<<

BRAND_WEB _001_ALL_02 EN

This Privacy Notice explains how personal data (“Data”) of employees, representatives and collaborators of our Dealers (“Data Subjects”) is handled by Controllers of CNH Industrial Group (“we”, “us”, “our”, or the “Company”) in compliance with applicable laws and regulations. We are committed to protecting and respecting Data Subject’s privacy. 1. HOW WE OBTAIN DATA Data that may be collected, processed and stored are the following: a. Identification and Contact Data b. Professional Data c. Computer Device and Authentication Data The above list also includes Financial Account Data of Sole Traders in those countries where such data is considered as Personal Data. Ordinarily, Data will be provided to us by the Data Subject Employer, but in some cases, we may collect Data directly from the Data Subject, from a third party or from public records. We protect Data obtained from such third parties according to the practices described in this privacy notice. 2. HOW WE USE DATA Data collected may be processed by us for the following purposes: i. to fulfil our legitimate interests of allowing the execution of the activities related to agreements between us and our Dealer and of establishing, maintaining and improving our business relationship with our Dealer; ii. to fulfil our legitimate interests of allowing the Company to perform surveys on satisfaction related to the quality of goods, services and, in general, on our business relations with our Dealer; iii. to fulfil our legitimate interest of managing access to and security of our tools, systems, assets and data. Data may be processed electronically within IT systems, and manually, in paper form. Data will be processed and stored for its whole lifecycle, ensuring security and confidentiality of the same in compliance with principles of fairness, lawfulness and transparency and in accordance with the provisions of applicable laws and regulations. 3. CONSEQUENCES OF FAILURE TO PROVIDE DATA Submitting Data is never mandatory. However, not providing Data that is necessary to meet the purposes described in this Privacy Notice may prevent the Dealer for which the Data Subject works to fulfil a contractual agreement with us, or may prevent us from complying with legal obligations. In both cases this may result in termination of the relevant contractual agreement. 4. HOW WE SHARE YOUR DATA We are part of the CNH Industrial Group, a global leader in the capital goods sector. Data may be shared and communicated to our subsidiaries and affiliates of the CNH Industrial Group, trusted external parties, service providers, authorized dealers and distributors and business partners, based in and outside the European Union, which are under specific contractual obligation and may use it solely for the fulfillment of the purposes listed above.

CNH Industrial Group’s U.S. subsidiaries comply with the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield Frameworks as set forth by the U.S. Department of Commerce regarding the collection, use, and BRAND_WEB _001_ALL_02 EN retention of Personal Information from European Union or the European Economic Area and Switzerland to the United States, respectively.

Transfer of Personal Data to CNH Industrial Group’s U.S. subsidiaries is subject to Privacy Shield certification and compliance with CNH Industrial Privacy Shield Policy, available here: http://cnhindustrial.com/en- us/governance/policies_and_guidelines/Pages/corporate_policies.aspx

To learn more about the Privacy Shield program, and to view the certification of the CNH Industrial Group’s U.S. subsidiaries, please visit www.privacyshield.gov. Data may be communicated to third parties to comply with legal obligations, to operate and maintain our and the CNH Industrial Group security, to protect our and the CNH Industrial Group rights or property, to respond to order of Public Authorities, or to exercise our rights before judicial authorities. 5. HOW WE TRANSFER DATA In order to perform Data processing activities as detailed above, we may transfer Data in countries outside of the European Economic Area (EEA), including storing such Data in digital or physical databases managed by entities acting on our behalf. Database management and Data processing are limited to the purposes of the processing and are carried out according to applicable data protection laws and regulations. In case Data is transferred outside of the EEA, the Company will use any appropriate contractual measures to guarantee adequate protection of the Data, including – among others – agreements based on Standard Data Protection Clauses adopted by the EU Commission applicable to the transfer of personal data outside the EEA. 6. RETAINING DATA We maintain Data in our systems and archives for as long as necessary to pursue the purposes described in this Privacy Notice taking into account, when applicable, legal and contractual requirements. When Data is no longer necessary for the purposes for which it is processed, Data is deleted or kept in a form which does not permit the identification of data subjects, provided that we are not legally required or permitted to hold such Data. We may continue to store Data for a longer period, as may be necessary to protect our interests related to potential liability connected to the provision of the services or products or the processing of Data. 7. DATA CONTROLLER Each CNH Industrial Company to which the Dealer provides goods or services by virtue of a valid contractual agreement acts as Controller when processing Data for the purposes described at points 2(i) and 2(ii) of this Privacy Notice, in relation to such specific agreement. CNH Industrial Companies are listed in Annex A to this Privacy Notice. Companies of CNH Industrial group may have a Data Protection Officer, please refer to Annex A for details. 8. DATA SUBJECT RIGHTS Data Subjects may exercise their rights as defined by applicable laws and regulations, among these: • Right of access: right to obtain from the Controller a confirmation as to whether or not your personal information is being processed, and, if so, to demand to gain access to your personal data.

• Right to rectification: right to obtain from the Controller the rectification of your personal data that you may consider inaccurate and to have incomplete information being completed, including by means of providing a supplementary statement. BRAND_WEB _001_ALL_02 EN

• Right to erasure: right to obtain from us the erasure of personal data without undue delay, where the request is made in accordance with the applicable laws and regulations.

• Right to object to data processing: right to object at any time to the processing of personal data based on the legitimate interest of the Controller.

• Right to limit the data processing: right to obtain from the Controller a limitation on the processing activities when the accuracy and the precision of personal data is disputed, and for the time necessary for the Controller to verify the accuracy of personal data.

• Right to data portability: right to receive the personal data you provided to the Controller in a structured, commonly used and machine-readable format. Data Subjects also have the right to transmit that data to another data controller without hindrance from the Controller, especially following these conditions: the processing is based on consent or on a contract and the processing is carried out by automated means.

• Right to make a complaint: without prejudice to any other administrative or judicial dispute, if you believe the data processing has been carried out illicitly or not compliant with applicable laws and regulations, Data Subjects have the right to raise a complaint with the Supervisory Authority of the Member State in which you reside or work habitually, or of the State where any breach has occurred.

