Common use of Your Rights Clause in Contracts

Your Rights. Data protection laws provide data subjects with the following rights, (subject to certain exemptions and conditions in some cases) to: • request access to their personal information. This enables them to receive a copy of the personal information We hold about them and to check that We are lawfully processing it. VendueHost reserves the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request correction of the personal information that We hold about them. This enables them to have any incomplete or inaccurate information We hold about them corrected; • request erasure of their personal information. This enables them to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it. Data subjects also have the right to ask Us to delete or remove their personal information where they have exercised their right to object to processing (see below); • request the restriction of processing of their personal information. This enables them to ask Us to suspend the processing of personal information about them, for example if they want Us to establish its accuracy or the reason for processing it; Data subjects also have the right to object to the processing of their personal information where We are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground. They also have the right to object where We are processing their personal information for direct marketing purposes. Where legitimate reasons exist, We may refuse to comply with a request by a data subject to access their personal information in certain circumstances. We may need to request specific information from the data subject to help Us confirm their identity and ensure their right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If You follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. We encourage You to periodically review this page for the latest information on our privacy practices. If We make material changes to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statements.

Your Rights. All individuals (users of our platform or otherwise) have a number of rights with regards to your personal data under the Data protection laws provide data subjects with the following Protection Laws. If you wish to exercise any of your rights, (subject to certain exemptions and conditions in some cases) toplease contact us at xxx@xxxxxxxxxxxxxxxx.xxx • Right of access: • You can request access to their personal information. This enables them to receive a copy of the personal information We data which we hold about them you, as well as details about why and to check that We are lawfully processing how we use it. VendueHost reserves the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested.; • request correction of the Right to rectification: You can ask us to change or complete any personal information that We data we hold about themyou which is inaccurate or incomplete; • Right to be forgotten/erasure: You have a right, under certain circumstances, to ask us to delete any personal data we hold about you. Please note that there may be situations where we must retain your personal data after a request for erasure where we have a lawful basis for doing so; • Right of restriction: You can ask us to restrict (i.e. prevent) the processing of your personal data where you have objected to our use of it and we have no lawful basis to continue processing your personal data; • Right of data portability: In certain circumstances, you can ask us to transfer the data we hold about you to another organisation. This enables them would be sent in a structured, commonly used, electronic form; • Right to object: You can object to us using your personal data for particular purposes; and • Automated decision making: You have a right not to be subjected to automated decision making and profiling in certain situations. If you have any incomplete or inaccurate information We hold cause to complain about them corrected; • request erasure our use of their your personal information. This enables them to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it. Data subjects data, please contact us by emailing xxx@xxxxxxxxxxxxxxxx.xxx You also have the right to ask Us to delete or remove their personal information where they have exercised their right to object to lodge a complaint about our processing (see below); • request the restriction of processing of their personal information. This enables them to ask Us to suspend the processing of personal information about them, for example if they want Us to establish its accuracy or the reason for processing it; Data subjects also have the right to object to the processing of their personal information where We are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground. They also have the right to object where We are processing their personal information for direct marketing purposes. Where legitimate reasons exist, We may refuse to comply with a request by a supervisory authority — in the UK that is the ICO whose details are here: xxxxx://xxx.xxx.xx/make-a-complaint/ We do not use your personal data subject in any automated processes to access their personal information in certain circumstances. make decisions about you We may need to request specific information from the data subject to help Us confirm their identity and ensure their right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to expand or reduce our business and from this may involve the websites sale and/or the transfer of Auction Housescontrol of all or part of Our business. Any personal data that you have provided will, our partner networks, advertisers and affiliates. If You follow a link where it is relevant to any part of these websitesour business that is being transferred, please note be transferred along with that these websites have their own privacy policies part and the new owner or newly controlling party will, depending on the lawful basis, be permitted to use that We do not accept any responsibility or liability data only for these policies. Please check these policies before You submit any personal information to these websitesthe same purposes for which it was originally collected by Us. In particular where We collect information on behalf the event that any of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information your data is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, may to be transferred toin such a manner, stored at you will be contacted in advance and processed by Us and Our affiliates and other third parties outside informed of the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSAchanges. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify may change this Privacy Policy at any timefrom time to time (for example, if the law changes). We encourage You to periodically review recommend that you check this page for the latest information on our privacy practicesregularly to keep up-to-date. If We we make any material changes to this Privacy Policy You the manner in which we process and use your personal data, we will be notified via email (if You contact you to let you know about the change. If you have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on queries about our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statements.your data, please contact us by emailing us on xxx@xxxxxxxxxxxxxxxx.xxx

