In accordance with the provisions of European Parliament and Council Regulation (EU) 2016/679, BIOSYSTEMS S.A. hereby informs all users providing their personal data, that such data will be included in a computer file duly registered with the Spanish Agency for Data Protection.

The users expressly, freely and unequivocally agree to allow their personal data to be processed by BIOSYSTEMS S.A for the following purposes:

1. To send business advertising communications by e-mail,fax, texting/messaging services, social media communities or any other electronic or physical means, whether present or future, that allows business communications, provided that this has previously been authorized by tickingthe authorization box on the website form. Such business communications will be related to products or services offered by BIOSYSTEMS,SA, as well as by any employees or partners with it has reached an agreement regarding business promotion among its clients. In such case, at notime will third parties have access to personal data. In any case, business communication will be performed by BIOSYSTEMS S.A and will concern goods and services related to BIOSYSTEMS S.A’s industry.

2. To perform statistical studies.

3. To process requisitions, orders or any type of request that may be made by the user through any of the contact forms available to the user in BIOSYSTEMS S.A.

BIOSYSTEMS S.A, expressly informs and warrants to the user that under no circumstances will their personal data be released to third companies and that prior express, informed and unequivocal consent would be requested from the owners wheneve rany kind of personal data is to be released.

By completing and submitting the respective forms of this website, the User agrees and gives permission for their personal data to be subject to computer processing by BIOSYSTEMS S.A. Any person entering personal data belonging to a third party in the forms on this website must first obtain consent from such third party and inform them of the purposes contained in the preceding paragraphs.

All data requested through BIOSYSTEMS S.A, are compulsory, as they are necessary to provide optimal service to the user. If not all the data are provided, BIOSYSTEMS S.A, does not warrant that the information and services provided will be completely suitable to the user’s needs.

BIOSYSTEMS S.A, warrants that the user may exercise their rights of access, rectification, cancellation, information and opposition at any time under the terms and conditions set forth in the current legislation. Consequently, in accordance with the provisions of European Parliament and Council Regulation (EU) 2016/679, the user may exercise their rights by submitting an express request, along with a copy of their identity card, by the following means:

1. E-Mail: biosystems@biosystems.es

2. Mailing Address: C/ COSTA BRAVA, 30 - 08030BARCELONA

3. Likewise, the user may unsubscribe from any of the subscription services provided by sending an e-mail to: BIOSYSTEMS S.A.

Likewise, BIOSYSTEMS S.A, has taken all technical and organizational measures necessary to ensure the security and privacy of the personal data it processes, as well as to prevent its loss, alteration and/or access by unauthorized third parties.

SECURITY

BIOSYSTEMS S.A, uses information security technologies generally accepted in the industry, such as firewalls, access control procedures and encryption mechanisms, all to prevent unauthorized access to the data. For such purposes, the user/customer agrees to allow the provider to obtain data for the purposes of the respective authentication of access controls.

In order to ensure total security, systems providing access to the BIOSYSTEMS COMMUNITY are subject to monitoring and are regularly reviewed and updated.

BIOSYSTEMS S.A, has obtained the Information and the materials included in the website from sources considered to be reliable and, although reasonable measures have been taken to make sure that the information contained is accurate, BIOSYSTEMS S.A, cannot ensure at all times and under all circumstances that such information is accurate, complete and up-to-date and, consequently, it should not considered entirely accurate at all times. BIOSYSTEMS S.A, expressly disclaims any liability related to any errors or omissions in the Information contained in the pages of this website.

BIOSYSTEMS S.A, reserves the right to amend, delete, void or restrict the website content and the links or information obtained through it, with no need to provide prior notice. In no case shall it assume any liability whatsoever arising due to incorrect use of the website by the user, whether of the information or of the services contained therein.

BIOSYSTEMS S.A, its branch offices and/or work centers, its directors and/or attorneys in fact, employees or, ingeneral, its authorized staff may not be held liable under any circumstances for any type of harm, loss, claim or expense of any kind, whether arising directlyor indirectly from the use and/or distribution of the website or of the Information acquired or accessed by or through it, or from its computer viruses, operating failures or service or transmission interruptions or line failures in the use of the website, whether by direct connection or by a link or other means, with all users notified for all legal intents and purposes that such possibilities and events can occur.

