Privacy and Personal Data Protection Policy

Last Updated: April 25, 2024

Ouriginal (as defined below) owns and operates a publicly available website at
ouriginal.com (the “Website” or the “Services”).

This Privacy and Personal Data Protection Policy (the “Policy”) applies to the Services which are offered by Prio InfoCenter AB (“Ouriginal”, “we”, “us”). This
Policy does not apply to any products and services offered by PlagScan GmbH
whose policies are available here and does not apply to links in our Services
that lead to other websites, which are governed by the privacy policies and other
policies and terms on those other websites.

This Policy is intended to inform natural persons who interact with our Website about how we may collect, use, process, store and disclose Personal Data when you
interact with the Website. This Policy also describes your choices and rights
regarding your Personal Data and our use of your Personal Data.

The English version of the Policy is the official version. In case a translation differs, the English version is the official and applicable.

By accessing or using our Services, you acknowledge that you have read and
understood this Policy.

Table of Contents

1. Personal Data We Collect; Cookies and Other Tracking Technologies
2. How We Use Your Personal Data
3. With Whom We Share Your Personal Data (Intracompany and Third Party Service Providers), including Transfers Outside of the EU and UK
4. How to Exercise Your Rights Regarding Your Personal Data
5. Data Retention and Erasure
6. Security
7. US Residents’ Rights
8. Updates to This Policy
9. Our Data Protection Officer and General Contact Information

1. Personal Data We Collect; Cookies and Other Tracking
Technologies

Personal Data, for purposes of this Policy, is information that identifies, describes, or reasonably relates to an identifiable person or household, or that is otherwise defined as personal information, personal data, or similarly protected data under applicable laws (“Personal Data”).

On our Website, we collect Personal Data if you, as a visitor, provide it to us by
asking us to contact you. In these cases, you may need to fill out some Personal
Data, such as name, email address, and other contact info, in connection with your
request.

In addition to the above, when you access our Services, our servers may also
automatically collect information about your usage of, and activity on the Services
(“Usage Information”) including:

• Log Data: Including information about when and for how long you access the
  Services.
• Device Information: We may collect the ID of any device that accesses the
  Services, and the Internet Protocol (“IP”) address associated with your
  browser and device ID. We may also collect additional information such as
  the make and model of your device; types and versions of software being
  used; login timestamp, browser type and version, the operating system of the
  computer and language.
• Location & Service Usage Information: We collect IP which may reveal the
  country, state, postal code or city from which the Services were accessed and
  may collect the timestamp and areas or features of the Services that our
  users visit most frequently or access most often.

The Usage Information we collect may be collected through the tracking
technologies described below which may be considered Personal Data.

• Cookies: Cookies are small files which contain data and are stored on your
  browser or device. Cookies may be served by the entity that operates the
  website you are visiting (first party cookies) or by other companies (third party
  cookies). For example, a cookie may store which browser you are using or
  which pages you visit.
• Pixels: Pixels (also known as tracking pixels or web beacons) are small
  images on a web page or in an email. Pixels collect information about your
  browser or device and can set cookies on your browser.
• Local Storage: Local storage (also known as web storage or HTML5
  storage) allows data about your browser or device to be stored locally on your
  device.

To read more about our use of cookies and other tracking technologies, please see
our Cookie Policy page.

2. How We Use Your Personal Data

For the Website, Ouriginal acts as a data controller. Personal Data is processed for
the performance of our services to you such as provide you with customer support or
to respond to your request to be contacted.

We also use Personal Data we collect on the Website for the following purposes:

• To understand, measure, and improve our Services, for legally
  permissible purposes, including, but not limited to, analyzing the performance
  of our Services, improving our Services, research, and/or product
  development. Usage Information helps us to diagnose technical problems,
  and to administer and secure the Services. We also aggregate and analyze
  Usage Information to better understand how our Services are used and to
  help us improve our Services.
• To provide the Services to our Users.
• To provide customer support, to notify Website users about changes or
  issues impacting the Services, and to otherwise communicate information
  about the Website to our users.
• To protect our rights, such as to establish or exercise our legal rights or
  defend against claims. For example, sharing may be necessary in order to
  assert a legal claim or defense, such as to enforce our License Agreement
  Terms and Conditions (“Services Terms”).
• In relation to a known or suspected violation of our Services Terms,
  fraud prevention, or other unlawful use, including to share Personal Data
  with entities assisting us in an investigation and as may be required by
  applicable law.
• In connection with legal or regulatory obligations, including to disclose
  your Personal Data as necessary to comply with laws, protect our rights or
  the rights and safety of our Website users, or as necessary in the event of a
  court order, regulatory inquiry or other lawful request. In certain cases,
  however, in the event of a court order, regulatory inquiry or other lawful
  request, unless legally prohibited, we will direct any such request to you or
  notify you before responding unless to do so would prejudice the prevention
  or detection of a crime.
• In the event of a reorganization, merger, sale, assignment, bankruptcy,
  or similar business change, we may need to transfer your Personal Data to
  that re-organized entity or new owner after the sale or reorganization for them
  to use in accordance with this Policy.

In addition, customers of Ouriginal’s Anti-Plagiarism Service may also access the
Anti-Plagiarism Service through this Website.