Data Subjects can exercise the abovementioned rights by contacting us as follows: • Sending an email or a letter to Controller’s Data Protection Officer, when available (see Annex A to this Privacy Notice for details) • Filling the online form you can find here: https://privacy.cnhindustrial.com/en- us/footer/Pages/form.aspx • Writing an email to [email protected], if possible attaching the standard form that you can download from here: http://www.cnhindustrial.com/en- us/footer/Pages/DSRDC.aspx • Sending a letter to the Controller at the address indicated in Annex A of this Privacy Notice, specifying “for the attention of Privacy Compliance”, if possible attaching the standard form that you can download from here: http://www.cnhindustrial.com/en- us/footer/Pages/DSRDC.aspx In case a Data Subject submits a request, we may need to obtain additional personal information from Data Subjects to verify their identity and contact them, if necessary. This information, together with other Data we already withhold, will then be processed to meet Data Subject’s request, as required by applicable law. Where necessary, certain information may be transferred to other companies within or outside the CNH Industrial Group that act as data processors, in order to comply with the request. Data will be processed for the necessary amount of time to evaluate and handle the request, after which Data will be archived for a suitable time period allowing us to demonstrate that the request has been handled correctly and timely. 9. UPDATES TO THIS PRIVACY NOTICE This Privacy Notice was updated in March 2019. We reserve the right to amend or update the Privacy Notice from time to time to reflect changing legal requirements or our processing activities. BRAND_WEB _001_ALL_02 EN

ANNEX A LIST OF CONTROLLERS

Any of the CNH Industrial Group companies listed below may act as independent Controller of your data for the purposes described in this Notice

Company Name Registered Office Data Protection Officer (if applicable) 2 H Energy S.A.S. Fécamp, Parc d'Activité des Hautes Falaises - Saint Leonard - France Afin Bohemia s.r.o. Prague, Office Building Gen U Garáží 1611/1 7 Holešovice - Czech Republic Afin Bulgaria EAD Sofia, Raiko Aleksiev str. 26A - Bulgaria Afin Slovakia S.R.O. Bratislava, Dubravska cesta 2 - Slovak Republic Afin Trade Bulgaria Eood Sofia, Raiko Aleksiev Str. 26° - Bulgaria Altra S.p.A. Genova, Via Adamoli n. 237 F – G - Amce-Automotive Addis Ababa, Bole - Manufacturing Co.Ethiopia Kebele 12, House No. 306 - Ethiopia Veicoli Industriali S.p.A. Piacenza, Via Caorsana n. 79 - 29122 - Italy Banco CNH Industrial Capital Curitiba, Av. Juscelino S.A. Kubitschek de Oliveira, 11.825 - BLI Group, Inc. Wilmington, 1105 North Market Street Suite 924 DE 19801 - U.S.A. Blue Leaf I.P., Inc. Wilmington, 1105 North Market Street Suite 1300 DE 19801 - U.S.A. Blue Leaf Insurance Company Burlington, 100 Bank Street, Suite 610, VT 05401 - U.S.A. Case Canada Receivables, Inc. Calgary, 450 - 1st Street S.W. Suite 2500 - Canada BRAND_WEB _001_ALL_02 EN

Case Construction Equipment, Wilmington, 1209 Orange Street Inc. - U.S.A. Case Construction Machinery , No. 29 Industrial (Shanghai) Co., Ltd Premises, No. 376 De Bao Road, Waigaoqiao Free Trade Zone - People's Rep.of Case Credit Holdings Limited Wilmington, 1209 Orange Street DE 19801 - U.S.A. Case Dealer Wilmington, 1209 Orange Street LLC DE 19801 - U.S.A. Case Equipment Holdings Wilmington, 1209 Orange Street Limited DE 19801 - U.S.A. Case S.a.r.l. Le Plessis-Belleville, Rue des Meuniers 60330 - France Case Harvesting Systems GmbH Berlin, Staakener Str. 53 - 63 Datenschutzbeauftragter - Berlin, 13581 - Staakener Strasse 53 - 63 - Germany Email: [email protected] Case IH Agricultural Equipment, Wilmington, 1209 Orange Street Inc. DE 19801 - U.S.A. CASE ILE DE FRANCE Saint-Pathus, 17 rue Louis Braille - France Case India Limited Wilmington, 1209 Orange Street DE 19801 - U.S.A. Case International Limited , Cranes Farm Road – Case Mumbai, B1-207, 2nd Floor, Equipment (India) Private Boomerang, Chandivali Farm Limited Road, Near Chandivali Studio, Andheri (East), Mumbai, Mumbai city (Maharashtra) 400072 - India Case New Holland Industrial Inc. Wilmington, 1209 Orange Street DE 19801 - U.S.A. CASE New Holland Machinery Shanghai, Room 1102, No. 2 Maji Trading (Shanghai) Co. Ltd. Road, Waigaoqiao Free Trade Zone, New Area - People's Rep.of China Case United Kingdom Limited Basildon, Room 32-101 Cranes Farm Road SS14 3AD - United Kingdom BRAND_WEB _001_ALL_02 EN