BIOSYSTEMS S.A, may not be held liable for any third-party websites which can be accessed by links or for any content made available to third parties. Any link or access to a third-party website shall be used solely at the discretion and underthe responsibility of the user. BIOSYSTEMS S.A, does not recommend or warrant any of the Information obtained by or through a link, nor may it be held liable for any losses, claims or harm arising due to the use or misuse of a link, or of the Information obtained through it, including other links or website, of service or access interruption, or of the attempt to use or misuse a link, whether when connecting to the BIOSYSTEMS S.A. website or accessing information from other websites from it.

APPLICABLE LAW

In the event of any dispute or conflict in the interpretation of the terms and conditions contained herein, as well as any questions related to the services of this website, Spanish law shall be the applicable law.


EXTENDED PRIVACY POLICY FOR VIDEO SURVEILLANCE

DATA CONTROLLER

The company responsible for the video surveillance processing carried out in the building located at Carrer de la Costa Brava, 30, 08030 Barcelona (hereinafter, the “establishment”) is BioSystems, S.A., a company with registered office at C/ Costa Brava, 30 - 08030 Barcelona, and holder of tax ID number A08678823 (hereinafter, “BioSystems”).

WHAT IS PERSONAL DATA AND PROCESSING?

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person. Thus, a person’s image constitutes personal data insofar as it can identify them.

Personal data processing is any operation or set of operations performed on your personal data, such as collection, recording, storage, use, and disclosure.

WHAT PERSONAL DATA DO WE COLLECT?

The various video surveillance systems installed at different points of access and within the establishment record the physical image of people who enter and move through the premises and/or use its facilities.

FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?

At BioSystems, we process the image of individuals who access and move through the establishment and/or use its facilities for the following purposes:

• To ensure the safety of people, property, and facilities;

• To monitor the production process;

• To supervise IT equipment; and

• To exercise or defend legal claims.

ON WHAT LEGAL BASIS DO WE PROCESS YOUR DATA?

At BioSystems, we process individuals' images based on the following legal grounds:

• The performance of a task carried out in the public interest, as the purpose of video surveillance is to ensure the safety of people, property, and facilities; and

• BioSystems' legitimate interest in maintaining safety within the facilities and responding effectively to any incidents.

HOW LONG DO WE KEEP YOUR DATA?

Personal data collected through our surveillance systems will be deleted within a maximum period of one month from its capture, unless it must be retained to prove the commission of acts that threaten the integrity of individuals, property, or facilities. In accordance with the applicable data protection regulations, the personal data captured by our surveillance systems will not be subject to blocking, but permanently deleted.

WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

While current data protection legislation grants several rights to data subjects, these rights are not absolute and are limited in the context of video surveillance processing. In accordance with applicable regulations, the rights you may exercise with BioSystems concerning the processing of your image via our video surveillance systems are as follows:

Right of access
You have the right to ask BioSystems whether your personal data is being processed, and if so, to access such data.

Right to erasure
You may request the deletion of your personal data.

Right to restriction of processing
You may request the restriction of the processing of your data when:

• The processing is unlawful and you oppose the deletion of your data and request restriction instead;

• BioSystems no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise, or defense of legal claims.

You may exercise your rights at any time by sending your request to the email address: datos@biosystems.es, specifying the right you wish to exercise.

WHO CAN ACCESS YOUR DATA?

BioSystems may make the images captured by its video surveillance systems available to competent authorities and public bodies, including courts and law enforcement authorities, as well as to lawyers and/or legal advisors. All disclosures will be made on the appropriate legal basis and for purposes compatible with the original intent of the processing. BioSystems does not transfer the personal data collected by our video surveillance systems outside the European Economic Area, except when legally required and always based on the appropriate legal grounds.

WHO CAN I CONTACT IF I HAVE QUESTIONS ABOUT MY DATA?

If you have any questions or wish to request additional information regarding the video surveillance processing of your personal data, please contact our Data Protection Officer (DPO) via email at datos@biosystems.es, clearly stating your inquiry.