Protecting your personal data is our top priority and is taken into account for all of our business processes. The following privacy statement provides you with a detailed overview of the joint processing of your personal data by Daimler Truck AG and the central Mercedes Benz Truck organization in your home country. (hereinafter also "we" and "us"). "Personal data" means all information that relates to a natural person who has been or can be identified. This privacy statement explains the type and scope of collection as well as the purposes for which your personal data is collected and how we handle your data. You will also learn what rights you are entitled to regarding the processing of your personal data.

1.  Who is responsible for data processing?
The controllers with joint responsibility for the data processing are:

Daimler Truck AG
Fasanenweg 10
70771 Leinfelden-Echterdingen
Germany
contact@daimler-truck.com / data.protection@daimler.com

and

Central Mercedes-Benz Truck organization in your home country:

Austria: Mercedes-Benz Trucks Österreich GmbH
Mercedes-Benz Platz 1, 5301 Eugendorf
datenschutz-trucks-austria@daimler.com

Belgium: Mercedes-Benz Trucks Belgium Luxembourg NV
Avenue du Péage/Tollaan 68, B-1200 Brüssel
cs.bel@cac.mercedes-benz.com

Czech Republic: Mercedes-Benz Trucks Česká republika s.r.o.
Bavorská 2666/16, 155 00 Praha 5 - Stodůlky
dataprotection.trucks@daimler.com

Denmark: Mercedes-Benz Danmark A/S
Postbox 130, DK-0900 København
databeskyttelse@daimler.com

France: MERCEDES-BENZ TRUCKS FRANCE
7, avenue Niépce, 78180 Montigny-le-Bretonneux
DPO-Trucks@daimler.com

Greece: Mercedes-Benz Ελλάς Μονοπρόσωπη Α.Ε.Ε.
Θηβαϊδος 20, 145 64 Νέα Κηφισιά
privacy_mbhellas@daimler.com

Hungary: Mercedes-Benz Hungária Kft.
Magyarország, 1133 Budapest, Váci út 96-98
adatvedelem-mbhu@daimler.com

Italy: Mercedes-Benz Trucks Italia S.r.l.
via G.V. Bona, 110, 00156 Roma
mbtrucksitalia@legalmail.it

Netherlands: Mercedes-Benz Trucks Nederland B.V.
Ravenswade 4, 3439 LD Nieuwegein
info@mercedes-benz.nl

Poland: Mercedes-Benz Trucks Polska Sp. z o.o.
ul. Gottlieba Daimlera 1, 02-460 Warszawa
ochrona-danych-mbtpolska@daimler.com

Portugal: Mercedes-Benz Trucks Portugal, S.A.
Edificio Mercedes-Benz, Abrunheira, 2710-037 Sintra
protecaodados_mbtrucksportugal@daimler.com

Romania: Mercedes-Benz Trucks & Buses România S.R.L.
Sediu social: Oraș Voluntari, Șoseaua București Nord Nr. 15-25, Clădirea Henley, et. 4, Swan Office & Technology Park, Județul Ilfov,
DoC-MBTBRO@daimler.com

Spain: Mercedes-Benz Trucks España, S.L.U.
Avenida de Bruselas, 30
28108 Alcobendas
rgpd_mbte@daimler.com

Switzerland: Mercedes-Benz Trucks Schweiz AG
Bernstrasse 55, 8952 Schlieren, Schweiz
datenschutz-mbtrucks-switzerland@daimler.com

United Kingdom: Daimler Group UK Ltd
Legal Department
Tongwell, Milton Keynes, MK15 8BA
datacompliance@daimler.com

The contact person for your data protection questions is our data protection officer:
Chief Officer for Corporate Data Protection at Daimler AG
Daimler AG
HPC E600
70546 Stuttgart
Germany
data.protection@daimler.com

2.  Information on the joint responsibility agreement
In the context of providing support for key account customers, Daimler Truck AG and the central organization of Mercedes Benz Trucks in your home country (both "Joint Controllers") work together closely. This also pertains to the processing of your personal data.

We have concluded an agreement on this subject ("joint responsibility agreement") which serves to define the respective responsibilities of these companies for compliance with the obligations under European data protection law, particularly the European General Data Protection Regulation ("EU GDPR"), in relation to the processing of personal data. The joint responsibility agreement establishes the framework for the joint usage of personal data between the Joint Controllers as the parties jointly responsible for the processing. It also defines the principles and procedures that the Joint Controllers observe as well as the respective responsibilities assumed by each of the Joint Controllers.

The objective of the cooperation is to organize and conduct support for key account customers in the context of sales and marketing of vehicles, vehicle parts and services.

For more information on the significant provisions of the joint responsibility agreement, you can contact data.protection@daimler.com as listed above.

