Privacy Statement

This privacy policy explains how iBabs B.V. ("iBabs", "we", "our" or "us") collects, uses, shares, and protects your personal data when you visit or interact with our website or application. iBabs B.V. is a company registered in the Netherlands with its registered office at Maelsonstraat 28-4
1624 NP Hoorn, Netherlands, and is part of Euronext Corporate Solutions and the Euronext N.V. Group.

This privacy statement applies to all personal data of visitors of:

• www.ibabs.com
• www.ibabs.eu
• www.ibabs.nl
• www.ibabs.co.uk
• www.ibabs.fr
• www.ibabs.se
• www.ibabs.org
• www.bestuurlijkeinformatie.nl

(collectively referred to as the “Website).

Our website and application provide information about and access to our secure digital board portal solution, which supports organisations in streamlining meeting preparation and execution, secure document sharing, and collaboration. While access to the iBabs platform is typically granted through a corporate or institutional subscription, this privacy policy applies specifically to the processing of personal data when you visit our Website, download content, submit a contact form, register for an event, or interact with us online.

We are committed to protecting your privacy and handling your personal data responsibly, in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR) and the UK GDPR.

By using our Website or Application, you acknowledge and accept the practices described in this privacy policy. Please read it carefully. If you have any questions, feel free to contact us using the details provided in the contact section.

This privacy policy was last updated in April 2025.

Important information and who we are

Purpose and scope

iBabs is committed to protecting your privacy and ensuring transparency in how we handle personal data. This Privacy Policy explains how we collect, use, store, and process personal data when you interact with our website, including when you browse content, request a demo, or contact us for information.

This Privacy Policy applies to personal data collected in the following situations:

• When you visit our website and browse its content
• When you contact us for inquiries or customer support
• When you sign up for a demo or request a consultation
• When you subscribe to newsletters, webinars, or other communications.
• When you interact with our social media channels, advertisements, or marketing campaigns.
• Through third parties that provide services to us or act on our behalf

This Privacy Policy does not cover personal data collected through the iBabs platform itself. If you are an iBabs user accessing our board portal services, your data is processed according to the agreement between iBabs and the subscribing organization. More information about this can be found in our privacy statement for our platform.

As part of Euronext Corporate Solutions and a subsidiary of the Euronext N.V. Group, iBabs ensures that all data processing activities comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the UK GDPR.

Controller /processor

For personal data collected through the iBabs website, including when you browse, sign up for a demo, or contact us, iBabs B.V. is the Data Controller. This means iBabs determines the purpose and manner in which this data is processed, in line with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the UK GDPR.

In some cases, iBabs may process personal data on behalf of its customers or partners in accordance with contractual agreements. In these instances, the customer or partner remains the Data Controller, and iBabs acts solely as a Data Processor following their instructions. However, such processing generally applies to the use of the iBabs platform rather than website interactions.

We have appointed a DPO to oversee privacy-related matters. If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact the DPO using the details provided below.

Contact details

If you have any questions about this Privacy Policy or how iBabs processes your personal data, you can contact us using the details below:

Full legal entity name: iBabs B.V.
Company registration: Registered in The Netherlands under company number 60962062 (Dutch Chamber of Commerce)
Registered office address: Maelsonstraat 28-4, 1624 NP Hoorn, The Netherlands
Email address: [email protected]
Postal address: 14, place des Reflets – CS3006492054 Paris la Défense.

UK Representative

For individuals in the UK, our appointed representative is:

Company name: ECS UK
Company registration number: Z9612769
Email address: [email protected]

Changes to the privacy policy and your duty to inform us of changes

This version was last updated on the date stated at the beginning of this privacy policy. We reserve the right to amend this privacy policy from time to time as required to ensure its accuracy.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

The data we collect about you

Personal data we collect

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). For the full definition of personal data, please see Annex 1- Glossary of terms.

When you visit or interact with the iBabs website, we may collect and process the following categories of personal data, depending on how you use the site:

• Device and technical information: Information about your browser, device, operating system, and other technical identifiers, such as IP address and cookies. This data is collected through analytics tools, cookies, and log files to help us monitor site performance and improve the user experience.
• Contact and professional information: If you fill in a contact form, download content, request a demo, or sign up for a newsletter or event, we may collect your name, email address, phone number, job title, and company name.
• Usage data: Information about how you navigate and interact with our website, such as the pages visited, time spent on the site, click behaviour, and referring URLs. This may be collected using tracking tools (e.g. cookies, pixels, and similar technologies).
• Marketing preferences: If you consent to receiving marketing communications, we may collect your communication preferences and track your interaction with emails (e.g. open and click rates) to tailor future messages.

