COOKIE POLICY B2KAPITAL CYPRUS LTD

Effective Date: [23/04/2024]

At B2Kapital Cyprus LTD (“we,” “us,” or “our”), we value your privacy and are committed to ensuring that your online experience with us is both safe and enjoyable. The Cookie Policy is designed to provide you with clear and understandable information about how we use cookies and similar technologies on our website and how they impact your browsing experience.

Please take a moment to read this policy to understand the choices you have when it comes to cookies and your data. Your privacy matters to us, and we want to empower you to make informed decisions.

About Us

We are a credit acquisition company operating under the supervision of the Central Bank of Cyprus and a member of the B2Impact. B2Impact ASA is a Norway-based company, located in Oslo, and listed on the Oslo Stock Exchange (Oslo Børs). The B2Impact operates in over 22 European markets, mainly in Scandinavia, the Baltic and Central and South East Europe, providing banks and institutional vendors with specialised financial services, including the management of Non-Performing Loans (NPLs). Cyprus and other markets in the Balkans region are a key priority for the B2Impact Group. As part of its activities, we deal with the personal information of visitors of our website (“data subjects”), and we are committed to protecting this information and safeguarding the privacy of the data subjects.

Contact Us

• Head Office: Makariou 56 & Dimofontos, LAMDA TOWER, 1st floor, 1075 Nicosia, Cyprus
• Phone: +35725259620 (for general information)
• Email: info@b2kapital.com.cy/ complaints@b2kapital.com.cy
• Website: https://www.b2kapital.com.cy/

If you have any questions, concerns, comments, or requests regarding this Privacy Policy or our data practices, please contact us at dpo@b2kapital.com.cy

What Cookie Policy Covers

This Cookie Policy explains how we collect, use, disclose, and protect personal data obtained through our website, particularly concerning the use of cookies and tracking technologies.

Cookie Policy Link to General Privacy Policy

Our Cookie Policy outlines how we use cookies and similar technologies on our website to enhance your browsing experience. For comprehensive information regarding the processing of personal data and your privacy rights as a website user, please refer to our Privacy Policy. If you have any questions or concerns about your personal data or privacy, the Privacy Policy provides detailed insights into how we are handling and protecting your personal data, including explanations about key legal and technical terms on data protection.

We outlined below some key points about our Cookie Policy to help you navigate its contents effectively:

Content:

1. What are Cookies, and How We Collect Data?
2. Why We Use Cookies, and How We Do It Legally?
3. Your Cookie Consent
4. Do Not Track Preferences
5. Managing Cookies
6. How Long Do We Keep Cookies Data?
7. Cookies We Use on Our Website
8. Cookies and Profiling
9. Who Do We Share Your Cookie Data With?
10. International Data Transfers
11. Your Rights
12. Cookie Policy Updates

1.1 About Cookies

Cookies are small text files that websites place on your device as you are browsing. They are processed and stored by your web browser. In and of themselves, cookies are harmless and serve crucial functions for websites. Cookies can also generally be easily viewed and deleted.

Our website collects some Personal Data from its Users (Visitors). When you visit our website, it may store or retrieve information on your browser, mostly in the form of cookies.

This information might be about you, your preferences, or your device and is mainly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.

Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.

Types of cookies based on their purpose, duration, and source.

1.2 Data Collection and Sources

When you visit and use our website, we collect certain data to enhance your experience and provide you with the right content.

We collect data automatically during your visit through cookies and similar technologies, such as your IP address, browser type, device information, and website usage patterns.

Data Linkage. The data collected through cookies is not always directly linked to your identity. It is usually collected and processed in an anonymous and aggregated form to analyze website performance, user behavior, and improve our services.

However, the data collected through cookies and similar technologies, may be linked to your identity when you provide personal information through forms on our website. This linkage enables us to tailor your experience, provide relevant content, and improve our services.

We Use Cookies and Related Technologies to:

• Monitor the technical status of our website and make our website operational.
• Store users’ preferences
• Provide online services to our webpage users.
• Gather analytics data about users’ behavior.
• Improve and customize the experience for our users.

How Do We Collect Your Data through Cookies?

By default, the browsing experience of our website visitors is NOT tracked by our website. You may, though, choose to consent to our processing of personal data collected during your browsing experience on our website to allow us to improve your visiting experience.

If you enable the Do Not Track option (see below for an explanation) in your web browser, we will respect your choice and your browsing experience on our website will not be tracked.

If you have not enabled the Do Not Track option, we will show you a cookie banner for you to make your choice and install a consent cookie to keep track of your choice. If you consent to the processing of your personal data by using cookies, then our website is activated and some relevant cookies loaded (i.e., essential, and non-essential ones, as described below under section “Cookies we use on our website”. You can always decide to withdraw your consent or consent again at any time.

The cookie consent expires after a maximum 12 months. Then, if your Do Not Track option is not enabled, you will be shown the cookie banner again to renew your choice. In case you have disabled all cookies, you will be shown the cookie banner at each visit to our website.

If you don’t make a choice in the banner, no cookies will be deployed (either essential or non-essential), but the banner will re-appear every time you visit our website. If you wish to consent to (or withdraw your consent from) please express your option to manage your consent regarding cookies.

Do Not Track is a function that allows visitors not to be tracked by websites. Do Not Track options are available in several browsers, including:

• Firefox
• Internet Explorer
• Chrome
• Safari
• Opera

Removing Cookies from Your Device

You can delete all cookies that are already on your device by clearing the browsing history of your browser. This will remove all cookies from all websites you have visited. Be aware though that you may also lose some saved information (e.g., saved login details, site preferences).

