Lufthansa Technik Shannon Limited (LTSL) PROCUREMENT PRIVACY NOTICE

1. Identity and contact details of the Data Controller The Data Controller determines the purposes and means of the processing of your personal data in Technik Shannon Ltd, Shannon Airport, Shannon, Co. Clare V95 K097. If you have further questions on the subject of data protection in connection with the processing of your personal data, please contact our data protection coordinator:  Mail: James Prendeville, Lufthansa Technik Shannon Ltd, Shannon Airport, Shannon, Co. Clare V95 K097  E-mail: [email protected]

2. What information do we collect about you? Lufthansa Technik Shannon Limited may collect the following types of personal data about you:

 Name  Business contact information (phone number and e-mail addresses)  Information about the communications you exchange with us via letters, emails and calls

3. How will your information be used?

We will use this data in order to be able to fulfil processes based on our contractual obligations or our legitimate interests. We will not share or disclose your information to any external companies or bodies not covered by the below usage without your knowledge unless we are required to do so by law. The types of processes we will use your data for are:  Order management  Risk and compliance matters  Conference invites  Performance scorecard distribution  Product Quality

4. What is our lawful basis for processing your personal data? We may process your data as it is necessary for the performance of LTSL’s procurement and contract management functions and tasks.

5. How is your data stored? Lufthansa Technik Shannon Limited is part of a global group which means your information may be stored and processed outside the country or region where it was initially collected. Lufthansa Technik Shannon Limited remains responsible for any of your personal information that is shared under the Onward Transfer Principle with third parties for external processing on our behalf. All information is stored in Shannon, and in servers hosted in Frankfurt, Germany.

Page 1 of 2

6. Rights of Data Subjects Lufthansa Technik Shannon is committed to the fair and transparent processing of data. We therefore believe it to be important that data subjects not only have the right to object, but can also exercise the following rights, if the relevant legal requirements are fulfilled:  Right to access personal data and obtain information (Article 15 of the GDPR)  Right to rectification (Article 16 of the GDPR)  Right to erasure ("right to be forgotten") (Article 17 of the GDPR)  Right to restriction of processing (Article 18 of the GDPR)  Right to data portability (Article 20 of the GDPR) You can contact [email protected] by e-mail to exercise your rights. To handle your request and for the purpose of identification, we note that we will process your personal data in accordance with Article 6(1) (c) of the GDPR. You also have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Lufthansa Technik Shannon limited is: Address: Data Protection Commission 21 Fitzwilliam Square South 2 D02 RD28 Ireland Phone: +353 (0)761 104 800 +353 (0)57 868 4800 Website: https://www.dataprotection.ie/

Page 2 of 2