PowerSouls Crowdfunding Privacy Statement

Last updated: 02 June 2026

1. Who Are We?

This Privacy Statement explains how personal data is processed in connection with the crowdfunding activities of PowerSouls North Europe B.V. and Stichting Administratiekantoor Powersouls (“STAK Powersouls”).

For any questions regarding privacy or the processing of your personal data, please contact:

PowerSouls North Europe B.V.

Stevinstraat 183
2587 EE The Hague
The Netherlands info@powersouls.earth

Stichting Administratiekantoor Powersouls

Stevinstraat 183
2587 EE The Hague
The Netherlands info@powersouls.earth

2. What Personal Data Do We Process?

In connection with the crowdfunding campaign, we may process the following personal data:

• Name and initials;

• Address details;

• Email address;

• Telephone number;

• Date of birth, where required for identification or administrative purposes;

• Payment information;

• Number of depositary receipts acquired and participation amount;

• Date of participation;

• Correspondence relating to participation;

• Information required for maintaining the register of depositary receipt holders;

• Information required to comply with legal obligations.
We do not collect more personal data than is reasonably necessary for participation,

administration, communication and compliance with applicable laws and regulations.

3. Why Do We Process Your Personal Data?

We process personal data for the following purposes:

1. Processingparticipationrequests;

2. Confirmingandadministeringparticipationinthecrowdfundingcampaign;

3. Maintainingtheregisterofdepositaryreceiptholders;

4. Processingpayments;

5. Providinginformationregardingthecrowdfundingcampaignandyourdepositary

   receipts;

6. ImplementingandadministeringtheAdministrationConditionsandArticlesof

   Association;

7. Complyingwithlegal,taxandadministrativeobligations;

8. Respondingtoquestionsandrequests;

9. Protectingourrightsandtherightsofdepositaryreceiptholders.

4. Legal Basis for Processing

We process personal data on one or more of the following legal grounds:

• Performance of a contract or taking steps prior to entering into a contract;

• Compliance with legal obligations;

• Legitimate interests, such as proper administration, communication and protection of rights;

• Consent, for example in relation to certain newsletters or non-essential communications.

  Where processing is based on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

5. With Whom Do We Share Personal Data?

We only share personal data where necessary. This may include:

• Stichting Administratiekantoor Powersouls;

• PowerSouls North Europe B.V.;

• Payment service providers;

• Accountants, bookkeepers and administrative service providers;

• Notaries, lawyers and professional advisers;

• IT service providers and hosting providers;

• Government authorities where disclosure is required by law.

  Where third parties process personal data on our behalf, we enter into appropriate agreements regarding confidentiality, security and data protection.

  6. How Long Do We Retain Personal Data?

  We do not retain personal data longer than necessary for the purposes for which it was collected.

  Information forming part of the depositary receipt holders register may be retained for as long as necessary to safeguard the legal position of depositary receipt holders, to administer the Administration Conditions and to comply with legal retention obligations.

  Administrative and tax-related records are generally retained for a period of seven (7) years unless a longer retention period is required or permitted by law.

  7. Security

  We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or unlawful processing.

  Access to personal data is restricted to persons who require such access in order to perform their duties.

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have various rights regarding your personal data.

Subject to applicable law, you may request:

• Access to your personal data;

• Correction of inaccurate personal data;

• Deletion of personal data where legally permissible;

• Restriction of processing;

• Transfer of personal data (data portability);

• Objection to processing;

• Withdrawal of consent.

  Certain data cannot be deleted where we are legally required to retain it, where it forms part of the register of depositary receipt holders, or where retention is necessary for the establishment, exercise or defence of legal rights.

  9. News and Updates

  We may provide depositary receipt holders with information regarding the progress of PowerSouls, the crowdfunding campaign, meetings, administrative matters and other relevant updates.

  Marketing or promotional communications will only be sent where a valid legal basis exists, such as consent or an existing relationship that permits such communications, and where an unsubscribe option is available where required by law.

  10. Cookies and Website Use

  Our website may use functional cookies to ensure proper operation of the website.

  If we use analytical, statistical or marketing cookies, we will provide separate information and request consent where required by applicable law.

11. Complaints

If you have any questions or complaints regarding the processing of your personal data, please contact us first. We will make every reasonable effort to resolve the matter promptly and carefully.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority.

12. Changes to This Privacy Statement

We may amend this Privacy Statement from time to time if our activities, website, crowdfunding campaign or legal obligations change.

The most recent version will always be available on our website.