B13 Cameras

1. GENERAL PROVISIONS

1.1 These rules govern the visiting of the business premises of LEGIT d.o.o. (hereinafter: the company), which include office and warehouse premises as well as the common areas of the building (corridors, access routes to the company's premises). 1.2 The business premises are located at: Brnčičeva ulica 13, 1231 Ljubljana-Črnuče — office number 44N and 48N (first floor) and warehouse and pickup point number 49P (ground floor). 1.3 By entering the premises or the transit areas leading to the company's offices or warehouse, the visitor confirms that they are acquainted with these rules and undertakes to comply with them. The company covers parts of the building and the routes connected to the company's premises with cameras.

2. VIDEO SURVEILLANCE

2.1 Legal basis Video surveillance is carried out on the basis of the controller's legitimate interest (Article 6(1)(f) of EU Regulation 2016/679 – GDPR) and in accordance with the Personal Data Protection Act (ZVOP-2). The controller has assessed that video surveillance is necessary to protect property and ensure the safety of employees and visitors, and that this interest outweighs individuals' right to privacy in business premises and access corridors. 2.2 Purpose of video surveillance: 2.3 Video-monitored zones: The cameras do not cover restrooms, elevators, changing rooms or areas where an individual reasonably expects a higher degree of privacy. 2.4 Storage of recordings Recordings are stored for 200 days from creation. In the event of a security incident, the storage period is exceptionally extended for the time necessary to resolve the incident or judicial proceedings. After the deadline expires, the recordings are automatically deleted. 2.5 Processing of recordings Video surveillance does not involve automated decision-making, profiling or facial recognition. Recordings are reviewed exclusively manually and only in the event of security incidents or legally justified requests. The data is stored exclusively on the controller's servers. 2.6 Traceability of processing The controller ensures the traceability of video recording processing in accordance with Article 22 of ZVOP-2. All accesses to recordings (when, who, why) are logged and kept for two years. 2.7 Personal data controller LEGIT d.o.o., Brnčičeva ulica 13, 1231 Ljubljana-Črnuče Email: [email protected] Working hours: Monday – Friday, 9:00–16:00

• —Protection of the company's property
• —Ensuring the safety of employees and visitors
• —Preventing unlawful acts, which have occurred several times in the past
• —Control of access to business premises
• —Proof of pickups of products and equipment owned by the company
• —Protection against legal consequences due to improper handling of the company's products, equipment and tools
• —Protection against legal claims due to failure by partners, customers or visitors to follow employees' instructions
• —Entrance to the office space and office showroom (offices 44N and 48N)
• —Part of the corridor before entering the warehouse premises (two cameras covering the access to the warehouse)
• —Warehouse premises 49P (the entire warehouse)

3. RIGHTS OF INDIVIDUALS

3.1 In accordance with GDPR, you have the following rights regarding personal data processed within the framework of video surveillance: 3.2 Address requests for exercising your rights to: [email protected] 3.3 Right to lodge a complaint with the supervisory authority If you believe that the processing of your personal data violates GDPR or ZVOP-2, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia: Information Commissioner, Dunajska cesta 22, 1000 Ljubljana | www.ip-rs.si

• —Right of access — you may request information on whether your data is being processed
• —Right to rectification — in the case of inaccurate data
• —Right to erasure — in legally provided cases
• —Right to restriction of processing
• —Right to object to processing

4. RULES OF VISITING

4.1 Visitors and business partners are obliged to: 4.2 On the premises it is prohibited to: 4.3 Visitors may not enter the company's warehouse and office premises without escort or approval of an authorized person or employee.

• —Respect the company's working hours
• —Report to employees upon arrival
• —Follow the employees' instructions
• —Respect the privacy of employees and the company's property
• —In case of a wish to delete a recording, immediately notify the employees about it
• —Respect the rules of other co-owners and tenants in the common areas
• —Smoking
• —Bringing in hazardous substances and objects (offices and warehouse)
• —Photographing and recording without prior permission (offices and warehouse)
• —Unauthorized movement around the premises without escort (offices and warehouse)
• —Disruptive behavior

5. SAFETY AND RESPONSIBILITY

5.1 The company is not responsible for injuries or damage arising from failure to comply with these rules or the employees' instructions. 5.2 Visitors are obliged to immediately alert employees to any hazards or irregularities. 5.3 In the event of violations of these rules, the company reserves the right to prohibit further visits (offices and warehouse).

6. FINAL PROVISIONS

6.1 This policy enters into force on the day of its publication. 6.2 The Company reserves the right to amend the policy, of which visitors will be informed on the policy page. 6.3 For questions regarding this policy, please contact: First publication of the policy: 1 March 2022 Update: 2 April 2026 — extension of recording retention from 30 to 200 days; added legal basis under Art. 6(1)(f) GDPR; added the right to lodge a complaint with the IP; added processing traceability (Art. 22 ZVOP-2). Notification of video surveillance: The visitor may review the policy in electronic form via QR codes, which are placed: Notice regarding common areas: Since the common areas of the building are freely accessible to all visitors and owners, the Company cannot guarantee that video surveillance notices will not be damaged or removed. We warn that the intentional removal or damaging of video surveillance notices may constitute: We ask you: If you notice a damaged or removed video surveillance notice, please inform us immediately at [email protected] . The Company regularly inspects the condition of the video surveillance notices and renews them as needed. Important: Video surveillance remains lawful even in the event of removal or damaging of the notices, as the policy is permanently accessible in electronic form on the Company's website: https://legit.si/kamere-b13/

• —Email: [email protected]
• —Working hours: Monday – Friday, 9:00–16:00
• —At all entrances to the business premises of LEGIT d.o.o. (offices and warehouse)
• —At selected locations in the common areas of the building (hallway — red brick pillars on both sides)
• —A misdemeanour or criminal offence of damaging another person's property
• —Grounds for claiming compensation for damage