Privacy Statement for GDPR Websites

Effective date: May 25, 2018.

What is the scope of this privacy statement? This privacy statement applies to websites, mobile applications and digital services that link to or publish this privacy statement. This privacy statement is intended to inform you about the personal data that www.q-ad.eu collects from you, how the data is collected, the purposes for which it is used, who they will have access to your personal data and the rights you have to limit the use of your data. In this privacy statement, we refer to the websites, mobile applications and digital services that refer to or publish this privacy statement.

What personal data can we collect? Through our sites that link to this privacy statement, we will collect and process personal data that does not directly identify you by name (such as your IP address) or does not include your contact information, but which can be used to identify that our site was accessed from a particular computer or device and which, in combination with other information, could be used to identify you. We receive personal data from your interactions with our sites. The personal data that we process about you through our websites and that refer to this privacy statement may include the following categories of personal information:

• Demographic data;

• Online identifiers;

• IP address;

• Data from our cookies;

• Third-party cookies; and/or

• Use of social media where we collect directly identifiable personal data about you, the following privacy notices will provide you with additional information about what we may collect, how we will collect it, for what purpose we will collect it, to whom we may disclose the data and the rights you have to limit our use of the data.

How will we use your personal data? The processing of your personal data includes the ways in which we may record, organize, structure, store, adapt or modify, retrieve, consult, use, disclose by transmission, disseminate or even make available, align or combine, restrict, delete or destroy your personal data . We may process your personal data for the following purposes:

• Compliance with the company and for security purposes of the network and production facilities.

• Authorizing, granting, administering, monitoring and suspending access to www.carmenfaur.eu systems, production facilities, records, properties and infrastructure;

• Monitoring your interactions with us;

• Auditing our programs and services for compliance purposes;

• If we have legal obligations to process personal data;

• Statistical analysis, including analysis by our vendors;

• Administration of the website; and/or

• Marketing activities, including third-party cookie tracking and interest-based profiling of your interactions with us or others. For any other purposes where we are required to notify you and seek your consent, including those purposes required by local law, we will seek your consent before processing your personal data for those purposes.

What is our legal basis for processing your personal data? The applicable legal basis on which we process your personal data for the specific purposes listed above includes the following:

• Based on your consent: In some cases, we may ask for your consent to collect and process your personal data. If you choose to give us your consent, you can later withdraw it (or opt-out) by contacting us using the information in the "How to Contact Us" section below. Please note that if you withdraw your consent, this will not affect any processing of personal data that has already taken place. Where we process your personal data on the basis of consent, we will provide you with more detailed information when we obtain your consent.

• Complying with applicable laws or performing a contract: In certain circumstances, we may need to process your personal data to comply with a relevant law/regulation or to fulfill our obligations under a contract with you. If we process your personal data to comply with our legal obligations, you may not be allowed to object to this processing activity, but you will usually have the right to access or review this information, unless where they would prevent our legal obligations. If we use processing to fulfill contractual obligations under a contract to which you are a party, you may not be able to object to this processing, or if you choose to opt-out or object to our processing, it may affect our ability to fulfill an obligation contract you owe.

• Our legitimate interest: We may process your personal data based on our legitimate interests to communicate and manage interactions with you in relation to our products and services, scientific research and educational opportunities. In addition to the other rights described below, you have the right to object to the processing of your personal data. You can raise your objections by contacting us using the information in the "How to contact us" section below.

Cookies. This site may use a technology called "cookie". A cookie is a small data file that a website can place on your computer's hard drive, where your Internet browser files are stored. A cookie saves you from re-entering certain information in certain registration areas because cookies can be used to allow a site to "remember" information that a visitor has previously entered. They also help deliver content-specific information to you and monitor how sections of the websites are used. Cookies can be placed on your computer both by us and by third parties with whom we have a contractual relationship, for example web analytics services and those for advertising networks. Most internet browsers or other programs allow you to withdraw your consent by changing your browser settings to delete cookies from your PC's hard drive, block all cookies or receive a warning before storing a cookie. Please consult your browser's instructions to learn more about these features. If you reject cookies, the functionality of the site may be limited and you may not be able to benefit from many of the site's features. Do Not Track There are various ways you can prevent your online activity from being tracked. One of them may be setting an option in your browser that warns the websites you visit that you do not want them to collect certain information about you. This is called a "Do-Not-Track" ("DNT") signal. Please note that our websites and web resources do not currently respond to these signals from web browsers. At this time, there is no universally accepted standard for what a company should do when a DNT signal is detected. Google Analytics may be used to help our website work better and to help us understand which parts of the website are being used. Google Analytics uses technical tools such as first-party cookies and JavaScript code to collect information about visitors. The Google Analytics service monitors website visitors who have JavaScript enabled. Google Analytics anonymously tracks how visitors interact with a website, including details about where they come from and what actions they take on a website. Google Analytics collects the above information from users. This information is used to administer and update the website, and we will also assess whether website visitors match the website's expected demographics and determine how key audiences use the content.

A. Opt-out Agreement: Google Analytics offers an opt-out agreement for website visitors who do not wish to have their data collected. You can find more information about this option by visiting: http://tools.google.com/dlpage/gaoptout.