3. With Whom We Share Your Personal Data (Intracompany
and Third Party Service Providers), including Transfers
Outside of the EU and UK

Ouriginal works with companies that help us provide our Services or who provide
services to us, including those within the family of companies owned by Turnitin,
LLC of which we are a part and third party service providers. These companies
are authorized to use Personal Data only to provide these services to us.
These companies are our so-called processors (if Ouriginal is a data controller) of
the Personal Data from a data protection perspective.

In addition, Ouriginal may share Personal Data with these companies in connection
with our uses of the Personal Data as described above.

We operate globally and may receive services from these companies in locations
around the world for the purposes described in this Policy, which may require a
transfer of your Personal Data outside of the EU or UK, including to and from the
U.S. Wherever your Personal Data is transferred, stored or processed by us, we will
take reasonable steps to safeguard the privacy of your Personal Data. These steps
may include implementing standard contractual clauses where recognized by law,
obtaining your consent, or other lawful means of transferring Personal Data. In
addition, Turnitin and its group company, ExamSoft Worldwide LLC, have been
certified under the Data Privacy Framework.

4. How to Exercise Your Rights Regarding Your Personal
Data

For users of our Website, please contact us at dpo@ouriginal.com if you wish to
exercise any of your rights with regard to your Personal Data. These rights may
include the right to request access to, a copy of, modification or updating of, object
to the processing of, opt in or opt out of certain uses, withdraw your consent to our
processing, or removal of your Personal Data. In some circumstances, these rights
may be limited or conditional. For example, your right to object to the processing of
Personal Data may depend on the specific circumstances of the processing activity.

Please note that we may need to verify your identity to be able to send a copy of,
update or remove your Personal Data. This could mean you will need to send us a
copy of your ID or other approved identification.

In addition, please see our Cookie Policy for more information
on your choices regarding cookies.

If you have any questions regarding our use of Personal Data, or wish to raise a
complaint, please let us know by contacting us via dpo@ouriginal.com.

You also have the right to lodge a complaint or submit a report of breaches to the
competent data protection supervisory authority.

5. Data Retention and Erasure

We may retain your Personal Data for the period necessary to enable the continued
use of the Services, to fulfill the purposes outlined in this Policy, for legally
permissible business purposes, or as otherwise required by law. We may retain non-
Personal Data, including aggregated, de-identified, or anonymized data for lawfully
permissible purposes.

6. Security

We implement technical, administrative, and physical safeguards to help protect the
confidentiality, integrity, and availability of Personal Data. The Internet, however, is
not perfectly secure, and, despite our efforts, no security measures are perfect or
impenetrable.

7. US Residents’ Rights

If you are a US resident, you may have certain additional privacy rights. Certain US
state laws, including California, provide their residents with certain rights related to
their Personal Data, as described below. We provide these rights to all US residents.
Before we may fulfill a request in relation to our Services, we may be required by law
to verify your identity in order to prevent unauthorized access to your data.

We do not “sell” or “share” Personal Data as those terms are defined under
California and other applicable state privacy laws. To the extent Personal Data is
disclosed to third parties, it is only to third party service providers/processors.

Please note that your exercise of the above rights is subject to certain exemptions to
safeguard the public interest (e.g., the prevention or detection of crime) and our
interests (e.g., the maintenance of legal privilege). We will try to comply with your
request as soon as reasonably practicable in compliance with time frames set forth under applicable law. Requests to exercise these rights may be granted in whole, in
part, or not at all, depending on the scope and nature of the request and applicable
law. Where required by applicable law, we will notify you if we reject your request
and notify you of any reasons why we are unable to honor your request.

Right to Know and Access Information: You have the right to request access to the
Personal Data we maintain about you in the ordinary course of business and to
receive it in a machine-readable format so that it is available to you. This may
include Personal Data we collect, use, or disclose about you.

Right of Correction: You have the right to correct inaccuracies in the Personal Data
we maintain about you.

Right to Delete: You have the right to request that we delete your Personal Data. In
the case of all such requests, we may not fulfill all or part of the request as permitted
or required by applicable law. For example, if you request that we delete your
Personal Data, there may be certain records we are legally required to retain.

Authorized Agent: If you are an authorized agent trying to exercise rights on behalf
of a Website user, we will need to verify your authorization to act on behalf of the
Website user.

Non-discrimination: We will not discriminate or otherwise penalize anyone for
exercising their rights under applicable law or this Policy.

8. Updates to This Policy

This Policy may be modified from time to time, as our services evolve. So that you
are aware when changes have been made, we will adjust the “Last Updated” date at
the beginning of this Policy and, when required by applicable law or regulation, we
may also provide notice by email or within the Services.

The “Last Updated” note at the top of this Policy indicates when it was last revised,
and updates will become effective when they are posted or we otherwise notify you.

9. Our Data Protection Officer and General Contact Information

If you have any questions regarding our data processing activities, or wish to raise a
complaint, you are welcome to contact our Data Protection Officer (DPO) by email
at: dpo@ouriginal.com.

If you have questions regarding this Policy, please contact us at:
6th Floor, Wellbar Central
36 Gallowgate
Newcastle upon Tyne
NE1 4TD United Kingdom
Tel: +44 (0) 191 681 0227
legal@turnitin.com

If contacting us does not resolve your complaint, you have further options, for
example you may always lodge a complaint with the competent data protection
supervisory authority.

See also: www.geant.net/uri/dataprotection-code-of-conduct/v1