Data controller

IDIADA CZ a.s. ('Applus+', 'We', 'Us')

Pražská třída 320/8, 500 04 Hradec Králové, Czech Republic

Main purposes

Providing and customizing our services;
Addressing your questions and requests;
Administering of our website; and
Contacting you via e-newsletters and/or promotional emails regarding products and services offered by us and/or other members of the Applus Group, both national and international (a list of which can be found at www.applus.com/appluscompanies), as well as events and news related to our activities (testing, inspection, engineering, certification and related services) by mail, email, mobile applications, SMS or other electronic equivalent means.

Legal basis

Legitimate interest
Consent
Compliance with legal obligations

Personal data

Full name, phone number, email address, mobile phone number, country of residence, name of the company you work for and your job title;
If you are a shareholder of Applus Services, S.A. and if you use the shareholder forum, voting platforms or if you contact us through the channels provided, we also collect a digital certificate (to verify your identity) and the number of shares you hold in Applus Services, S.A

Recipients

Service providers and business partners.
Applus Group organisations. A list of Applus organisations can be accessed via the following link: www.applus.com/appluscompanies.
Security forces, judges and courts, regulatory authorities, government authorities or other competent third parties.

Information transfers

Your personal data could be transferred to, stored and processed in a country that is not considered to provide an adequate level of protection for personal data. We have put in place appropriate safeguards (such as contractual obligations) in accordance with relevant legal requirements based on contractual provisions approved by the European Commission to ensure adequate protection of your data.

Rights

Among other things, the right to access, rectify and delete personal data, to object to further processing of personal data, and to withdraw consent.

In particular, you have the right to object to the processing of your personal data at any time, based on your legitimate interest.

You can exercise your rights by contacting us at data_protection@idiada.com and attaching a copy of your ID or equivalent identification document.

Detailed information

In full they are listed below

We recommend reading them thoroughly.

Privacy Policy for Websites/Applications

Content

1. What personal data do we use

1.1 Personal data we collect directly from you

1.2 Personal Data about third parties

2. How do we use your personal data and based on which legal basis

3. What rights do you have regarding your personal data

4. How and who do we share your personal data with

5. How do we protect your personal data

6. How long are your personal data stored

7. International Data Transfer

8. Contact us

9. Privacy Policy Changes

This Privacy Policy describes how IDIADA CZ a.s. ('Applus+', 'We', 'Us') collects and processes personal information about you, how we use and protect that information, and your rights related to that information. Applus+ will collect and subsequently process personal information as a data controller. You can contact us at:

IDIADA CZ a.s

Adresa: Pražská třída 320/8, 500 04 Hradec Králové, Czech Republic

E-mail: data_protection@idiada.com

This Privacy Policy applies to all personal data we collect or process about you in connection with your use of our website or through questions or comments you send us via the contact form available on the website. 'Personal data' means any information relating to an identified or identifiable physical person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier or one or more than one factor specific to the physical, physiological, genetic, mental, economic, cultural or social identity of such physical person.

1. What personal data do we use

We will collect personal data that you send us directly via the contact form available on the website or to email addresses provided for information purposes.

1.1 Personal data we collect directly from you

The categories of personal data we collect directly form you are:

1. Personal details: full name;

2. Contact details: phone number, e-mail address, postal address, cell phone number and country of residence

3. Other details: name of a company you work for or which you represent;

4. If you are a shareholder of Applus Services, S.A. and use the shareholder forum or remote voting platform or send us an email via a designated email address, we will also collect information such as a digital certificate (to verify your identity) and the name of the shares you hold in Applus Services, S.A.

5. Information we collect from you automatically: further information about our use of cookies and tracking technologies is available in our Cookie Policy.

1.2 Personal Data about third parties

If you provide Applus+ with personal data, such as contact information of third parties, it is your direct responsibility to inform such individuals of their rights and to obtain their explicit consent, if necessary, to the processing (including transfer) of their personal data (including sensitive data) as necessary and in accordance with applicable local data protection laws as set out in this Privacy Policy.