B. Use of data by Google: Google and its wholly owned subsidiaries may retain and use, in accordance with the terms of its privacy policy (available at http://www.google.ro/privacy.html or at any other address URL that Google may provide from time to time) the information collected with your use of Google Analytics presentation and information sharing. Social Media Plugins Our Sites may use social media plugins to allow you to easily share information with others. When you visit our sites, the operator of the social media plugin that is on our site may place a cookie on your computer that allows that operator to recognize people on their site who have visited the sites our. If you have previously logged in to the social network site while browsing our website, social media plugins may allow the social network site to receive directly identifiable information about you that proves you have visited our website. The social media plugin may collect this information of visitors who have logged in to social media sites, whether or not they specifically interact with the plugin on our site. Social media plugins also allow the social network site to share information about your activities on our site with other users of their social network site. www.cementart.ro does not control any of the content in the social media plugins. For more information about social media plugins on social networking sites, you can consult the privacy and sharing statements of those sites.

Children's personal data

This site is not intended for persons under the age of 16. We do not knowingly collect personal data from anyone under the age of 16. How do we protect your personal data? We use industry standard administrative, technical and physical safeguards to protect your personal data against loss, theft, misuse, unauthorized access, alteration, disclosure and destruction. We allow access to your personal data only to those employees and third parties acting on our behalf who have a legitimate economic need for such access. We will transfer your personal data to third parties acting on our behalf where we have received assurances in writing that your personal data will be protected in accordance with this privacy notice and our privacy policies and procedures. To whom and when will we disclose or transfer your personal data? We will transfer or disclose your personal data to the following entities:

• To our affiliates worldwide, as we will indicate below.

• To third parties that we will contract to carry out services on our behalf to carry out activities or functions related to the processing purposes relating to your personal data described above. Where appropriate, we will require these third parties acting on our behalf to protect the confidentiality and security of your personal data that we transmit to them. Unless otherwise specified in this privacy statement, these third parties must contractually agree not to use or disclose your personal data for purposes other than necessary to provide our services, perform services on our behalf or to comply with applicable laws or regulations.

• Agencies, auditors and government authorities. We may disclose your personal data to auditors, government agencies and authorities in response to authorized information requests or where laws, regulations or industry codes require otherwise.

• To potential or current third party buyers. If we decide to reorganize or divest a business through sale, merger or acquisition, we may transfer your personal data to current or potential buyers. We will require those purchasers to use your personal data in accordance with this privacy notice.

How long do we keep your personal data? Personal data will be kept for the duration of your collaboration with us. We will store and retain the personal data we collect in accordance with our corporate records retention policy, after which it will be archived or deleted. A detailed schedule of our data retention practices is available at https://www.cementart.ro. Please note that certain information may be retained for longer periods of time if we have ongoing obligations to you or if required by local law. Links to Third Party Sites As a convenience to our visitors, this site may contain links to other sites owned and operated by third parties that we believe may provide useful information. The policies and procedures we describe here do not apply to these sites. We are not responsible for the collection or use of personal data by or on third-party websites. Therefore, we assume no responsibility for the use of personal data by third parties or data obtained through the use of third-party sites. We suggest you contact these sites directly for information about their privacy, security, data collection, and sharing policies.

How long do we keep your personal data? Personal data will be kept for the duration of your collaboration with us. We will store and retain the personal data we collect in accordance with our corporate records retention policy, after which it will be archived or deleted. A detailed schedule of our data retention practices is available at https://www.cementart.ro. Please note that certain information may be retained for longer periods of time if we have ongoing obligations to you or if required by local law. Links to Third Party Sites As a convenience to our visitors, this site may contain links to other sites owned and operated by third parties that we believe may provide useful information. The policies and procedures we describe here do not apply to these sites. We are not responsible for the collection or use of personal data by or on third party websites. Therefore, we assume no responsibility for the use of personal data by third parties, data obtained through the use of third party sites. We suggest you contact these sites directly for information about their privacy, security, data collection and sharing policies.

What are your rights? You have the right to consult and obtain a copy of your personal data, including an electronic copy that we hold, and to request that we make changes to any inaccurate or incomplete personal data we hold about you. You can also request that we delete your data when it is no longer necessary for the purposes for which you provided it to us, restrict the way we process your personal data for certain limited purposes where data deletion is not possible , or object to the processing of personal data. In certain situations, you may request that we send a copy of your personal data to a third party of your choice. To exercise any of these rights, please contact us as indicated in the "How to Contact Us" section below. You also have the right to file a complaint with the supervisory authority (see details in the "solutions" section below) if you believe that your rights have been violated.

What if we revise this privacy notice? From time to time, we may amend this privacy notice to reflect changes to our legal obligations or the ways in which we process your data. We will notify you of any material change to this privacy notice and it will be effective when notified. How can you contact us if you have questions or concerns? Use the information below and contact the EU Data Protection Officer (DPO) to:

• ask questions;

• submit a concern or complaint;

• opt out of a program or service; and/or

• to exercise any of your rights listed above, including access, correction, portability, opposition, restriction and deletion.

Email address: gabriel@cementart.ro