WEBSITE PRIVACY NOTICE

Last updated: June 2026

This website privacy notice (the “Privacy Notice”) explains how PL Technologies Limited and, where applicable, other companies within the Premialab group (“Premialab”, “we”, “us” or “our”) collect, use, disclose, transfer and otherwise process personal data relating to visitors and users of www.premialab.com and related online services (the “Website”). It also explains the rights available to individuals under applicable data protection laws.

“Data Protection Legislation” means the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”), the United Kingdom General Data Protection Regulation as incorporated into UK law (“UK GDPR”), the UK Data Protection Act 2018, the Luxembourg law of 1 August 2018 on the organisation of the National Commission for Data Protection and the general data protection framework, the ePrivacy Directive and applicable national implementing laws, including rules on cookies and similar technologies, and any other applicable privacy or data protection laws, regulations and regulatory guidance, as amended, replaced or supplemented from time to time.

1. WHO IS THE DATA CONTROLLER AND WHO TO CONTACT?

The controller responsible for the processing described in this Privacy Notice is PL Technologies Limited, trading as Premialab, unless another Premialab group entity is identified as the controller at the point at which personal data is collected. Where another Premialab group entity acts as controller, its identity and relevant contact details will be provided at that time. Questions or requests concerning personal data should be sent to info@premialab.com.

2. WHAT PERSONAL DATA IS PROCESSED?

Premialab receives and collects the personal data directly from you or through the use of automated technology when you use and interact with the Website.

In particular, the personal data Premialab processes about you may include:

• Personal data that you provide by filling in forms on the Website or using the contact details (this may include your email address, your name and surname, as well as of any personal data contained in your email sent to us);
• If you contact Premialab by email, any records of these exchanges;
• Technical, usage and device data generated when you access or browse the Website, including IP address, device identifiers, browser type and version, operating system, referring URLs, pages viewed, date and time of access, approximate location derived from technical data, log files and security event data;
• Cookie and similar-technology data, including cookie identifiers, consent preferences and analytics or marketing identifiers where these are enabled. Please refer to the Cookie Policy and the Website cookie settings tool for further information about the cookies used, their purposes, providers and retention periods;
• Marketing preference data, including whether you have subscribed to or unsubscribed from newsletters or other marketing communications; and
• Professional or business contact information, such as employer, job title, business email address, business telephone number and country, where you provide this information or where it is necessary to manage access to Premialab’s services.

Premialab does not intentionally collect special categories of personal data through the Website. Please do not provide sensitive personal data unless specifically requested and legally required.

3. FOR WHICH PURPOSES DOES PREMIALAB PROCESS YOUR PERSONAL DATA AND ON WHICH LEGAL BASIS?

3.1 For purposes that are in Premialab’s or a third party’s legitimate interest, such as:

• Helping Premialab to administer, evaluate and improve its business, products, and the services Premialab offers;
• Helping Premialab to improve the performance and usability of the Website;
• Personalizing your Website experience where this can be done on the basis of legitimate interests and does not require consent; where personalization relies on non-essential cookies or similar technologies, Premialab will rely on your consent;
• Sending service-related communications and, where permitted by law, limited business-to-business updates about Premialab’s products and services, subject to your right to object or unsubscribe at any time;
• Establishing aggregated statistics and conducting Website trends, performance and commercial analysis, provided that analytics cookies or similar technologies that are not strictly necessary will only be used with consent;
• Assuring the safety and continuity of Premialab’s IT services and systems;
• Fraud detection;
• The establishment, exercise, and defence of legal claims; and
• In connection with any business reorganization, transfer, disposal, merger, or acquisition on the level of Premialab.

Premialab has conducted or will conduct a legitimate interests assessment where required, balancing Premialab’s interests against the rights and freedoms of the individuals concerned.

3.2 With your consent

Insofar as you have given Premialab your consent for the processing of your personal data, such consent will serve as a legal basis for the referred processing.

This includes consent you may have given for non-essential cookies or similar technologies, analytics or marketing cookies, and newsletters or other electronic marketing communications where consent is required.

