Account Deactivation and Data Retention

Prionex Hub is a corporate workplace application for authorised employees of PRIONEX LTD and its corporate customers.

Users cannot create or register an account directly in the application. Accounts are created and managed by the user's employer through the PRIONEX CRM system.

Users cannot independently delete or deactivate their corporate account from the Prionex Hub application.

When an employee leaves the organisation or no longer requires access, the employer's authorised administrator deactivates the account through the relevant administrative system.

Following deactivation, access to the application is blocked and active authentication sessions and access tokens are revoked or invalidated.

Account deactivation does not automatically delete historical workplace content associated with the account.

Messages, files, tasks, notes and other workplace content may be retained in the employer's workspace where necessary for business continuity, legal obligations, security, dispute resolution or other lawful purposes.

Personal data contained in such content remains subject to applicable data protection law and the rights described in the PRIONEX LTD Privacy Policy.

Certain technical and temporary data is subject to specific retention periods, as described in the PRIONEX LTD Privacy Policy.

If you wish to request deactivation of your account, or the exercise of a data protection right in relation to personal data associated with it, please proceed as follows.

Step 1 - Identify the relevant controller. If you are an employee of a corporate customer of PRIONEX LTD, your employer acts as the Data Controller and should be contacted first, through its authorised administrator. If you are an employee of PRIONEX LTD, PRIONEX LTD acts as the Data Controller.

Step 2 - Send your request. Requests addressed to PRIONEX LTD should be sent to dpo@crm-prionex.com.

Step 3 - Include the following information: your full name; the work email address or login used in Prionex Hub; the name of the employing organisation; and a description of what you are requesting, for example account deactivation, access, rectification or erasure.

Step 4 - Verification. We may request additional information in order to confirm your identity and to identify the relevant customer relationship before acting on the request.

On deactivation, access to the application is blocked, and active authentication sessions and access tokens are revoked or invalidated.

Messages, files, tasks, notes and other workplace content created through the account may be retained in the employer's workspace as business records, where necessary for business continuity, legal obligations, security, dispute resolution or other lawful purposes. Account deactivation does not by itself delete this content.

The retention periods currently applicable are:

Where erasure is requested under applicable data protection law, the request is assessed against the exemptions and retention obligations that apply to the relevant records, and the outcome is communicated to the person making the request.

For employees of corporate customers, the employer generally acts as the Data Controller and PRIONEX LTD acts as Data Processor where applicable.

For PRIONEX LTD employees, PRIONEX LTD acts as the Data Controller.

For information about personal data processed through Prionex Hub, applicable retention periods and data protection rights, please refer to the PRIONEX LTD Privacy Policy.

If you have a request concerning your personal data, please contact your employer as the relevant Data Controller or contact PRIONEX LTD at:

dpo@crm-prionex.com

PRIONEX LTD 14 Georgiou A, office/flat 15 4047 Germasogeia, Limassol Cyprus