Data protection information SEW-EURODRIVE

SEW-EURODRIVE Korea Co., Ltd. (hereinafter: SEW-EURODRIVE) appreciates you visiting our website, using our mobile apps and your interest in our products and our company. We comply with the Personal Information Protection Act and related laws to ensure the freedom and rights of the information subjects, and legally process and manage personal information. Accordingly, in accordance with Article 30 of the Personal Information Protection Act, the following personal information processing policy shall be established and disclosed as follows to guide the process and standards on the processing of personal information and to quickly and smoothly handle the grievances related to this.

Please select in the below table which processing you would like to receive more detailed information about.

The "controller," as defined by Article 2, No. 5 of the Personal Information Protection Act is SEW-EURODRIVE Korea Co., Ltd., Danwon -gu, Ansan -si, Gyeonggi -do 7, Republic of Korea, tel. +82 31 492 8051, fax +82 31 492 8056, e-mail online-support@sew-eurodrive.kr . If you have any questions about our processing of your personal data, or about data protection in general, please contact our data protection officer at the above address or by e-mail at online-support@sew-eurodrive.kr .

I. Personal data

II. Data protection notice for our websites and apps (with cookie policy)

III. Data protection information for customers and interested parties of SEW-EURODRIVE

IV. Data protection information for suppliers and subcontractors

V. Data protection information for visitors of SEW-EURODRIVE

VI. Data protection information on the processing of personal data in connection with trade fairs and other events

VII. Data protection information for the creation and publication of photo, audio and video recordings as well as press and advertising texts

VIII. Data Protection Information for the Use of Microsoft Teams as a Collaboration Platform

IX. Your rights as a person affected

X. Consignment of third party of personal information and processing personal information processing

XI. Overseas transfer of personal information

XII. Destruction of personal information

XIII. Measures to secure safety of personal information

XIV. Personal information protection officer

XV. How to remedy infringement of rights

I. Definition of personal data

Personal data is defined as all information that pertains to a living person, including the full name, resident registration number, images, etc., by which the individual in question can be identified, (including information by which the individual in question cannot be identified but can be identified through simple combination with other information)This includes, for example, your name, your (business) contact details, your phone number or e-mail address and relationship to a company, and your interactions/activities with us.

When you use our website, personal data in the form of information about your use of our website, for instance, may be processed. This includes, for instance, connection data or sources retrieved by you. This information is usually collected by using log files and cookies.

In the case of applications, personal data includes your name, your (business and private) contact information, your address, hobbies or information about sicknesses. We shall treat all information you send us, in addition to your resume, if applicable also your picture, any information about your health condition or other private information as application data.

II. Data protection notice for our websites and apps (with cookie policy)

Below, SEW-EURODRIVE, the operator of different websites and developer of various mobile apps, would like to provide you with an overview of how we ensure the protection of your personal data on our website and further online contact forms and what type of personal data we process for which purposes and to what extent.

1. Data processing – Offers on our website

When you access our website, general information is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name of your internet service provider and the like. In addition, the IP address is transmitted and used to utilize the service you requested. This information is essential when using the Internet and is technically necessary in order to ensure the constant availability of the website. Following a period of a few weeks as a rule, this logfile data will be anonymized by us or deleted, unless we describe extended data processing below. If you send us an inquiry by e-mail, we collect data you provide for processing your inquiry and fulfill your requests, if applicable. The legal basis for this is Article15(1)(4) of the Personal Information Protection Act.

If you use any services offered on our website, further personal data may be collected from you. We process this data to the extent necessary to provide the services you requested. In addition, you may create further personal data voluntarily. We describe the legal basis in the following individually presented functions and offerings.

If you send us an inquiry by e-mail, we collect data you provide for processing your inquiry and fulfill your requests, if applicable. The legal basis for both cases is Article15(1)(4) of the Personal Information Protection Act.

If you provide us with your contact details in the context of concluding a contract or via registration in our customer portal, please take note of the information on data protection mentioned under III..

Further processing of your data by us or other group companies or service providers for purposes which go beyond those above takes place as set out below in accordance with the use selected by you or if you have issued your consent.

2. General inquiries and business correspondence via the online contact form

In addition to contacting us by telephone and e-mail, you can also use the online contact form to send us your general inquiries about us or our products and services. We process the data that you have entered in the form on headquarter servers in Bruchsal. The form includes required information, which we need in order to process and respond to your inquiry, as well as largely voluntary information that you enter voluntarily in the free text fields. The data is as follows:

• E-mail address (required information)

• Zip code (required information)

• Subject of your inquiry (voluntary)

• Content of your message (voluntary)

• Academic title (voluntary)

• Customer number (voluntary)

• First name, last name (voluntary)

• Company name (voluntary)

• Street name, house number, town/city (voluntary)

• Country/region (voluntary)

• Telephone number (voluntary)

• Telephone extension (voluntary)

• Cell phone number (voluntary)

• Attachments that you upload via the form (voluntary)

We process and save the data to the extent and for the duration necessary to process and respond to your inquiry and/or to comply with retention obligations.

The legal basis for requesting and processing required information is Article15(1)(4) of the Personal Information Protection Act. We require this information, such as your e-mail address and zip code, to enable us to automatically forward your inquiry to the relevant internal department and to process and respond to your inquiry. In this respect, the collection and processing of this required information is in your interest.

The legal basis for processing the information that you enter on a voluntary basis in the free text form fields is Article15(1)(4) of the Personal Information Protection Act. By voluntarily entering this information in the online form, you express that the processing of this information is in your interest and that you knowingly wish it to be processed. In this respect, the processing is in your interest.

The legal basis is Article15(1)(4) of the Personal Information Protection Act if your details and the correspondence between you and us is necessary so that you as an employee of our customers, suppliers or other third parties are able to do your job and contact us in a business capacity, for example, to order products and services or to report a support case if you are an existing customer.

3. Security information and external links

We take technical and organizational security precautions on our websites to protect personal data stored by us against access by third parties, loss or misuse, and to enable secure data transfer.

Our websites contain links to other websites from other providers. If you connect to other websites through these links SEW-EURODRIVE is not responsible for the data protection or the content of these other websites.

4. Customer and online support

We offer you comprehensive interaction with us at https://www.sew-eurodrive.kr/ko_kr/online_support/. Once you register, you will have access to many functions and services of SEW EURODRIVE. The processing purposes and processed data can be ascertained from the individual functions, e.g. drawing up sales contracts, requesting the delivery status or carrying out troubleshooting.

For the assignment of specific services and the further processing of your data, e.g. to optimize our Online Support platform and improve your customer experience, please note our supplementary data protection information under II. 6. as well as III.

5. Advertising mailings

If you have given your explicit consent about reception of advertising information, we can send you information about our products and services by e-mail. We can continue to send you information concerning events, trade fairs, products and services by post if we have obtained your address and you have agreed to the promotional use of personal information. Further information on how your data is used for advertising purposes if a business relationship exists can be found under number III) 1) c) below.

You may, of course, revoke your consent to receive advertising mailings, or object to the use for advertising purposes, at any time. The easiest way to revoke your consent is to send us an e-mail at online-support@sew-eurodrive.kr .

6. Processing of data - our mobile apps

We provide various mobile apps in the Apple App Store and the Google Play Store. When you download the mobile app, the necessary information is transferred to the App Store, i.e. in particular the user name, e-mail address and customer number of your account, the time of downloading, payment information and the individual device identifier. The App Store also collects various data by itself and provides you with analysis results. We have no influence over this data processing and are not responsible for it. We only process the data if this is necessary for downloading the mobile app onto your mobile device.

When using the apps, we process the personal data described below in order to enable comfortable use of the functions. Should you wish to use our mobile app, we generally process the data described under 1 above for websites which is technically necessary for us in order to provide you with the functions of our mobile app and to ensure stability and security. In addition, in order to provide the app functions, it may be necessary to process data such as your device identifier, IMEI (international mobile equipment identity), IMSI (international mobile subscriber identity) cell phone number (MSISDN), MAC address for WLAN use, the name of your mobile end device and e-mail address, should this be required to provide the functions which you have accessed. The legal basis here is also Article15(1)(4) of the Personal Information Protection Act.