2. How do we use your personal data and based on which legal basis

We use and subsequently process the personal data we collect about you on the following legal basis and for the purposes listed below:

a) We will process your personal data on the basis of our legitimate interests for the following reasons:
To provide and personalise our Services;
To address your questions and requests;
To administer our website;
To protect the security and/or integrity of our website and IT infrastructure;
To understand how you use our Services and to improve and further develop the features, performance and support available on our website, which may include providing anonymous statistical information about our visitors (but without using it to identify any individual user);
As set out in Section 4 of this Privacy Policy, including but not limited to, to provide information to our employees, agents, representatives, business partners, subsidiaries of the Applus Group who process personal data for the purposes set out in this Privacy Policy;
To allow third party service providers and contractors engaged by Applus+ to access personal data for the purpose of providing us with services necessary to fulfill the purposes set out in this Privacy Policy;
To provide to third parties in the course of conducting due diligence processes in the context of corporate restructuring operations in which we may be a participant, in accordance with Section 4(d) of this Privacy Policy; and

Where Applus+ processes personal data in pursuit of its legitimate interests, it will always balance those interests against the fundamental rights and freedoms of data subjects, and deploy robust safeguards in terms of ensuring adequate protection of their privacy.

b) We will process your personal data for the following reasons, provided that you have given us your prior consent:

To contact you via e-newsletters and/or promotional emails regarding products and services offered by us and/or other members of the Applus Group, both national and international (a list of which can be found at www.applus.com/appluscompanies), as well as events and news related to our activities (testing, inspection, engineering, certification and related services) by post, email, mobile apps or other electronic equivalent means; and
For other reasons communicated to you at the time you provide us with your personal data, but to the extent that you have given us prior consent for that particular processing. For example, we will seek your consent to collect and use certain types of personal data where we are required to do so by law (for example, in connection with direct marketing activities, cookies and tracking technologies, or when we process sensitive personal data).

If we ask you for your consent to process your personal data, you may withdraw your consent at any time by contacting us at data_protection@idiada.com, enclosing a copy of your ID or equivalent identification.

c) We will also process your personal data in order to ensure an optimal level of compliance with the relevant legal requirements with which Applus+ must comply and to cooperate with regulators and, where applicable, law enforcement agencies in accordance with Part 4 of this Privacy Policy;

If you are a shareholder of Applus Services, S.A., to provide a shareholder forum and remote voting system, as well as other contact channels required by the Spanish Companies Act.
Provide your personal data and other additional information pursuant to requests received from government authorities and/or public authorities as required by the relevant laws or by representatives of the forces with such powers.

3. What rights do you have regarding your personal data

Under local law, you have certain rights regarding personal data. These rights include:

To know how we process your personal data and access your personal data held by Applus+ and its subsidiaries, as applicable;
To request the correction of inaccurate or incomplete personal data;
Request the erasure of your personal data where such personal data is no longer necessary for the purposes for which it was originally collected, in accordance with applicable law;
Restrict our processing of your personal data in certain circumstances (in which case we will only retain the personal data necessary to exercise and/or defend the rights of Applus+);
Object to our processing of your personal data considering new circumstances and for reasons related to their particular situation (in which case we will only retain personal data necessary for legitimate reasons or to exercise and/or defend the rights of Applus+);

This includes the right to object at any time on grounds relating to your particular situation to our processing of your personal data on the basis of our legitimate interests or those of a third party, in which case we will cease processing your personal data if we cannot rely on legitimate grounds to do so;

Request a transfer of your personal data to enable you to obtain and reuse your personal data in a usable electronic format for your own purposes and across different services, without impeding its usability, including by transferring it to another third party; and
Withdraw any consent you may have given for specific processing at any time.

We encourage you to contact us to update or correct your information if changes or personal information we have about you is inaccurate.

We will contact you if we need any further information from you so that we can accommodate your requests.

Applus+ honors its commitment to protect your personal information as described in this Policy and as required by applicable law. If you have any questions or would like to send us additional information on how to exercise your rights or how to effectively submit such a request, please feel free to contact us at data_protection@idiada.com (please include a copy of your ID or equivalent identification).

