Introduction

This Privacy Statement is effective as July 20, 2020.

This Privacy Statement explains how Quasius Investment Corp d/b/a GCA ("GCA", "we", "our" or "us") are processing (e.g.: collect, use, store, process, disclose and delete) your personal information (as defined in the applicable data protection legislation). This Privacy Statement applies to personal information that we collect about you. For more detail, please visit a relevant GCA privacy notice(s) available at GCA websites.

This Privacy Statement also describes the choices available to you regarding GCA's use of your personal information, the steps you can take to access your information and to request that we correct or delete your personal information.

This Privacy Statement also describes the choices available to you regarding GCA's use of your personal information, the steps you can take to access your information and to request that we correct or delete your personal information.

If you have questions or concerns regarding this Privacy Statement or our handling of your information collected under this Privacy Statement, contact GCA's Privacy Office at Privacy@gca.net

What Personal Information We Collect

Personal information is information that directly identifies you or information otherwise defined as "personally identifiable" under applicable law. This includes, but is not limited to:

• Full Name
• Title
• Postal address (Including billing and shipping address
• Telephone number
• Fax number
• Bank information
• Payment card number
• User name and password

And with regard to our employees the personal information includes also (but is not limited to):

• Date of birth
• Driver's License
• Passport Number
• Home address
• National identification
• Social Security Number
• Criminal Record
• Gender or Race
• Country, regional or local area of residence

How We Collect Personal Information

Directly From You

GCA may collect personal information you provide directly to us via websites, mobile applications, email, EDI, and other interactions. For example, when you register with us as a customer, place an order for product or services, participate in promotional activities, apply for a job, use an application installed on a device, post on our services, or subscribe to notifications.

When you register with GCA, we will collect your registration details in order to process your or your organization's application and to administer the relevant accounts. We will collect information relating to your application, which may include personal information such as your name, title, company or organization name, contact details (e-mail address, sold to address, shipping address), billing address and payment information (e.g. credit card details).

You may also have the opportunity to provide further optional data (such as phone number). In addition, you will need to choose a user name and password. We will also collect subsequent information provided when you use the account, and to keep a record of purchases or orders placed. We may also (for any visitor to our website) collect information about the domain from which you are visiting, and information regarding what pages you access.

Automatically Collected from Your Use of our Services

GCA may automatically collect personal information for business-related purposes, which may include providing customer service, managing the services we provide, complying with legal requirements, payment processing, and for marketing our products and services.

When you visit our websites, we automatically receive information about which of our websites you are visiting and the browser you are using. This information will be stored anonymously, and we will use it to improve our services and to make our websites more user-friendly as well as for statistical purposes.

Further, GCA may use cookies to help us optimize our services for you as further outlined in the section Cookie and Similar Technology located below

Personal Information Collected from Other Sources

GCA may collect personal information from publicly available sources, including, but not limited to, public internet websites and databases, public or government sources, and news media.

Along with using fully identifiable personal information for business-related purposes, we may use anonymized, or de-identified personal information for statistical purposes.

We may use your personal information to generate de-identified, statistical, summary, or aggregated information and subsequently use this de-identified information if such de-identified, statistical, summary, or aggregated information cannot be used to identify any individual.

We will obtain authorization from the applicable data protection authorities prior to processing personal information in accordance with applicable law.

We may obtain personal information from third parties including other GCA companies that have obtained or collected information about you and that have the right to provide that personal information to us. GCA may contract with third parties who provide information to businesses to verify certain information about you or obtain information about you. We may use the personal information received from a third party in accordance with the terms established between GCA and the third party

How We Use Information We Collect

GCA and service providers acting on our behalf may use information about you for the following purposes:

• To provide, maintain, protect and improve our services, develop new services, and protect the legitimate interests of GCA and our users;
• To perform a contract;
• To comply with a legal obligation to which GCA is subject;
• To facilitate, manage, personalize and improve your online experience;
• To respond to your inquiries and fulfill your requests;
• For our business purposes, such as data analysis, audits, fraud monitoring and prevention, enhancing, improving, or modifying our services, identifying usage trends, and operating and expanding our business activities;
• To send you advertisements and communicate about our products, services, and events we believe may be of interest to you in accordance with applicable law or based on your consent thereto; and
• If GCA transfers ownership or control of any portion of GCA to a third party, whether in the context of an acquisition, merger, reorganization, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings), we may transfer your personal information to that third party, provided that the use of your personal information by that third party remains subject to applicable law.

