Customer Communication Privacy Notice Business Partners Privacy Notice Vehicle Data Privacy Notice Mitsubishi Motors Europe BV General Privacy Policy Last update: July 2024 Mitsubishi Motors Europe BV with its registered office at Mitsubishi Avenue 21, (6121 SH) Born, the Netherlands and our affiliated businesses (collectively, “MME” or “us”) are committed to being responsible custodians of the information you provide us and the information we collect in the course of operating our business.This Privacy Policy describes how MME, as a data controller, collect, use and share information, particularly in association with the operation or our main website (www.mitsubishi-motors-europe.com) and other websites, and the providing or our services whereby reference is made to this Privacy Policy.For some processing activities MME has a privacy policy that differs from this Privacy Policy, for instance for the processing of personal data of employees or job applicants. Employees, temporarily workers, contractors and job applicants can obtain a copy of the relevant privacy policy by contacting the Human Resource Department (hrm@mitsubishi-motors-euro.com).1. The Types of Information MME CollectsMME collects your personal data when you provide it to us, for instance by visiting our website, sending us an email or entering into a contract. “Personal data” is any information that can be used to identify you or that MME can link to you. MME may automatically collect certain information when you use, access, or interact with us via our websites. And MME may collect information from other sources, such as social media platforms that may share information about how you interact with our social media.1.1. Information you provide to usMME collects information that you voluntarily provide to us, including when you communicate with us via email or other channels; when you sign up for or request to send- you MME materials; when you request a test drive; when you sign up for an event; when you are a business partner and when you respond to our communications or requests for information. The personal data you provide usually include your name, contact information, title, and information about the organization with which you are affiliated and all other personal data that you provide.Please note that we do not specifically ask for your special categories of data (racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union memberships, genetic and biometric data). We kindly ask not include special categories of your data when you contact with us, unless it is specifically asked.1.2. Information we collect automaticallyMME uses browser cookies (collectively, “cookies”) to collect and store certain information when you use, access, or interact with us via our websites. MME may, for example, collect information about the type of device you use to access our websites, the operating system and version, your IP address, your general geographic location as indicated by your IP address, your browser type, the content you view and features you access on our websites, the web pages you view immediately before and after you access our websites, whether and how you interact with content available on our websites, and the search terms you enter on our websites. For information about how MME uses cookies and the choices you may have, please click here.1.3. Information MME collects from other sourcesMME receive information about you from other sources, including third parties that help us: update, expand, and analyze our records; identify new customers; or prevent or detect fraud. MME may also receive information about you from social media platforms including but not limited to when you interact with us on those platforms or access our social media content. The information MME may receive is governed by the privacy settings, policies, and/or procedures of the applicable social media platform, and MME encourages you to review them.1.4. Information of childrenOur websites and services are generally not directed to children under 16. MME does not knowingly collect personal data from anyone under 16 without parental consent. If you become aware that MME has collected personal data from a child under the age of 16 without parental consent, please let us know via the channels stated at the end of this document, so we can take appropriate action.2. How MME Uses the Information MME CollectsMME use the information MME collects:To respond to your inquiries and to distribute and deliver parts, accessories and cars;To provide you with services that you request, including for the planning of technical services;To operate, troubleshoot, and improve our website and services;To maintain our list of contacts;To understand how people use our websites, including by generating and analyzing statistics;For MME’s business and administration purposes, including data analysis; submitting invoices; detecting, preventing, and responding to actual or potential fraud, illegal activities, or intellectual property infringement;For MME’s contract management purposes, including maintaining customer and business partner relationship management databases;To assess the effectiveness of our events, promotional campaigns, and publications, for instance via surveys; andAs MME believes reasonably necessary or appropriate to: comply with our legal obligations; respond