CNH (China) Management Co., Shanghai, 10th Floor, No. 2 Maji Ltd. Road, Waigaoqiao Free Trade Zone 200131 - People's Rep.of China CNH (Shanghai) Equipment R&D Shanghai, No. 288, Huirong Co., Ltd. Road, Jiading District, 201807 - People's Rep.of China CNH Capital Finance LLC Wilmington, c/o The Corporation Trust Center, 1209 Orange Street DE 19801 - United Kingdom CNH Capital Operating Lease Wilmington, 1209 Orange Street Equipment Receivables LLC DE 19801 - U.S.A. CNH Capital Receivables LLC Wilmington, 1209 Orange Street DE 19801 - U.S.A. CNH Componentes, S.A. de C.V. Queretaro, Av. Cinco de Febrero no. 2117, Fracc. Industrial Benito Juárez - Mexico CNH Industrial (India) Private Mumbai, B1-207, 2nd Floor, Limited Boomerang, Chandivali Farm Road, Near Chandivali Studio, Andheri (East), Mumbai, Mumbai city (Maharashtra), 400072 - India CNH Industrial (Thailand) Ltd. Samut Prakarn, 54/11 Moo 9, Bangchalong Sub-district, Bangplee District, Samutprakarn Province - Thailand CNH Industrial America LLC Wilmington, 1209 Orange Street DE 19801 - U.S.A. CNH Industrial Asian Holding Zedelgem, Leon Claeysstraat 3A Limited N.V. 8210 - Belgium CNH Industrial Pty St. Marys, 31-53 Kurrajong Road Limited NSW 2760 - Australia CNH Industrial Baumaschinen Berlin, Staakener Strasse 53-63 Datenschutzbeauftragter - Berlin, GmbH 13581 - Germany Staakener Strasse 53-63 13581 - Germany Email: [email protected] CNH Industrial Belgium N.V. Zedelgem, Leon Claeysstraat 3A 8210 - Belgium CNH Industrial BM GmbH Wollersdorf, Romerstrasse 30 - BRAND_WEB _001_ALL_02 EN

CNH Industrial Brasil Ltda. Nova Lima, Rua Senador Milton Campos, n.175 - 8° Andar, Vila da Serra - Brazil CNH Industrial Canada, Ltd. Toronto, 100 King Street West Suite 6600 1 First Canadian Place - Canada CNH Industrial Capital (India) New Delhi, 4th Floor, Worldmark Private Limited 2, Aerocity - India CNH Industrial Capital Shanghai, 1301, 13/F, No. 2 Maji (Shanghai) Commercial Road, China (Shanghai) Pilot Factoring Co. Ltd. F.T.Z. - People's Rep.of China CNH Industrial Capital America Wilmington, 1209 Orange Street LLC DE 19801 - U.S.A. CNH INDUSTRIAL CAPITAL Buenos Aires, Av. Roque Saenz ARGENTINA S.A. Peña 615 - Piso 11 - C.P. 1405 - Ciudad Autónoma de Buenos Aires - Argentina CNH Industrial Capital Australia St. Marys, 31-53 Kurrajong Road Pty Limited NSW 2760 - Australia CNH Industrial Capital Canada Calgary, 450 - 1st Street S.W. Ltd. Suite 2500 - Canada CNH Industrial Capital Corretora Curitiba, Av JK de Oliveira 11825 de Seguros Ltda. - Brazil CNH Industrial Capital Limited Basildon, Cranes Farm Road, , SS14 3AD - United Kingdom CNH Industrial Capital LLC Wilmington, 1209 Orange Street DE 19801 - U.S.A. CNH Industrial Capital Russia LLC Moscow, Leningradskaya str., 39, build. 6 -141400 Khimki, Moscow Region - Russia CNH Industrial Capital Solutions Torino, Via Puglia n. 35 - Italy S.p.A. CNH Industrial Danmark A/S Albertslund, Roholmsvej 19 2620 - Denmark CNH Industrial Deutschland Heilbronn, Benzstrasse 1 74076 - Datenschutzbeauftragter - GmbH Germany Heilbronn, Benzstrasse 1 74076 - Germany Email: [email protected] CNH Industrial Europe Holding Luxembourg, 24, Boulevard S.A. Royal L-2449 - Luxembourg BRAND_WEB _001_ALL_02 EN

CNH Industrial Finance Europe Luxembourg, 24, Boulevard S.A. Royal - Luxembourg CNH Industrial Finance France Trappes, Rue Nicolas Copernic 6 - S.A. France CNH Industrial Finance North Wilmington, 1209 Orange Street America, Inc. - U.S.A. CNH Industrial Finance S.p.A. , Via Puglia n. 35 - Italy CNH Industrial Albertslund, Roholmsvej 19 2620 A/S - Denmark CNH Industrial Financial Services Morigny-Champigny, 16-18 Rue Délégué à la protection des S.A. des Rochettes 91150 - France données 16-18 rue des Rochettes 1150 Morigny Champigny France Email: dataprotection- [email protected] CNH Industrial France Morigny-Champigny, 16-18 Rue des Rochettes 91150 - France CNH Industrial Italia s.p.a. Turin, Via Plava n. 80 - Italy CNH Industrial Korea LLC Gwangju, Pyeongdongro 913 Beongil 8 (Woljeon-dong), Gwangsan-gu - South Korea CNH Industrial Kutno Polska sp. Kutno, Metalowa 15, 99-300 - Inspektora Ochrony Danych - z o.o. Poland Kutno, Metalowa 15, 99-300 – Poland Email: [email protected] CNH Industrial Machinery Harbin, no. 100 Minjiang Road (Harbin) Co. Ltd. Nangang District - People's Rep.of China CNH Industrial Maquinaria Coslada, Av. José Garate 11 S.A. 28022 - Spain CNH Industrial N.V. , 25 St. James's Street, SW1A 1HA - United Kingdom CNH Industrial OLDCO Capital Basildon, Cranes Farm Road 32- Limited 101 - United Kingdom CNH Industrial Osterreich GmbH St. Valentin, Steyrer Strasse 32 A-4300 - Austria CNH Industrial Polska Sp. z o.o. Plock, UL. Otolinksa, 25 09-407 - Inspektora Ochrony Danych - Poland Plock, UL. Otolinksa, 25 09-407 - Poland BRAND_WEB _001_ALL_02 EN