You can withdraw your consent at any time by contacting Premialab at the address indicated in clause 11 “Contact”, by using the unsubscribe link in marketing emails, or by changing your cookie preferences through the Cookie Settings tool on the Website. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

3.3 For compliance with legal obligations.

Premialab may process personal data where necessary to comply with applicable laws, regulatory requests, accounting and tax obligations, sanctions screening, record-keeping requirements or requests from competent authorities.

3.4 To take steps at your request or perform a contract.

Premialab may process personal data where necessary to respond to your requests, manage Website registration or access, provide requested services, administer user accounts, or take steps before entering into or performing a contract with you or your organisation.

3.5 COOKIES AND SIMILAR TECHNOLOGIES

The Website uses cookies and similar technologies such as pixels, tags, local storage and analytics tools. Cookies may be strictly necessary, functional, analytics, performance or marketing cookies. The precise cookies in use should be listed in Premialab’s Cookie Policy and cookie settings tool, including the cookie name, provider, purpose, duration, type and whether the cookie is first-party or third-party.

Strictly necessary cookies may be used without consent where they are required to provide the Website or a service requested by the user, such as security, authentication, session management or remembering privacy choices. Non-essential cookies and similar technologies will not be placed on a user’s device unless and until the user has given consent through a clear affirmative action.

The cookie banner should provide clear “Accept all”, “Reject all” and “Manage choices” options of equal prominence, should not use pre-ticked boxes for non-essential cookies, and should allow users to change or withdraw consent at any time through a persistent Cookie Settings link. Premialab should keep appropriate records of cookie consent and periodically refresh consent where required.

4. WHO RECEIVES YOUR PERSONAL DATA?

The following recipients may receive your personal data:

• Service providers, including but not limited to IT or website services suppliers, financial, tax, or legal advisors, that process your personal data on Premialab’s instructions;
• The operator of the general homepage by which the Website is accessible;
• Cookie, analytics, hosting, customer relationship management and marketing communication providers, but only to the extent relevant to the services they provide to Premialab and subject to applicable consent requirements;
• Government, judicial, and supervisory authorities;
• Parties involved in the context of a company restructuring, transfer, divestiture, merger, or acquisition impacting Premialab; and
• Other Premialab group companies, where necessary for the purposes described in this Privacy Notice.

Premialab requires service providers acting as processors to process personal data only on documented instructions, to protect personal data appropriately and to assist Premialab with its compliance obligations.

5. WHERE IS YOUR PERSONAL DATA TRANSFERRED TO?

For the purposes listed above, your personal data may be transferred to recipients and service providers located in the European Economic Area (the “EEA”), the United Kingdom, Hong Kong and other countries in which Premialab or its service providers operate.

Where personal data is transferred outside the EEA, the United Kingdom or another jurisdiction that provides an adequate level of protection, Premialab will implement appropriate safeguards as required by Data Protection Legislation, such as the European Commission’s standard contractual clauses, the UK international data transfer agreement or addendum, adequacy decisions, transfer risk assessments and supplementary measures where required.

6. HOW LONG DOES PREMIALAB RETAIN YOUR PERSONAL DATA?

The retention periods for your personal data are based on Premialab’s business needs and legal requirements.

Premialab may notably retain:

• Personal data you submit to Premialab through a specific request for as long as necessary to respond to the request and manage the related exchange, and thereafter for the period necessary to comply with legal obligations, maintain business records and establish, exercise or defend legal claims, unless a longer or shorter retention period is required by law;
• Cookie consent records for an appropriate period to demonstrate compliance, and individual cookies for the duration specified in the Cookie Policy. Non-essential cookie consent should be refreshed periodically and no later than required by applicable law or regulatory guidance;
• Marketing contact data for as long as you remain subscribed or otherwise until you object or unsubscribe, plus a suppression record to ensure that Premialab respects your opt-out; and analytics or statistics data for as long as necessary for the relevant analysis, preferably in aggregated or anonymised form where possible.

Premialab will delete or anonymise personal data when it is no longer required for the purposes for which it was collected.

7. DO YOU HAVE THE OBLIGATION TO PROVIDE THE PERSONAL DATA?

In the context of Premialab’s business and the functioning of the Website, you only have to provide the personal data that is necessary for Premialab to reply to your requests or necessary for the Website to run properly.