7. Processing of online data at SEW-EURODRIVE (“cookie policy“)

a) Information concerning the use of technical aids (in particular cookies)

Our website (and some of our apps) use technical aids for various functions, in particular so-called cookies. Cookies are small text files that are stored on your end device and that are saved by your browser. They are used to make our offerings more user-friendly, effective and secure. We use so-called temporary cookies that are automatically deleted once you close your browser ("session cookies"), as well as persistent (permanent) cookies.

When accessing our website (or using the apps) and at any time subsequently, you have the choice of whether you wish to permit the setting of cookies and individual additional functions. You can carry out changes in your browser settings or via our consent manager. Should you reject functions or cookies, you may not be able to fully use our service.

When using cookies, we make a distinction between essential cookies (to display and operate the website) and supplementary cookies, such as the anonymous measurement of access numbers (functional cookies) and marketing cookies (advertising purposes, display or relevant and personalized content). Below, we wish to inform you of the various processing purposes and the services which are used in concrete terms. We will also describe the data processing which will take place.

b) Essential functions and cookies when using the website / apps

We use functions which are essential for the use of our websites / apps. These include so-called session cookies, which enable us to recognize you once again when you visit the site during an individual session. These session cookies contribute to safe use of our offering by, for instance, enabling you to use the online support functions. These functions can be viewed in the cookie consent tool. The legal basis of the processing is Article15(1)(4) of the Personal Information Protection Act.

c) Use of functions for the recording of use behavior (tracking) with right to object:

The use of tracking functions which primarily gather information by means of cookies enables us to analyze the use of our website and to improve it as a result. For this purpose, we can either use utilization statistics (anonymous results) or functions which enable us to recognize users once again when our website is accessed, which allows us to assign utilization processes to an internally allocated number (pseudonym). This allows us to record access to our website and to analyze it systematically.

Specifically, we use the following tracking functions:

(1) Creation of utilization statistics via etracker

Services from etracker GmbH based in Hamburg, Germany (www.etracker.com) are used on this website to analyze utilization data. In this context, cookies are generally used to enable a statistical analysis of the utilization of this website by its users, and to display utilization-related content or advertising. etracker cookies do not include any information that would make it possible to identify a user. In addition, we can also use etracker variants without cookies, in which we carry out the data processing described here to a lesser extent.

The data which is generated as a result is processed on our behalf by etracker exclusively in Germany according to our specifications and is therefore subject to the strict German and European data protection laws and standards. etracker does not carry out any data processing for its own purposes and has been independently audited, certified and awarded the ePrivacyseal data protection seal of approval with regard to compliance with EU data protection standards.

The data processing takes place on the basis of the legal provisions of Article15(1)(4) of the Personal Information Protection Act Our concern(legitimate interest) is to analyze the use of our website and to obtain statistics relating to its use, in order to guarantee the regular optimization of our online service and web presence, so that our website can be made more interest for you as a user. Since the privacy of our visitors is important to us, any data that may allow for a reference to an individual person, such as the IP address, login and device identifications, is pseudonymized or anonymized as quickly as possible. There is no other processing or combination with other data of etracker or transfer to third parties.

You may object to the above data processing at any time, should this be related to personal data:

I object to data processing by etracker on this website here
Your Opt-out was successful!.

You can find more information about data protection at etracker here.

(2) Creation of utilization statistics by SEW‑EURODRIVE

We also use a particular tool, which has been developed in-house, to enable us to analyze usage of our website and usage of our Online Support portal and to continually improve your customer experience and make it more interesting.

We do not process your name and IP address for these analyses.

If you are not logged in as a customer, we are not able to identify you using the data and information listed below. We place a cookie on your computer (browser) and allocate a random session ID. The following information is processed in this cookie:

• Screen size

• Screen resolution

• Type of device

• Operating system and version

• Browser

• Information as to whether cookies are activated in the browser

• Geo data (continent, country, region, city)

• Timestamp (date, time of login)

• "Click data" (individual applications accessed)

• Search queries

• "Shopping carts" (product placed in the shopping cart but not ordered)

• Bandwidth and Internet provider

We do this in order to be able to analyze whether and how users not logged in as customers use our Online Support offering.

If you are logged into our Online Support as a customer, in order to optimize the Online Support platform and improve your customer experience when using our platform, in addition to the aforementioned information, we also analyze the following data - only internally at SEW-EURODRIVE and without processing your name or your IP address:

• Your role at the company

• Registration date

• Name of company, entity, account number

• Type of company

• Order designation

• Net price entitlement

• Sales Organization

The information recorded and analyzed is only stored on our servers in Germany provided it is needed for the analysis and optimization of Online Support and only for as long as it is needed for this purpose. It is stored and processed for 5 years at the most.

The legal basis for the capture and creation of these analyses is Article15(1)(4) of the Personal Information Protection Act. If you do not want any analyses performed during use of the Online Support via your end device, object to tracking with the SEW EURODRIVE tool here
Your Opt-out was successful!.

(d) Functions with use of cookies following your consent

Below is an overview of the functions which we use on receiving your consent when you start using our website. These are functions which are used for advertising purposes and use cookies for this purpose.

Use of functions for advertising purposes

We use functions which deploy cookies for marketing purposes, for example in order to tailor advertising to the interests of a website visitor. They are also used to limit the frequency with which ads are displayed and to measure the effectiveness of the adverts. They record which websites and which items are clicked. This enables us to record information about user habits in order to provide interest-based advertising. The advertising networks used may share this information with third parties. In such cases, the advertising partner regularly sets the cookies directly. We collect only the minimum behavioral information necessary for online customized advertising. We do not collect sensitive behavior information that may infringe on individual rights, interests, or privacy such as thought, belief, family and relatives, educational background, and other social activities We do not collect information.

You can block and allow online custom advertisements collectively by changing your web browser's cookie settings. However, changes in cookie settings can affect the use of some services such as automatic login of website.

The following functions are used for advertising purposes in particular:

(1) Use of Google Ads /Google Remarketing

We use the service of Google Ads to draw attention on external websites to our attractive products by using advertising tools (so-called Google advertising). These advertising tools are delivered by Google by means of so-called "ad servers." Ad server cookies that allow for the analysis of performance parameters are used in this process, e.g. ad impressions, clicks and conversations. This allows us to determine how successful individual advertising measures are in relation to the data of the advertising campaigns.

If you access our website via a Google ad, Google Ads will save a cookie on your end device. These cookies are not intended to identify you personally. By means of the integration of the cookies, Google is informed that you have visited the corresponding page of our website or have clicked on one of our advertisements by including tracking tools. If you are registered with a Google service, Google can allocate the visit to your account. Even if you have not registered with Google or are not logged in, it is possible that the provider finds out and saves your IP address. With the company's conversion remarketing technologies, users who have already visited our website and online services and shown interest in our products will see further related advertisements on other websites in the Google Partners network. As a rule, the following analysis values are also saved:

• Unique cookie ID
• Number of ad impressions per placing (frequency)
• Last impression (relevant to post-view conversions)
• Opt-out information (marking that the user no longer wants to be contacted)

The cookies set by Google enable Google to recognize your Internet browser once again in the future. If a user visits certain pages of a website of an Ads customer and the cookie that has been saved on his or her end device has not expired, Google and the customer can detect that the user has clicked the advertisement and was forwarded to this site. A different cookie is assigned to each Ads customer, so that cookies cannot be traced via the websites of Ads customers. Your browser automatically establishes a direct connection to the Google server based on the marketing tools deployed. We ourselves do not independently gather personal data during the named advertising measures, rather we only provide Google with the possibility of obtaining the data. In this respect, we are jointly responsible with Google for the data gathering and transfer. Google is responsible under data protection laws for the subsequent data processing. We are only provided with statistical analysis by Google. This analysis allows us to identify which of the deployed advertising measures are particularly effective. We do not receive any further data from the deployment of advertising measures, and, in particular, we are not able to identify users based on this information. The legal basis for processing your data is Article15(1)(4) of the Personal Information Protection Act.