Email: [email protected] CNH Industrial Portugal- Castanheira do Ribatejo, Quinta Comercio de Tractores e das Areias, Várzea, 2601-504 - Maquinas Agricolas Ltda Portugal CNH Industrial Russia LLC Naberezhnye Chenly, 61/44 Promyshlennaya str., 423800 - Russia CNH Industrial SA (Pty) Ltd. Centurion, 5 Slate Avenue, N1 Business Park, Kosmosdal - South Africa CNH Industrial Sales and Berlin, Staakener Strasse 53-63, Datenschutzbeauftragter - Berlin, services GmbH 13581 - Germany Staakener Strasse 53-63, 13581 - Germany Email: [email protected] CNH Industrial Services Bangkok, 23rd fl. Center (Thailand) Limited Tower 173 South Sathorn rd. Thungmahamek, Sathorn - Thailand CNH Industrial Services S.r.l. Modena, Viale Delle Nazioni N. 55 - Italy CNH Industrial Sweden AB Överum, Bruksgatan 4 - Sweden CNH Industrial U.S. Holdings Inc. Wilmington, 1209 Orange Street - U.S.A. CNH Industrial UK Limited London, 25 St. James's Street - United Kingdom CNH INDUSTRIAL , Caracas, Avenida Libertador, C.A. Edificio Edifica, Piso 5, El Rosal - Venezuela CNH U.K. Limited Basildon, Cranes Farm Road SS143AD - United Kingdom CNH Wholesale Receivables LLC Wilmington, 1209 Orange Street, DE 19801 - U.S.A. CNHI COMERCIO DE PEÇAS LTDA Nova Lima, Rua Senador Milton Campos, nº. 175, 6º Andar – Parte, Vila da Serra, Nova Lima, Estado de Minas Gerais, CEP: 34.006-050 - Brazil CNHI International SA Paradiso, Riva Paradiso 14 6902 - Switzerland BRAND_WEB _001_ALL_02 EN

Effe Grundbesitz GmbH Ulm, Nicolaus Otto Strasse 25-27 Datenschutzbeauftragter - Ulm, - Germany Nicolaus Otto Strasse 25-27 - Germany Email: [email protected] Employers Health Initiatives Wilmington, 1209 Orange Street, L.L.C. DE 19801 - U.S.A. F. S.A. , Avenida De Aragon N.402 - Spain Powertrain Technologies Shanghai, 1288 Yecheng Road, Management (Shanghai) Co. Ltd. Jiading District, 2nd floor - Building 4 - People's Rep.of China Fiat Powertrain Technologies of Wilmington, 1209 Orange Street , Inc. City Of Wilmington - U.S.A. North America LLC Wilmington, 1209 Orange Street, DE 19801 - U.S.A. Flagship Dealer Holding Wilmington, 1209 Orange Street, Company, LLC DE 19801 - U.S.A. Flexi-Coil (U.K.) Limited Basildon, Cranes Farm Road, Basildon, Room 32 - 101, Essex, 5514 3AD - United Kingdom FPT - Powertrain Technologies Garchizy, 5 Rue Pierre Timbaud - France SAS France FPT Industrial S.p.A. Turin, Via Puglia n. 15 - Italy FPT Motorenforschung AG Arbon, Schlossgasse 9320 - Switzerland Heuliez S.A.S. Mauléon, La Crenuere - France HFI Holdings, Inc. Wilmington, 1209 Orange Street, DE 19801 - U.S.A. IAV-Industrie-Anlagen- Ulm, Nicolaus Otto Strasse 25 - Datenschutzbeauftragter - Ulm, Verpachtung GmbH Germany Nicolaus Otto Strasse 25 - Germany Email: [email protected] Wilmington, 1209 Orange Street, Company DE 19801 - U.S.A. Irisbus Italia S.p.A. Turin, Via Puglia n. 35 - Italy (China) Commercial Shanghai, Jiading District nr. 288 Sales Co. Ltd - Huirong Road, Floor 6 - BRAND_WEB _001_ALL_02 EN

Shanghai Municipal - People's Rep.of China Iveco (Schweiz) AG Kloten, Oberfeldstrasse 16 - Switzerland Iveco Arac Sanayi VE Ticaret A.S. Samandira-Kartal/Istanbul, Eyup Sultan Mahallesi, Sekmen Caddesi No 12 - Turkey Iveco Argentina S.A. Buenos Aires, Av. Roque Saenz Peña 615 - Piso 11 - C.P. 1405 - Ciudad Autónoma de Buenos Aires - Argentina Iveco Austria GmbH Vienna, Hetmanekgasse 14 - Austria Iveco Bayern GmbH Nuremberg, Dieselstrasse 65 - Datenschutzbeauftragter - Germany Nuremberg, Dieselstrasse 65 - Germany Email: [email protected] Iveco Capital Broker de Bucharest, Str. Tipografilor, n.11- Asigurare - Reasigurare S.r.l. 15 - Cladirile A1 SI LA - Estaj 5 - Sector 1 - Romenia Iveco Capital Limited Basildon, Cranes Farm Road, Essex, SS14 3AD - United Kingdom Iveco Capital Russia LLC Moscow, Leningradskaya str., 39, build. 6 - 141400 Khimki Moscow Region - Russia Iveco Capital Services S.R.L. Glina, Sat Manolache, Str. Caminului Nr. 54, Judet Ilfov - Romenia Iveco Czech Republic A.S. Vysoke Myto, Dobrovskeho 74 Prazske Predmesti - Czech Republic Iveco Danmark A/S Albertslund, Roholmsvej 19 - Denmark Iveco Defence SpA Bolzano, Via Alessandro Volta n. 6 - Italy Iveco Espana S.L. Madrid, Avenida De Aragon 402 - Spain Iveco Est Sas Hauconcourt, Zone Industrielle - France Iveco OY Espoo, Kiilianiityntie 10 - Finland BRAND_WEB _001_ALL_02 EN

