Trafo Explorer

1. Introduction

This Virtual Event Privacy Notice ("Notice") applies to the Hitachi Energy Group of companies, which means Hitachi Energy Ltd and its subsidiary companies. The Hitachi Energy company that is your employer (referred to as "Hitachi Energy" or "we") is responsible for the processing of your personal data and controls how it is used, in accordance with this Notice.

At Hitachi Energy respecting your data protection rights is a top priority. This Notice explains how we use personal data about you and what rights you have regarding your personal data.

2. Who is responsible for the processing of your personal data?

Hitachi Energy Ltd and its subsidiary companies are responsible for your personal data. For applicable privacy and data protection laws, the primary controller of your data is the Hitachi Energy subsidiary company which is your current (or former) employer. Other subsidiary companies of Hitachi Energy may also receive and process your personal data, either in the capacity of controller or processor, and this Notice applies equally to them.

3. The types of information we collect and use?

We collect and use personal data that concerns you in connection with the virtual event. We may collect the following categories of personal data:

• The contact information you share with us to register and communicate in the course of the event such as first and last name (including what name you indicate to appear on your virtual account ), business email address, business mobile phone number, your assistant name and email address, IP address, device identifier data (if applicable, for example mobile device ID/PC ID, tracking analytics data, cookies).

• Additional information you provide to us for invoicing, such as: business address, nationality, credit card number.

• Media assets such as photographs, videos and recordings in the course of the event. Such assets will never focus on you directly, but rather to showcase impressions of the event itself.

4. Why we use your personal data?

We may use your personal data as described above for the following purposes:

• register your attendance to virtual events and forums;

• provide you with information and services associated with the virtual event;

• provide a personal virtual event experience;

• facilitate the virtual event and provide you with an acceptable service;

• conduct and facilitate event satisfaction surveys;

• create media assets (photographs, videos and recordings) to showcase event impressions and store those assets in our brand data base;

• produce content for articles and publications about the virtual event; and

• publish photographs taken at the virtual event on Hitachi Energy channels, third party channels and social media channels.

We collect only the personal data from you that we need for the purposes described above. For statistical purposes, improvement of our services and testing of our IT systems we use as much as reasonably possible anonymized data. This means that these data can no longer (in)directly identify you or single you out as an individual.

5. The legal basis we rely on

We use your personal data for the purposes described in this notice based on one of the following legal bases, as applicable:

• We will rely on our legitimate interests to process your personal data within the scope of the employment or business relationship we have with you. Our legitimate interests to collect and use the personal data for this purpose are event management and interaction (e.g. registration, , etc.).

You may obtain a copy of our assessment of why we may process your personal data for these interests by submitting a request at www.hitachienergy.com/privacy.

6. Parties we share your personal data with (in and outside the EU and EEA or outside the country where the Hitachi Energy company that controls your data is located)

We only share your personal data with other Hitachi Energy affiliates or third parties as necessary for the purposes described in the table below. Where we share your personal data with an affiliate or third party so that it is transferred to or becomes accessible from outside the European Union (“EU”) and the European Economic Area ("EEA") or outside the country where the Hitachi Energy company that controls your data is located, we always put adequate safeguards in place to protect your personal data. Examples of these safeguards are an adequacy decision of the European Commission (read more here), Standard Contractual Clauses (read more here). We have taken additional measures for the transfer of data from within to outside the EU, EEA and outside the country where the Hitachi Energy company that controls your data is located to protect your personal data. If you would like an overview of the safeguards which are in place, please submit a request at www.hitachienergy.com/privacy.

7. How long we keep your personal data

Based on mandatory legislation, Hitachi Energy must keep certain personal data for a minimum period of time. We only keep your personal data that we have collected in the course of the event registration for 2 years. .

At the same time, applicable data protection laws require that we do not keep personal data in an identifiable form for any longer than is necessary for the purpose for which the personal data is being processed. Through the setting of IT applications and policies we ensure that our keeping of your personal data is deleted when we no longer need it.

For more information regarding specific retention periods that apply to your personal data, please submit a request at www.hitachienergy.com/privacy.

8. Your data privacy rights

Depending on the jurisdiction in which you are located and in which your personal data is processed, you may have the following rights:

Please note that the rights described above are not absolute, and that your request cannot always be met entirely. For example, sometimes we cannot delete or restrict the processing of your personal data as we may have legal obligations or contractual obligations to keep certain such personal data.

You may request to enforce your data privacy rights at www.hitachienergy.com/privacy.

Contact and further information

If you want to access your personal data, make use of any of your other rights mentioned above or if you have any questions or concerns about how Hitachi Energy processes your personal data, please contact our Group Data Protection Officer at privacy@hitachienergy.com, or submit your complaint at www.hitachienergy.com/privacy.

Should you not be satisfied with our response or believe we are processing your personal data against the law, you may also have the right to file a complaint with the Data Privacy Authority in your country of residence or work, or seek a remedy through the courts where you believe an infringement of data privacy laws may have taken place.