Managing Site-Specific Cookies

Necessary cookies are required for providing the website service and cannot be disabled. However, you have the option to manage settings related to all other types of cookies by clicking cookie management on our webpage. For more detailed control over site-specific cookies, check the privacy and cookie settings in your preferred browser.

Blocking Cookies

You can set most modern browsers to prevent any cookies from being placed on your device, but you may then have to manually adjust some preferences every time you visit a site/page. Some services and functionalities may not work properly at all (e.g., profile logging-in).

Managing Our Cookies

You can manage your preferences concerning cookies from our website by clicking the cookie management option.

Our website usually keeps cookie-collected data until you finish browsing, or up to 12 months, and automatically deletes visitors’ logs after 12 months. Aggregated data sets containing no personal data may be stored for an indefinite period for analytical purposes.

Based on your consent and provided preferences, we use statistical cookies from Google Analytics to enhance our website functionality, analyze user behavior, and improve our services.

These cookies help us understand how our website is used.

In simple terms:

• Statistical Cookies (First Party) come from our website directly. These cookies track your website usage and help us improve our site. Data collected includes page visits and duration, typically retained for up to 12 months.

Our trusted partner assists us in managing these cookies.

• Google Analytics and its related products is a web service provided by Google Ireland Limited (“Google”) for users of Google services based in the European Economic Area.

For more information about Google Analytics privacy practices, please review Google Privacy Policy on the Google website: Privacy Policy – Privacy & Terms – Google.

When using Google Analytics for users located in the European Economic Area (EEA), the data collected is typically stored within the European Union (EU) or the European Economic Area. By way of exception, data may be stored in servers located in the USA.

Profiling: We may use profiling techniques in the following contexts:

• Personalization of User Experience to customize your website experience based on your preferences and past interactions. This allows us to provide you with content and features that are most relevant to you.
• Website Analytics and Performance to track user behavior, such as page views and clickstream data, to understand how users interact with the site. This data is used to improve website performance, enhance user experience, and optimize content placement.
• Cookies and Tracking Technologies are used to collect data on user behavior, preferences, and interactions with our website. This data is valuable for understanding user preferences, providing personalized experiences, and improving website functionality.
• Security Profiling based on monitoring and auditing involves tracking user activities, access logs, and compliance data to ensure adherence to security standards and regulations. This is done to maintain the security and integrity of the website, protect against unauthorized access, and demonstrate compliance with legal requirements.

Automated Decision-Making: We do not engage in automated decision-making processes that produce significant legal effects or similarly significant consequences for individuals based solely on automated processing.

In summary, the profiling activities described above are implemented with the intention of enhancing your user experience and improving website performance. We value your privacy and offer options for consent and control over your data preferences. If you have any questions or concerns about our profiling practices, please don’t hesitate to contact us using the information provided in our “Contact Us” section

At times, it’s necessary for us to share your personal data with others to fulfil our legal and contractual obligations and to pursue our legitimate interests, we may share the data with our affiliates, subsidiaries, or service providers to facilitate our business activity. We take measures to ensure the security and confidentiality of your data when shared.

The following are examples of possible categories of recipients of your data:

We may need to transfer your data to countries outside the European Economic Area (EEA) or places with different data protection rules. We take steps to protect your data, including:

• Adequacy Decisions: If the European Commission says a country has good data protection, we can send data there without extra safeguards, including EU-US Data Privacy
• EU-US Data Privacy Framework: The European Commission has approved data transfers from the European Economic Area (EEA) to the United States under the EU-US Data Privacy Framework. Under this framework, your personal data may be transferred to participating U.S. companies without the need for additional safeguards.
• Standard Contractual Clauses: We might use these approved contracts to ensure your data is safe when it goes outside the EEA.

The information about the transfers can be obtained through the “Contact Us” section in the Privacy Policy.

We are committed to transparency and ensuring that your data subject rights are accessible and cost-free:

Limitations or Exceptions to Data Subject Rights:

While we respect your rights, legal or legitimate reasons may prevent us from fulfilling some requests. For instance, if it conflicts with our legal obligations or others’ rights. We’ll explain why if we can’t fulfil your request.

Withdrawing Your Consent

You can withdraw your cookie consent at any time. To do so you can Opt-Out for non-essential cookies by adjusting your settings in your device or browser. Essential cookies for security will still be active.

If you withdraw consent for non-essential cookies, some website features and personalized content may not be available to you. This may affect your overall user experience on our website.

Withdrawing consent does not affect the lawfulness of any processing that occurred before your withdrawal. We are committed to respecting your choices and privacy preferences.

To request any action regarding your rights, contact us by email at dpo@b2kapital.com.cy or by postal mail to our head office at Makariou 56 & Dimofontos, Lamda Tower, 1^st floor, 1075, Nicosia, Cyprus. Our Data Protection Officer (DPO) will assist you and respond as soon as possible, not later than three months.

We may update this Cookie Policy from time to time to reflect changes in our privacy practices or legal obligations. We will post the revised version on our website and update the “Effective Date” at the top of this policy. We encourage you to check our Cookie Policy periodically for the latest information on our privacy practices.

We are committed to keeping you informed about our data practices and any updates to our privacy policy. You can access the history of previous versions of this privacy policy by visiting the “Cookie Policy History” section on our website. This section provides a record of all previous versions, allowing you to review any changes made over time.