3.  What data is processed for what purposes?
In the context of providing support for our key account customers, we process and use the following data in particular, provided doing so is necessary in the specific individual case in question:

• The Customer's contact details, including their company name, current address, telephone number and e-mail address
• Details of the Customer's designated contact person (including their name, telephone number and e-mail address)
• Vehicle identification number (VIN)

The processing of this data serves to enable us to guarantee your company the best possible support when purchasing vehicles, spare parts and services and to provide customer-specific offers for vehicles, spare parts and services.

4.  What is the basis (legal basis) for processing my data?
We process the categories of data specified above to the extent that doing so is necessary in order to safeguard our legitimate interests and does not outweigh the interests or fundamental rights and freedoms of the data subjects requiring protection of their personal data (Art. 6 para. 1 sentence 1 (f) GDPR). Our legitimate interests stem from the ability to provide you, the customer, with optimal and individualized support and thus improve customer retention.

5.  Will my data be shared?
We shall only regularly disclose the personal data transmitted in connection with the processes described above to a limited number of people with special functions, who will only be granted access to the personal data insofar as this is necessary for them to carry out their respective tasks. This applies not only for our employees, but also for contractors, IT service providers and Group companies if it should prove necessary for them to carry out their respective tasks.
We also make use of the services of further subcontractors for the data processing described above, such as IT or support service providers. These may also be Group entities belonging to Daimler Truck AG. This data is passed to such subcontractors. In this context, it will be ensured that the contractors are subject to the same contractual obligations regarding confidentiality, data protection and data security.
In certain cases, personal data may also be passed on to criminal prosecution, government or regulatory authorities if required by law.

6.  Will my data also be transmitted to non-EU countries?
Personal data is generally not processed outside the EU/EEA. In exceptional cases, service providers who operate our systems for us, potentially in non-European countries, may be able to access the aforementioned data in the event of system maintenance. Our service providers do not actively process this data, but for organizational reasons, the possibility of access cannot be ruled out. We currently use a service provider in India for the operation of the systems used for the aforementioned purposes. If personal data is transmitted outside the EEA, the EU Commission's "standard contractual clauses," which can be accessed at https://ec.europa.eu/info/law/law-topic/data, shall generally apply.

7.  How long will my data be stored?
We will store your personal data for as long as necessary for the fulfillment of the purposes described in this privacy statement. We also store personal data beyond that if we are required to do so by law. Contracts, for example, must be retained for a period of ten years. We will also store customer data until the end of the applicable limitation period to enable us to assert any legal claims.

8.  What rights do I have?
You have comprehensive rights in regard to the processing of your data:

• Right of access: You have a right to information regarding the data stored with us, especially for the purpose of the processing and the duration of the data storage (Article 15 GDPR).
• Right to rectification of inaccurate data: You have the right to demand from us the immediate correction of data pertaining to you in the event that it is inaccurate (Article 16 GDPR).
• Right to erasure: You have the right to demand that we erase data pertaining to you. This is subject to the requirement that we no longer need your data for the purposes for which it was collected or has otherwise been processed, that we have processed the data unlawfully or you have raised a legitimate objection to the use of the data, that you have revoked your consent or in the event that a statutory obligation to erase it exists (Article 17 GDPR).
• Right to restriction of processing: You have the right to demand a restriction of the processing of your data. This right especially applies for the duration of a review if you have disputed the accuracy of your personal data, as well as in the event that you request restricted processing instead of erasure. Furthermore, there will be a restriction of processing in the event that the data is no longer needed for our purposes, but you still need the data in order to assert, exercise or defend legal rights, and if the successful assertion of your objection is disputed between you and us (Article 18 GDPR).
• Right to data portability: You have the right to receive the personal data you have provided us with in a structured, common, machine-readable format from us (Article 20 GDPR), provided said data has not already been deleted.

In the event that you would like to assert one of your rights vis-a-vis the Joint Controller or receive more detailed information on this subject, please send an e-mail to data.protection@daimler.com or contact Daimler Truck AG in writing.

9.  Can I object to the processing of my personal data?
You have the right to object to the processing of personal data pertaining to you which is taking place on the basis of a legitimate interest in accordance with Article 6 para. 1 (f) GDPR for reasons arising from your specific situation at any time (Article 21 GDPR). We will no longer process your personal data unless we can prove compulsory, legitimate reasons for processing that outweigh your interests, rights and freedoms, or if the processing is required to assert, exercise or defend against legal claims.

If you would like to object to the processing of your personal data, please send an e-mail to data.protection@daimler.com or contact Daimler Truck AG in writing.

10.  Right to lodge a complaint with the supervisory authority
If you feel that we are violating the GDPR by processing personal data about you, you have the right to lodge a complaint with a supervisory authority, e.g. a data protection agency responsible for your place of residence, workplace or location where the alleged data protection violation occurred.

Last update: April 2021