Common use of Rights of Data Subject Clause in Contracts

Rights of Data Subject. The Data Subject as a whole has the following basic rights in respect of the Processing of Personal Data:  the right to request the rectification of his/her Personal Data, if they are incorrect or contain incomplete information;  the right to erase his/her Personal Data, as far as permitted by laws and regulations and legitimate interests of the Management company and the Client;  the right to request information on whether the Management company processes Personal Data, and to access such data, as far as permitted by laws and regulations about the confidentiality of information;  the right to withdraw his/her consent to the Processing of Personal Data, in cases where the actions with Personal Data are not grounded by the laws and regulations, and the necessity to fulfil the contract with the Management company or legitimate interests of the Management company, and there are no other legal grounds for Processing;  the right to object to the Processing if it is justified exclusively by the legitimate interests of the Management company and in a particular situation does not correspond to the more important interests of the Data Subject. In the situations, when the Processing is based on the requirements of the laws and regulations, the Data Subject is not entitled to object to the Processing of the respective Personal Data;  the right to request restriction to the Processing for the period, while the Management company considers the request by the Data Subject to rectify the incorrect Personal Data or the validity of respective Processing, аnd the right to request a temporary retention of Personal Data, if the Processing of Personal Data is found to be ungrounded, but the Data Subject objects to their removal;  the right to portability of Personal Data, receiving them in an electronic format with the purpose of transferring information to a third party, taking into account the restrictions stipulated by the laws and regulations;  the right to request a revision of the decision related personally to the Data Subject, that has been taken completely automatically without the participation of the Management company’s employees, and has legal consequences for the Data Subject, subject to the restrictions stipulated by the laws and regulations;  the right to file a complaint with the State Data Inspectorate (00/00, Xxxxxxxx Xxxxxx, Xxxx, XX-0000, Xxxxxxxx xx Xxxxxx) regarding issues related to the procedure of the Processing of Personal Data. All requests related to the execution of the rights of Data Subjects must be addressed to the Management company in writing. The Management company examines the request within the period stipulated by the laws and regulations. If necessary, the Management company may request additional information from the Data Subject, which is necessary for the execution of the request. The rights of the Data Subject are subject to the terms and restrictions which are stipulated in the laws and regulations, and the above list of rights is only informative. The Data Subject can contact the Management company regarding the Processing of Personal Data – by sending a written request to the address: 0 Xxxxxxx Xxxxxx, Xxxx, XX-0000, xxx Xxxxxxxx xx Xxxxxx, e-mail address: xxx@xxxxxxx.xx, by phone +000 00000000, or at the Internet bank. Messages for the Data Protection Officer must contain a remark “To Data Protection Officer”. The Notice applies to all Clients and Data Subjects irrespective of the time of establishment of contractual relationship with the Management company or the receipt of the management services, or consultations on investment in securities. The Notice is applicable also to those Clients and Data Subjects whose Personal Data the Management company received prior to the publishing of the Notice, and the former Clients of the Management company. The latest wording of the Notice is published on the Management company’s website xxxxx://xxx.xxxxxxx.xxx/en/ram. The Management company has the right to unilaterally change the text of the Notice. Unless otherwise specified by the Management company, new wording of the Notice enters into force after published on the Management company’s website. Please regularly check the current wording of the Notice. AN EXCERPT FROM JSC “RIETUMU ASSET MANAGEMENT” IMC DEAL EXECUTION POLICY Approved by the Board of JSC “Rietumu Asset Management” IMC, Minutes No.15, 20.11.2020

Rights of Data Subject. The Data Subject as a whole has the following basic rights in respect of the Processing of Personal Data:  • the right to request the rectification of his/her Personal Data, if they are incorrect or contain incomplete information;  • the right to erase his/her Personal Data, as far as permitted by laws and regulations and legitimate interests of the Management company and the Client;  • the right to request information on whether the Management company processes Personal Data, and to access such data, as far as permitted by laws and regulations about the confidentiality of information;  • the right to withdraw his/her consent to the Processing of Personal Data, in cases where the actions with Personal Data are not grounded by the laws and regulations, and the necessity to fulfil the contract with the Management company or legitimate interests of the Management company, and there are no other legal grounds for Processing;  • the right to object to the Processing if it is justified exclusively by the legitimate interests of the Management company and in a particular situation does not correspond to the more important interests of the Data Subject. In the situations, when the Processing is based on the requirements of the laws and regulations, the Data Subject is not entitled to object to the Processing of the respective Personal Data;  • the right to request restriction to the Processing for the period, while the Management company considers the request by the Data Subject to rectify the incorrect Personal Data or the validity of respective Processing, аnd the right to request a temporary retention of Personal Data, if the Processing of Personal Data is found to be ungrounded, but the Data Subject objects to their removal;  • the right to portability of Personal Data, receiving them in an electronic format with the purpose of transferring information to a third party, taking into account the restrictions stipulated by the laws and regulations;  • the right to request a revision of the decision related personally to the Data Subject, that has been taken completely automatically without the participation of the Management company’s employees, and has legal consequences for the Data Subject, subject to the restrictions stipulated by the laws and regulations;  • the right to file a complaint with the State Data Inspectorate (00/00, Xxxxxxxx Xxxxxx, Xxxx, XX-0000, Xxxxxxxx xx Xxxxxx) regarding issues related to the procedure of the Processing of Personal Data. All requests related to the execution of the rights of Data Subjects must be addressed to the Management company in writing. The Management company examines the request within the period stipulated by the laws and regulations. If necessary, the Management company may request additional information from the Data Subject, which is necessary for the execution of the request. The rights of the Data Subject are subject to the terms and restrictions which are stipulated in the laws and regulations, and the above list of rights is only informative. The Data Subject can contact the Management company regarding the Processing of Personal Data – by sending a written request to the address: 0 Xxxxxxx Xxxxxx, Xxxx, XX-0000, xxx Xxxxxxxx xx Xxxxxx, e-mail address: xxx@xxxxxxx.xx, by phone +000 00000000, or at the Internet bank. Messages for the Data Protection Officer must contain a remark “To Data Protection Officer”. The Notice applies to all Clients and Data Subjects irrespective of the time of establishment of contractual relationship with the Management company or the receipt of the management services, or consultations on investment in securities. The Notice is applicable also to those Clients and Data Subjects whose Personal Data the Management company received prior to the publishing of the Notice, and the former Clients of the Management company. The latest wording of the Notice is published on the Management company’s website xxxxx://xxx.xxxxxxx.xxx/en/ram. The Management company has the right to unilaterally change the text of the Notice. Unless otherwise specified by the Management company, new wording of the Notice enters into force after published on the Management company’s website. Please regularly check the current wording of the Notice. AN EXCERPT FROM JSC “RIETUMU ASSET MANAGEMENT” IMC DEAL EXECUTION POLICY Approved by the Board of JSC “Rietumu Asset Management” IMC, Minutes No.15, 20.11.2020.