Data from Third Parties and Public Sources

We may receive personal data from:

• Event registration platforms or survey tools you use to engage with us.
• Publicly available sources or professional data enrichment tools (e.g. LinkedIn or business databases), where permitted.
• Marketing and analytics platforms that help us identify interest in our services or track campaign performance.

Aggregated and anonymised Data

We may use aggregated or anonymised data (such as traffic reports or usage trends) for analytical and internal reporting purposes. This data does not identify you and is not considered personal data under data protection law. For example, we may use aggregated analytics to assess how many visitors access a particular page.

If we ever combine anonymised or aggregated data with information that could identify you, we will treat the combined data as personal data and handle it in line with this privacy policy.

If you choose not to provide Personal Data

In cases where we need to collect personal data by law or to fulfil a specific request (e.g. contacting you after a demo request), and you choose not to provide that information, we may be unable to respond to your request or provide certain features of the website. We will inform you at the time if this is the case.

How is your personal data collected?

We collect personal data through a variety of methods when you visit or interact with the iBabs website:

Direct interactions
You may provide personal data directly by submitting a form on our website—for example, when you request a demo, download a resource, sign up for a newsletter, register for an event, or contact us via email or phone. This may include your name, email address, job title, company name, and other contact or professional details.

Events and webinars
If you register for or attend an event, webinar, or other iBabs-hosted activity via the website, we may collect registration information such as your name, contact details, organisation, and participation data. This may also include responses to polls, chat contributions, or feedback provided.

Automated technologies and analytics
When you visit the website, we automatically collect certain technical data, such as your IP address, browser type, device information, language settings, and browsing behaviour (e.g. pages viewed, time on site, clicks). This data is collected through cookies, pixels, and similar technologies.

Identifiable cookies are only used if you give your consent via our cookie banner. Otherwise, analytics data is collected in an anonymised or aggregated form.

Third-party sources
We may receive additional personal data about you from:

• Marketing or event platforms you use to register for iBabs-related content.
• Third-party tools we use for lead generation or marketing insights (e.g. business contact databases)
• Publicly available sources such as LinkedIn or company websites, used to enrich your contact or company profile.
• Communication platforms or CRM systems (e.g. when you contact our support team or interact with email campaigns)

This helps us improve our marketing efforts, tailor communications, and respond to your requests more effectively.

How we use your personal data

We only process your personal data were permitted under applicable data protection legislation, such as the General Data Protection Regulation (GDPR) and UK GDPR. In the context of our website, iBabs acts as a Data Controller, as we determine the purposes and means of processing your personal data.

The table below outlines the legal bases we rely on and the purposes for which we process your personal data when you interact with the iBabs website:

Cookies and tracking technologies 

The iBabs website uses cookies and similar technologies to distinguish you from other users, enhance your browsing experience, and help us analyse traffic and improve our platforms. Cookies also allow us to personalise content, remember your preferences, and understand how visitors interact with our site and services. Cookies are small text files stored on your device when you visit a website. They may be set by iBabs directly (first-party cookies) or by third-party services used on our site (third-party cookies). If you disable or refuse cookies, some parts of the website may become inaccessible or may not function properly. An overview of the cookies used can be found in Annex 2.  

When you first visit the iBabs website, you will be prompted with a cookie banner that allows you to manage your cookie preferences. You can choose to accept or reject non-essential cookies such as performance and targeting cookies. If you accept these cookies, you are giving your explicit consent for iBabs to process your personal data as described in this privacy policy.  

You have the right to change your cookie preferences at any time by accessing the "cookie settings" on our website. Please note that rejecting certain cookies may affect the functionality of some parts of the website and services.  

Legal Basis  

Where required under applicable law, we use cookies on the basis of your consent, which is requested via a cookie banner when you first access our site. You may withdraw your consent or adjust your preferences at any time using your browser settings or the cookie management tool provided on our website.  

For cookies that are strictly necessary for the operation of the site, the legal basis is iBabs legitimate interest in providing a functional, secure digital environment.  

