European Economic Area, UK, and Switzerland Specific Section

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the controller of your personal information is Abnormal AI, Inc., 8474 Rozita Lee Ave, Suite 420, Las Vegas, NV 89113.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the controller of your personal information is Abnormal AI, Inc., 8474 Rozita Lee Ave, Suite 420, Las Vegas, NV 89113.

Legal basis for processing

As Data Controller, we collect your personal information if we have a legal basis for doing so. The legal basis we rely on depends on the personal information and the specific context in which we collect it. Generally, we collect and process your personal information where:

• We need it to enter into or perform a contract with you, respond to your request, or provide you with customer support;
• We need to process your personal information to comply with a legal obligation (such as to comply with applicable legal, tax, and accounting requirements) or to protect the vital interests of you or other individuals;
• You give us consent, such as to receive certain marketing communications; or
• Where we have a legitimate interest, such as to respond to your requests and inquiries, to ensure the security of the Sites and Service, to detect and prevent fraud, to maintain, customize, and improve the Sites and Service, to promote Abnormal and our Service, and to defend our interests and rights.

If you have consented to our use of your personal information for a specific purpose, you have the right to change your mind at any time, but this will not affect our processing of your information that has already taken place. You also have the following rights with respect to your personal information:

• The right to access, correct, update, or request deletion of your personal information;
• The right to object to the processing of your personal information;
• The right to withdraw your personal information at any time, if we collected and processed your personal information with your consent;
• The right to restrict processing of your personal information, and temporarily limit the way we use it, for example, whilst you check that the personal information we hold for you is correct;
• To request portability of your personal information;
• Opt out of marketing communications we send you at any time; and
• The right to lodge a complaint with your national data protection authority or equivalent regulatory body.

If you wish to exercise any of your rights under data protection laws, please contact us as described under “Your Choices and Rights”.

Data Security

We use a variety of technical, physical, and organizational security measures designed to protect against unauthorized access, alteration, disclosure, or destruction of information. However, no security measures are perfect, impenetrable, or guaranteed to be secure.

For Customers that use the Service, where Abnormal acts in the capacity of a Data Processor, Abnormal secures the personal information as provided for in the Security Exhibit, and additional information about our privacy and security practices for the Service is available in our Security Hub.