Your Rights. Data protection laws provide data subjects with You have a number of rights in relation to the following rights, (subject to certain exemptions and conditions in some cases) to: • request access to their personal information. This enables them to receive a copy of the personal information We that we hold about them and to check that We are lawfully processing ityou. VendueHost reserves These rights include: - the right to charge access information we hold about you and to obtain information about how we process it; - in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request correction of the personal information that We hold about them. This enables them to have any incomplete or inaccurate information We hold about them corrected; • request erasure of their personal information. This enables them to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it. Data subjects also have circumstances, the right to ask Us withdraw your consent to delete or remove their personal information where they have exercised their right to object to processing (see below); • request the restriction of our processing of their personal information. This enables them to ask Us to suspend the processing of personal information about them, for example if they want Us to establish its accuracy or the reason for processing it; Data subjects also have the right to object to the processing of their personal information where We are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground. They also have the right to object where We are processing their personal information for direct marketing purposes. Where legitimate reasons exist, We may refuse to comply with a request by a data subject to access their personal information in certain circumstances. We may need to request specific information from the data subject to help Us confirm their identity and ensure their right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If You follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy you can do at any time. We encourage may continue to process your information if we have another legitimate reason for doing so; - in some circumstances, the right to receive certain information you have provided to us in an electronic format and / or request that we transmit it to a third party; - the right to request that we rectify your information if it's inaccurate or incomplete; - in some circumstances, the right to request that we erase your information. We may continue to retain your information if we're entitled or required to retain it; - the right to object to, and to request that we restrict, our processing of your information in some circumstances. Again, there may be situations where you object to, or ask us to restrict, our processing of your information but we're entitled to continue processing your information and / or to refuse that request. You can exercise your rights by contacting us using the details set out in the `More details about your information' section below. You also have a right to periodically review this page complain to the French Data Protection Authority by visiting xxxxx://xxx.xxxx.xx/, or to the data protection regulator in the country where you live or work. You have the right of complaint to the National Commission for Information Technology and Civil Liberties (CNIL) by clicking here (click here) or by writing to CNIL - 0 Xxxxx xx Xxxxxxxx - XXX 00000 - 00000 Xxxxx - Cedex 07 You're responsible for making sure the latest information on our privacy practicesyou give us is accurate and up to date, and you must tell us if anything changes as soon as possible. If We make material changes you provide information for another person on your account, you'll need to direct them to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely notice and make sure they agree to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or us using their information as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsdescribed in it.

Your Rights. Data protection laws provide data subjects with the following 5.1 Under certain circumstances, you have a number of rights in relation to our processing of your personal data. 5.2 If you want to make use of your rights, (subject please contact EasyTranslate by sending an email to certain exemptions xxxx@xxxxxxxxxxxxx.xxx. 5.3 Please note that your platform account settings give you full control over your data. Here you can see, edit, export, and conditions in some cases) to: • delete your data, at the click of a button. 5.4 The right of access by the data subject 5.4.1 You have the right to request access to their your personal informationdata. This enables them you to receive a copy of the personal information We data we hold about them you and to check that We we are lawfully processing it. VendueHost reserves . 5.5 The right to rectification 5.1 You have the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request correction of your personal data that we hold about you. If you become aware that the personal information that We hold about them. This enables them data we process is inaccurate, we encourage you to contact us in writing which will enable you to have any incomplete or inaccurate information We we hold about them you corrected; • . 5.6 The right to erasure ("the right to be forgotten") 5.6.1 You may have the right to request erasure of their your personal informationdata. This enables them you to ask Us us to delete or remove personal information data where there is no good reason for Us us continuing to process it. Data subjects also To the extent the continued processing of your personal data is necessary, for example in order for us to comply with our legal obligations or for legal requirements to be established, enforced or defended, we are not required to delete your personal data. 5.7 The right to restriction of processing 5.7.1 You may have the right to ask Us to delete or remove their personal information where they have exercised their right to object to processing (see below); • request the restriction of processing of their your personal informationdata to consist only of storage. This enables them you to ask Us us to suspend the processing of personal information data about themyou, for example if they you want Us us to establish its accuracy or the reason for processing it; Data subjects also . 5.8 The right to data portability 5.8.1 You may have the right to obtain personal data that you have provided us with, in a structured, commonly used, machine-readable format and have the right to request a transfer of that information to another data controller. 5.9 The right to object 5.9.1 You have the right to object to the our processing of their your personal information data at any time when it relates to our direct marketing efforts towards you. 5.9.2 Furthermore, you have the right to object to our processing of your personal data at any time, for reasons relating to your personal life, where We we are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want as legal basis for processing, cf. section 2. 5.10 The right to object to processing on this ground. They also withdraw your consent 5.10.1 You have the right to object where We are withdraw a consent you have provided us with for the purpose of processing their your personal data. If you wish to withdraw your consent, please contact us by using the contact information for direct marketing purposesspecified below. Where legitimate reasons existFor cookies, We may refuse to comply with a request you can withdraw your consent by a data subject to access their personal information in certain circumstances. We may need to request specific information from the data subject to help Us confirm their identity and ensure their changing your settings here. 5.11 The right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If lodge a complaint 5.11.1 You follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy lodge a complaint regarding EasyTranslate's processing of your personal data. A complaint can be lodged with the Danish Data Protection Agency (Datatilsynet) at xxx.xxxxxxxxxxxx.xx or any time. We encourage You to periodically review this page for the latest information on our privacy practices. If We make material changes to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsother supervisory authority in your country.

