DATA PRIVACY POLICY REGARDING THE HANDLING OF PERSONAL DATA

Data protection is very important to MEKRA Lang Group. We appreciate your trust in us when you provide us with your personal data. We are committed to protecting your data in accordance with the relevant legal regulations and to using your data in a way that justifies your trust in us.

We will keep you informed on what kind of data we are collecting, how we are going to use and with whom we will share the data, and who you can contact, should you have any concerns.

Please read on to find out more about how we handle your data.

Controller

Contact

WHICH TYPES OF PERSONAL DATA DO WE PROCESS?

MEKRA may process the following types of personal data in whole or in part:

• Contact information pertaining to employees of suppliers and customers, including name, business address, email address, telephone numbers
• Company data, including company name, job title, place of work, country
• Financial data, including credit or payment information and banking data
• Contractual data, including purchase orders, contracts, and other agreements between you and us

HOW DO WE PROCESS YOUR DATA?

We will process your personal data in strict compliance with the applicable legal regulations only.

LEGAL BASIS AND PURPOSE OF PROCESSING

CONTRACTUAL OBLIGATION

For example, we may be obligated to process your personal data to perform a contract, to fulfill a purchase order, or to comply with another agreement which you or your employer have entered into with us.

LEGITIMATE INTEREST

Legitimate interests of MEKRA Lang Group include management of its own day-to-day business on the basis of lawful and fair business practices, including but not limited to management of business relationships for the purpose of performing contracts relating to you or your employer and/or for entering into a contract with you or your employer.

CONSENT

In exceptional cases and provided that no other legal basis is applicable, MEKRA Lang Group can request your express consent regarding the processing of your personal data for the purposes outlined below. You are entitled to withdraw your consent at any time, which does not, however, affect any lawful processing that was performed based on your consent prior to withdrawal. Once consent has been withdrawn, we are not permitted to process your personal data any longer.

WE PROCESS YOUR DATA FOR THE FOLLWING PURPOSES

For communicating with your employer to manage the relationship between us and your employer’s suppliers for the purpose of performing contracts pertaining to you or your employer and/or for entering into a contract with you or your employer.

HOW DO WE OBTAIN YOUR DATA?

We usually receive your data from you or your employer.

FOR HOW LONG DO WE STORE YOUR DATA?

We store your personal data for the amount of time required to comply with our own legal and contractual obligations, taking into account the duration of the contract and any applicable guarantee and product warranty requirements. Your data will be stored only for as long as it is required to fulfill the purpose for which it was collected.

YOUR DATA PROTECTION RIGHTS

You have the right to request from MEKRA information about and access to your personal data processed by us. In case of errors, your are also entitled to have your personal data corrected or to request the erasure of your personal data. Additionally, you are entitled to limit processing of your personal data, i.e. to ask MEKRA to process your personal data for specific purposes only. You also have the right to object to the processing of your personal data on the grounds of a legitimate interest. In addition, you are entitled to have your personal data transferred (i.e. have your personal data transferred to another data controller), provided our processing of your personal data is based on consent or contractual obligations and is performed by automated means. Finally, you have the right to submit complaints regarding the processing of your personal data by MEKRA Lang Group to a regulatory authority. In the case of Bavaria this is the

For additional information on these rights and their implementation, please contact our data protection officer.