BIOMETRIC INFORMATION PRIVACY POLICY

The purpose of this policy is to define Prima Express, Inc.’s (“Prima Express” or the “Company”) policy and procedures for the collection, use, safeguarding, storage, retention, and destruction of biometric data. It is Prima Express’s policy to protect, use and store biometric data in accordance with applicable laws including, but not limited to, the Illinois Biometric Information pharma sust 300 Privacy Act (“BIPA”). Prima Express has instituted the following biometric information privacy policy:

Biometric Data Defined

As used in this policy rexobol 50, biometric data includes “biometric identifiers” and “biometric information” as defined in BIPA, 740 ILCS § 14/1, et seq. “Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, human biological samples used now for valid scientific testing or screening, demographic data, tattoo descriptions, or physical descriptions such as height, weight, hair color, or eye color. Biometric identifiers do not include information captured from a patient in a health care setting or information collected, used, or stored Perdida de cabello for health care treatment, payment, or operations under the federal Health Insurance Portability and Accountability Act of 1996.

“Biometric information” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier used to identify an individual. Biometric information does not include information derived from items or procedures excluded under the definition of biometric identifiers.

Purpose for the Company’s Collection of Biometric Data

The Company, its vendors, and/or the licensor of the Company’s time and attendance software collect, store, and use biometric data for the purpose of identifying employees and recording time entries when utilizing the Company’s biometric time clocks or time clock attachments.

Biometric time clocks are computer-based systems that scan an employee’s finger or hand for purposes of identification. The computer system extracts unique data points and creates a unique mathematical representation used to verify the employee’s identify; for example, when the employee arrives at or departs from the workplace.

Collection and Authorization

To the extent that the Company, its vendors, and/or the licensor of the Company’s time and attendance software collect, capture, or otherwise obtain biometric data relating to an employee, the Company will first:

1. Inform the employee in writing that the Company, its vendors, and/or the licensor of the Company’s time and attendance software are collecting, capturing, or otherwise obtaining the employee’s biometric data, and that the Company is providing such biometric data to its vendors and/or the licensor of the Company’s time and attendance software;

1. Inform the employee in writing of the specific purpose and length of time for which the employee’s biometric data is being collected, stored, and used; and,

1. Receive Attachment A signed by the employee (or his or her legally authorized representative) authorizing the Company, its vendors, and/or the licensor of the Company’s time and attendance software to collect, store, and use the employee’s biometric data for the specific purposes disclosed by the Company, and for the Company to provide such biometric data to its vendors and/or the licensor of the Company’s time and attendance software.

The Company, its vendors, and/or the licensor of the Company’s time and attendance software will not sell, lease, trade, or otherwise profit from employees’ biometric data; provided, however, that the Company’s vendors and/or the licensor of the Company’s time and attendance software may be paid for products or services used by the Company that collect and utilize such biometric data.

Disclosure and Authorization

The Company will not disclose, re-disclose, or otherwise disseminate an employees’ biometric data to anyone other than its vendors and/or the licensor of the Company’s time and attendance software providing products and services using biometric data unless:

1. The employee or the employee’s legally authorized representative consents to such disclosure, re-disclosure, or dissemination;

1. The disclosed data completes a financial transaction requested or authorized by the employee;

1. The disclosure, re-disclosure, or dissemination is required by state or federal law or municipal ordinance; or

1. The disclosure, re-disclosure, or dissemination is required pursuant to a valid warrant or subpoena issued by a court of competent jurisdiction.

Retention Schedule

The Company will retain employee biometric data only until, and will request that its vendors and/or the licensor of the Company’s time and attendance software permanently destroy such data when, the first of the following occurs:

1. The initial purpose for collecting or obtaining such biometric data has been satisfied, such as the termination of the employee’s employment with the Company, or the employee moves to a role within the Company for which the biometric data is not used; or

1. Within 3 years of the employee’s last interaction with the Company.

Data Storage, Transmission, and Protection

The Company will use a reasonable standard of care to store, transmit, and protect from disclosure, any biometric data collected. Such storage, transmission, and protection from disclosure shall be performed in a manner that is the same as, or more protective than, the manner in which the Company stores, transmits and protects from disclosure, other confidential and sensitive information of the Company and its employees.

ATTACHMENT A

BIOMETRIC INFORMATION PRIVACY CONSENT FORM

The undersigned employee has been advised and understands that the Company, its vendors, and/or the licensor of the Company’s time and attendance software collect, retain, and use your biometric data for the purpose of identifying employees and recording time entries when utilizing the Company’s biometric time clocks or time clock attachments. Biometric time clocks are computer-based systems that scan an employee’s finger for purposes of identification. The computer system extracts unique data points and creates a unique mathematical representation used to verify the employee’s identity, for example, when the employee arrives at or departs from the workplace.

The Illinois Biometric Information Privacy Act, 740 ILCS 14/1, et seq. (“BIPA”), regulates the collection, storage, use, and retention of “biometric identifiers” and “biometric information.” “Biometric identifier” means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. “Biometric information” means any information, regardless of how it is captured, converted, stored, or shared, based on an individual’s biometric identifier used to identify an individual.

The employee understands that he or she is free to decline to provide biometric identifiers and biometric information to the Company, its vendors, and/or the licensor of the Company’s time and attendance software, but that agreeing to provide such biometric identifiers and information is a condition of employment. The employee may revoke this consent at any time by notifying the Company in writing. However, the undersigned employee further acknowledges that consent to the Company’s collection, storage, use, and retention of biometric data is a condition of employment, as authorized by BIPA. Individuals are free to decline or revoke this consent, but doing so may preclude employment by the Company.

The undersigned employee acknowledges that he/she has received the attached Biometric Information Privacy Policy, and that he/she voluntarily consents to the Company’s, its vendors’, and/or the licensor of the Company’s time and attendance software’s collection, storage, and use of biometric data through a biometric time clock, including to the extent that it utilizes the employee’s biometric identifiers or biometric information as defined in BIPA, and voluntarily consents to the Company providing such biometric data to its vendors, and/or the licensor of the Company’s time and attendance software.

A copy of the Company’s Biometric Information Privacy Policy is available upon request, included in the Company’s employee handbook, and is publicly available at https://primaexpressinc.com/.