Please note that Google may process data outside of the area of the European Union. Google also processes your personal data in the USA and has undertaken to comply with a standard which corresponds to the former EU-US Privacy Shield. We have also agreed so-called standard contractual clauses with Google, the purpose of which is compliance with a reasonable level of data protection in the third country.

We use Google Ads with the Google Remarketing function in order to provide you with advertising which is tailored to your interests. This application enables displaying our advertising when you are visiting other websites after visiting our website. This is accomplished with the use of cookies that are saved in your browser via which your utilization behavior is captured and analyzed by Google when you visit various websites. This enables Google to determine your previous visit to our website. According to Google, the data collected within the scope of remarketing is not combined with your personal data that may have been saved by Google. In particular, according to Google, pseudonymization is used during remarketing. You can prevent the remarketing function by not consenting to its use and also by revoking your consent subsequently, as described in the paragraph below. The legal basis is your consent in accordance with Article15(1)(4) of the Personal Information Protection Act.

Should you not wish for advertising which is tailored to your interests to be displayed after you have issued your consent or should you not wish for the remarketing function to be used, you can revoke your consent in our cookie settings or de-activate this in your browser cookies. You can also notify Google of this directly for the future via the following link: https://www.google.com/settings/ads/onweb/. In addition, you can object to the Google remarketing via the website of the Network Advertising Initiative (NAI): http://optout.networkadvertising.org. Alternatively, you can de-activate the use of cookies by third-party providers by accessing the de-activation site of the Network Advertising Initiative (http://www.networkadvertising.org/managing/opt_out.asp) or administering the use of the device identifiers via the device settings (https://support.google.com/ads/answer/1660762#mob). Further information of the provider can be found at https://support.google.com/google-ads/answer/2549063?hl=en/. Full information concerning data protection at Google can be found on their website at https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html

(2) Use of Marketo

On our website, we continue to use the service of Marketo Inc ("Marketo"). Thereby cookies are used, which are saved on your end device and which enable an analysis of your use of the website.

For this purpose, profiles are created under a pseudonym. During this process, your IP address is anonymized immediately. The analysis of your use of the website serves the purpose of displaying use-related content and interest-based advertising, as well as the regular optimization of our online service and our website in order to make it more interesting for you as a user through interest-based content and advertising using the analysis which has been obtained. The information concerning your use of the website which is generated by the cookie is transferred on our behalf to a server of Marketo within the EU and saved there. In order to guarantee these functions, the service of Cloudfare is used, which controls various certificates for Marketo, for example the SSL certificate and distributes the inquiry load across various servers, in order to increase the security and performance of websites (load balancing).

In individual cases, the data may also be transferred to servers in the USA for advertising-related use and saved there. In these cases, Marketo has undertaken to comply with a standard which corresponds to the former EU-US Privacy Shield. We have also agreed so-called standard contractual clauses with Marketo and Cloudfare, the purpose of which is compliance with a reasonable level of data protection in the third country.

The data processing takes place on the basis of your consent in accordance with Article15(1)(4) of the Personal Information Protection Act. You can revoke your consent to the data processing at any time (without the lawfulness of the processing which has taken place up until this time being affected) by de-selecting the functions in our cookie settings or clicking here.

(3) LinkedIn Insight-Tag

(1) Furthermore, the website uses the so-called LinkedIn Insight tag (or LinkedIn Pixel) of LinkedIn Ireland Unlimited Company ("LinkedIn"). Through JavaScript tag integration, you as a user of our website can be shown interest-based advertisements ("ads") that are relevant to you when you visit the social network LinkedIn or other websites that also use the procedure and we receive statistics in relation to website visitors and demographics. Furthermore, we can evaluate your use of our LinkedIn advertising and interest in our services, also by means of a conversion tracking function, and also show you LinkedIn ads on other websites by means of retargeting. By doing so, we are pursuing our interest in improving the effectiveness of LinkedIn ads and making our website more interesting for you.

(2) By integrating the LinkedIn Insight tag, your browser automatically establishes a direct connection to the LinkedIn server, both when visiting the LinkedIn website and also when visiting websites that have integrated the LinkedIn Insight tag. LinkedIn and ourselves are jointly responsible for collecting your usage data when you visit our website and transmitting it to the provider, however LinkedIn is solely responsible for the relevant processing to carry out the objectives described, once the data has been transferred. We have no influence over the extent and type of use of the data by LinkedIn, we are therefore informing you according to the state of our knowledge: By means of the integration of the LinkedIn Insight tag, LinkedIn is informed that you have visited the website of our Internet presence or have clicked one of our advertisements. If you are registered with a LinkedIn service, LinkedIn can allocate the visit to your account. Even if you have not registered with LinkedIn or are not logged in, it is possible that the provider obtains knowledge of your IP address, time window and further identification characteristics and connects these to the actions attributable to you.

(3) It is possible to de-activate the LinkedIn Insight tag and other advertising objections in the settings for advertisements at https://www.linkedin.com/help/linkedin/answer/62931?trk=microsites-frontend_legal_privacy-policy&lang=enn and additionally at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further settings options and information can be found in the LinkedIn Privacy Center: https://privacy.linkedin.com/.

(4) LinkedIn processes your personal data in the USA and has undertaken to comply with a standard which corresponds to the previous EU-US Privacy Shield. We have also agreed so-called standard contractual clauses with LinkedIn, the purpose of which is compliance with a reasonable level of data protection in the third country. By means of your consent, you are also agreeing not only to the setting of cookies and usage analysis, but also to the transfer of the information saved in the cookies to the USA and possible accessing of this data by the United States authorities. The legal basis for this is Article15(1)(4) of the Personal Information Protection Act.

(5) Further information concerning data processing by LinkedIn can be obtained from the provider, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland; Information relating to the LinkedIn Insight-Tag: https://business.linkedin.com/marketing-solutions/insight-tag?lr=1/; Data protection information: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

(4) Integration of YouTube videos into our website

On individual websites, we have integrated YouTube videos which are saved at http://www.youtube.com and can be played back directly on our website. These videos are included in the "extended data protection mode," i.e. no data about you as a user will be transmitted to YouTube unless you play back the videos. The below data is only transmitted when you play back the videos. We cannot influence this data transmission.

By playing back the embedded videos, YouTube receives the information that you have accessed the corresponding page on our website, and it is furthermore possible that other data is transmitted to YouTube of which we have no knowledge. This will occur regardless of whether YouTube has provided a user account through which you have logged in or if no user account exists. If you are logged into YouTube, your data will be directly allocated to your account. If you do not want this allocation to your profile with YouTube, you must log out before you activate the button. YouTube saves your data as utilization profiles and uses it for the purposes of advertisements, market research and/or the needs-compliant design of its website. Such an analysis can be carried out (even for users that are not logged in) especially for providing needs-compliant advertisements and to inform other YouTube users about your activities on our website. You have the right to object to the creation of these user profiles. Such requests must be addressed to YouTube.

YouTube also processes your personal data in the USA and has undertaken to comply with a standard which corresponds to the former EU-US Privacy Shield. Further information concerning the purpose and scope of the data gathering, the subsequent processing and the safeguarding of the data transfer to a third country can be found in the data protection policy of YouTube. This is also where you will find further information about your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=en. The legal basis of the processing of your data for the purposes referred to above is your consent in accordance with Article15(1)(4) of the Personal Information Protection Act. You can revoke your consent at any time. The easiest way to do this is to de-select the function in our cookie settings.

By means of your consent, you are also agreeing not only to the setting of cookies and usage analysis, but also to the transfer of the information saved in the cookies to the USA and possible accessing of this data by the United States authorities. The legal basis for this is Article15(1)(4) of the Personal Information Protection Act.

