Privacy

Data Controller within the meaning of the General Data Protection Regulation (GDPR):

Daimler Truck AG

Fasanenweg 10

70771 Leinfelden-Echterdingen

Germany

e-mail: contact[at]daimler-truck.com

HRB No.: 762884

Represented by the Board of Management:

Martin Daum (Chairman), Andreas Gorbach, Jochen Götz, Jürgen Hartwig, John O`Leary, Karin Rådström, Hartmut Schick, Stephan Unger

Data Protection Officer:

Corporate Data Protection Officer

Daimler Truck AG,

HPC DTF2B,

70771 Leinfelden-Echterdingen,

Germany,

email: dataprivacy@daimlertruck.com

1. Privacy

We appreciate you visiting our website and your interest in the products we offer. Protecting your personal data is very important to us. In this privacy statement, we explain how we collect your personal information, what we do with it, for what purposes and on what legal foundation we do so, and what rights you have on that basis. We also refer you to Daimler's Data Protection Policy:

Daimler Data Protection Policy

Duty to Provide Information under the General Data Protection Regulation

Our privacy statement for the use of our websites and the Daimler AG Data Protection Policy do not apply to your activities on the websites of social networks or other providers that can be accessed using the links on our websites. Please read the data protection provisions on the websites of those providers.

2. Collecting and Processing Your Personal Information

a. Whenever you visit our websites, we store certain information about the browser and operating system you are using; the date and time of your visit; the status of the interaction (e.g. whether you were able to access the website or received an error message); the usage of features on the website; any search phrases you entered; how often you visit individual websites; the names of the files you access; the amount of data transferred; the Web page from which you accessed our website; and the Web page you visited after visiting our website, whether by clicking links on our websites or entering a domain directly into the input field of the same tab (or window) of the browser in which you have our websites open. In addition, we store your IP address and the name of your Internet service provider for seven days. This is for security reasons; in particular, to prevent and detect attacks on our websites or attempts at fraud.

b. We will store other personal data only if you share that information – for instance, by filling out a registration form, contact form, participating in a chat session, survey, contest entry, or to execute a contract. In such cases, we will store only the data we are allowed to keep based on consent given by you or in accordance with applicable legal regulations (see section 7).

c. You are neither legally nor contractually obligated to share your personal information. However, certain features of our websites may depend on the sharing of personal information. If you do not provide your personal information in such cases, you may not be able to use those features or they may only be available with limited functionality.

3. Purpose of Use

a. We use the personal information collected during your visit to any of our websites to make using them as convenient as possible for you and to protect our IT systems against attacks and other unlawful activities.

b. If you share additional personal data with us – for example as part of a registration, chat, contact form, survey, prize competition or to honor a contract – we will use these data for the designated purposes, for purposes of customer administration and – if required – for purposes of processing and billing business transactions, in each case to the extent necessary.

c. We and possibly selected third parties will use your data for other purposes (e.g. to show personalized content or for advertising on the basis of your user behavior) if you have given your prior consent to this under our consent management system. Further information and options can be found here.

d. We also use personal data if we are legally obligated to do so (e.g. storage to meet retention requirements under commercial or tax law, disclosure ordered by an official body or court, e.g. to a criminal justice agency).

4. Transfer of Personal Information to Third Parties, Social Plugins, Use of Service Providers

a. Our websites may also contain third-party offers. If you click on any such offers, we will transfer the amount of data required to the appropriate provider (e.g. the fact that you found the offer in question on our website and, if applicable, additional information that you have already provided for this purpose on our websites).

b. When we use so-called "social plug-ins" for social networks such as Facebook and Twitter on our websites, these are incorporated as follows:

When you visit our websites, social media plugins are deactivated. That means no information whatsoever is transferred to the operators of those networks. If you wish to use one of the networks, click on the appropriate plug-in in order to be connected directly to the server of that network.

If you have a user account with that network and are logged in at the moment you activate the plug-in, the network will be able to detect your visit to our websites and assign it to your user account. If you wish to prevent this, please log off from the network before activating the social plug-in. A social network will not be able to detect that you have visited other Daimler websites unless you have activated its social plug-in on those sites as well.

When you activate a social plug-in, the network transfers the content that is thus made available directly to your browser, which then incorporates it into our websites. In this situation, data transfers which are initiated and controlled by the respective social network may also take place. Your connection to a social network, the data transfers that take place between the network and your system, and your interactions on this platform are governed exclusively by the respective network's data protection provisions.

The social plug-in remains active until you deactivate it or delete your cookies (see section 5.d).

c. Whenever you click on the link to an offer or activate a social plug-in, your personal information may be transferred to providers in countries outside the European Economic Area that, from the standpoint of the European Union ("EU"), do not guarantee an "appropriate level of protection" for processing of personal information in accordance with EU standards. Please keep these circumstances in mind before you click on a link or activate a social plug-in, thereby causing your data to be transferred.

d. We also use qualified service providers for the operation, improvement and security of our websites (e.g. IT services, marketing agencies). We transfer personal data to these entities only insofar as necessary for the provision and use of the websites and their functionalities, for the pursuit of legitimate interests, to fulfill legal obligations or insofar as you have consented thereto (see section 7). Further details of the recipients can be found in our consent management system.