However, please be aware that without certain types of personal data, Premialab may not be able to respond to your requests, provide access to restricted services or ensure that the Website functions securely and properly. You are not required to consent to non-essential cookies in order to access the Website, although some optional features or personalization may not be available without them.

8. TO WHAT EXTENT DOES PREMIALAB USE AUTOMATED DECISIONS MAKING OR PROFILING?

In general, Premialab does not use personal data collected through the Website for automated decision-making that produces legal effects concerning you or similarly significantly affects you. Premialab does not use such personal data for profiling unless this is disclosed separately and, where required, based on your consent. If Premialab introduces such processing, it will provide the information required by Data Protection Legislation before doing so.

9. WHAT ARE YOUR RIGHTS?

9.1 Right to information, rectification, erasure, and restriction of processing

You may request to obtain at no costs, within reasonable intervals, and in a timely manner, the communication of your personal data being processed, as well as all information on the origin of those data.

You also have the right to receive transparent information about how Premialab processes your personal data.

You also have the right to rectify your personal data held about you that is inaccurate.

In cases where the accuracy of the personal data is contested, the processing is unlawful, or where you have objected to the processing of your personal data, you may ask for the restriction of the processing of such personal data. This means that personal data will, with the exception of storage, only be processed with or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of an EU Member State. In case a processing is restricted, you will be informed before the restriction of processing is lifted.

You may request the deletion of personal data held about you, without undue delay when the use or other processing of such personal data is no longer necessary for the purposes described above, and notably when consent relating to a specific processing has been withdrawn or where the processing is not or no longer lawful for other reasons.

9.2 Right to object

You may object to processing of your personal data which is based on the legitimate interests pursued by us or by a third party. In such a case we will no longer process your personal data unless we have compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.

Your right to object is not bound to any formalities.

Where personal data is processed for direct marketing purposes, you have the right to object at any time, including by using the unsubscribe link in any marketing email.

9.3 Right to withdraw consent

You have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The withdrawal only affects future processing.

9.4 Right to data portability

Where the processing of your data is based on consent or the execution of a contract with you, you also have the right to data portability for information you provided to us - this means that you can obtain a copy of your data in a commonly used electronic format so that you can manage and transmit it to another data controller.

9.5 Right to lodge a complaint

You can exercise your rights any time by contacting us at the email address provided in clause 1.

In the event that you wish to make a complaint about how Premialab processes your personal data, please contact Premialab in the first instance at the email address indicated in clause 11 and Premialab will endeavour to deal with your request as soon as possible. This is without prejudice to your right to file a complaint with the Luxembourg data protection authority, the Commission nationale pour la protection des données, the UK Information Commissioner’s Office where the UK GDPR applies, or another competent European data protection authority, for example in your country of residence, place of work or place of the alleged infringement.

Premialab may ask you to provide information reasonably necessary to verify your identity and locate the personal data relevant to your request. Premialab will respond to rights requests within the time limits required by applicable Data Protection Legislation.

10. LINKS TO THIRD PARTY WEBSITES

The Website may contain links to third-party websites, plug-ins or services, for example LinkedIn.

This Privacy Notice applies only to the Website and to Premialab’s processing of personal data as described in this Privacy Notice.

Please check the privacy notices or policies of those third parties to learn how they process personal data under their own responsibility. Premialab is not responsible for the privacy practices of third-party websites or services.

11. CONTACT

If you have any questions regarding this Privacy Notice or the personal data Premialab holds about you, please contact Premialab at info@premialab.com.

To protect your privacy and security, Premialab may take reasonable steps to verify your identity before responding to or complying with a request.

12. CHANGES TO THIS PRIVACY NOTICE

Premialab may update this Privacy Notice from time to time to ensure that individuals are fully informed about Premialab’s processing activities and compliance with applicable Data Protection Legislation.

The latest version of this Privacy Notice will always be available on the Website.

Where required by applicable law, Premialab will notify users of material changes by updating this page, displaying a notice on the Website or, where appropriate, by email. Where a change affects processing based on consent, including non-essential cookies or similar technologies, Premialab will seek renewed consent where required.