to legal process or requests for information issued by government authorities or other third parties; or protector your, our, or others’ rights.2.1. How MME Share the Information MME CollectsMME is the European headquarters of Mitsubishi Motors Corporation established in Japan (MMC) and operates the European distribution center. MME, MMC and our business entities share information with each other for business purposes such as internal administration, billing, promoting our events and services, and providing you or your organization with services. Your information is transferred to MMC (located in Japan) under the adequacy decision of the EU Commission. You can reach the decision here.MME operates in Europe, Japan and in other countries and MME may transfer your personal data for storage and processing on the basis of the established contracts between MME, MMC and our business entities and subcontractors who process data on our behalf. Some countries may have data protection laws and regulations that differ from those in your country. For transfer of data outside of the European Union MME will put in place appropriate safeguards in accordance with applicable legal requirements to ensure that your data is adequately protected. This includes obtaining written assurances from any third party given access to your data so as to require them to adopt standards that ensure an equivalent level of protection for your data as that adopted by MME (for instance, via standard contractual clauses as approved by the European Commission). If you have questions or wish to obtain more information about the international transfer of your personal data or the implemented safeguards, please contact us at any time at the details at the end of this Privacy Policy.MME does not sell, rent, or otherwise share information that identifies you with unaffiliated entities for their independent use, unless you consent.MME also disclose information MME collects:To our third-party service providers that perform services on our behalf, such as information technology providers, mailing vendors, survey service providers and analytics providers.To law enforcement agencies, government authorities or third parties as may be permitted or required by law, as provided for under contract, or as MME deems reasonably necessary to provide legal services. In these circumstances, MME takes reasonable efforts to notify you before MME discloses information that may reasonably identify you or your organization, unless prior notice is not possible or reasonable in the circumstances.To service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a transaction in which MME is acquired by or merged with another company or MME sells, liquidates, or transfers all or a portion of MME’s assets.2.2. Legal Bases for Using Your Personal DataThere are different legal bases that MME relies on to use your personal data, namely:Performance of a contract – The use of your personal data may be necessary to perform the contract that you have with us. For example, as a user of our websites or services MME will use your personal data to respond to your requests and provide you with such services.Consent – MME will rely on your consent to use (i) technical information such as cookie data as described in this Privacy Policy; and (ii) your personal data for marketing purposes where required by law. You may withdraw your consent at any time by contacting us at the details at the end of this Privacy Policy.Legitimate interests – MME may use your personal data for our legitimate interests to improve our products and services and the content on our websites.3. Third-Party Services and ContentOur websites may include integrated content or links to content provided by third parties (such as video materials). This Privacy Policy does not address the privacy, security, or other practices of the third parties that provide such content.MME engages third parties that support the operation of our websites, such as analytics providers. These third parties may use technologies to track your online activities over time and across different websites and online platforms. Please click here for more information.4. Protection and Storage of the Information We CollectMME deploys administrative, technical, and physical safeguards designed to safeguard the information that MME collects. MME retains the information MME collects as reasonably necessary and only for as long as required to fulfill the purposes for which MME collects the information and to comply with our legal obligations.5. Your Choices and RightsIf you are a resident of the European Economic Area, then you have certain rights, under certain circumstances, with respect to the Personal Data that we collect about you. These rights may include:RightsWhat does this mean?1. Right to be informedYouhave the right to be provided with clear, transparent and easilyunderstandable information about how we use your Personal Data and yourrights. This is why we are providing you with the information in this PrivacyNotice. 