Your Rights. Data protection laws provide data subjects with the following rights, (subject to certain exemptions and conditions in some cases) to: • request access to their personal information. This enables them to receive a copy of the personal information We hold about them and to check that We are lawfully processing it. VendueHost reserves the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request correction of the personal information that We hold about them. This enables them to have any incomplete or inaccurate information We hold about them corrected; • request erasure of their personal information. This enables them to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it. Data subjects also You have the right to ask Us us not to delete or remove their process your personal information where they have exercised their right to object to processing (see below); • request the restriction of processing of their personal information. This enables them to ask Us to suspend the processing of personal information about them, data for example if they want Us to establish its accuracy or the reason for processing it; Data subjects also have the right to object to the processing of their personal information where We are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground. They also have the right to object where We are processing their personal information for direct marketing purposes. Where legitimate reasons exist, We may refuse will usually inform you (before collecting your data) if we intend to comply with a request by a use your data subject for such purposes or if we intend to access their disclose your information to any third party for such purposes and we will collect express consent from you if legally required prior to using your personal information in certain circumstancesdata for marketing purposes. We may need to request specific information from the data subject to help Us confirm their identity and ensure their You can exercise your right to access accept or prevent such processing by checking certain boxes on the information (or forms we use to collect your data. You can also exercise the right at any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. time by contacting us at xxx@xxxxxxxxxxxxxxxxxx.xx.xx Our Online Platform site may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If You you follow a link to any of these websites, please note that these websites have their own privacy policies and that We we do not accept any responsibility or liability for these policies. Please check these policies before You you submit any personal information data to these websites. In particular where We collect information on behalf • Request correction of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your information, including personal information that We collect from Youwe hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected. • Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below). • Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes. • Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, may be transferred tofor example if you want us to establish its accuracy or the reason for processing it. • Request the transfer of your personal information to another party in certain formats, stored at and processed by Us and Our affiliates and other third parties outside the country in if practicable. • Make a complaint to a supervisory body which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSAUnited Kingdom is the Information Commissioner’s Office. The ICO can be contacted through this link: xxxxx://xxx.xxx.xx/concerns/ The Data Protection Act 1998 and the GDPR give you the right to access information held about you. We will take all reasonable steps also encourage you to contact us to ensure that your data is accurate and complete. Your personal information is treated securely and right of access can be exercised in accordance with this Privacy Policythe Act (and the GDPR once it is in force). We reserve the right A subject access request should be submitted to modify this Privacy Policy at any time. We encourage You xxx@xxxxxxxxxxxxxxxxx.xx.xx Any changes we make to periodically review this page for the latest information on our privacy practices. If We make material changes to this Privacy Policy You notice in the future will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or on changes to our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsnotice.

Your Rights. Data protection laws provide data subjects We want you to be in control of your information, so we have provided you with the following tools: o Access / Update tools in the service. Tools and account settings that help you to access, rectify or delete information that you provided to us and that’s associated with your account directly within the service. If you have any question on those tools and settings, please contact our customer care team at xxxxxxx@xxxxxxxxx.xxx. o Device permissions. Mobile platforms have permission systems for specific types of device data and notifications, such as phone book and location services as well as push notifications. You can change your settings on your device to either consent or oppose the collection of the corresponding information or the display of the corresponding notifications. Of course, if you do that, certain services may lose full functionality. o Deletion. You can delete your account by emailing xxxxxxx@xxxxxxxxx.xxx and providing us with your username, and submitting a request to delete your account We want you to be aware of your privacy rights, (subject . Here are a few key points to certain exemptions and conditions in some cases) toremember: • request access to their personal o Reviewing your information. This enables them Applicable privacy laws may give you the right to receive review the personal information we keep about you (depending on the jurisdiction, this may be called right of access, right of portability or variations of those terms). You can request a copy of the your personal information We by putting in such a request at xxxxxxx@xxxxxxxxx.xxx o Updating your information. If you believe that the information we hold about them you is inaccurate or that we are no longer entitled to use it and want to check that We are lawfully processing it. VendueHost reserves the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request correction of the personal information that We hold about them. This enables them to have any incomplete its rectification, deletion or inaccurate information We hold about them corrected; • request erasure of their personal information. This enables them to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it. Data subjects also have the right to ask Us to delete or remove their personal information where they have