In the above cases the legal basis for the collection and processing of personal data is that it is necessary for the purposes of the legitimate interests pursued by us or by a third party. Such legitimate interests can be enforcement of legal claims, the offering and operation of the services in a cost-efficient manner as well as the fulfillment of your orders. The legal basis can also be the performance of a contract between you and a GCA company or your consent to process your personal information.

The provision of certain categories of your personal information may be required to enter into a contract with GCA. If required information is not provided, you will not be able to open a user account and/or use our services.

Marketing Purposes

If you are a user from the United States, GCA may use your personal information for direct marketing purposes. If you are a user from outside of the United States, GCA may contact you, for example by email or by telephone to inform you about our range of products or services similar to what you ordered from us so far or based on your explicit consent. You reserve the right at any time to refuse to allow your personal information (email address, telephone number) to be used for this purpose (object to processing) or withdraw your consent if applicable. If you do not want your personal information to be used for this purpose, please submit your request to us at Privacy@gca.net.

Who We Share Information With

Our agents, vendors, consultants, marketing service providers, and other service providers may receive, or be given access to your information, including personal information and usage information, in connection with their work on our behalf.

We may also share information about you as follows:

• As necessary to (a) comply with legal process; (b) to respond to requests from public and government authorities, (c) to enforce our contractual rights ; (d) to protect our operations and protect our rights, privacy, safety or property, and /or that of you or others; and (e ) to allow us to pursue available remedies or limit the damages that we may sustain;
• As necessary with GCA vendors, affiliates, and business partners for internal business purposes. For example, processing your orders, fulfilling your requests, providing customer service, and improving our products;
• To a third party in connection with or during negotiations of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock ( including in connection with any bankruptcy or similar proceedings).

When GCA engages third-party service providers, the disclosure of personal information to such providers is necessary, for example, to provision our services to you.

General Principles for Processing of Personal Information

Personal information will be collected, stored, processed and transmitted in accordance with GCA's established policies and applicable laws.

The principles of GCA with regard to the processing of personal information are as follows:

• Personal information will be processed fairly and lawfully
• Personal information will be collected for specified, explicit, and legitimate purposes and not further processed for incompatible purposes;
• Personal information collected by GCA will be adequate, relevant, and not excessive in relation to the purposes for which it is collected;
• Personal information collected by GCA will be accurate and, where necessary, kept up to date as reasonable possible; and
• Personal information collected by GCA will be retained as identifiable data for no longer than necessary to serve the purposes for which the personal information was collected.

If GCA engages in the processing of personal information for purposes other than those specified in this Privacy Statement, GCA will provide notice of these changes, the purposes for which the personal information will be used, and the recipients of personal information.

Cookies and Other Similar Technology

• Cookie Information: When you visit the services, we may send one or more cookies - a small text file containing a string of alphanumeric characters - to your computer that uniquely identifies your browser and lets GCA help you log in faster and enhance your navigation through the site. A cookie may also convey information to us about how you use the services (e.g., the pages you view, the links you click and other actions you take on the site), and allow us or our business partners to track your usage of the services over time. A persistent cookie remains on your hard drive after you close your browser. Persistent cookies may be used by your browser on subsequent visits to the site. Persistent cookies can be removed by following your web browser's directions. A session cookie is temporary and disappears after you close your browser. You can reset your web browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the services may not function properly if the ability to accept cookies is disabled.
• Log file information: Log file information is automatically reported by your browser or mobile device each time you access the services. When you use our services, our servers automatically record certain log file information. These server logs may include anonymous information such as your web request, Internet Protocol ("IP") address, browser type, referring / exit pages and URLs, number of clicks and how you interact with links on the services, domain names, landing pages, pages viewed, and other such information.
• Clear gifs/web beacons information: When you use the services, we may employ clear gifs (also known as web beacons) which are used to anonymously track the online usage patterns of our Users. In addition, we may also use clear gifs in HTML-based emails sent to our users to track which emails are opened and which links are clicked by recipients. The information is allows for more accurate reporting and improvement of the services.

Social Media Features

GCA provides social media features that enable you to share information with your social networks and to interact with GCA on various social media sites. Your use of these features may result in the collection or sharing of information about you, depending on the feature. We encourage you to review the privacy policies and settings on the social media sites you use to interact to make sure you understand the information that may be collected, used, and shared by those sites. You may disable these features at any time.