4. How and who do we share your personal data with

Applus+ will be able to share your personal data with third parties in the following circumstances:

1. Service providers and business partners. We will allow our service providers and business partners who, among other things, perform site maintenance and other IT services, marketing and communications, accounting, financial, legal and auditing, and other business operations on our behalf to access your personal information. For example, we may partner with other companies to process secure payments, process orders, optimize our services, send newsletters and marketing emails, support emails and reports, and analyze information.

2. Applus group companies (national and international): we will share certain information:

(i) Information about your question or proposal with other Applus Group companies so that we can respond appropriately.

(ii). To contact you via e-newsletters and/or promotional emails regarding products and services offered by us and/or other members of the Applus Group, as well as events and news related to our activities (testing, inspection, engineering, certification and related services) via mail, email, mobile applications or other electronic equivalent means; and

A list of Applus Group companies is available at: www.applus.com/appluscompanies.

3. Force authorities, courts, regulators, government agencies or third parties with authority. We will be able to share your personal information with these parties if we believe it is necessary to comply with a legal or regulatory requirement or otherwise protect our rights or the rights of a third party.

4. Asset buyers and mergers. We will share your personal information with any third party that purchases or to whom we transfer all or substantially all of our assets and business, or with whom we merge, consolidate, combine or reconstruct in a similar manner. If such a sale or transfer occurs, we will use reasonable efforts to ensure that the organization to which we transfer your personal information uses it in a manner that is consistent with this Privacy Policy.

Because we operate as part of a global enterprise, the recipients listed above may be located outside the jurisdiction in which you are located (or in which we provide our services), including third countries outside the European Union ("EU") that are not considered to provide an adequate level of privacy protection. See the "International Data Transfers" section below for further information.

5. How do we protect your personal data

We implement technical and organisational measures to ensure a level of security in relation to the risk to the personal data we process. These measures are aimed at ensuring the ongoing integrity and confidentiality of personal data. We regularly evaluate these measures to ensure the security of the processing.

6. How long are your personal data stored

We will retain your personal data for as long as we maintain a relationship with you. Once our relationship with you ends, we will retain your personal data for as long as it allows us to:

Keep business records for analysis and/or audit purposes;
Comply with the archiving period required by law;
Defend ourselves against existing legal claims or bring potential legal claims; and
Resolve complaints about our services.

We will delete your personal information when it is no longer required for these purposes. For information that we are unable to delete completely from our systems for technical reasons, we will put in place appropriate measures to prevent further processing or use of the data.

7. International Data Transfer

Your personal data will be transferred to, stored and processed in a country that is not considered to provide an adequate level of protection for personal data under EU law. We have put in place appropriate safeguards (such as contractual obligations) in accordance with the relevant legal requirements based on contractual provisions approved by the European Commission to ensure adequate protection of your data, which are available at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en.

For further information on the relevant safeguards, please contact us using the contact channels provided.

8. Contact us

Applus+ data controller in terms of the personal data we collect and process. If you have questions or concerns about how your personal data is used, please contact us at data_protection@idiada.com.

It is our responsibility to work with you to achieve a fair resolution to any complaint or concern about your privacy. However, if you believe that we have not been able to assist you with your complaint or concern, you have the right to file a complaint with the Czech Data Protection Authority through their website at https://www.uoou.cz

9. Private Policy Changes

You have the right to request a copy of this Privacy Policy from us by using the contact details above. This Privacy Policy is subject to change from time to time as needed.

If we change the Privacy Policy, we will notify you of the changes. If the changes to the Privacy Policy will have an essential impact on the nature of the processing or essentially affect you otherwise, we will send you notice in sufficient time to give you an opportunity to exercise your rights (e.g., to object to processing, among other things). In addition, and where Applus+ relies on consent to carry out any of its processing activities, we will make every effort to obtain your consent where the above changes could have an essential impact on the relevant processing before such changes come into effect.