(5) Integration of Google Fonts after opening a YouTube video

We have not yet integrated the Google Fonts API into our websites, but as soon as you open a YouTube video that is embedded in our websites, Google Fonts is activated by YouTube / Google, word fonts are reloaded via Google servers and personal data is then transferred to Google LLC, including to the USA. The browser on your end device sends HTTP requests to the Google Fonts Web API. The Google Fonts Web API provides you with the Google Fonts cascading style sheets (CSS) and then the fonts that are indicated in the CCS. The following data is transferred to Google: Your IP address, the requested URL on the Google server and the HTTP headers, including the user agent which describes your browser and operating system versions, as well as the referral URL (in other words the website on which the Google font is to be displayed). No cookies are set.

In accordance with the information provided by Google Developers, no IP addresses are logged or stored on Google servers and these are not analyzed. The Google Fonts Web API records details of the HTTP requests (requested URL, user agent and referring URL). Access to this data is restricted and subject to strict controls.Google does not use any of the information collected by Google Fonts to create profiles of end users or to display targeted adverts. Further information can be found in the Google Fonts FAQ’s: Data protection and data gathering | Google Fonts | Google Developers

By clicking on the video, you are agreeing to the data processing described here when using Google Fonts and to the data transfer of your IP address to the USA, with possible accessing on the part of the United States authorities. You can revoke your consent at any time, without the lawfulness of the data processing that took place in accordance with your consent prior to the revocation being affected. The legal basis in this respect is Article15(1)(4) of the Personal Information Protection Act.

8. Integration of Google Maps

Via an API, this site uses Google Maps, a map service which is provided by Google Inc. In order to use the functions of Google Maps, Google sets technically necessary cookies and possibly also tracking and analysis cookies so that your user behavior can be analyzed. For this purpose, Google processes your IP address and other usage data, such as your GPS location data, should you have agreed to such before using the map service. This information is normally sent to a Google server in the US and stored there. We have no influence over this data transfer. Google can connect the usage data with other data and assign it to your Google account, should you be logged in to this. Google Maps is used for the purpose of providing an attractive display of our online services and helping to easily find the locations given on our website. The legal basis for the processing of your data for the purposes referred to above is your consent in accordance with Article15(1)(4) of the Personal Information Protection Act. You can revoke your consent at any time. The easiest way to do this is to de-select the function in our cookie settings.

By means of your consent, you are also agreeing not only to the setting of cookies and the connection of your usage data by Google, but also to the transfer to the USA and possible accessing of this data by the United States authorities. The legal basis for this is Article15(1)(4) of the Personal Information Protection Act.

Further information concerning the processing of your user data can be found in the data protection policy of Google: https://policies.google.com/privacy?hl=en .

9. SEW-EURODRIVE profiles on social networks

Social media platforms

We also maintain sites on other so-called social media platforms. We also have sites with the following providers:

To provide these information services, we access the providers’ technical platform and services. We hereby inform you that use of our sites on social media platforms and their functions is at your own risk. This applies, in particular, to the use of interactive functions (e.g. Comment, Share, Rate). When you visit our pages, the social media platform providers record, among other things, your IP address as well as additional information found on your PC as cookies. This information is used to supply us as the provider of the accounts with statistical information about the interaction with us.

We do not know in what way the social media platforms use the data from your visit of our account and from the interaction with our contributions for their own purposes, for how long they store this data and whether they pass on the data to third parties. Data processing may vary depending on whether you are registered with, and logged into, the social network, or whether you access the site as a non-registered and/or not logged in user. When you access a contribution or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your end device can be used to track how you surfed the internet. If you want to avoid this, you should log out, delete any cookies on your device and restart your browser.

In addition to this, we as the provider of the information service only process the data from your use of our service which you provide and which requires interaction. For example, if you ask a question which we can only answer by e-mail, we will save your information in accordance with our General Data Protection Principles, as described in our Data Protection Information. The legal basis for processing your data on the social media platform is Article15(1)(4) of the Personal Information Protection Act.

You can contact either us or the provider of the social media platform to exercise your rights as the data subject. If a party is not responsible for providing a reply, or must receive information from the other party, we or the provider of the social media platform will forward the query to the relevant other party. Please contact the provider of the social media platform directly for any queries concerning setting up your profile or the processing of your data when using the website. If you have any questions regarding how we process your interaction with us on this site, please do not hesitate to contact us at online-support@sew-eurodrive.kr .

In their data protection policies, the providers describe what information the social media platform receives and how this is used (see table above for the link). These also provide information about how to contact them and how to change your advertising settings. For more information on social networks and how you can protect your data, see www.youngdata.de.

10. Registering, ordering and downloading other online services and offers

On our websites, we also offer services such as downloading white papers, ordering tickets to trade fairs, registering for online events and newsletters. To provide these offers and services, we use solutions and services from Marketo. Please also see the data protection information regarding the use of Marketo .

a. Ordering a trade fair ticket

If you wish to visit us at a trade fair, you can order your ticket directly online. The information that you enter in the form is transferred to us. In particular this is:

• First name, last name (required information)

• E-mail address (required information)

• Company name (required information)

• Your department (required information)

• Your position in the company (required information)

• Street name, house number, zip code, city/town (voluntary)

• Academic title (voluntary)

• Country/region (voluntary)

• Industry (voluntary)

• Telephone number (voluntary)

• Cell phone number (voluntary)

The information marked as required information is essential in order for us to process the order for the trade fair ticket, send the ticket to you and be able to introduce you to the most appropriate contact person at SEW-EURODRIVE on the day of the trade fair so that they can answer your questions. In this respect, the processing of the required information is in your and our legitimate interest. The legal basis for this is Article15(1)(4) of the Personal Information Protection Act.

We process and save the data to the extent and for the duration necessary to fulfill the purpose, i.e. to process the ticket order.

b. Downloading information materials (e.g. white papers)

We make information materials, such as white papers, about various topics and SEW-EURODRIVE products available on our website for you to download free of charge to enable you to get to know us and our products better (public relations work).

The information that you enter in the form is transferred to us. In particular this is:

• E-mail address (required information)

• Academic title (voluntary)

• Last name, first name (voluntary)

• Company name (voluntary)

• Street name, house number, zip code, city/town (voluntary)

• Industry (voluntary)

• Department, position in the company (voluntary)

• Telephone number (voluntary)

• Cell phone number (voluntary)

Your e-mail address is essential for us to be able to send the information materials by e-mail. This is our legitimate interest. The legal basis is Article15(1)(4) of the Personal Information Protection Act.

We process and save the data to the extent and for the duration necessary to fulfill the purpose.

The legal basis for processing the information that you enter on a voluntary basis is also Article15(1)(4) of the Personal Information Protection Act. By entering the information voluntarily, you indicate that you are in agreement with the data processing described here, i.e. that you have an interest in the processing.

We may forward this data internally to our Sales department so that our Sales department can contact you.

c. Webinars and online events

We offer webinars and online events on our website. We process the information that you enter in the form. In particular this is:

• First name (required information)

• Last name (required information)

• E-mail address (required information)

• Company name (required information)

• Department (required information)

• Position (required information)

• Acad. title (voluntary)

• Country/region (voluntary)

• Industry (voluntary)

• Telephone number (voluntary)

• Cell phone number (voluntary)

The information marked as required information is essential in order to conduct the webinar or online event. For example, we need your e-mail address, your first and last names, department and position in the company in order, for example, to send you an invitation link by e-mail and send you the most appropriate information possible. This is also our legitimate interest. The legal basis Article15(1)(4) of the Personal Information Protection Act.

Furthermore, we process and save the data to the extent and for the duration necessary to conduct the webinar or event.

The legal basis for processing the information that you enter on a voluntary basis is also Article15(1)(4) of the Personal Information Protection Act. By entering the information voluntarily, you indicate that you are in agreement with the data processing described here, i.e. that you have an interest in the processing.

