NeuroGames Lab Sp. z o.o. Privacy Policy installed on the screen visible to the player (research participant) of the GameHR Sales II game as part of laboratory research in 2023 (at NEUROHM):

1. General Provisions

2. Purpose and Scope of Data Collection

3. Basis for Data Processing

4. Right to Inspect, Access, and Correct Your Data

5. "Cookies" Files

6. Final Provisions

7. GENERAL PROVISIONS a. The administrator of personal data collected through the website www.neurogameslab.com is NeuroGames Lab Sp. z o.o., registered office address: VARSO2, ul. Chmielna 73, 00-801 Warsaw, delivery address: VARSO2, ul. Chmielna 73, 00-801 Warsaw, registered under KRS number: 0000707704, NIP: 7010783740, REGON: 368910843, with a share capital of 15,450.00 PLN, email address: hello@neurogameslab.com, hereinafter referred to as "Administrator", also the Service Provider. b. The User's personal data is processed in accordance with the Personal Data Protection Act of August 29, 1997 (Journal of Laws No. 133, item 883 as amended) and the Act on the provision of electronic services of July 18, 2002 (Journal of Laws No. 144, item 1204 as amended). c. The Administrator ensures the protection of the interests of the data subjects, in particular, that the data collected by him are: i. processed legally, ii. collected for specified, legitimate purposes and not further processed in a manner incompatible with those purposes, iii. factually correct and adequate in relation to the purposes for which they are processed and stored in a form that allows identification of the persons they concern, no longer than necessary to achieve the purpose of processing.

8. PURPOSE AND SCOPE OF DATA COLLECTION a. Personal data of Users collected by the Administrator is used to: i. contact the user (customer), ii. for informational purposes and other activities related to the User's activity on the website www.neurogameslab.com and/or www.gamehrsales.com. b. The Administrator processes the following personal data of Users: i. First and last name, ii. Email address. c. The Administrator may process the following data characterizing the User's use of electronic services: i. Identification marks of the telecommunication network terminal or IT system used by the User, ii. Information about the start, end, and scope of each use of the electronic service by the User, iii. Information about the User using electronic services. d. Providing personal data mentioned in point 2 is necessary for the Service Provider to provide services electronically on the website.

9. BASIS FOR DATA PROCESSING a. Using the website and concluding contracts for the provision of electronic services through it, which involves the necessity to provide personal data, is entirely voluntary. The person to whom the data relates decides on their own whether they want to start using electronic services provided by the Service Provider in accordance with the Terms and Conditions. b. In accordance with Article 23 of the Personal Data Protection Act of August 29, 1997 (Journal of Laws No. 133, item 883, as amended), data processing is permissible, among others, when: i. the data subject consents to it unless it concerns the removal of their data, ii. it is necessary to execute a contract when the data subject is a party to it, or when it is necessary to take actions before concluding a contract at the request of the data subject.

10. RIGHT TO CONTROL, ACCESS, AND CORRECT YOUR DATA a. The User has the right to access their personal data and correct it. b. Everyone has the right to control the processing of data concerning them, contained in the Administrator's database, especially the right to request completion, update, correction of personal data, temporary or permanent suspension of their processing or their removal, if they are incomplete, outdated, false, or were collected in violation of the law or are no longer necessary for the purpose for which they were collected. c. To exercise the rights mentioned in points 1 and 2, you can send an appropriate email to: hello@neurogameslab.com.

11. "COOKIES" FILES a. The Service Provider's website uses "cookies". Not changing the browser settings on the User's side is equivalent to agreeing to their use. b. Installing "cookies" is necessary for the proper provision of services on the website. "Cookies" contain information necessary for the proper functioning of the website, especially those requiring authorization. c. The website uses the following types of cookies: i. session, ii. permanent, iii. analytical, iv. Session "cookies" are temporary files stored on the User's end device until logging out (leaving the website), v. Permanent "cookies" are stored on the User's end device for the time specified in the "cookies" parameters or until they are deleted by the User, vi. Analytical "cookies" allow a better understanding of the User's interaction in terms of the website content, better organize its layout. Analytical "cookies" collect information about how Users use the website, the type of page from which the User was redirected, and the number of visits and the time of the User's visit to the website. This information does not record specific personal data of the User but is used to compile website usage statistics. d. The User has the right to decide on the access of "cookies" to their computer by previously selecting them in their browser window. Detailed information on the possibilities and methods of handling "cookies" is available in the software settings (web browser).

12. FINAL PROVISIONS a. The Administrator uses technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data subject to protection, in particular, secures data against their disclosure to unauthorized persons, being taken by an unauthorized person, processing in violation of applicable laws, and change, loss, damage, or destruction. b. The Service Provider provides appropriate technical measures to prevent the acquisition and modification of personal data sent electronically by unauthorized persons. To confirm that you have read the regulations, click "confirm".