IVECO FRANCE SAS Vénissieux, Rue Des Combats Du 24 Aout 1944 - Porte E - France Iveco Holdings Limited Basildon, Cranes Farm Road, Essex, SS14 3AD - United Kingdom Iveco Investitions GmbH Ulm, Nicolaus Otto Strasse 25-27 Datenschutzbeauftragter - Ulm, - Germany Nicolaus Otto Strasse 25-27 - Germany Email: [email protected] Iveco L.V.I. S.a.s. Saint Priest, 56/62 Route Grenoble - France Iveco Limited Basildon, Cranes Farm Road, Essex, SS14 3AD - United Kingdom Iveco AG Ulm, Nicolaus Otto Strasse 27 - Datenschutzbeauftragter - Ulm, Germany Nicolaus Otto Strasse 27 - Germany Email: [email protected] Iveco Magirus Fire Fighting Weisweil, Innerer Heuweg N. 11 - Datenschutzbeauftragter - GmbH Germany Weisweil, Innerer Heuweg N. 11 - Germany Email: [email protected] Iveco Magyarorszag Budapest, Angyalfoldi ut 8 - Kereskedelmi KFT Hungary Iveco Nederland B.V. Andelst, Wanraaij 9 - Iveco Nord Nutzfahrzeuge Hamburg, Ausschlager Elbdelch Datenschutzbeauftragter - GmbH 119 - Germany Hamburg, Ausschlager Elbdelch 119 - Germany Email: [email protected] Iveco Nord S.A. Lesquin, 2, rue de Gamand - Centre Régional des Transports – 59810 - France Iveco Nord-Ost Nutzfahrzeuge Berlin, Nonnendammallee 22-28 Datenschutzbeauftragter - Berlin, GmbH - Germany Nonnendammallee 22-28 - Germany BRAND_WEB _001_ALL_02 EN

Email: [email protected] Iveco Norge A.S. Voyenenga, Postboks 43 - Holmoveien 50 - Norway Iveco Otomotiv Ticaret A.S. Samandira-Kartal/Istanbul, Eyup Sultan Mahallesi - Sekmen Caddesi N. 15 - Turkey Iveco Participations s.a.s. Trappes, 6, Rue Nicolas Copernic - France Iveco Pension Trustee Ltd Watford, Iveco Ford House Station Road - United Kingdom Iveco Poland Sp. z o.o. Warsaw, Al. Wyscigowa 6 - Inspektora Ochrony Danych - Catalina Building, floor 5th - Warsaw, Al. Wyscigowa 6 - Poland Catalina Building, floor 5th - Poland Email: [email protected] Iveco Portugal-Comercio de Vila Franca de Xira, Quinta Das Veiculos Industriais S.A. Arcias - Varzea Castanheira D - Portugal Iveco Provence s.a.s. Vitrolles, 18 Av. de Rome, Les Estroublans - France Iveco Retail Limited Basildon, Cranes Farm Road, Essex, SS14 3AD - United Kingdom Iveco Romania S.r.l. Glina, Sat Manolache, Str.Caminului, Nr.54, Judet Ilfov - Romenia Iveco S.p.A. Turin, Via Puglia n. 35 - Italy Iveco Slovakia, s.r.o. Bratislava, Dubravska cesta 2 – Slovack Republic Iveco South Africa Works (Pty) Centurion, 5 Slate Avenue, N1 Ltd Business Park, Kosmosdal – South Africa Iveco Sud-West Nutzfahrzeuge Mannheim-Neckarau, Datenschutzbeauftragter - GmbH Flosswerthstrasse 52-56 - Mannheim-Neckarau, Germany Flosswerthstrasse 52-56 - Germany Email: [email protected] Iveco Sweden A.B. Arlov, Arlovsvagen 23 - Sweden BRAND_WEB _001_ALL_02 EN

Iveco Services S.R.L. Glina, Sat Manolache, Str.Caminului, Nr.54, Judet Ilfov - Romenia Iveco Australia Limited Dandenong, 1-27 Princes Highway, Vic 3175 - Australia Iveco Ukraine LLC Kiev, Darvina Str. 8 Letter A - Ukraine Iveco West Nutzfahrzeuge Düsseldorf, Vogelsanger Weg 55 Datenschutzbeauftragter - GmbH - Germany Düsseldorf, Vogelsanger Weg 55 - Germany Email: [email protected] J.I. Case Company Limited Basildon, Cranes Farm Road, Room 32-101, Essex, 14 3AD – United Kingdom KOMERSIA AUTO s.r.o. Loděnice, Pražská 330 – Czech Republic KOMERSIA WEST s.r.o. Nýřany, U Mexika 1310 – Czech Republic MAGIRUS CAMIVA S.a.s. Chambéry, 686 rue de (societè par actions simplifièe) Chantabord - France Magirus GmbH Ulm, Magirusstrasse 16 - Datenschutzbeauftragter - Ulm, Germany Magirusstrasse 16 - Germany Email: [email protected] Magirus Lohr GmbH Kainbach, Honigtaler Strasse 46 - Austria MBA AG Bassersdorf, Zurichstrasse 50 8303 - Switzerland Mediterranea de Camiones S.L. Madrid, Avenida de Italia n. 4 - 28821 Coslada - Spain New Holland Credit Company, Wilmington, 1209 Orange Street, LLC DE 19801 - U.S.A. New Holland Holding Limited Basildon, CNH UK Legal Office 32-101 Cranes Farm Road Essex 5514 3AD - United Kingdom New Holland Ltd Basildon, Cranes Farm Road Room 32-210 Essex SS14 3AD - United Kingdom BRAND_WEB _001_ALL_02 EN

New Holland Ltd. Basildon, Cranes Farm Road, Essex SS14 3 AD - United Kingodom New Industrial Business 2 s.r.l. Turin, Via Plava n. 80 - Italy O & K - Hilfe GmbH Berlin, Staakener Strasse 53-63 Datenschutzbeauftragter - Berlin, 13581 - Germany Staakener Strasse 53-63 13581 - Germany Email: [email protected] Officine Brennero S.p.A. Trento, Via di Spini n. 13 - Italy OOO Iveco Russia Moscow, Leningradskaya str.,39, build.6 -141400 Khimki, Moscow Region - Russia Receivables Credit II Calgary, 450 - 1st Street S.W. Corporation Suite 2500 - Canada

