CONSENT TO PARTICIPATION IN NON-BIOMEDICAL RESERACH REQUIRING HEALTH DATA PROCESSING

PSYCHOLOGICAL PROFILE ASSESSMENT FROM FACE VIDEO RECORDING, VOICE AUDIO RECORDING AND PERSONALITY TEST

You must be between 18 and 90 years old to participate. Participation in this research is voluntary. You may withdraw from participating at any time by closing the application or by sending an email to data@mxlabs.ai.

By giving your consent, you will participate in a research conducted by MX Labs OÜ with its registered office in Tallinn, Lõõtsa tn 8a, 11415 Tallinn, Estonia (hereinafter: MX Labs).

OBJECTIVE: The research aims to develop an AI model that is able to estimate a psychological profile based on a short video recording of a person’s face, facial expressions, audio recording of a voice and a personality test.

DATA PROVIDED: After agreeing to participate, you will be asked to complete your profile with your month and year of birth, height, weight and gender to take part in several tests that require recording your face, voice and answering questions about your reactions to the presented content and your personality.

PRECAUTIONS AND TEST PROCEDURES: Video recording must be made in good lighting conditions, preferably in daylight. Your face should not be covered, and there should be no other faces in the video frame. Remain as still as possible while recording, do not make sudden movements, speak or make other facial gestures.

The total test time should take approximately 40 minutes.

Video and audio recordings in the form of a video file and files containing completed questionnaires will be sent to servers under the control of MX LABS.

We will process these data without linking them and without storing them with any other personal data regarding your identity, e.g. e-mail address.

POTENTIAL BENEFITS: By participating in this research, you contribute to the development of digital therapeutics (DTx) and the treatment of diseases. In addition, we will provide you with some numerical test results (personality test result).

TERMS OF PAYMENT OF REMUNERATION IN THE CASE OF COMMERCIAL research: In the event that the possibility of commercial participation in the research is available, the conditions of payment of remuneration for participants are specified in the Terms and conditions of commercial research.

CONFIDENTIALITY AND PRIVACY:

The data controller is MX Labs, Lõõtsa tn 8a, 11415 Tallinn, Estonia.

You can contact the administrator at data@mxlabs.ai.

In order to maintain the highest level of privacy, the administrator has appointed a Data Protection Officer: Stalmach Szczeszek Kancelaria sp.j. (contact person: Piotr Szczeszek), who can be contacted at: dpo@stsk.pl.

MX Labs (“MX Labs”, “us”, “our” or “we”” protects the privacy rights of any person participating in a research (i.e. “participants” or “you”). This privacy policy (the “Policy”) sets forth rules for the processing (i.e. collection, storage, use and management) of personal data of participants and data that you provide or that we collect in connection with the research described above (“Principles”). All personal data and information that you provide to us or that we collect will be referred to herein as “Data”.

By participating in the research, you consent to the processing, use and disclosure of your data. Please do not participate in the research if you do not accept these terms of research.

Why do we process your Data?

We may process your Data on the following legal grounds:

To enable us to conduct research and provide research results that include estimates based on the data you provide to us. In this case, we may process such data only on the basis of your express consent, which you express by agreeing to these terms of research. In general, the data is necessary to conduct the research. The data serves several specific purposes, which are described both in these terms of research and in other documents made available to you, such as the description of the research above. In particular, your data may be used to conduct the survey and provide you with some numerical survey results (personality test result).

We will process your data as long as the research is conducted, however, some data may be stored after this period for technical and statistical purposes. No data will be stored if they were processed with your consent and you withdrew such consent or explicitly objected to such processing. Withdrawal of consent does not affect the lawfulness of the processing we have made on the basis of your consent before its withdrawal.

What Data do we process and how do we collect it?

There is certain data that you provide to us voluntarily, such as data required to register for a research. Such data includes month and year of birth, height, weight and gender.

Some data may be obtained during the conduct of the research. Such data include: image, facial morphology, mimic reactions, voice, heart rate, answers to questions contained in questionnaires, recorded by the device. Such data is used to analyze the psychological profile of the research participant.

Some of the data you provide regarding your health will be treated by us as special category data and may be processed only with your consent, which you will express by participating in the research.

The data collected automatically are necessary for us to technically support the research. If you do not want such data collected, you should not participate in the research. If you have already done so, please refer to the section “Can you influence the processing of your Data?” below.

Under no circumstances do we process any special categories of information, such as information about your race, religion, political or philosophical beliefs, sexual preferences or orientation, or any similar categories of information. We do not require you to provide such information and we do not collect it automatically.

When we collect some data, we do not know the age of the participant. Participation in the research is prohibited for participants under the age of 18 (eighteen). If we become aware that we have inadvertently collected data from a younger participant, we will take reasonable steps to promptly remove such personal data from our records.

Who can access your Data?

Within our organization, your information will only be disclosed to our employees who need to know it to do their jobs and will be subject to strict confidentiality rules. We may disclose your information to our affiliates (companies controlled by MX Labs) and their staff, and to participating medical facilities.

We may use third parties to collect and process personal data on our behalf and in accordance with our instructions.

Can you influence the processing of your Data?

You can ask us for access to your data at any time. You can also request the deletion of your data, limit your data or object to such processing. If we process your data based on your consent, you can withdraw such consent at any time.

Also remember that participation in the research requires the processing of your data in the manner described in this document. If you do not agree to the processing of your data, you should stop participating in the research. If you object to the processing of your data, request the deletion of data or request the cessation of processing your data, as a result of which you may not be able (depending on the type of data and the stage of the research) to obtain any results of the research.

Your data may be transferred at your request, but the possibility of transferring them may be technically limited.

If you believe that your rights have been violated or the data processing rules have been violated, you have the right to lodge a complaint with the appropriate supervisory authority. The default authority for this complaint is the Director General of the Data Protection Inspectorate in Estonia, however you can also submit a complaint to any other data protection authority in a European Union Member State.

All requests regarding your data should be directed to: data@mxlabs.ai