exercised their right to object to processing (see below); • its processing, please contact us at xxxxxxx@xxxxxxxxx.xxx For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests. Keep in mind, we may reject requests for certain reasons, including if the request the restriction of processing of their personal information. This enables them to ask Us to suspend the processing of personal information about them, for example is unlawful or if they want Us to establish its accuracy it may infringe on trade secrets or intellectual property or the reason for processing it; Data subjects also privacy of another user. If you wish to receive information relating to another user, such as a copy of any messages you received from him or her through our service, the other user will have to contact our Privacy Officer to provide their written consent before the right information is released. Also, we may not be able to accommodate certain requests to object to the processing of their personal information, notably where such requests would not allow us to provide our service to you anymore. For instance, we cannot provide our service if we do not have your date of birth. o Uninstall. You can stop all information where We are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground. They also have collection by an app by uninstalling it using the right to object where We are processing their personal information standard uninstall process for direct marketing purposes. Where legitimate reasons exist, We may refuse to comply with a request by a data subject to access their personal information in certain circumstances. We may need to request specific information from the data subject to help Us confirm their identity and ensure their right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliatesyour device. If You follow a link you uninstall the app from your mobile device, the unique identifier associated with your device will continue to any of these websitesbe stored. If you re-install the application on the same mobile device, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, we may be transferred to, stored at able to re-associate this identifier to your previous transactions and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. We encourage You to periodically review this page for the latest information on our privacy practices. If We make material changes to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsactivities.

Your Rights. Data protection laws provide data subjects with the following 5.1 Under certain circumstances, you have a number of rights in relation to our processing of your personal data. 5.2 If you want to make use of your rights, (subject please contact EasyTranslate by sending an email to certain exemptions xxxx@xxxxxxxxxxxxx.xxx. 5.3 Please note that your platform account settings give you full control over your data. Here you can see, edit, export, and conditions in some cases) to: • delete your data, at the click of a button. 5.4 The right of access by the data subject 5.4.1 You have the right to request access to their your personal informationdata. This enables them you to receive a copy of the personal information We data we hold about them you and to check that We we are lawfully processing it. VendueHost reserves . 5.5 The right to rectification 5.1 You have the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request correction of your personal data that we hold about you. If you become aware that the personal information that We hold about them. This enables them data we process is inaccurate, we encourage you to contact us in writing which will enable you to have any incomplete or inaccurate information We we hold about them you corrected; • . 5.6 The right to erasure ("the right to be forgotten") 5.6.1 You may have the right to request erasure of their your personal informationdata. This enables them you to ask Us us to delete or remove personal information data where there is no good reason for Us us continuing to process it. Data subjects also To the extent the continued processing of your personal data is necessary, for example in order for us to comply with our legal obligations or for legal requirements to be established, enforced or defended, we are not required to delete your personal data. 5.7 The right to restriction of processing 5.7.1 You may have the right to ask Us to delete or remove their personal information where they have exercised their right to object to processing (see below); • request the restriction of processing of their your personal informationdata to consist only of storage. This enables them you to ask Us us to suspend the processing of personal information data about themyou, for example if they you want Us us to establish its accuracy or the reason for processing it; Data subjects also . 5.8 The right to data portability 5.8.1 You may have the right to obtain personal data that you have provided us with, in a structured, commonly used, machine-readable format and have the right to request a transfer of that information to another data controller. 5.9 The right to object 5.9.1 You have the right to object to the our processing of their your personal information data at any time when it relates to our direct marketing efforts towards you. 5.9.2 Furthermore, you have the right to object to our processing of your personal data at any time, for reasons relating to your personal life, where We we are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want as legal basis for processing, cf. section 2. 5.10 The right to object to processing on this ground. They also withdraw your consent 5.10.1 You have the right to object where We are withdraw a consent you have provided us with for the purpose of processing their your personal data. If you wish to withdraw your consent, please contact us by using the contact information for direct marketing purposesspecified below. Where legitimate reasons existFor cookies, We may refuse to comply with a request you can withdraw your consent by a data subject to access their personal information in certain circumstances. We may need to request specific information from the data subject to help Us confirm their identity and ensure their changing your settings here. 5.11 The right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If lodge a complaint 11.1 You follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy lodge a complaint regarding EasyTranslate's processing of your personal data. A complaint can be lodged with the Danish Data Protection Agency (Datatilsynet) at xxx.xxxxxxxxxxxx.xx or any time. We encourage You to periodically review this page for the latest information on our privacy practices. If We make material changes to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsother supervisory authority in your country.