III. Data protection information for customers and interested parties of SEW-EURODRIVE

1. Scope of data processing and designated uses

a) Contract performance

SEW-EURODRIVE processes the data that we receive from you as part of your inquiries or existing contractual relationships. In addition to your business contact details, this comprises all information that is exchanged, such as e-mails, orders, requests for our products, and payment details. If you have business relationships with us, you must provide the personal data that is necessary for the preparation or performance of the contracts or that we are legally required to process; otherwise we cannot fulfill the contracts.

SEW-EURODRIVE processes the data provided during order placement for use in fulfillment of the contract and may employ specialized and monitored service providers for this purpose. Processing of the data for the purpose of contract fulfillment comprises using the data to render the service stipulated by the contract, including rendering of services defined in service agreements or handling of any warranty claims. In addition, if a request for financing is made, the data required for generating a quotation may be used by SEW-EURODRIVE and, if necessary, passed on to contractual partners. Further details regarding the purposes of use can be found in the relevant contractual documents. This data processing is carried out on the basis of Article15(1)(4) of the Personal Information Protection Act.

Data collected by SEW-EURODRIVE regarding the purchase of our products or use of our services may also be passed on to the external auditors and/or tax consultants of SEW-EURODRIVE for consulting and auditing purposes. SEW-EURODRIVE saves the data collected for fulfillment of the contract in its operative system as long as warranty claims or other purposes of use laid out in this declaration still apply. Thereafter, data that is subject to the retention obligations specified in other laws is archived and then deleted once these retention obligations expire. All other data is deleted immediately, unless this declaration specifies other designated uses for this data.

b) Verification of address and credit worthiness

To verify your address and credit rating, SEW-EURODRIVE accesses databases from external agencies in order to gather address details and credit data about your company, including data that was calculated using statistical methods (scoring). This is done as long as SEW-EURODRIVE is undertaking a commercial risk in concluding the contract and seeks to safeguard itself through this credit check. This information is used by SEW-EURODRIVE to grant trade credit for goods or services.

The following agencies provide addresses and credit data to SEW-EURODRIVE:

• Bisnode D&B Deutschland GmbH
• Deutsche Bank AG
• German Debtor's Register (Deutsches Debitorenregister, DRD), a payment records pool from the Verband der Vereine Creditreform e.V. organization
• Verband der Vereine Creditreform e.V.

The information provided by the agencies and the internal information regarding payment behavior is internally evaluated by SEW-EURODRIVE, which then creates its own rating for use as the basis for granting a credit limit. The credit data is deleted 5 years after the last delivery of goods. This mode of data processing is performed in accordance with Article15(1)(4) of the Personal Information Protection Act in order to grant you trade credit for goods and services.

c) Promotional use of data by SEW-EURODRIVE

SEW-EURODRIVE and engaged service providers (printing companies, lettershops, etc.) use your name and address as a contact person in ongoing business relationships or of interested persons for additional measures for entering into and activating business partnerships.

This includes the sending of advertising by post in relation to interesting products and services, so that potential customers and business partners can become aware of products which may be of interest and in order to form a long-term business relationship. Last but not least, we would like to stay in touch with you on special occasions and send you Christmas greetings, for example. SEW-EURODRIVE uses your telephone number for promotional purposes only if you have given your consent or if consent can be reasonably presumed – for example, within an existing business relationship or after previous contact. SEW-EURODRIVE also uses your e-mail address which was obtained from the contact persons during the conclusion of contracts in order to advertise similar products and services. In all other cases, we only use your e-mail address for advertising purposes with your separate consent. Of course, you have the right to refuse these promotional contacts. We notify you of your right to object to advertising in each separate case.

Furthermore, SEW-EURODRIVE processes the data collected within the framework of the business relationship (contact information, product purchases, services ordered) and obtained when the services on the website are used, at trade fairs or during other advertising campaigns (use of data when accessing the website or when participating in advertising campaigns, as well as the voluntary information which you disclose when using the website) in order to provide you with offers which are tailored to your interests. By means of the above, we use the data which is collected over the course of the business relationship and the data which is obtained when using products / services in order to inform you of offers, information and current developments in relation to our products and services which may be of interest. Thereby SEW-EURODRIVE provides further information concerning products and services of the SEW-EURODRIVE Group. By means of this data processing, we can showcase the products and services which we think may be of interest to you by means of personalized offers (website, e-mail or postal advertising).

We may also send you - as an existing customer or if we have otherwise received your contact details - information in relation to special promotions, events or trade fair events by post within the framework described above. In this case, you will receive post from us with information about the specific campaign and how you can participate and what information you must issue us with. We will then often register your participation via an event-related website and process your data for the stated purposes indicated, for example to provide the products offered or send you information. We may use the information received as part of the processing described here. At the time of selection and sending of the initial information, your data is processed on the basis of a consideration of our interests, Article15(1)(4) of the Personal Information Protection Act; when you participate in a campaign and register, your data is processed for the performance of the contract, in accordance with Article15(1)(4) of the Personal Information Protection Act.

As a rule, your data is saved in the EU for advertising purposes. Thereby we can use service providers whom we have carefully inspected and audited.

To achieve the goals associated with this promotional usage, we process your data over the service lives of our products and as long as you remain a customer. Exceptions are made if you consent to a longer period of usage and/or if the data is subject to statutory retention obligations. In the latter case, the data is deleted after the retention period has elapsed. The processing period may be shorter if you exercise your right to object, of which we inform you in Section V.

The legal basis for this promotional usage is Article15(1)(4) of the Personal Information Protection ActArticle 6(1)(1)(f) GDPR or, if you have given your consent, Article15(1)(1) of the Personal Information Protection Act. We will inform you below of your rights regarding use for advertising purposes, in particular your right to object.

2. Distribution of data within the SEW-EURODRIVE Group

SEW-EURODRIVE may pass on your master data (company name, contact persons, address and contact details such as telephone number and e-mail address) to other companies within the SEW-EURODRIVE Group and possibly update it in order to ensure that all SEW-EURODRIVE companies involved with you in a transaction (for example fulfilling a contract) have the same master data. This is intended to simplify our processes and may help you avoid having to provide the master data again when contacting another company within the Group. The legal basis for this mode of data processing is Article17 of the Personal Information Protection Act. Your rights are safeguarded by consent to the third party provision of information and internal contractual policies that ensure a high standard of data protection.

Furthermore, in addition to master data, data relating to a concrete order (order data) or data for the preparation of such an order in case of your inquiry can be passed on to other EURODRIVE companies, should this be necessary due to your order. For example, different SEW-EURODRIVE products are manufactured by different SEW-EURODRIVE companies, so data may need to be transferred to simplify order processing and delivery. In such cases, you will be informed of this transfer upon conclusion of the contract. The legal basis for this processing is Article26 of the Personal Information Protection Act.

3. Surveys with online tools

In some cases, we conduct surveys/questionnaires with customers, suppliers, visitors to trade fairs and interested parties to learn as much as possible about their requirements for our products and innovative solutions. We will therefore periodically ask you to take part in a survey, which is always voluntary. We conduct surveys in different places, for different reasons and purposes, using different technical tools and different people. If we survey you in person at an event or trade fair, we may conduct and document the survey and documentation using an electronic device, such as a tablet.

We use your surname, first name and e-mail address in order to invite you to complete a survey. If we have invited you to complete a survey by e-mail and you do so online, a cookie will be placed on your end device to prevent multiple participations and a falsification of the results. This information is kept separate from the information and details provided in the survey and is not linked to any other data.

We conduct both anonymous and personal surveys.

When you participate in an anonymous survey, the responses from all respondents are statistically combined and evaluated collectively. It is therefore not possible to match answers to certain participants. Furthermore, we formulate the questions in such a way that we cannot identify the person responding.

When you participate in a personal, non-anonymous survey, we generally collect your surname, first name, business contact details, the name and sector of your company, your role within the company, etc. and then evaluate this information.

We use the services of LamaPoll to conduct surveys, especially to collect and evaluate the information gathered. We have commissioned LamaPoll as a data processor and have audited them accordingly. (Further information on data processing can be found in the data protection declaration of the provider, https://www.lamapoll.de/Support/Datenschutz/#oben). The data is hosted in a data center in Berlin.

