Privacy Statement Roeg B.V.

Date of latest change: July 20th 2022

Contents
Privacy Statement Roeg B.V.
1. Introduction
2. Types of data
3. Data Sources
4. Purposes for which we use your personal data
5. Cookies
6. Legal bases for processing
7. Disclosure of personal data
8. Data retention
9. Security
10. Your rights
11. Links to other websites
12. Changes to this privacy statement

1. Introduction
This privacy statement applies to the processing of personal data for which Roeg B.V. is responsible and qualifies as a controller under de General Data Protection Regulation (GDPR). Roeg B.V is responsible for the usage of information by its entities.

Roeg B.V. is located at Gotenburgweg 46, 9723 TM Groningen, The Netherlands and is registered at the Dutch Chamber of Commerce under registration number 69651744. (Hereafter referred to as “Roeg”, “we” or “us”).

Personal Data refers to any information that can identify you as an individual. By processing personal data, we mean storing, altering, sharing, or (partially) removing your personal data. We may process your personal data when you use our products, services, websites, apps, or your account. This Privacy Statement does not apply to company information if no personal data from individuals can be derived from such company information.

If you have any queries, recommendations, or complaints about this Privacy Statement or our handling of your Personal Data in general, please email us at [email protected]

2. Types of data
The personal data we collect about you when you use our services include the following:

• contact details, such as your name, title, company/organization name, e-mail address, telephone and fax numbers, and physical address.
• information about your company, and job function.
• your e-mail marketing preferences.
• financial information (including credit card or account information);
• information such as your nationality and country of residence that allows us to determine your eligibility under export control regulations to receive information about certain technologies.
• information used to customize and facilitate your use of our websites, including login and technical information.
• inquiries about and orders for our products and services.
• information that assists us in identifying the products and services that best meet your requirements.
• event registration information.
• feedback from you about our websites and our products and services.
• information about your visit to our sites, including what pages you view, the number of bytes transferred, the links you click, the materials you access, and other actions taken. On sites that you enter with a user ID, we may connect this information with your identity to determine your potential interests in our products and services.
• standard information that your browser sends to every website you visit, such as your Internet Protocol (IP) address, your browser type and capabilities and language, your operating system, the date and time you access the site, and the website from which you linked to our site. We do not link this information to your identity.

In most cases, the processing of your personal data is limited to only a few of the types mentioned above. The types of data that are collected by us depends on the purpose for which we use your personal data (please refer to: 4. purposes for which we use your personal data).

We choose not to collect any special categories of personal data and kindly request you not to share such data with us. Special categories of personal data consist of information concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or data concerning a person's sex life or sexual orientation.

Financial data can in some cases be considered as sensitive information and will be treated extra carefully by us with appropriate security measures in place.’

3. Data Sources
The personal data that we process is in most cases provided by you and is collected through various channels, such as in a sales process, via telephone calls, because you visit our website or via forms you submit to us. Generally, you can visit our websites without being required to share any personal data. Your data will only be requested to provide a service or to process a transaction.

4. Purposes for which we use your personal data
We use the collected data for the following purposes.

Services and transactions
We use your personal information to deliver services or carry out transactions you have requested, such as:

• Providing information on our products.
• Registering purchased products.
• Processing product orders.
• Processing warranty claims.
• Replacing product manuals.
• Answering customer service requests.
• Facilitating the use of our website, and
• Other processes that support or facilitate the delivery of our services and the processing of transactions

Website improvements
We may use your personal information to improve our websites and related products and/or services

We may use your personal information to improve the ease of use of our website by reducing the need for you to repeatedly enter the same information and by customizing our website to your preferences.

Communications
With your permission, we may use your personal information to provide you with information on our products and services. When collecting personal data that might be used to contact you about our products and services, we will always give you the opportunity to opt out of receiving such communications. Moreover, each e-mail we send includes an unsubscribe link allowing you to stop delivery of that type of communication. If you select to unsubscribe, your request will be handled within 10 business days.

Employment applications
In connection with a job application or inquiry, you may provide us with information about yourself, such as a resume or curriculum vitae. We may use this information throughout Roeg and its controlled subsidiaries and affiliates for the purpose of employment consideration. We will keep the information for a maximum of 4 weeks (or a maximum of 1 year with your explicit consent) for future consideration.

5. Cookies
Roeg makes use of cookies on its websites. Cookies are small files that websites save to your hard disk or to your browser's memory. The stored information can be sent back to our servers upon your next visit.

Functional cookies
We make use of functional cookies to ensure the proper functioning of our websites. For example, we use functional cookies to save your preferences to ensure that you do not have to enter your preferences repeatedly.

Permanent cookies
Furthermore, we use permanent cookies to track the number of times you have visited the site, to track the number of visitors to the site, to determine and analyse visitors' use of our sites (including the effectiveness of online advertising), to store information that you provide such as your preferences, and to store technical information useful for your interactions with our websites. You can remove permanent cookies through your browser settings.

Session cookies
We may use session cookies (cookies that are deleted when your browser session ends) to store your user ID, elements of your user profile, to facilitate your movement around our websites (particularly in connection with information searches and order placement) and other information useful in administering the session. Session cookies are automatically deleted as you close your web browser.