2. Right of accessYou havethe right to access the personal data we keep about you – this is because wewant you to be aware of the Personal Data we have about you and to enable youto verify whether we process your Personal Data in accordance with applicabledata protection laws and regulations.3. Right to rectificationIf yourPersonal Data is inaccurate or incomplete, you have the right to request therectification of your Personal Data.4. Right to erasure This isalso known as ‘the right to be forgotten’ and, in simple terms, enables youto request the deletion or removal of your personal data where there is nocompelling reason for us to keep it. This is not a general right to erasure,there are exceptions.5. Right to restrict processingYou haverights to ‘block’ or suppress further use of your personal data in certaincircumstances. When processing is restricted, we can still store yourPersonal Data, but may not use it further. We keep lists of people who haveasked for further use of their Personal Data to be ‘blocked’ to make sure therestriction is respected in future.6. Right to data portabilityYou havethe right to obtain and reuse your Personal Data in a structured, commonlyused and machine-readable format in certain circumstances. In addition, wherecertain conditions apply, you have the right to have such Personal Datatransferred directly to a third party.7. Rightto object to processingYou havethe right to object to certain types of processing, in certain circumstances.In particular, the right to object to the processing of your Personal Databased on our legitimate interests or on public interest grounds; the right toobject to processing for direct marketing purposes (including profiling); theright to object to the use of your Personal Data for scientific or historicalresearch purposes or statistical purposes in certain circumstances.8. Right to withdraw consentIf ourprocessing of your Personal Data is based specifically on your consent, youhave the right to withdraw that consent at any time. This includes your rightto withdraw consent to our use of your Personal Data in the context ofvoluntary employee surveys.9. Rightto object to automated decision makingWhilenot currently envisaged, you have the right not to be subject to a decisionbased solely on automated Processing, including profiling, which produceslegal effects for you or similarly significantly affects you. Automateddecision making takes place when an electronic system uses Personal Data tomake a decision without human intervention. This is not a general rightto object, there are exceptions. For example, we are allowed to useautomated decision making where it is necessary to perform a contract withyou and appropriate measures are in place to safeguard your rights.1.8 How to Contact UsIf you would like further information on the collection, use, disclosure, transfer or processing of your personal data or the exercise of any of the rights listed above, please address questions, comments and requests to:Postal address: Postbus 157, 6130 AD SITTARD, The NetherlandsHR department: hrm@mitsubishi-motors-euro.comData Protection Officer (DPO): dpo@mitsubishi-motors-euro.com1.9 Changes to This Privacy PolicyMME reserve the right to update this Privacy Notice at any time, whereby we will make sure that the most recent version will be available on mitsubishi-motors-europe.com or can be requested by contacting us as set out in this Privacy Notice. Mitsubishi Motors Europe BV Customer Communication Privacy Notice Last update: July 2024 As Mitsubishi Motors Europe B.V. (“MME”, “we”, “us”, “our”), having its registered office at Mitsubishi Avenue 21, 6121 Born, the Netherlands, we take your privacy seriously. MME is the data controller of your data in relation to your communication requests through our website.For the purposes of data protection law, we are the controller in respect of your personal data. MME is responsible for ensuring that it uses your personal data in compliance with applicable data protection law, including but not limited to the General Data Protection Regulation 2016/679 (GDPR) and Data Protection Act 2018.Personal data that we collect about you and the means of the collection:We collect your personal data through your submission of your communication request via filling the contact form at our website.The data we collect:Personal identifiers: Your prefix, intials, name and surnameContact details: Phone number, email address, addressCustomer Data: Your vehicle type and/or modelThe information that you choose to share with us in your message.Please note that we do not specifically ask for your special categories of data (racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union memberships, genetic and biometric data) for the recruitment purposes. We kindly ask you not to include special categories of your data in your communication requests.Purpose and Legal Basis for Processing Your DataYour personal data are processed by MME on the legal basis that is described under Article 6/1(b): “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”, for following purposes:To assess process and fulfil your request by the MME’s related departments and affiliates.To provide customer services.To handle the communication in relation with the request,Disclosure and/ or transfer of your information to third partiesWe treat your personal data with care and confidentiality. We only share your data with our distributors and dealers, depending on the context of your inquiry. We make sure that our distributors and dealers is also taking care of your personal data at most care, subject to the GDPR.Retention of personal dataWe only retain your personal details in with your contract period and related laws and regulations that are applicable for your individual request.Your rightsYou have a number of legal rights in relation to the personal data that we hold about you. These rights include:RightsWhat does this mean?1. Right to be informedYou have the right to be provided with clear, transparent and easilyunderstandable information about how we use your Personal Data and yourrights. This is why we are providing you with the information in this PrivacyNotice. 