General Data Privacy Statement

Introduction

Our companies care about your privacy and are committed to protecting your personal information in accordance with fair information practices and applicable data privacy laws.

This privacy information explains how we and our affiliates collect, use, and share personal information you provide to us or that we may otherwise obtain or generate related to you (“Personal Information”).

Scope

Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

This privacy information applies to personal information we obtain in the course of our normal business activities, both online and offline, including the collection in connection with sales and marketing activities, engaging partners and suppliers, and investor relations. This Privacy Policy does not apply to personal information obtained through our Careers website, which is subject to the Candidate Privacy Information.

Data Controller

The data controller for your data is our company that initially collected your data and determined the purposes and means for using it.

If you have questions about who the Data Controller is for your data or any other questions about your data, please contact our privacy officer using the email address displayed below.

Categories of personal data, processing purposes, and legal bases

Please select the subsection of this document that applies to you

Recipients of personal data

Within our company: functions that require access to your data for the performance of our contractual and legal obligations (sales, accounting, operations, legal) or for the purpose of our legitimate interests (marketing). Third parties: we may use third parties to provide or perform services and functions on our behalf. We may make personal information available to these third parties for the purpose of performing these services and functions. Any processing of such personal information will be done in accordance with our instructions and in a manner compatible with the initial purposes. As required by law: we may also make personal information available to public or judicial authorities, law enforcement personnel, and agencies as required by law, including to meet national security or law enforcement requirements and including to agencies and courts in the countries in which we operate. Where permitted by law, we may also disclose personal information to third parties (including legal counsel) when necessary to establish, exercise or defend a legal claim, or otherwise enforce our rights, protect our property or the rights, property, or safety of others, or as necessary to support external audit, compliance, and corporate governance functions. Mergers and acquisitions: personal information may be transferred to a party acquiring all or part of our equity or assets or our business operations in the event of a sale, merger, liquidation, dissolution, or similar. Affiliates: we may also transfer and share information with our affiliates in accordance with applicable law.

Data Retention

We will retain your personal information for as long as we have an ongoing relationship with you or as long as necessary to fulfill the purpose for which it was collected, usually for the duration of any contractual relationship and for any subsequent period mandated by law or permitted by applicable law.

Your Rights

You have the right to obtain, without constraint, at reasonable intervals and without undue delay or excessive expense, a copy of all data related to you that is being processed. You have the right to obtain rectification or updating of inaccurate or outdated personal information. You have the right to erasure of personal data. You have the right to object, in relation to your specific situation, to the processing of your personal data, except where such processing is required by law. In cases of justified objection, processing must cease. You may have the right to request data portability. Data portability is the provision of your personal information in a structured, commonly used, and machine-readable format so that it can be easily transferred to another company. The right to data portability is subject to some restrictions, i.e., data portability does not apply to records in physical format and should not infringe upon the rights of other individuals or the company’s sensitive information. You have the right not to be subjected to decisions based on exclusively automated processes if such decisions have legal effects or significantly affect you. You have the right to withdraw any previously given consent for a specific purpose, where consent is the legal basis for processing your personal information. We respect these rights and have implemented processes for recognizing and responding to individuals who wish to exercise these rights. You can request the exercise of any of these rights through your local contact person or through our Privacy Service (using the email address displayed below).

Security

We are committed to ensuring that your personal information processed is kept secure and have implemented appropriate technical and security policies that protect the information under their control from:

Unauthorized access. Improper use or disclosure. Unauthorized modification. Unlawful destruction or accidental loss.

Our entire staff and any third parties we engage in processing your personal information are obliged to respect the confidentiality of your information.

Privacy Concerns and How to Contact Us

If you are concerned about an alleged breach of privacy legislation or any other regulation by us, you can contact our Privacy Service (using the email address displayed below).

A privacy officer will be made available to investigate your complaint and provide you with information about how it will be handled.

If we do not respond to any of your requests or do not provide you with a valid reason for not doing so, you have the right to contact the supervisory authority to file a complaint.

Changes to Privacy Information

We reserve the right to modify and update this privacy information at any time. Please review it periodically to ensure you are aware of the most recent information.