We sometimes link participation in the survey with a contest or other rewards; in such cases, we always ensure that the answers and the rewards are separate so that we cannot identify a person’s answers. We may also display individualized design elements such as images, videos, questions or pages.

The legal basis for processing your contact details for promotional purposes is further detailed in No. III. 1. c of this data protection notice. The legal basis for processing your data when you participate in an anonymous survey is Article15(1)(1) of the Personal Information Protection Act. Our legitimate interest consists in receiving voluntary feedback from you about the company and our products. If you participate in a personal survey, we will obtain your consent beforehand. The legal basis is Article15(1)(1) of the Personal Information Protection Act.

If you withdraw your consent, the data will be deleted within a month unless there are any laws, duties or overriding interests which preclude immediate deletion. In all other respects, the information will be deleted insofar and as long as the processing of said information is no longer required to fulfill specific purposes, for record retention requirements or to defend against or assert legal rights.

IV. Data protection information for suppliers and subcontractors

a) Establishment, performance and termination of the supply contract / transaction

SEW-EURODRIVE procures goods and services from various suppliers and subcontractors around the world for the execution of both internal and external tasks, projects and transactions. In order to establish, perform and terminate these supply/support transactions and to carry out their professional tasks, it is necessary (purpose of the processing) for the employees of SEW-EURODRIVE and the contact persons of the suppliers/subcontractors to exchange information by post, telephone or electronically, e.g. by e-mail, and to process and store this information in their respective analog and digital supplier management systems and databases.

The following data is processed: last name; first name; (business) e-mail address; telephone number; cellphone number; role in the company; delivery and postal address; information from quotations, order confirmations, contracts and invoices; your qualifications and certificates; the contents of the supplier's self-disclosure; notes from conversations; and information from our verbal, telephone or electronic correspondence.

SEW-EURODRIVE processes the specified information in paper form and digitally on servers in Bruchsal (Germany). All data is processed according to the need-to-know principle. Auditors, tax advisors, lawyers, social insurance agencies and supervisory/investigative authorities shall have access to this information only to the extent and for the duration required by law and necessary for the fulfillment of their tasks. Access may also be granted to service providers who have been carefully selected and who are needed to properly manage the supplier relationship (e.g. supplier surveys, supplier audits, supply chain monitoring).

The data will be stored only to the extent and for the duration necessary to establish, perform and terminate the services and to comply with legal, contractual or internal retention periods.

The legal basis for the data processing is Article15(1)(1) and (4) of the Personal Information Protection Act. The aforementioned purpose of the processing also constitutes our legitimate interest.

If the cooperation between suppliers and SEW-EURODRIVE constitutes a data processing agreement or a joint controllership, we shall conclude corresponding agreements with these suppliers.

b) Supply chain monitoring and regular supplier surveys

EU regulations (e.g. EU Conflict Minerals Regulation 2017/821/EU from May 17, 2017) and both national and international (e.g. the U.S. Dodd-Frank Act of 2010) standards and laws regarding transparency require us to exercise due diligence in selecting our worldwide suppliers and to regularly review our supplier relationships, including the supply chains, on both a legal and ethical level. In addition to the applicable legal provisions, we observe our internal Code of Conduct in all SEW-EURODRIVE group companies worldwide. Key tenets of our corporate philosophy include respecting human rights worldwide, ensuring fair working conditions, combating corruption, mitigating armed conflicts, monitoring supply chains and protecting the environment.

We conduct annual supplier surveys in order to prevent the use of conflict materials, conflict resources and conflict minerals in our supply chain (purpose of the processing). We conduct the surveys ourselves (see III. 3. Online inquiries) or commission the specialized service provider IntegrityNext GmbH from Munich (hereinafter IntegrityNext) for this purpose.

Section 1502 of the U.S. Dodd-Frank Act 2010 prohibits the use of so-called conflict materials. To complete the survey, we upload your company name and email address to the IntegrityNext platform and IntegrityNext then invites you to complete an inquiry on IntegrityNext platform. As part of the survey/inquiry, the following information is generally processed from you and about you if you have given consent to the collection and use of your personal information: Name, first name, (business) e-mail address, company name, and especially your entries in the questionnaire.

The data will be stored in the (AWS) EU-data centers of IntegrityNext only to the extent and for the duration necessary to fulfill the purpose of processing and to comply with legal, contractual or internal retention periods.

The legal basis for the data processing is Article15(1)(4) of the Personal Information Protection Act. Our legitimate interest in surveying suppliers' employees—whether by us or external service providers—prevails, as this is the only way to uniformly inspect supply chains and materials to ensure that they are "conflict free." This also constitutes our suppliers' interest.

V. Data protection information for visitors of SEW-EURODRIVE

We are pleased when you visit us on site - whether as a contact person of a company (such as a customer or supplier), as a prospective customer, applicant or employee from our SEW locations around the world. In order to be able to quickly identify the respective location in the event of an accident in our plant facilities or in the company and business premises and to be able to track your visit to us, e.g., due to the assertion of claims for damages and to protect our business and trade secrets (processing purposes), we record the following information about you digitally in an internal IT visitor system:

- Last name, first name

- Name of your organization or company and its location

- Your contact person at SEW-EURODRIVE

- Date and time of your arrival and departure

The legal basis is Article15(1)(4) of the Personal Information Protection Act. We store the information about you that is registered in our internal visitor system for a period of three years.

VI. Data protection information on the processing of personal data in connection with trade fairs and other events

If you visit us at a trade fair or other networking event, we may exchange information about our products or about existing or future collaboration, or for the purpose of contacting each other for future business affairs, i.e. to initiate, carry out or conclude business.

We will process the following information about you, depending on the individual situation/case or what information you share with us:

• First name, last name.

• address.

• Title.

• (Business) phone number.

• (Business) e-mail address.

• Contents of your e-mail/messenger messages in connection with our correspondence before, during or after a trade fair or event.

• Name and address of your company.

• Department in which you work.

• Your role at the company.

• Your industry.

• Information contained on the business cards that we exchange or that you give us.

• Information taken from your (public) website or (public) social media profile.

• Your likeness/appearance on photo, audio recording or video recording, if we make and publish recordings as part of the event. If you are the focus of the photo/recording, i.e. you are specifically to be seen or heard, we will obtain your consent in advance.

• The information you enter in the Process Modules Questionnaire. In addition to your name and contact details, this consists mainly of our questions and your answers about products and processes (see Process Modules Questionnaire). If you answer the questions on site using a tablet, the date and time will also be recorded.

• The information that is recorded and documented in the conversation note. In addition to your name and contact details, this includes but is not limited to information about your industry, project planning, your visitor category (customer, OEM, potential customer, supplier, press, student, applicant, other service providers), main topics of the conversation, notes from the conversation, excerpts of your statements (original audio) from the conversation, your requested contact method (telephone, mail, e-mail, messenger), interest in advertising, your planned orders.

• Other information from our correspondence before, during and after the trade fair.

• Documentation/comment on the conversation note that you have objected to the processing and storage of your data in our IT systems and files.

If you are a new customer, existing customer or prospective customer, the information listed here will be entered into our Customer Relationship Management (CRM) system and processed. The information is processed on SEW-EURODRIVE servers (on premises) in Bruchsal, Germany and in the cloud environment of external cloud providers. To protect our IT systems from cyber attacks and hackers, we do not publish the names of the external system providers directly, but on request we will provide you with the (company) names of the external recipients, system providers and/or cloud providers. The data centers of SEW-EURODRIVE and the external cloud providers are located in the EU. The CRM can be accessed by employees working in sales and customer support, as well as by those who maintain the IT systems and provide support services.

If you are a supplier, the information presented here will be entered and managed in our supplier management system.

If you contact us in a professional capacity, i.e. in the performance of your job at the trade fair or event, the data processing will be based on Article15(1)(4) of the Personal Information Protection Act as the data processing (exchanging contact details, initiating business/projects) is necessary for you and our employees to complete your/their tasks.