Enabling, disabling, and removing cookies
More information regarding enabling, disabling and removal of cookies can be found in the instructions of your browser. The ‘help’ function may assist in providing the desired information.

Web Beacons
In addition to cookies, our sites may contain web beacons. Web beacons are small electronic images that allow the collection of certain data, such as your IP address, the time of your visit on our website, the type of browser that you use, and the presence of cookies that were placed by us at an earlier stage. We use this data to count the number of visitors to our page.

Some of our web beacons can be disabled by not accepting the cookies that are needed to place the web beacon. In this case, your IP address may still be registered. However, you will be an anonymous visitor.

We may also include web beacons in promotional e-mail messages or Newsletters in order to determine whether messages have been opened and acted upon.

More information on cookies
For more information on cookies and how to remove them, please visit https://www.allaboutcookies.org/.

6. Legal bases for processing
We process your personal data in accordance with one of the following legal bases:

With your consent
We may process your personal data with your consent. For example, we ask for your permission for the placement of cookies.

For the performance of a contract
We may process your personal data when you place an order, make an account or to be able to provide you with the requested services or products. In this case, the processing of your data is necessary for the performance of a contract with you.

To comply with a legal obligation
In some cases, we are obliged to process your data in accordance with a legal obligation. An example is our legal obligation to store financial data for a period of at least 7 years for the Dutch tax authorities.

Our legitimate interest
We may process your personal data because we, or a third party has a legitimate interest to do so. Our legitimate interests include marketing, advertising and research and an analysis of our products and website. Examples include upholding the safety of our online services or to be able to provide you with relevant information after a purchase.

7. Disclosure of personal data
Your personal data may be shared and combined within Powersports Distribution Group. In some cases, we engage third parties that need your data in order to perform their services. Whenever we disclose your data to a third party that qualifies as a processor within the meaning of the GDPR, we ensure that a data processing agreement is in place. This document requires the recipient to treat your personal data with the same respect for privacy and security measures as Powersports Distribution Group does. The data that is disclosed to these parties is limited to the information that is necessary to perform these services. These parties and their employees are prohibited from using that personal information for any other purpose. The third parties that may receive your data include:

Service Providers
We have contracts with other companies to provide services on our behalf, such as hosting websites, sending out information, processing transactions, and analysing our websites.

Distributors
We may share your personal information with companies that distribute our products. In those cases, we provide these companies with only those elements of your personal information they need to deliver your products. In some cases, we may seek your permission to share your information with distributors for marketing purposes. However, we will not share your information for such marketing purposes without your explicit consent.

Transactions
We may share your personal data with financial institutions, government bodies, shipping companies, or postal companies to complete your transaction with us.

Corporate transactions
Your information may be disclosed as part of a merger, sale, transfer of assets, acquisitions, bankruptcy, or similar event. In case of any of these situations, appropriate security measures will be taken to protect your personal data.

Legal requests
We may disclose personal information if required to do so by law or in the good-faith belief that such actions are necessary to comply with legal requirements or with legal process served on us, to protect and defend our rights or property, or in urgent circumstances to protect the personal safety of any individual.

8. Data retention
We retain your Personal Data for as long as required to satisfy the purpose for which they were collected. This entails that the length of the retention period depends on the purpose for which they have been collected. The GDPR does not specify retention periods for different categories. Therefore, we determine the retention period per data type and purpose.

In some cases, we are legally obliged to retain your personal data for a minimum period of time. An example is our legal obligation to store financial data for a period of at least seven years for the Dutch tax authorities.

9. Security
Roeg is committed to protecting the security of your personal information. We use a variety of security measures and procedures to help protect your personal information from unauthorized access, use, or disclosure. When you move around a site to which you have logged in, or from one site to another that uses the same login mechanism, we verify your identity by means of an encrypted cookie placed on your machine. Additionally, we oblige third parties to uphold our security standards using processing agreements.

10. Your rights
As a data subject, you have the following rights:

• The right to request your personal data
• The right to correct, review or update your personal data
• The right to delete (part of) your personal data
• The right to have your data transferred to another party
• The right to object to or restrict the processing of your data
• The right for human interference in an automated decision-making process
• The right to withdraw your consent at any time

Part of the above rights can be exercised by changing or deleting the data in your personal account on our websites. In all cases, you can make a request to review and correct your personal information collected via our websites or ask us to stop using it by completing our Contact Us form or mailing [email protected]. We may take steps to verify your identity before providing you access to your personal information.

We will handle your request within one month. If the request cannot be handled within one month due to its complexity, we will inform you of the status of the request within one month.

You also have the right to lodge a complaint with the supervisory authority, the Dutch Data Protection Authority.

11. Links to other websites
Our websites may contain links to other sites such as distributors and sales affiliates, government organizations, and publications. We also link to third-party providers that host, maintain, and operate online training curricula. While we try to link only to sites that share our high standards and respect for privacy, we are not responsible for the content, security, or privacy practices employed by other sites.

12. Changes to this privacy statement
We may occasionally update this privacy statement. Therefore, we recommend that you regularly review this privacy statement. Whenever we make changes that significantly impact the way in which your data is handled, we will notify you.