Cookie duration and expiry  

Ibabs undertakes to delete or anonymise all cookies that we control after a maximum duration of 12 months. After this period, your consent will be requested again.  

Cookie categories and purposes  

You can manage your cookie preferences through your browser settings. You may choose to refuse some or all cookies or set your browser to alert you when cookies are being used. Please note that disabling certain cookies may affect the availability or functionality of parts of the website. An explanation on how you can remove cookies can be found in Annex 3 

Training sessions and third-party platforms 

Some training sessions may be recorded for quality assurance, internal reference, or to support participant learning. Where this applies, participants will be informed in advance and may opt out of being recorded where feasible. 

Where third-party platforms are used to deliver training services—such as virtual classrooms (e.g. Microsoft Teams), certification providers, or survey tools—your personal data may be processed by those providers under their respective privacy policies. We take appropriate steps to ensure that any such third parties meet our data protection and security standards. 

Change of purpose 

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at [email protected] 

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so. 

Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law. 

Disclosure of your personal data and international transfers

Personal data processed by iBabs may be stored on secure servers located within the European Economic Area (EEA). In certain cases, personal data may be transferred outside the EEA, the United Kingdom (UK), or Switzerland. When such transfers occur, iBabs ensures that appropriate safeguards are in place in accordance with applicable data protection laws. These safeguards may include:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The UK International Data Transfer Agreement (IDTA)
• Adequacy decisions issued by the European Commission or relevant UK authority.
• Participation in recognised data transfer frameworks, such as:
  • The EU-U.S. Data Privacy Framework
  • The UK Extension to the EU-U.S. Data Privacy Framework
  • The Swiss-U.S. Data Privacy Framework

Euronext US Inc. and relevant subsidiaries are certified under these frameworks where applicable.

Group sharing

We may disclose your personal data to other entities within the Euronext N.V. group, of which iBabs is a subsidiary, for internal administrative, compliance, and operational purposes.

Disclosure to third parties

We may also disclose your personal data to trusted third parties in limited circumstances and for purposes aligned with the services we provide. These include:

• Regulatory authorities or law enforcement agencies, where required by law
• Third-party service providers who support us with IT infrastructure, hosting, analytics, support, and communication tools
• Third parties involved in financial market activities, events, or training sessions organised in collaboration with iBabs.
• Professional advisers, including legal, tax, compliance, and accounting consultants.
• Prospective buyers or business partners in connection with a potential merger, acquisition, or corporate restructuring

Safeguards and responsibilities

We require all third parties to respect the security and confidentiality of your personal data and to process it in accordance with applicable data protection laws. Third-party service providers are not permitted to use your personal data for their own purposes and may only process it on our instructions and for the specified purposes set out in our agreements with them.

Links to third-party websites and external platforms

The iBabs website may contain links to external websites or services. This privacy policy does not apply to those third parties, and iBabs is not responsible for their data processing practices. We encourage you to review their privacy policies.

Additionally, iBabs may use external tools and platforms operated by third parties—for example, to collect customer feedback, reviews, or provide comparison services. When you interact with these tools (such as leaving a review), the processing of your personal data is governed by the privacy policy of the respective third-party provider. iBabs is not responsible for how those parties handle your data, and we recommend that you consult their privacy statements before submitting any personal information.

Social media

If you share content from the iBabs website via social media, your personal data may become visible to others based on your privacy settings on those platforms. iBabs is not responsible for the processing of your data by such platforms.

Data Security and confidential information

iBabs is committed to protecting your personal data and has implemented appropriate technical and organisational measures to safeguard it against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

The iBabs platform is certified under ISO/IEC 27001 (information security management) and ISO 9001 (quality management), ensuring that your data is handled in accordance with internationally recognised standards.

To protect personal data, iBabs applies robust security controls, including:

• Secure servers and firewall protection to prevent unauthorised access to the platform and customer data.
• Encryption of data where applicable, including during certain data transmissions
• Restricted, role-based access controls ensuring that only authorised personnel with a business need can access personal data.
• Regular security audits, assessments, and monitoring to identify risks and maintain certification requirements.

In addition, we have procedures in place to deal with any suspected personal data breaches. Where legally required, we will notify affected individuals and relevant data protection authorities without undue delay.