2. Right of accessYou have the right to access the personal data we keep about you – this is because wewant you to be aware of the Personal Data we have about you and to enable youto verify whether we process your Personal Data in accordance with applicabledata protection laws and regulations.3. Right to rectificationIf your Personal Data is inaccurate or incomplete, you have the right to request therectification of your Personal Data.4. Right to erasure This is also known as ‘the right to be forgotten’ and, in simple terms, enables youto request the deletion or removal of your personal data where there is nocompelling reason for us to keep it. This is not a general right to erasure,there are exceptions.5. Right to restrict processingYou have rights to ‘block’ or suppress further use of your personal data in certaincircumstances. When processing is restricted, we can still store yourPersonal Data, but may not use it further. We keep lists of people who haveasked for further use of their Personal Data to be ‘blocked’ to make sure therestriction is respected in future.6. Right to data portabilityYou have the right to obtain and reuse your Personal Data in a structured, commonlyused and machine-readable format in certain circumstances. In addition, wherecertain conditions apply, you have the right to have such Personal Datatransferred directly to a third party.7. Rightto object to processingYou have the right to object to certain types of processing, in certain circumstances.In particular, the right to object to the processing of your Personal Databased on our legitimate interests or on public interest grounds; the right toobject to processing for direct marketing purposes (including profiling); theright to object to the use of your Personal Data for scientific or historicalresearch purposes or statistical purposes in certain circumstances.8. Right to withdraw consentIf our processing of your Personal Data is based specifically on your consent, youhave the right to withdraw that consent at any time. This includes your rightto withdraw consent to our use of your Personal Data in the context ofvoluntary employee surveys.9. Rightto object to automated decision makingWhile not currently envisaged, you have the right not to be subject to a decisionbased solely on automated Processing, including profiling, which produceslegal effects for you or similarly significantly affects you. Automateddecision making takes place when an electronic system uses Personal Data tomake a decision without human intervention. This is not a general rightto object, there are exceptions. For example, we are allowed to useautomated decision making where it is necessary to perform a contract withyou and appropriate measures are in place to safeguard your rights. You can exercise your rights by contacting us using the details set out in the “Contacting us” section below.Further information about your rights may be obtained by contacting the supervisory data protection authority located in your jurisdiction. A list of National Data Protection Authorities can be found here.Contacting usIf you would like further information on the collection, use, disclosure, transfer or processing of your personal data or the exercise of any of the rights listed above, please address questions, comments and requests to:Postal address: Postbus 157, 6130 AD SITTARD, The NetherlandsHR department: hrm@mitsubishi-motors-euro.comData Protection Officer (DPO): dpo@mitsubishi-motors-euro.comChanges to this Privacy NoticeWe reserve the right to update this Privacy Notice at any time, whereby we will make sure that the most recent version will be available on the website that you have reached us or can be requested by contacting us as set out in this Privacy Notice. Mitsubishi Motors Europe BV Business Partners Privacy Notice Last update: July 2024 As Mitsubishi Motors Europe B.V. (“MME”, “we”, “us”, “our”), having its registered office at Mitsubishi Avenue 21, 6121 Born, the Netherlands, we take your privacy seriously. MME is the data controller of your data in relation to your communication requests through our website. For the purposes of data protection law, we are the controller in respect of your personal data. MME is responsible for ensuring that it uses your personal data in compliance with applicable data protection law, including but not limited to the General Data Protection Regulation 2016/679 (GDPR) and Data Protection Act 2018. Personal data that we collect about you and the means of the collection: We collect your personal data through your submission of your communication request via filling the contact form at our website.The data we collect: Personal identifiers: Your prefix, intials, name and surname Contact details: Phone number, email address, address The information that you choose to share with us in your message. Please note that