The legal basis is also Article15(1)(4) of the Personal Information Protection Act. Managing contacts, initiating business and conducting business constitute both our and your legitimate interest.

For the purpose of public relations, we may make and publish still images, audio recordings and video recordings of the event or our trade fair booth. If you are the focus of the image/recording, i.e. you are specifically to be seen and/or heard, we will obtain your consent. We will also obtain your consent if we interview you and publish this interview or a statement (original audio) from you in the media. The legal basis is Art. 6 para. 1 lit. a) GDPR. If you are not the focus of the recording but rather a peripheral person, e.g. one person among many, then our legitimate interest in making and publishing the recordings takes precedence. The legal basis is then Article15(1)(1) of the Personal Information Protection Act Please read our data protection information on the creation and publication of photos, audio recordings and video recordings.

If you participate in an on-site survey/questionnaire, we will obtain your consent in advance. The legal basis is then Article15(1)(1) of the Personal Information Protection Act.

The information is stored insofar and as long as is necessary to fulfill the aforementioned purposes and/or to comply with legal retention obligations.

If you are a customer or potential customer, we will also process your data as described in Section III.

If you take part in an on-site survey, the data protection information in Section III.3. also applies.

If we connect on a social network such as XING or LinkedIn in connection with the event, the privacy policy of the social network in question must also be observed.

VII. Data protection information for the creation and publication of photo, audio and video recordings as well as press and advertising texts

If you attend one of our events or training sessions or visit us at a trade fair or for other reasons and make contact with us in person, we or an authorized external agency may for the purposes of public relations work or employer branding create and publish photo, audio and video recordings of the proceedings and the people at our events (training sessions, trade fairs etc.), in which you are either the focus of the photo/recording or are recognizable as a peripheral person, i.e. one person among many and not in the focus of the respective photograph/recording. In individual cases, you may talk to us or we may ask you specifically about the particular event, our products or our cooperation, for example, and we may process and publish a quote or statement from you in a press release. In addition to your outward appearance (photograph and video recording), voice and language (video and sound recording), we may in certain circumstances also collect – depending on the situation – your name, position in the company, e-mail address, phone number, for example, if we mention you in a press release, social media post or in an image caption. If you are the focus of the photographs/recordings, we will assign a tag ID to enable us to subsequently identify you on the photographs/recordings.

Depending on how and where the images/recordings and the press releases in which you are mentioned are published, they may be seen, heard, saved, evaluated or reproduced internally within SEW-EURODRIVE and externally, that is, worldwide by anyone who has access to the particular medium. Media are, for example, the worldwide web, local, regional, national, global online and print media, printed advertising materials, such as brochures and fliers from SEW-EURODRIVE Korea Co., Ltd., on the websites, mobile apps and blogs of SEW-EURODRIVE Korea Co., Ltd., in regional, national and international trade magazines, on the local, regional and national radio and television stations, online journals, social media platforms, in digital media, on the pages/profiles of SEW-EURODRIVE Korea Co., Ltd., in social networks such as YouTube, Naver blog, LinkedIn as well as in internal SEW-EURODRIVE media (e.g. the global SEW-EURODRIVE intranet DriveNet, SEW-EURODRIVE company magazines such as EURODRIVER/Direkt, News Center, mitarbeiterinfo.sew), in newsletters or e-mails from SEW-EURODRIVE Korea Co., Ltd.. If we publish images/recordings and press releases, for example, in our EURODRIVER employee magazine, the images and, for example, your statements and quotes may be read by SEW-EURODRIVE customers worldwide or by former SEW-EURODRIVE employees who receive the magazine. If we publish images/recordings and press releases on our Naver blog, YouTube, LinkedIn, all users of these social media platforms can access them. If we publish recordings on the radio and television, everyone who receives these channels can watch and listen to them.

If you are the focus of an image/recording and can be clearly and unambiguously recognized or heard and/or are mentioned by name in a press release/advertising text, for example, together with a quote and your position at the company and are published in the stated media, we will obtain your informed consent in advance. When we obtain your consent, we will also assign a tag ID. The purpose of this is to enable us to subsequently identify you in the images/recordings. The legal basis in this case is Art. 6(1)(a), 7 GDPR. In accordance with Article15(1)(1) of the Personal Information Protection Act, you can withdraw your consent at any time without stating the reasons for doing so. You can do this, for example, by sending an e-mail to online-support@sew-eurodrive.kr.

If you have granted us unlimited consent, we will publish and save the press releases/advertising texts and images/recordings for an unlimited period of time. If you withdraw your consent within one month, we will delete the images/recordings in which you alone are the focus. Passages in press releases/advertising texts in which you are specifically mentioned will be deleted within one month provided that this is legally, technically and economically possible and reasonable for us.

If you are not the focus of the images/recordings, but are merely a peripheral person in a recording or depicted group, then our legitimate interest (for example public relations work and employer branding) in the publication of this image/recording may in certain circumstances also outweigh your interest in non-publication. The legal basis is Article15(1)(1) of the Personal Information Protection Act, you can raise an objection to this at any time without stating the reasons for doing so. You can do this, for example, by sending an e-mail to online-support@sew-eurodrive.kr. If you have raised an objection, we will immediately delete the image/recording/recording that contains you, or try to make you unrecognizable and/or inaudible in the texts and/or images/recordings within one month by pixelating (image, photograph, video) and/or distorting them (voice, sound) and/or deleting the text, provided that this is legally, technically and economically possible and reasonable for us.

We also wish to inform you that we cannot exclude the possibility that press releases/advertising texts or images/recordings that were published on the Internet with your consent or based on our overriding interest, may continue to circulate on the Internet even after they have been deleted or made unrecognizable (for example, by pixelating) by us and the media/portals for which SEW-EURODRIVE is responsible. We also cannot exclude the possibility that they may have been previously downloaded, copied and further processed by third parties in their original "uncensored" state.

VIII. Data Protection Information for the Use of Microsoft Teams as a Collaboration Platform

Microsoft Teams (hereinafter MS Teams) enables collaboration and communication through virtual teams and channels, message exchange via chat, use of presence information, file exchange and storage as well as web conferencing and voluntary recording of images and sound - e.g. for documentation, learning and training purposes. The following data can be processed:

• name, first name

• display name / username

• username, UserID / Meeting-ID

• (preferably business) e-mail address and telephone number, if applicable

• date and content of chat and video chat messages

• documents sent and shared via the platform

• external image and appearance (face, body, facial expressions, gestures, body movements, gait, etc.), provided that the video camera is activated and released

• profile picture, if you use a profile picture

• spoken words, voice and language, provided you have activated your microphone and / or provided that you have spoken in the meeting

• recording of the meeting in picture and sound, provided that the recording has been activated and consent to the recording has been given in advance

• pseudonymized diagnostic data (metadata): data required for MS Teams operation as well as product enhancements such as information about the current MS Teams version, operating system version, system crashes. This data is linked to a pseudonymized ID, which Microsoft does not use to identify users, but to check whether, for example, system crashes occurred for one person (one ID) or for 100 people (100 IDs);

You can find here further data that Microsoft might process if you use MS Teams: Microsoft Teams – Privacy - Microsoft Teams | Microsoft Docs

If SEW-EURODRIVE employees or applicants carry out and complete their (professional) correspondence and tasks, e.g. by video conference, the processing is based on Article15(1)(1) of the Personal Information Protection Act in conjunction with the respective applicable company agreement. If the performance of the job or the application in a number of cases requires data transfer to third countries, the legal basis is Article25-5 of the Personal Information Protection Act.

If employees of SEW-EURODRIVE customers, suppliers, interested parties, other third parties or employees of a company belonging to the global SEW Group, for example, participate in a video conference, the data is processed so that they can perform their job and we can communicate with each other to establish, carry out or terminate the business. The legal basis is Article15(1)(1) of the Personal Information Protection Act. If, in a number of cases, data must be transferred and transfered to third countries for the purpose of performing the job and correspondence, Article25-5 of the Personal Information Protection Act is also relevant.