Your Rights. Data protection laws provide As a data subjects with subject, you are entitled to a number of rights under the following rights, (subject to certain exemptions and conditions in some cases) to: GDPR. • request Request access to their your personal informationdata (commonly known as a “data subject access request”). This enables them you to receive a copy of the personal information We data we hold about them you and to check that We we are lawfully processing it. VendueHost reserves the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request Request correction of the personal information data that We we hold about themyou. This enables them you to have any incomplete or inaccurate information We data we hold about them you corrected; , though we may need to verify the accuracy of the new data you provide to us. • request Request erasure of their your personal informationdata. This enables them you to ask Us us to delete or remove personal information data where there is no good reason for Us us continuing to process it. Data subjects You also have the right to ask Us us to delete or remove their your personal information data where they you have successfully exercised their your right to object to processing (see below); where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. • request the restriction of Object to processing of their your personal information. This enables them to ask Us to suspend the processing of personal information about them, for example if they want Us to establish its accuracy or the reason for processing it; Data subjects also have the right to object to the processing of their personal information data where We we are relying on a legitimate interest (or those of a third party) and there is something about their your particular situation which makes them you want to object to processing on this groundground as you feel it impacts on your fundamental rights and freedoms. They You also have the right to object where We we are processing their your personal information data for direct marketing purposes. Where In some cases, we may demonstrate that we have compelling legitimate reasons existgrounds to process your information which override your rights and freedoms. • Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, We may refuse exercise or defend legal claims; or (d) you have objected to comply with a request by a our use of your data subject to access their personal information in certain circumstances. We may but we need to request specific information from verify whether we have overriding legitimate grounds to use it. • Request the transfer of your personal data subject to help Us confirm their identity and ensure their right to access the information (you or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If You follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSAparty. We will take all reasonable steps provide to ensure you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that Your this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you. • Withdraw consent at any time where we are relying on consent to process your personal information data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is treated securely the case at the time you withdraw your consent. Such rights may be exercised by contacting your usual contact within EXT or by contacting the EXT data protection officer directly at xxx@xxxxxx.xx. Such requests must be made by the relevant data subject and will be handled by us in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. We encourage You to periodically review this page for the latest information on our privacy practices. If We make material changes to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsGDPR.

Your Rights. Right to Object  You have the right to object to our use of your personal data, on grounds relating to your particular situation, to the extent the processing is based on our legitimate interests. If we receive an objection, then we will stop processing the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is necessary for the establishment, exercise or defence of legal claims. Additional Rights Data protection laws provide data subjects you with the following rights, (subject to certain exemptions and conditions in some cases) to: • request  Request access to their your personal informationinformation (commonly known as a "data subject access request"). This enables them you to receive a copy of the personal information We we hold about them you and to check that We we are lawfully processing it. VendueHost reserves the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request  Request correction of the personal information that We we hold about themyou. This enables them you to have any incomplete or inaccurate information We we hold about them you corrected; • request .  Request erasure of their your personal information. This enables them you to ask Us us to delete or remove personal information where there is no good reason for Us us continuing to process it. Data subjects You also have the right to ask Us us to delete or remove their your personal information where they you have exercised their your right to object to processing (see belowabove); • request .  Request the restriction of processing of their your personal information. This enables them you to ask Us us to suspend the processing of personal information about themyou, for example if they you want Us us to establish its accuracy or the reason for processing it; Data subjects also have .  Request the right transfer of your personal information to another party.  Lodge a complaint about the way in which your personal information is being used to a supervisory authority. If you want to review, verify, correct or request erasure of your personal information, object to the processing of their your personal data, or request that we transfer a copy of your personal information where We are relying on to another party, please contact us using the details provided below. You will not have to pay a legitimate interest fee to access your personal information (or those to exercise any of the other rights). However, we may charge a third party) and there reasonable fee if your request for access is something about their particular situation which makes them want to object to processing on this groundclearly unfounded or excessive. They also have the right to object where We are processing their personal information for direct marketing purposes. Where legitimate reasons existAlternatively, We we may refuse to comply with a the request by a data subject to access their personal information in certain such circumstances. We may need to request specific information from the data subject you to help Us us confirm their your identity and ensure their your right to access the information (or to exercise any of their your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time Where we rely on your consent to time, contain links to collect and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If You follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any use your personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliatesa specific purpose, service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve you have the right to modify this Privacy Policy withdraw your consent for that specific processing at any time. We encourage You to periodically review this page To withdraw your consent, please contact us using the contact details provided below. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the latest information on purpose or purposes you originally agreed to, unless we have another legitimate basis for doing so in law. Any changes we make to our privacy practices. If We make material changes to this Privacy Policy You in the future will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement posted on this page or on our blog). Any modifications and, where material, notified to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsyou by e-mail.