we do not specifically ask for your special categories of data (racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union memberships, genetic and biometric data) for the recruitment purposes. We kindly ask you not to include special categories of your data in your communication requests. Purpose and Legal Basis for Processing Your Data Your personal data are processed by MME on the legal basis that is described under Article 6/1(b): “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”, for following purposes: To assess process and fulfil your request by the MME’s related departments and affiliates. To handle the communication in relation with the request, Disclosure and/ or transfer of your information to third parties We treat your personal data with care and confidentiality. We only share your data with our distributors and dealers, depending on the context of your inquiry. We make sure that our distributors and dealers is also taking care of your personal data at most care, subject to the GDPR. Retention of personal data We only retain your personal details in with your contract period and related laws and regulations that are applicable for your individual request. Your rights You have a number of legal rights in relation to the personal data that we hold about you. These rights include: Rights What does this mean? 1. Right to be informed You have the right to be provided with clear, transparent and easilyunderstandable information about how we use your Personal Data and yourrights. This is why we are providing you with the information in this PrivacyNotice. 2. Right of access You have the right to access the personal data we keep about you – this is because wewant you to be aware of the Personal Data we have about you and to enable youto verify whether we process your Personal Data in accordance with applicabledata protection laws and regulations. 3. Right to rectification If your Personal Data is inaccurate or incomplete, you have the right to request therectification of your Personal Data. 4. Right to erasure This is also known as ‘the right to be forgotten’ and, in simple terms, enables youto request the deletion or removal of your personal data where there is nocompelling reason for us to keep it. This is not a general right to erasure,there are exceptions. 5. Right to restrict processing You have rights to ‘block’ or suppress further use of your personal data in certaincircumstances. When processing is restricted, we can still store yourPersonal Data, but may not use it further. We keep lists of people who haveasked for further use of their Personal Data to be ‘blocked’ to make sure therestriction is respected in future. 6. Right to data portability You have the right to obtain and reuse your Personal Data in a structured, commonly used and machine-readable format in certain circumstances. In addition, wherecertain conditions apply, you have the right to have such Personal Datatransferred directly to a third party. 7. Rightto object to processing You have the right to object to certain types of processing, in certain circumstances.In particular, the right to object to the processing of your Personal Databased on our legitimate interests or on public interest grounds; the right toobject to processing for direct marketing purposes (including profiling); theright to object to the use of your Personal Data for scientific or historicalresearch purposes or statistical purposes in certain circumstances. 8. Right to withdraw consent If our processing of your Personal Data is based specifically on your consent, youhave the right to withdraw that consent at any time. This includes your rightto withdraw consent to our use of your Personal Data in the context ofvoluntary employee surveys. 9. Rightto object to automated decision making While not currently envisaged, you have the right not to be subject to a decisionbased solely on automated Processing, including profiling, which produceslegal effects for you or similarly significantly affects you. Automateddecision making takes place when an electronic system uses Personal Data tomake a decision without human intervention. This is not a general rightto object, there are exceptions. For example, we are allowed to useautomated decision making where it is necessary to perform a contract withyou and appropriate measures are in place to safeguard your rights. You can exercise your rights by contacting us using the details set out in the “Contacting us” section below. Further information about your rights may be obtained by contacting the supervisory data protection authority located in your jurisdiction. A list of National Data Protection Authorities can be found here. Contacting us If you would like further information on thecollection, use, disclosure, transfer or processing of your personal data orthe exercise of any of the rights listed above, please address questions,comments and requests to: Postal address: Postbus 157, 6130 AD SITTARD, The Netherlands HR department: hrm@mitsubishi-motors-euro.com Data Protection Officer (DPO): dpo@mitsubishi-motors-euro.com Changes to this Privacy Notice We reserve the right to update this Privacy Notice at any time, whereby we will make sure that the most recent version will be available on the website that you have reached us or can be requested by contacting us as set out in this Privacy Notice.