If the video conference is to be recorded, e.g., to allow those who could not participate in the live event to view it afterwards or for learning and training purposes, SEW-EURODRIVE will obtain the consent of the users by recording the consent of the users/participants verbally or expressed by other actions at the beginning of the recording. The legal basis is Article25-5 of the Personal Information Protection Act if the data is transferred to third countries.

Access to this information is granted to persons who, for example, participate in a videoconference and/or to whom a recording of the videoconference is available, as well as, if applicable, the employees of SEW-EURODRIVE and Microsoft Corporation and Microsoft Ireland Operations Ltd., to the extent that they are responsible for the provision and support of MS Teams.

MS Teams is cloud-based. We have entered into a data processing agreement with Microsoft. Microsoft's data centers are located in Amsterdam (Netherlands) or within the EU. Since the above-mentioned pseudonymized diagnostic data (metadata) could be transferred through and from you to Microsoft Corporation in the USA, EU standard contractual clauses have been concluded with Microsoft Corporation. Furthermore, Microsoft has adopted additional technical and organizational protective measures to safeguard data transfers from and to the USA. Moreover, Microsoft ensures that law enforcement authorities will not be granted access to the information described unless a law permits or expressly requires them to do so.

SEW-EURODRIVE does not delete contents and documents of the chats as well as the published contributions in teams and channels unless the users instruct SEW to delete these contents and documents. In addition, users can delete their content and documents in chats, channels and teams themselves.

If the MS Teams account is deleted, the associated account login data as well as the contents and documents of the account (document storage, e-mail inbox) will be permanently deleted after 60-90 days in accordance with Microsoft standards, unless further processing is required in individual cases to fulfill legal retention obligations/periods. SEW-EURODRIVE points out that even after the deletion of an individual account, the contents and documents of the chats as well as the contributions in the team rooms and channels will continue to be available to the existing users with whom the departing person has exchanged via the platform in their individual storage.

If the users have consented to the creation and storage of a recording, the data will be deleted within one month after withdrawal, unless SEW-EURODRIVE is legally obligated to further processing or the rights of third parties prevent the deletion of the entire recording, e.g. the rights of the other participants.

In all other respects, reference is made to the data protection information of MS Teams: Microsoft Teams – Privacy - Microsoft Teams | Microsoft Learn

IX. Your rights as the data subject

As a data subject, you have various rights. You can find general contact details and the contact details of our data protection officer at the start of this website. The relevant chapters in the text of this data protection information describe the solution most suited to you for exercising your rights.

Every data subject is entitled to the following rights:

• Right to receive information concerning the management of personal information (Article4(1) of the Personal Information Protection Act);
• Right to choose and decide whether he/she consents to the management of his/her personal information, the scope of consent, and related matters(Article4(2) of the Personal Information Protection Act);
• Right to verify whether personal information is managed and to request an inspection of personal information (including issuance of a certified copy; hereinafter the same shall apply) (Article4(3) of the Personal Information Protection Act);
• Right to request the suspension, correction, deletion and destruction of personal information(Article4(4) of the Personal Information Protection Act);
• Right to receive relief from damage caused by the management of personal information according to prompt and fair procedures(Article4(5) of the Personal Information Protection Act);

You can object to the processing of personal data for promotional purposes – including the analysis of customer data – or the dissemination to third-parties for promotional purposes at any time without providing a reason.

If the data is processed with your consent, you may revoke this consent at any time with immediate future effect. Revoking your consent does not affect the legality of the data processing that occurred with your consent until the time of revocation.

You can exercise the right to view, correct, delete, and suspend personal information through written, e -mail, and fax at any time in accordance with Article 41 (1) of the Enforcement Decree of the Personal Information Protection Act. I will take action without delay. However, the request for viewing and processing of personal information may be restricted in accordance with Article 35 (4) and Article 37 (2) of the Personal Information Protection Act.

You may be able to exercise your rights through your legal representative or a delegated person. In this case, you must submit a power of attorney in accordance with the "Notice on Personal Information Processing (No. 2020-7)”.

X. Consignment of third party of personal information and processing personal information processing

When we receive your personal information, we process only within the scope of the notice, and provide personal information to third parties only if it falls under Article 17 and 18 of the Personal Information Protection Act, including your consent and special regulations. And other than that, the personal information of the information subject is not provided to third parties.

In order to provide a smooth service, the company obtains the consent of the information subject and provides only the minimum range of necessary.

XI. Overseas transfer of personal information

The company commissions any work on website management, such as homepage and customer DB management, to SEW-EURODRIVE GMBH & CO KG, which is an overseas subsidiary.

1. Consignment company: SEW-EURODRIVE GMBH & CO KG

2. Location of the trust company: Ernst-blackle-str. 42, 76646 Bruchsal, Germany

3. Consignment date and method: Transmission of remote land using dedicated network

4. Contact information of the Information Management Officer: TEL. 07251 75-0, FAX 07251 75-1970, e-Mail SEW-WEBMASTER@sew-Eurodrive.de

5. Personal information item entrusted: Company name (required), company address (required), user name (required), company email address (required), company phone number (required), company fax number (optional), mobile phone number (optional)

6. Consignment work contents: website management such as homepage and customer DB management

7. Retention and use of personal information: until the purpose of processing personal information

XII. Destruction of personal information

We destroy the personal information without delay when personal information is unnecessary, such as the period of personal information retention period and the achievement of processing.

If you need to continue to preserve your personal information in accordance with other laws, even though the period of personal information retention that has been agreed by you has elapsed or the purpose of processing has been achieved, transfer the personal information to a separate database (DB) or Preserved.

The procedures and methods of destroying personal information are as follows

1. Destruction procedure: We select personal information that has caused the reason for destruction and destroy personal information with the approval of the person in charge of personal information.

2. How to destroy: We destroy the personal information recorded and stored in the form of an electronic file so that the records cannot be played, and the personal information recorded and stored in the paper document is grinded or incinerated by a grinder.

XIII. Measures to secure safety of personal information

We are taking the following measures to ensure the safety of personal information.

1. Administrative measures: Establishment and implementation of internal management plans, operation of dedicated organizations, regular employee training.

2. Technical measures: Access rights such as personal information processing system, access control system installation, encryption of personal information, security program installation and renewal.

3. Physical measures: access control of computer rooms, data storage rooms, etc..

XIV. Personal information protection officer

We are responsible for the process of processing personal information, and designate the person in charge of personal information protection as follows for complaints and damages of information subjects related to personal information processing.

• Data Protection Officer: Youngjin Kim (Manager of Information Technology)
• Data Protection Staff: Jangwoon Youn (Information Technology)
• Company: SEW-EURODRIVE Korea Co.,Ltd
• Email: online-support@sew-eurodrive.kr
• Phone: 1551-8051

You can contact the personal information protection officer and the department in charge of all personal information protection inquiries, complaints, and damages. We will answer and process the inquiries of the information subject without delay.

XV. How to remedy infringement of rights

You can apply for disputes or counseling to the Personal Information Dispute Coordination Committee and the Korea Internet & Security Agency's Personal Information Infringement Report Center to receive relief from personal information infringement. In addition, please contact the agency below for reporting and consultation of other personal information infringement.

1. Personal Information Dispute Mediation Committee: (without national number) 1833-6972 (www.kopico.go.kr)

2. Personal Information Infringement Reporting Center: (without a national number) 118 (Privacy.kisa.or.kr)

3. Supreme Prosecutors' Office: (without national number) 1301 (www.spo.go.kr)

4. Police Agency: (without national number) 182 (ECRM.cyber.go.kr)

Personal Information Protection Act Article 35 (view of personal information), Article 36 (correction and deletion of personal information), and Article 37 (suspension of personal information, etc.) Alternatively, those who have been infringed of rights or interests due to omission may claim administrative trials as prescribed by the Administrative Tribunal.

▸ Central Administrative Tribunal Committee: (without a national number) 110 (www.simpan.go.kr)

Last modification: 10/2023