Please note that while iBabs takes reasonable steps to secure your data, the transmission of data over the internet is never completely secure. For example, email and other external communications are not encrypted. We strongly advise you not to send sensitive personal information (such as bank or credit card details) via email. By choosing to use email or other unencrypted methods, you acknowledge the potential risk of interception by third parties and accept that iBabs is not responsible for any resulting loss or damage.

Applicant Privacy Notice

Information provided as part of a job application, including personal data, is processed in accordance with the applicable privacy policy of Euronext Corporate Solutions (ECS). More information on how applicant data is collected, used, and protected can be found in our privacy statement at the following link: Privacy Policy | Euronext Corporate Services.

Data Retention

iBabs will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to respond to your inquiries, manage communications, improve our website, or comply with legal and regulatory obligations.

When determining how long to retain your data, we consider:

• The nature, sensitivity, and volume of the personal data
• The potential risk of harm from unauthorised access or disclosure
• The specific purpose for which we collected the data and whether that purpose can still be achieved.
• Legal, regulatory, or contractual retention obligations that may apply.

If you have an active business relationship with iBabs, retention periods may be extended as needed to meet contractual or legal obligations.

You may request the deletion of your personal data at any time, subject to our legal obligations. For more information, please see section 9 on your rights.

Your Rights

As a data subject, you have certain rights under applicable data protection laws in relation to the personal data we process about you. These rights are not absolute and may be subject to limitations or exemptions under relevant law.

The table below outlines your key rights:

You may exercise your rights by contacting us through one of the following methods:

• Contacting the Euronext Data Protection Officer: [email protected]
• By post:
  iBabs B.V.
  Attn. Data Protection Officer
  14, place des Reflets – CS30064
  92054 Paris la Défense.

We may request proof of identity to verify your request in line with our internal procedures.

Supervisory Authorities

You also have the right to lodge a complaint with the competent supervisory authority. We encourage you to contact us first to allow us the opportunity to address your concerns.

Contact details of data protection authorities in jurisdictions where iBabs is active:

• Netherlands (Autoriteit Persoonsgegevens): https://autoriteitpersoonsgegevens.nl/en
• United Kingdom (Information Commissioner’s Office – ICO): https://ico.org.uk/
• France (CNIL): https://www.cnil.fr/en/home
• Sweden (IMY): https://www.imy.se/en

No fee usually required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.

Updates to this Statement

This Privacy Statement may be updated from time to time. The latest version will always be available on our website. We encourage you to review it periodically.

This version is effective as of June 2025

Annexes

Annex 1 – Glossary of used terms

Annex 2 – Cookie inventory  

The following cookies are used on the ECS website and may be set either by iBabs directly (first-party) or by third-party platforms integrated with our services. These cookies help us ensure platform functionality, monitor site performance, and improve the user experience.   

Note: Cookie deployment may vary depending on user location, device type, and the user’s consent preferences. Users can manage their cookie settings at any time via the cookie banner or browser settings.  

Annex 3 – Cookie removal instructions  

As part of our commitment to privacy and compliance with the GDPR, we provide the following information on how to remove cookies from your browser:  

Google Chrome:  

• Open Chrome and click on the three-dot menu icon in the top-right corner.  
• Select “Settings” from the drop-down menu.  
• Under the “Privacy and security” section, click on “Clear browsing data.”  
• Select the time range for which you want to remove cookies.  
• Check the box next to “Cookies and other site data.”  
• Click on the “Clear data” button to remove the cookies.  

Mozilla Firefox:  

• Open Firefox and click on the menu button (three horizontal lines) in the top-right corner.  
• Select “Settings” from the menu.  
• In the left sidebar, click on “Privacy & Security.”  
• Under the “Cookies and Site Data” section, click on the “Clear Data” button.  
• Check the box next to “Cookies and Site Data.”  
• Click on the “Clear” button to remove the cookies.  

Safari:  

• Open Safari and click on “Safari” in the top menu.  
• Select “Settings” from the drop-down menu.  
• In the Preferences window, click on the “Privacy” tab.  
• Click on the “Manage Website Data” button.  
• In the new window, select the website(s) for which you want to remove cookies.  
• Click on the “Remove” button, then click “Done” to confirm.  

Please note that the above instructions may vary slightly depending on the browser version you are using. If you are using a different browser, we recommend referring to the browser’s documentation or support website for specific instructions.