or provide us with comments or feedbacks. We will capture Personal Information about you so we can communicate effectively with you and address your requests regarding our products or services. We will hold information about your name, the company you work for, address, phone and fax numbers, e-mail address and line of business, etc. We will use this information to help manage your requests.
• if you visit our websites, we will collect Personal Information from your device, such as IP address and other online identifiers (i.e. online data collected from user's devices and protocols which leave traces which may be used to identify users). We use this to optimize your experience and help us to improve our websites and the ways we communicate with you.
• if you attend one of our events: We collect Personal Information if you attend our AcropolisDocs corporate events. This information may include your photos, identifying data (e.g. email, name, etc.) and any other information which may be collected by us in connection with our events.
• if you apply for a job with us: we will collect Personal Information about you if you contact us about an employment opportunity at AcropolisDocs. We will collect and use personal information to help assess your skills and your suitability to the relevant job position. We may also use such data to contact you if we believe a specific job position may interest you. Such information may include your name, email address, CV, telephone number, profile photo, job history and other relevant information.

We may anonymize or de-identify the information collected so that the information cannot, on its own, personally identify you. Our use and disclosure of such aggregated or de-identified information is not subject to any restrictions under this Privacy Policy, and we may use it or disclose it to others without limitation and for any purpose.

How we use the information we collect

We use and share Personal Information as described in this Privacy Policy and for the following purposes:

• To identify and authenticate your access;
• To conduct analytics in order to improve and customize our websites and the ways we communicate with you;
• To present you and your company business opportunities regarding our products and services;
• To send you marketing communications, updates and newsletters and present personalized content (see below under "Marketing");
• To manage your application for a job position at AcropolisDocs (as applicable);
• To support and troubleshoot our services, to respond to your queries and communicate with you;
• To investigate violations and enforce our policies, and as required by law, regulation or other governmental authority, or to comply with a subpoena or similar legal process or respond to a government request

Legal basis for using your Personal Information

We will only collect, use and share your Personal Information where we are satisfied that we have an appropriate legal basis to do this. This may be because:

• we need to use your Personal Information to perform a contract or take steps to enter into a contract with you. For example, when you provide your information with us in order to apply to a job position in AcropolisDocs.
• we need to use your Personal Information for our legitimate interest as a commercial organization. For example, we may collect your Personal Information in order to communicate with you and present you marketing materials and opportunities regarding our products and services.
• we need to use your Personal Information to comply with a relevant legal or regulatory obligation that we have; or
• we have your consent to use your Personal Information for a particular activity.

With whom we share the information we collect

We may share your Personal Information in the manner and for the purposes described below:

• with other companies within our Group, where such disclosure is required to assist us in fulfilling the purposes described in this Privacy Policy or to manage our business; and
• with third parties and service providers who help our business (e.g. for data analytics purposes, communicating promotional and informational materials, etc.). These third parties have agreed to confidentiality restrictions and use any Personal Information we share with them or which they collect on our behalf for the purpose of providing the contracted service to us.

We may also disclose Personal Information, or any information you submitted us, if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, legal process or governmental request; (ii) enforce our policies, including investigations of potential violations thereof; (iii) investigate, detect, prevent, or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues; (iv) to establish or exercise our rights to defend against legal claims; (v) prevent harm to the rights, property or safety of us, our users, yourself or any third party; or (vi) for the purpose of collaborating with law enforcement agencies or in case we find it necessary in order to enforce intellectual property or other legal rights.

Marketing

We may use Personal Information to let you know about our products and services that we believe will be of interest to your company. We may contact you by email, post, or telephone or through other communication channels that we think you may find helpful. In all cases, we will respect your preferences for how you would like us to manage marketing activity with you.

To protect your privacy and to ensure you have control over how we manage marketing activities with you:

• we will take steps to limit direct marketing to a reasonable and proportionate level and only send you communications which we believe may be of interest or relevance to you;
• you can ask us to stop direct marketing at any time you can ask us to stop sending email marketing, by following the "unsubscribe" link you will find on all the email marketing messages we send you.

You can change the way your browser manages cookies, which may be used to deliver online advertising, by following the settings on your browser as explained above.

Security of your Personal Information

We take security very seriously. We have implemented and maintain appropriate technical and organizational security measures, policies and procedures designed to reduce the risk of accidental destruction or loss, or the unauthorized disclosure or access to such information appropriate to the nature of the information concerned. Measures we take include, for example:

• placing confidentiality requirements on our staff members and service providers;
• destroying or permanently anonymizing Personal Information if it is no longer needed for the purposes for which it was collected; and
• applying security controls in the storage and disclosure of your Personal Information to prevent unauthorized access to it.

As the security of information depends in part on the security of the computer you use to communicate with us and the security you use to protect User IDs and passwords, please take appropriate measures to protect this information. However, due to the open communication nature of the Internet, we cannot guarantee that communications between you and AcropolisDocs, and AcropolisDocs and you, will be free from unauthorized access by third parties.

Storing your Personal Information

We will store your Personal Information for as long as is reasonably necessary for the purposes for which it was collected, as explained in this privacy policy. Where your information is no longer needed, we will ensure that it is disposed of in a secure manner. In some circumstances we may store your Personal Information for longer periods of time, for instance where we are required to do so in accordance with legal, regulatory, tax, accounting requirements.