S.A. Iveco Belgium N.V. Groot, Alfons Gossetlaan 28 A Bus 3 - Belgium SAIC Fiat Powertrain Hongyan , No.1, South Co. Ltd. Huanghuan Road, New North Zone - No.1, South Huanghuan Road, New North Zone Vehicles Ltd Basildon, Cranes Farm Road, Essex, SS14 3AD - United Kingdom SERFIT S.R.L. Turin, Via Giacosa 38 - Italy Shanghai New Holland Shanghai, 999 Xiangyin Road - Italy Corporation Limited Société Charolaise de Vénissieux, Rue de Combats du Participations SAS 24 Aout 1944 - France Société de Diffusion de Trappes, 6 Rue Nicolas Copernic - Vehicules Industriels-SDVI S.A.S. France Steyr Center Nord GmbH Ruckersdorf-Harmannsdorf, Kirchsee 1 2111 - Austria Transolver Service S.A. Madrid, Avenida De Aragon 402 - Spain Transolver Services S.A.S. Trappes, 6 Rue Nicolas Copernic - France UAB Iveco Capital Baltic Vilnius, Dariaus ir Gireno g. 19 - Lithuania BRAND_WEB _001_ALL_02 EN

Uzcaseagroleasing LLC Tashkent, 2, Akhangazanskoye Shosse 100091 - Uzbekistan UzCaseMash LLC Tashkent, 2 Akhangaranskoye Shosse 700091 - Uzbekistan UzCaseService LLC Tashkent, Shaihantaurskiy Region Furkat street 16, 1 Blok - Uzbekistan UzCaseTractor LLC Tashkent, Buyuk Ipak Yuly, 434 700142 - Uzbekistan Zona Franca Alari Sepauto S.A. , Zona Franca - Calle D 16-24 - Spain CNH Reman LLC Wilmington, c/o The Corporation Trust Center, 1209 Orange Street DE19801 - U.S.A. MVPC LLC Moscow, Bolshaya Olenia Street - Russia RosCaseMash Saratov, 1 Ordzhoni Kidze Square 410015 - Russia

Privacy Policy for California Residents

This Privacy Policy for California Residents (“California Policy” or “Document”) applies solely to people who reside in the State of California (“Consumers”). We adopt this California Policy to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and other California privacy laws applicable to the processing of Personal Information carried out by the Company. This Document describes CNH Industrial America LLC and its subsidiaries and Fiat Powertrain Technologies of North America, Inc. (“we”, “us”, “our”, or the “Company”) online and offline practices regarding the collection, use, disclosure, and sale of Personal Information and Consumers’ rights under the CCPA and explains how to exercise them.

10. DEFINITIONS Personal Information: Any information that identifies or can be used to identify and anyhow any information that relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a Consumer or household. Personal information does not include publicly available information from government records, deidentified or aggregated consumer information or personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (“FRCA”), the Gramm-Leach-Bliley Act (“GLBA”) or California Financial Information Privacy Act (“FIPA”), and the Driver’s Privacy Protection Act of 1994 (“DPPA”). Personal Information includes, but is not limited to, the following: a. Identifiers: such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. b. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): such as a name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or BRAND_WEB _001_ALL_02 EN

any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. c. Protected classification characteristics under California or federal law: such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). d. Commercial information: such as Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. e. Biometric information: such as genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.

f. Internet or other similar network activity: such as browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. g. Geolocation data: such as physical location or movements. h. Sensory data: such as audio, electronic, visual, thermal, olfactory, or similar information. i. Professional or employment-related information: such as current or past job history or performance evaluations. j. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)): such as education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. k. Inferences drawn from other personal information: such as profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. Consumer: A natural person who is a California resident, as defined in Section 17014 of Title 18 of the California Code of Regulations, as that section read on September 1, 2017, however identified, including by any unique identifier. Any other terms used in this Privacy Policy have the same meaning as defined in the CCPA or other privacy laws.

11. COLLECTION, SOURCES AND USE OF PERSONAL INFORMATION Within the last twelve (12) months and with reference to our business purposes we have collected and used the following categories of Personal Information about Consumers:

Consumer Source of Personal Personal Information Business purposes Category Information

▪ Identifiers ▪ Provision of information: to provide ▪ Directly from the consumer consumer information about our ▪ Personal information categories products, services and sales ▪ Dealers listed in the California Customer Records statute ▪ Lead management: establish, maintain and improve our relationship with ▪ Commercial information customers and improve the quality of our ▪ Internet or other similar network products and services; contact activity customers for market research Customers ▪ Geolocation data ▪ Marketing and Advertising: send customers commercial information and newsletters as well as advertising information about our products and services. For the same business purposes, customers’ personal information may be disclosed to the Company’s subsidiaries and affiliates ▪ Customer Care and User Support Services (help desk): satisfy customers’ BRAND_WEB _001_ALL_02 EN

request by providing information about our products, services, sales network and to give their the assistance on our products and services ▪ Warranty management: to open and manage warranty on vehicle or product ▪ Development and improvement of products and services: to testing, research, analysis, and product development and demonstration, including to develop and improve our website, products, and services ▪ Use of our portal and our application: to give the customer the access to the tools and to let customer’s experience theirs features ▪ Ensuring asset and information security: maintain the safety, security, quality, and integrity of our website, databases and other technology assets, including to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity, and to debug to identify and repair errors that impair existing intended functionality

▪ Identifiers ▪ Provision of information: to provide ▪ Directly from the potential potential customer information about our customer ▪ Personal information categories products, services and sales listed in the California Customer ▪ Dealers Records statute ▪ Lead management: establish, maintain and improve our relationship with ▪ Internet or other similar network customer and potential customer and activity improve the quality of our products and Potential services Customer ▪ Ensuring asset and information security: maintain the safety, security, quality, and integrity of our website, databases and other technology assets, including to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity, and to debug to identify and repair errors that impair existing intended functionality

