4.1    Legal basis for the processing of your personal data

We will not process your personal data if we do not have a proper justification foreseen in the applicable data protection law for that purpose. Therefore, we will only process your personal data if:

• We have obtained your prior consent;
• The processing is necessary to perform our contractual obligations in the context of the business relationship with you or to take pre-contractual steps at your request;
• The processing is necessary to comply with our legal or regulatory obligations; or
• The processing is necessary for the purposes of the legitimate interests and does unreasonably affect your interests or fundamental rights and freedoms.

Please note that, when processing your personal data based on legitimate interests, we always seek to maintain a balance between the legitimate interests and your privacy.

Examples of such ‘legitimate interests’ are data processing activities performed to:

• Develop a proximity and trustful professional relationship with and provide knowledge to our business partners;
• Promote innovation in the field of technology platforms, such as for Enterprise Resource Planning (ERP);
• Manage Advectus human and financial resources and optimize the interactions with our business partners;
• Benefit from cost-effective services (e.g. we may opt to use certain platforms offered by suppliers to process data);
• Prevent fraud or criminal activity, misuses of our products or services as well as the security of our IT systems, architecture and networks;
• Sell any part of our business or its assets or to enable the acquisition of all or part of our business or assets by a third party; and
• Meet our corporate and social responsibility objectives.

You can obtain further information on legitimate interests involved upon an express request by contacting Advectus under the contact details outlined in sec. 8 below.

In the context of the business relationship with Advectus, we always process your personal data for a specific purpose and only process the personal data, which is relevant to achieve that purpose.

In particular, we process the personal data we may have about you for the following purposes:

• Communicating with business partners about products, services and projects of Advectus or business partners, e.g. by responding to inquiries or requests and provide appropriate, adequate and updated information about our products or services;
• Planning, performing and managing the (contractual) relationship with business partners, e.g. by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, facilitating repairs and providing training and support services;
• Improving the quality of our interactions by adapting our products or services to your specific needs, e.g. by administrating and performing customer surveys, marketing campaigns, market analysis, sweepstakes, contests, or other promotional activities or events;
• Managing our IT resources, including infrastructure management and business continuity, e.g. by granting access to our service, training and support platforms;
• Maintaining and protecting the security of our products or services, e.g. by preventing and detecting security threats, fraud or other criminal or malicious activities;
• Ensuring compliance with legal obligations (such as record keeping obligations), business partner compliance screening obligations (to prevent white-collar or money laundering crimes), and Advectus policies or industry standards; and
• Tracking our activities or activities of sales representatives, e.g. by measuring interactions or sales, number of appointments/calls;
• Resolving disputes, enforcing our contractual agreements and establishing, exercising or defending legal claims.
• Managing mergers and acquisitions involving our company;