In specific circumstances we may store your Personal Information for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Information or dealings.

Transferring Personal Information globally

We operate on a global basis. Accordingly, your Personal Information may be transferred and stored in countries outside of Europe that are subject to different standards of data protection.

We will take appropriate steps to ensure that transfers of Personal Information are made in accordance with applicable law and carefully managed to protect your privacy rights and interests, and limited to countries which are recognized as providing an adequate level of legal protection or where we can be satisfied that alternative arrangement are in place to protect your privacy rights. To this end:

• we ensure transfers within our Group will adhere to applicable privacy and data protection laws and that such transfers ensure a consistent level of protection wherever it is transferred within the Group;
• where we transfer your Personal Information outside of the AcropolisDocs Group to third parties who provide us services, we obtain contractual commitments from them to protect your Personal Information; or
• where we receive requests for information from law enforcement or regulators, we carefully validate these requests before any Personal Information is disclosed.

Legal Rights available to help manage your privacy

Subject to certain exemptions, and in some cases dependent upon the processing activity we are undertaking, you may have, under certain applicable laws, some or all of the following rights in respect to your Personal Information:

• Right to access your own data;
• Accuracy and right of rectification and erasure; and
• Right to object to processing of Personal Information.

Specific rights for EU data subjects

Under applicable EU data protection laws and regulations, EU data subjects have the following rights in respect to their Personal Information:

• You have a right to request access to or obtain a copy of your Personal Information. You have the right to be informed of a number of details concerning the processing of your Personal Information, and this Privacy Policy attempts to provide you with this information. If you still have questions about the source of your Personal Information; the purposes, the legal reasons and methods of processing; the data controller’s identity; or the entities or categories of entities to whom your Personal Information may be transferred, please click here to submit an email to info@acropolisdocs.com with a subject line of Data Subject Access Request.
• Please note that the exercise of your right will be limited to the extent we believe is required to avoid harming rights or freedoms of others, as well as for other reasons (according to applicable laws).

• You have a right to request that we rectify inaccurate Personal Information. We may seek to verify the accuracy of the Personal Information before rectifying it.
• You can also request that we erase your Personal Information in limited circumstances where: (i) it is no longer needed for the purposes for which it was collected; (ii) you have withdrawn your consent (where the data processing was based on consent); (iii) following a successful right to object (see right to object); (iv) it has been processed unlawfully. We are not required to comply with your request to erase Personal Information if the processing of your Personal Information is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims.

• Where we rely upon legitimate interest to process your Personal Information, then you have the right to object that processing if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have legitimate interests which override your rights and freedoms.
• Please note that you also have the right to withdraw consent, in cases where we rely on your consent to collect and process your Personal Information.

• You can ask us to provide you with your Personal Information that you provided to us, in a structured, commonly used, machine readable format, or you can ask to have it transferred directly to another data controller, but in each case only where: (i) the processing is based on your consent or on the performance of a contract with you; and (ii) the processing is carried out by automated means.

• You can object to any processing of your Personal Information which has our legitimate interests as its legal basis, if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.

• You have a right to lodge a complaint with your local supervisory authority if you have concerns about how we are processing your Personal Information. We ask that you please attempt to resolve any issues with us first, although you have a right to contact your supervisory authority.

If you wish to access any of the above-mentioned rights, we may ask you for additional information to confirm your identity and for security purposes, in particular before disclosing Personal Information to you. We reserve the right to charge a fee where permitted by law, for instance if your request is manifestly unfounded or excessive. You can exercise your rights by contacting us.

Subject to legal and other permissible considerations, we will make every reasonable effort to honor your request promptly or inform you if we require further information in order to fulfil your request. We may not always be able to fully address your request, for example if it would impact the duty of confidentiality we owe to others, or if we are legally entitled to deal with the request in a different way.

Minors

The website is not directed nor targeted to children under the age of 16. AcropolisDocs will not knowingly collect information from children. If you are under 16, you may not submit information about yourself to us. In the event that we become aware that a User is under the age of 16 has shared any Personal Information, we will use reasonable efforts to discard such information. If you have any reason to believe that a minor has shared Personal Information with us, please contact us.

Corporate transaction

We may share Information, including Personal Information, in the event of a corporate transaction (e.g. sale of a substantial part of our business, merger, consolidation or asset sale). In the event of the above, our acquiring company will assume the rights and obligations as described in this Privacy Policy.

Updates to this Policy

We reserve the right, at our sole discretion, to change, modify, add, or remove portions from this privacy policy at any time to keep it up to date with legal requirements and the way we operate our business, and will place any updates on this webpage. Please regularly check these pages for the latest version of this notice. If we make fundamental changes to this privacy notice, we will seek to inform you by notice on our website or email.

Contact Us

The primary point of contact for all issues arising from this privacy notice is our Data Protection Officer. The Data Protection Officer can be contacted at info@acropolisdocs.com

If you have any questions, concerns or complaints regarding our compliance with this privacy notice, the information we hold about you or if you wish to exercise your rights, we encourage you to first contact our Data Protection Officer. We will investigate and attempt to resolve complaints and disputes and make every reasonable effort to honor your wish to exercise your rights as quickly as possible and in any event, within the timescales provided by data protection laws.

Date of Privacy Notice: November 1, 2024