Your Rights. Data protection Some jurisdictions’ laws provide data subjects grant specific rights to Cele Live users, which are set out in this section. You may have all or some of the following rights set forth below according to applicable laws. We will respond to your request consistent with the following applicable laws as soon as practicable, normally within one month, after proper verification procedures. Your exercise of these rights is usually free of charge, unless we deem it is chargeable under the applicable laws. Right to access-You may submit a request to access the Personal Information we collect about you by (a) using Help or Feedback function on Cele Services or (b) by sending your request to us via email at xxxxxxx@xxxxxxxx.xxx. Right to rectification-You may submit a request to rectify the Personal Information we collect about you by (a) using Help or Feedback function on Cele Services or (b) by sending your request to us via email at xxxxxxx@xxxxxxxx.xxx. Right to erasure-You may submit a request to erase the Personal Information we collect about you by (a) using Help or Feedback function on Cele Services or (b) by sending your request to us via email. Though we cannot guarantee a complete erasure of your data that has been stored in our backup servers, we promise that we will not use the data within the backup servers for any other purpose. Right to data portability-You may ask us to transfer some of your Personal Information, if it is collected on the basis of your consent, in structured, commonly used and machine-readable formats to you or other environments designated by you, if technically feasible, by (a) using Help or Feedback function on Cele Services or (b) by sending your request to us via email at xxxxxxx@xxxxxxxx.xxx. Right to withdraw consent-You may withdraw your consent and ask us not to continue to collect or process your Personal Information at any time if that information is collected on the basis of your consent by (a) using Help or Feedback function on Cele Services or (b) by sending your request to us via email. Your exercise of this right will not affect the processing activities that occurred before your withdrawal. Right to restrict processing-You may request us to stop processing your Personal Information if you believe such information is collected unlawfully or you have other reason by (a) using Help or Feedback function on Cele Services or (b) by sending your request to us via email at xxxxxxx@xxxxxxxx.xxx. We will examine your request and respond accordingly. Right to object-You may object to the processing of any Personal Information we collect about you, if such information is collected on the basis of legitimate interests, at any time by (a) using Help or Feedback function on Cele Services or (b) by sending your request to us via email at xxxxxxx@xxxxxxxx.xxx. Please note that we may reject your request if we demonstrate compelling legitimate grounds for the processing, which override your interests and freedom or the processing is for the establishment, exercise, or defense of legal claims. Right concerning automated decision making and profiling-You may ask us to stop automated decision making or profile, if you believe such automated decision making and profiling has legal or similarly significant effect upon you by (a) using Help or Feedback function on Cele Services or (b) by sending your request to us via email at xxxxxxx@xxxxxxxx.xxx. We will examine your request and let you know if your request is applicable under the relevant laws and regulations. In addition to the foregoing rights, (subject to certain exemptions and conditions in some cases) to: • request access to their personal information. This enables them to receive a copy of the personal information We hold about them and to check that We are lawfully processing it. VendueHost reserves the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request correction of the personal information that We hold about them. This enables them to have any incomplete or inaccurate information We hold about them corrected; • request erasure of their personal information. This enables them to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it. Data subjects you also have the right to ask Us to delete or remove their personal information where they have exercised their right to object to processing (see below); • request the restriction of processing of their personal information. This enables them to ask Us to suspend the processing of personal information about them, for example if they want Us to establish its accuracy or the reason for processing it; Data subjects also have the right to object lodge complaints to the processing of their personal information where We are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground. They also have the right to object where We are processing their personal information for direct marketing purposes. Where legitimate reasons exist, We may refuse to comply with a request by a competent data subject to access their personal information in certain circumstances. We may need to request specific information from the data subject to help Us confirm their identity and ensure their right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If You follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa protection authority (“RSADPA”) and has affiliates), service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside usually the country in which You reside, in countries where data protection and privacy regulations may not offer the same level DPA of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. We encourage You to periodically review this page for the latest information on our privacy practices. If We make material changes to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsyour home country.