▪ Execution of the activities related to ▪ Directly from the dealers’ Agreements between us and our Dealer, personnel Importer or Distributor ▪ Identifiers ▪ Dealers ▪ Personal information categories ▪ Complying with legal and regulatory listed in the California Customer obligations Records statute (Cal. Civ. Code § ▪ Managing access to and security of our Dealers / 1798.80(e)) tools, systems, assets, data, Dealers’ infrastructures and facilities, delivering Personnel ▪ Protected classification characteristics under California training initiatives, organizing company or federal law events, delivering company communications, allowing audit ▪ Internet or other similar network activities and litigation management, activity protecting our and the CNH Industrial Group rights or property, exercising our rights before judicial authorities ▪ Ensuring asset and information security: maintain the safety, security, quality, BRAND_WEB _001_ALL_02 EN

and integrity of our website, databases and other technology assets, including to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and prosecute those responsible for that activity, and to debug to identify and repair errors that impair existing intended functionality

▪ Identifiers ▪ Complying with legal and regulatory ▪ Directly from the employee obligations ▪ Personal information categories ▪ Third party (such as former listed in the California Customer ▪ Entering into and perform the employers, interim agencies, Records statute (Cal. Civ. Code § employment contract, including but not recruitment agencies and 1798.80(e)) limited to: compensation; benefits head hunters, criminal (including pension and retirement background check agencies, ▪ Protected classification benefits where applicable); organization etc.) characteristics under California and execution of activities related to the or federal law role; travel management; international ▪ Public records mobility; career and talent development; Employees / ▪ Professional or employment- training and development Trainees related information ▪ Managing access to and security of our tools, systems, assets, data, infrastructures and facilities, deliver training initiatives, organize company events, deliver company communications, allow audit activities and litigation management, protect our and the CNH Industrial Group rights or property, exercise our rights before judicial authorities.

▪ Identifiers ▪ Evaluating and assessing candidates’ ▪ Directly from the candidate profile for present and/or future ▪ Professional or employment- openings in the Company ▪ Third party (such as former related information employers, interim agencies, Candidates recruitment agencies and head hunters, social media, etc.) ▪ Public records

▪ Identifiers ▪ Complying with legal and regulatory ▪ Directly from the Agency obligations Worker ▪ Personal information categories listed in the California Customer ▪ Fulfilment of the Company obligations ▪ Third party (such as the Records statute (Cal. Civ. Code § deriving from the contract with the employer of the Agency 1798.80(e)) Agency Company in order to give Worker) execution to the benefits the Agency ▪ Protected classification Worker is entitled to ▪ Public records characteristics under California or federal law ▪ Organizing and executing the activities related to the Agency Worker role, Agency ▪ Professional or employment- Workers managing business travels, manage related information access to and security of our tools, systems, assets, data, infrastructures and facilities, delivering training initiatives, organizing company events, delivering company communications, allowing audit activities and litigation management, protecting our and the CNH Industrial Group rights or property, exercising our rights before judicial authorities BRAND_WEB _001_ALL_02 EN

▪ Identifiers ▪ Complying with legal and regulatory ▪ Directly from the candidate obligations ▪ Personal information categories ▪ Company Employees listed in the California Customer ▪ Ensuring timely and effective Records statute (Cal. Civ. Code § communication in case of emergency of 1798.80(e)) employees’ family member; increasing Relatives of social and cultural binding with employees ▪ Protected classification employees and their family; ensuring characteristics under California employees’ satisfaction and or federal law engagement with the community (e.g. organizing and managing corporate events, recreational and cultural activities)

▪ Identifiers ▪ Authorizing the visit permits and ▪ Directly from the visitor manage visitors’ access to the Company ▪ Personal information categories sites, plants, offices listed in the California Customer Visitors Records statute (Cal. Civ. Code § 1798.80(e)) ▪ Professional or employment- related information

▪ Identifiers ▪ Maintaining a Master List of approved ▪ Directly from the Suppliers’ Suppliers with which the companies of Personnel ▪ Personal information categories CNH Industrial Group can conduct listed in the California Customer business ▪ Third party (such as the Records statute (Cal. Civ. Code § employer of the Suppliers’ 1798.80(e)) ▪ Conducting negotiations for the Personnel) provisioning of goods or services ▪ Professional or employment- ▪ Public records related information ▪ Allowing the execution of the activities related to agreements between us and ▪ Internet or other similar network our Supplier and to establish, maintain activity and improve our business relationship with our Supplier Suppliers’ Personnel ▪ Complying with legal and regulatory obligations ▪ Managing access to and security of our tools, systems, assets, data, infrastructures and facilities, delivering training initiatives, organizing company events, delivering company communications, allowing audit activities and litigation management, protect our and the CNH Industrial Group rights or property, exercising our rights before judicial authorities

12. SELL AND DISCLOSURE OF PERSONAL INFORMATION a. The Company does not sell Consumers’ Personal Information and has not sold their Personal Information in the preceding 12 months. If in the future, the Company anticipates selling Consumers’ Personal Information to any party, it will provide Consumers with the opt-out and opt-in rights required by the CCPA. b. We are part of the CNH Industrial Group, a global leader in the capital goods sector. Personal Information may be disclosed, shared and communicated to subsidiaries and affiliates of the CNH Industrial Group, trusted external parties, service providers, authorized dealers and distributors and business partners worldwide, which are under specific contractual obligation and may use it solely for the fulfillment of the purposes listed above. Personal Information may be communicated to third parties also to comply with legal obligations, to operate and maintain our and the CNH Industrial Group security, protect our and the CNH Industrial Group rights or property, to respond to order of Public Authorities or to exercise our rights before judicial authorities. In the preceding twelve (12) months, the Company has disclosed the following categories of Personal Information for a business purpose: BRAND_WEB _001_ALL_02 EN

i. Subsidiaries and affiliates of the CNH Industrial Group: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Protected classification characteristics under California or federal law, Commercial information, Internet or other similar network activity, Geolocation data, Professional or employment-related information, Inferences drawn from other personal information ii. Public institutions: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Protected classification characteristics under California or federal law iii. Sale Network: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Commercial information iv. IT Providers: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Internet or other similar network activity v. External consultants: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Internet or other similar network activity, Professional or employment-related information vi. Marketing and events agencies: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) vii. Travel Agencies: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Protected classification characteristics under California or federal law viii. Payroll providers: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Professional or employment-related information ix. Medical Care Companies: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Protected classification characteristics under California or federal law, Professional or employment-related information x. Insurance Companies and Pension Funds: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Protected classification characteristics under California or federal law, Professional or employment-related information xi. Training Providers: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), Professional or employment-related information xii. Credit card Companies: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) xiii. Company providers: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) xiv. Shipping and Logistic agencies: Identifiers, Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))