Security of Personal Information

We seek to comply with legal requirements and use reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. GCA will notify you in the event we become aware of a security breach involving your personally identifiable information (as defined by the applicable laws) stored by or for us. By disclosing your email address to us for any reason, you expressly consent to receive electronic notice from us in the event of such a security breach, unless prohibited by applicable law.

Access to Personal Information

In accordance with the applicable data privacy law, you may be entitled to request certain information about the personal data we have stored about you; to request certain access to, correction, deletion, portability or blocking of such data, and to request restriction of processing or to object to the processing; you may also have a right to lodge a complaint with the supervisory authority. For this purpose, or if you have any questions regarding the processing of your personal data, please contact Privacy@gca.net.

If you need to update or change your personal information changes, you may log into your account or you may contact us at Privacy@gca.net.

GCA reserves the right to decline requests to access or delete personal information if and to the extent disclosure or deletion of the information requested is not required or permitted by applicable law.

To guard against fraudulent requests for access, GCA reserves the right to verify your identity by requiring sufficient information to allow it to confirm the identity of the party making the request before granting access or making corrections.

European Union, The right to object

If you are located in the European Union, according to the Article 21 of the General Data Protection Regulation No. 2016/679 you have, among others, the right to object to the processing of the personal data if we process your personal data on the basis of a legitimate interest, including the processing for the purposes of direct marketing. The objection can be filed at the e-mail address: Privacy@gca.net. In case that you object to the processing for direct marketing purposes, the personal data shall no longer be processed in this scope.

More information about this right can be found particularly in the Article 21 of the General Data Protection Regulation No. 2016/679.

Retention Period

We retain your personal data for the period necessary to fulfill the purposes outlined in this Privacy Statement or otherwise upon collection of your personal data, unless a longer retention period is required or allowed by law or to otherwise fulfill a legal obligation.

Additional Provisions

Children

We do not knowingly collect information from children as defined by local law and do not target our websites to children.

Your Consent and Changes

You have a right to withdraw your consent with the processing of your personal data (if given) at any time at the e-mail address: Privacy@gca.net. Please note that the withdrawal of your consent does not affect the lawfulness of the processing based on your consent given before its withdrawal. The withdrawal of your consent also does not affect the processing of your personal data which is being done by us on another legal basis than your consent (e.g. in particular if the processing is necessary for the performance of a contract, fulfilment of a legal obligation or due to other reasons stated in the valid legal regulation).

GCA may supplement this Privacy Statement with additional information relating to a particular interaction you may have with us.

GCA may from time to time revise this Privacy Statement with effect for the future in its sole discretion to reflect changes in our business practices. If we revise this Privacy Statement, we will notify you by posting the updated version on the applicable website. We will notify you of the change via a reference on the website at least thirty days in advance unless the change is reasonable and not in your disfavor. Such notice of the change will refer to the fact that changes to this Privacy Statement will become effective unless you object to it within the said thirty- day period

California Privacy Rights

Under California law, organizations that do business with California residents are required to provide residents of the State of California access to a privacy policy that provides a choice in the use of certain personal information by third parties for marketing purposes.

If you are a California resident, you can opt-out of the sharing of your personal information to third parties for direct marketing purposes by unsubscribing from such material or sending an email to Privacy@gca.net.

Compliance with Local Laws

This Privacy Statement is meant to guide GCA with respect to personal information collected from or about you. While this Policy applies to personal information generally, the local laws, rules and regulations of jurisdictions that are applicable to GCA ("Local Laws") may require standards that are stricter than this Privacy Statement, and in such event, GCA will comply with applicable Local Laws. Specific privacy policies may be adopted to address the specific privacy requirements of particular jurisdictions.

Sensitive Information

Unless we specifically request or invite you to provide sensitive personal information to us as defined by applicable law, we ask that you not send us such information. In cases where we may request or invite you to provide sensitive personal information, we will only process sensitive personal information you provide with your express consent.

Compliance

GCA will use a self-assessment approach to verify compliance with this Privacy Statement and periodically verify that it is accurate and comprehensive regarding the information intended to be covered.

If you believe that, your personal information has been processed or disclosed in violation of this Privacy Statement, raise your concerns by contacting us at Privacy@gca.net.

Questions

If you have any questions or concerns about this Privacy Statement, the privacy practices of GCA, our collection or use of your personal information, or you wish to access your personal information, please contact us. If we need or are required to contact you concerning any issue or event that involves this Privacy Statement, then we will do so using the email address, telephone number, or physical mailing address we have on file for you.