Your Rights. Data protection laws provide data subjects with You have a number of rights in relation to the following rights, (subject to certain exemptions and conditions in some cases) to: • request access to their personal information. This enables them to receive a copy of the personal information We that we hold about them and to check that We are lawfully processing ityou. VendueHost reserves These rights include: - the right to charge access information we hold about you and to obtain information about how we process it; - in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request correction of the personal information that We hold about them. This enables them to have any incomplete or inaccurate information We hold about them corrected; • request erasure of their personal information. This enables them to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it. Data subjects also have circumstances, the right to ask Us withdraw your consent to delete or remove their personal information where they have exercised their right to object to processing (see below); • request the restriction of our processing of their personal information. This enables them to ask Us to suspend the processing of personal information about them, for example if they want Us to establish its accuracy or the reason for processing it; Data subjects also have the right to object to the processing of their personal information where We are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground. They also have the right to object where We are processing their personal information for direct marketing purposes. Where legitimate reasons exist, We may refuse to comply with a request by a data subject to access their personal information in certain circumstances. We may need to request specific information from the data subject to help Us confirm their identity and ensure their right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If You follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy you can do at any time. We encourage may continue to process your information if we have another legitimate reason for doing so; - in some circumstances, the right to receive certain information you have provided to us in an electronic format and / or request that we transmit it to a third party; - the right to request that we rectify your information if it's inaccurate or incomplete; - in some circumstances, the right to request that we erase your information. We may continue to retain your information if we're entitled or required to retain it; - the right to object to, and to request that we restrict, our processing of your information in some circumstances. Again, there may be situations where you object to, or ask us to restrict, our processing of your information but we're entitled to continue processing your information and / or to refuse that request. You can exercise your rights by contacting us using the details set out in the `More details about your information' section below. You also have a right to periodically review this page complain to the French Data Protection Authority by visiting xxxxx://xxx.xxxx.xx/, or to the data protection regulator in the country where you live or work. You have the right of complaint to the National Commission for Information Technology and Civil Liberties (CNIL) by clicking here (click here) or by writing to CNIL - 0 Xxxxx xx Xxxxxxxx - XXX 00000 - 00000 Xxxxx - Cedex 07 You're responsible for making sure the latest information on our privacy practicesyou give us is accurate and up to date, and you must tell us i f anything changes as soon as possible. If We make material changes you provide information for another person on your account, you'll need to direct them to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely notice and make sure they agree to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or us using their information as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsdescribed in it.

Your Rights. Data protection laws provide data subjects with This section only applies if you are in a country within the following rights, (subject to certain exemptions and conditions in some cases) EEA and/or if RocketSpace UK is processing your information. By law you have the right to: • request Request access to their your personal informationinformation (commonly known as a “data subject access request”). This enables them you to receive a copy of the personal information We we hold about them you and to check that We we are lawfully processing it. VendueHost reserves We will need you to prove your identity before we release any personal information to you. • Request correction or erasure of your personal information (unless we have the legal right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested; • request correction of the personal information that We hold about themretain it). This enables them to have any incomplete or inaccurate information We hold about them corrected; • request erasure of their personal information. This enables them to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it. Data subjects You also have the right to ask Us us to delete or remove their your personal information where they you have exercised their your right to object to processing (see below); . • request Object to processing of your personal information where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. You also have the right to object where we are processing your personal information for direct marketing purposes. • Request the restriction of processing of their your personal information. This enables them you to ask Us us to suspend the processing of personal information about themyou, for example if they you want Us us to establish its accuracy or the reason for processing it; Data subjects also . • Request the transfer of personal information that you have the provided to us to another party. • Change your information processing preferences at any time (where this specifically relates to marketing messages, see MARKETING). You should be aware that if you ask us to stop processing your personal information in a certain way or to erase your personal information, and this type of processing is necessary for you to use our Services, then you may not be able to continue to use our Services. This does not include your right to object to direct marketing, which can be exercised at any time without restriction. If you want to exercise any of the processing of their rights listed above, please contact us (see HOW TO CONTACT US). You will not normally have to pay a fee to access your personal information where We are relying on a legitimate interest (or those to exercise any of the other rights set out above). However, we may charge a third party) and there reasonable fee if your request for access is something about their particular situation which makes them want to object to processing on this groundclearly unfounded or excessive. They also have the right to object where We are processing their personal information for direct marketing purposes. Where legitimate reasons existAlternatively, We we may refuse to comply with a the request by a data subject to access their personal information in certain such circumstances. We may need to request specific information from the data subject you to help Us confirm their your identity and ensure their verify your right to access the information (or to exercise any of their your other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links to and from the websites of Auction Houses, our partner networks, advertisers and affiliates. If You follow a link to any of these websites, please note that these websites have their own privacy policies and that We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. We encourage You to periodically review this page for the latest information on our privacy practices. If We make material changes to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statements.