13. CALIFORNIA CONSUMER’S RIGHTS REGARDING PERSONAL INFORMATION The CCPA provides Consumers with specific rights regarding their Personal Information. This section describes such rights and explains how to exercise them. a. Right to Request Deletion of Personal Information Consumer has the right to request that Company deletes any of their Personal Information that Company collected and retained, subject to certain exceptions. Once Company receives and confirms a Consumer request, Company will delete Consumer Personal Information from its records and direct its service providers, if applicable, to delete Consumer Personal Information from their records, unless an exception below applies. Company may deny deletion request if retaining the information is necessary for us or our service provider(s) to: 1) Complete the transaction for which we collected the personal information, provide a good or service that consumer requested, take actions reasonably anticipated within the context of our ongoing business relationship with consumer, or otherwise perform our contract with consumer. 2) Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities. 3) Debug products to identify and repair errors that impair existing intended functionality. 4) Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law. 5) Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.). 6) Enable solely internal uses that are reasonably aligned with consumer expectations based on relationship with BRAND_WEB _001_ALL_02 EN

us. 7) Comply with a legal obligation. 8) Make other internal and lawful uses of that information that are compatible with the context in which consumer provided it. b. Access to Specific Information and Data Portability Rights Consumer has the right to request that we disclose certain information about our collection and use of consumer personal information over the past 12 months. Once we receive and confirm a consumer request we will disclose to consumer: 1) The categories of collected personal information 2) The categories of sources for the personal information we collected about consumer. 3) Our business or commercial purpose for collecting that personal information. 4) The categories of third parties with whom we share that personal information. 5) The specific pieces of personal information we collected (also called a data portability request). 6) If we sold or disclosed personal information for a business purpose, two separate lists disclosing: (i) sales, identifying the personal information categories that each category of recipient purchased; and (ii) disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained. c. Exercising Consumer Rights Consumer may exercise the abovementioned rights by submitting a verifiable request to us by:

• Filling the online form available here [https://privacy.cnhindustrial.com/en-us/footer/Pages/form.aspx];

• Writing an email to [email protected]; or

• Calling us at the following toll-free numbers: 877-422-7344 (preferred contact for Case IH Consumers); 866-639- 4563 (preferred contact for New Holland Consumers); 866-542-2736 (preferred contact for Case CE Consumers). Only a specific Consumer, or a person registered with the California Secretary of State that Consumer authorizes to act on their behalf, may make a verifiable Consumer request related to their Personal Information. Consumer may also make a verifiable consumer request on behalf of their minor child. The Company is not obligated to provide information to a Consumer pursuant to a verifiable consumer request for access or data portability more than twice (2x) within a twelve (12) month period. The verifiable Consumer request must:

• provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an Authorized Agent. Before completing your request to exercise the below, we will verify that the request came from you by matching at least two of the Personal Information provided by the Consumer with the personal information already maintained by the Company, which the Company has determined to be reliable for the purpose of verifying the Consumer. • describe request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We are unable to fulfill Consumers’ request or provide them with Personal Information if we cannot verify their identity or authority to make the request and confirm the Personal Information relates to a specific Consumer. With few exceptions, we will only fulfill a request from Consumer’s Authorized Agent if (a) Consumer grants the Authorized Agent written permission to make a request on their behalf, (b) Consumer or the Authorized Agent provides us notice of that written permission, and (c) we are able to verify Consumer’s identity in connection with that notice and the request.

Making a verifiable consumer request does not require the Consumer to create an account with us. However, we do consider requests made through a Consumer’s password protected account sufficiently verified when the request relates to Personal Information associated with that specific account.

We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. d. Response Timing and Format We endeavor to respond to a verifiable Consumer request within 45 days of its receipt. If we require more time (up to 90 days), we will inform Consumer of the reason and extension period in writing. If Consumer has an account with us, we will deliver our written response to that account. If not, we will deliver our written response by mail or electronically. Any disclosures we provide will only cover the 12-month period preceding the verifiable BRAND_WEB _001_ALL_02 EN

Consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide Consumer Personal Information that is readily useable and should allow Consumer to transmit the information from one entity to another entity without hindrance. We do not charge a fee to process or respond to verifiable Consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell Consumer why we made that decision and provide Consumer with a cost estimate before completing request. e. Right to Non-Discrimination for the Exercise of a Consumer’s Privacy Rights We will not discriminate against consumer for exercising any of their rights. Unless permitted by applicable laws, we will not: (a) Deny goods or services; (b) Charge different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties; (c) Provide a different level or quality of goods or services; and (d) Suggest that consumer may receive a different price or rate for goods or services or a different level or quality of goods or services. However, we may offer consumer certain financial incentives that are permitted and may result in different prices, rates, or quality levels. Any permitted financial incentive we offer will reasonably relate to consumer personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires consumer prior opt in consent, which they may revoke at any time.

14. UPDATES TO THIS CALIFORNIA POLICY This California Policy was updated on December 2019. The information included in this Document will be reviewed and updated at least every twelve (12) months. When we make changes to this Privacy Policy, we will post the updated Privacy Policy on our website. 15. CONTACT INFORMATION If Consumers have any questions or comments about this Privacy Policy, the ways in which the Company collects, uses and discloses their Personal Information, as well as about their rights under CCPA and how to exercise those rights, we can be contacted at our corporate office in 6900 Veterans Boulevard, Burr Ridge, IL or at [email protected].