Your Rights. All individuals (users of our platform or otherwise) have a number of rights with regards to your personal data under the Data protection laws provide data subjects with the following Protection Laws. If you wish to exercise any of your rights, (subject to certain exemptions and conditions in some cases) toplease contact us at xxx@xxxxxxxxxxxxxxxx.xxx • Right of access: • You can request access to their personal information. This enables them to receive a copy of the personal information We data which we hold about them you, as well as details about why and to check that We are lawfully processing how we use it. VendueHost reserves the right to charge in some cases a reasonable fee to cover costs for providing copies of personal information requested.; • request correction of the Right to rectification: You can ask us to change or complete any personal information that We data we hold about themyou which is inaccurate or incomplete; • Right to be forgotten/erasure: You have a right, under certain circumstances, to ask us to delete any personal data we hold about you. Please note that there may be situations where we must retain your personal data after a request for erasure where we have a lawful basis for doing so; • Right of restriction: You can ask us to restrict (i.e. prevent) the processing of your personal data where you have objected to our use of it and we have no lawful basis to continue processing your personal data; • Right of data portability: In certain circumstances, you can ask us to transfer the data we hold about you to another organisation. This enables them would be sent in a structured, commonly used, electronic form; • Right to object: You can object to us using your personal data for particular purposes; and • Automated decision making: You have a right not to be subjected to automated decision making and profiling in certain situations. If you have any incomplete or inaccurate information We hold cause to complain about them corrected; • request erasure our use of their your personal information. This enables them to ask Us to delete or remove personal information where there is no good reason for Us continuing to process it. Data subjects data, please contact us by emailing xxx@xxxxxxxxxxxxxxxx.xxx You also have the right to ask Us to delete or remove their personal information where they have exercised their right to object to lodge a complaint about our processing (see below); • request the restriction of processing of their personal information. This enables them to ask Us to suspend the processing of personal information about them, for example if they want Us to establish its accuracy or the reason for processing it; Data subjects also have the right to object to the processing of their personal information where We are relying on a legitimate interest (or those of a third party) and there is something about their particular situation which makes them want to object to processing on this ground. They also have the right to object where We are processing their personal information for direct marketing purposes. Where legitimate reasons exist, We may refuse to comply with a request by a supervisory authority — in the UK that is the ICO whose details are here: xxxxx://xxx.xxx.xx/make-a-complaint/ We do not use your personal data subject in any automated processes to access their personal information in certain circumstances. make decisions about you We may need to request specific information from the data subject to help Us confirm their identity and ensure their right to access the information (or to exercise any of their other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it. Our Online Platform may, from time to time, contain links expand or reduce our business and this may involve the sale and/or the transfer of control of all or part of Our business. Any personal data that you have provided will, where it is relevant to any part of our business that is being transferred, be transferred along with that part and the new owner or newly controlling party will, depending on the lawful basis, be permitted to use that data only for the same purposes for which it was originally collected by Us. In the event that any of your data is to be transferred in such a manner, you will be contacted in advance and informed of the changes. We may change this Privacy Policy from time to time (for example, if the websites of Auction Houses, our partner networks, advertisers and affiliateslaw changes). We recommend that you check this page regularly to keep up-to-date. If You follow a link we make any material changes to any the manner in which we process and use your personal data, we will contact you to let you know about the change. If you have queries about our use of these websitesyour data, please note contact us by emailing us on xxx@xxxxxxxxxxxxxxxx.xxx Potential Employee Privacy Notice As a potential employee we hold the following data on you: Contact details, CV, and email correspondence with you. If you are successful in gaining employment with WIC then you will fall under the Employee Privacy Notice going forward. Our lawful basis for processing your data is a combination of Contract, legitimate interest and consent. When you applied for a job it was with a view to entering into an employment contract with us. If we decide not to go forward with your application then we use legitimate interest to retain the data should the chosen candidate not work out or another role become immediately available. Like most companies, we use a number of other companies as part of our data processing, for example cloud services and technology services. We have Data Processing Agreements in place with these providers. We also transfer your data to our lawyers for contracting and to support with the visa sponsorship process if applicable. Where data is transferred outside of the EEA, we ensure that these websites have their own privacy policies appropriate protection and that mechanisms are in place, for example Standard Contractual Clauses. We do not accept any responsibility or liability for these policies. Please check these policies before You submit any personal information sell your data to these websites. In particular where We collect information on behalf of Auction Houses and third parties such Auction Houses and/or third parties and not VendueHost are responsible for how the information is processed. VendueHost is headquarted in the Republic of South Africa (“RSA”) and has affiliates, service providers and Auction Houses in other countries. Your information, including personal information that We collect from You, may be transferred to, stored at and processed by Us and Our affiliates and other third parties outside the country in which You reside, in countries where data protection and privacy regulations may not offer the same level of protection as in the RSA. We will take all reasonable steps to ensure that Your personal information is treated securely and in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. We encourage You to periodically review this page for the latest information on our privacy practices. If We make material changes to this Privacy Policy You will be notified via email (if You have an account where We have Your contact information) or another manner through the Service that We believe reasonably likely to reach You (which may include posting a new privacy policy on our Online Platform–or a specific announcement on this page or on our blog). Any modifications to this Privacy Policy will be effective upon our posting of the new terms and/or upon implementation of the new changes on the Service (or as otherwise indicated at the time of posting). In all cases, Your continued use of the Service after the posting of any modified Privacy Policy indicates Your acceptance of the terms of the modified Privacy Policy. This Privacy Policy replaces all prior privacy policies or statementsanybody.