5. Cookies

a. A visit to our websites may involve the use of cookies. In technical terms, the cookies used are HTML cookies and similar software tools such as Web/DOM storage or local shared objects (Flash cookies), hereinafter collectively referred to as "cookies."

b. Cookies are small files stored on your desktop, laptop or mobile device while your visit a website. They enable us to recognize, for example, whether there has been a previous connection between your device and our websites, take into account your preferred language or other settings, offer you certain functionalities (e.g. online shop, vehicle configurator) or recognize your interests on the basis of previous use. Cookies can also contain personal information.

c. Whether any cookies – and which ones – are used during your visit to our websites depends on which areas and features of our websites you use and whether you consent to the use of cookies that are not technically required via our consent management system. Further information and options can be found here.

d. Furthermore, the use of cookies depends on the settings in the Web browser you use (e.g. Microsoft Edge, Google Chrome, Apple Safari, Mozilla Firefox). Most Web browsers are set to accept certain types of cookies automatically by default, but you can usually change that setting. You can delete stored cookies at any time. Web/DOM storage and local shared objects can be deleted separately. The manufacturer's instructions will tell you how this is done in the browser or device you are using.

e. Your consent or refusal to receive cookies and your options for deleting them are tied to both the device and the Web browser you are using. If you use more than one device or Web browser, you can make different decisions and use different settings for each one.

f. If you opt out of the use of cookies, you may not be able to use all the features of our websites, or individual features may only be available with limited functionality.

6. Security

We take technical and organizational security measures in order to protect your information managed by us from being tampered with, lost, destroyed or accessed by unauthorized individuals. We are continuously improving our security measures in line with technological advancements.

7. Legal Foundations for Processing

a. If you have provided us with a consent form for the processing of your personal data, this consent serves as the legal basis for the processing (Article 6(1)(a) GDPR).

b. The legal basis for processing personal data for the purpose of initiating or concluding a legal agreement with you is Article 6 (1)(b) GDPR.

c. In so far as we require your personal data to fulfill our legal obligations (e.g. data storage), we are permitted to do this in accordance with Article 6 (1)(c) GDPR.

d. Furthermore, we process personal data in order to assert our legitimate interests as well as those of a third party in accordance with Article 6 (1)(f) GDPR. Examples of such legitimate interests include maintaining the functionality of our IT systems as well as the (direct) marketing of our own and third-party products and services (if not carried out with your consent), and the legally required documentation of business contacts. As part of the consideration of interests required in each case, we take into account various aspects – in particular, the type of personal information, the purpose of processing, the circumstances of processing, and your interest in the confidentiality of your personal information.

8. Deleting Your Personal Information

Your IP address and the name of your Internet service provider, which we store for security reasons, are deleted after seven days. Moreover, we delete your personal information as soon as the purpose for which it was collected and processed has been fulfilled. Beyond this time period, data is only stored to the extent required by the legislation, regulations or other legal provisions to which we are subject in the EU or by legal provisions in third-party countries if these have an appropriate level of data protection. If it is not possible to delete data in individual cases, the relevant personal data is flagged to restrict its further processing.

9. Rights of Data Subjects

a. As a person affected by data processing, you have the right to information (Article 15 GDPR), Correction (Article 16 GDPR), Erasure (Article 17 GDPR), Restriction of Processing (Article 18 GDPR), and Data Portability (Article 20 GDPR).

b. If you have consented to the processing of your personal information by us, you have the right to revoke your consent at any time. Your revocation does not affect the legality of the processing of your personal information that took place before your consent was revoked. It also has no effect on the continued processing of the information on another legal basis, such as to fulfill legal obligations (see section titled "Legal Foundation of Processing").

c. Right to object

You have the right to object to the processing of personal data concerning you at any time as a result of an extraordinary situation on the basis of Article 6 (1)(e) GDPR (Data Processing in the Public Interest) or Article 6 (1)(f) GDPR (Data Processing on the Basis of a Balance of Interests). If you file an objection, we will continue to process your personal data only if we can document mandatory, legitimate reasons that outweigh your interests, rights and freedoms, or if processing is for the assertion, exercise or defense of legal claims. If we process your personal data to engage in direct advertising for the purpose of protecting our legitimate interests on the basis of a consideration of interests, you also have the right to file an objection against such advertising at any time without stating any reasons.

d. If possible, please direct your claims or declarations to the following contact address: dataprivacy[at]daimlertruck.com.

e. If you feel that the processing of your personal data is in breach of legal requirements, you have the right to file a complaint with the responsible supervisory authority (Art. 77 GDPR).

10. Newsletters

If you subscribe to a newsletter offered on our website, the information provided during registration for the newsletter will be used solely for the purpose of mailing the newsletter, unless you consent to its use for additional purposes. You can cancel the subscription at any time by using the 'unsubscribe' option provided in the newsletter.

11. Central Daimler Access Service

The central Daimler access service enables you to create a single user account to log in to all websites and applications of the Daimler group and its brands that are offered through this service. The applicable terms of use contain specific data protection provisions. These terms of use can be found on the registration pages of affiliated websites and applications.

12. Data Transfer to Recipients outside the European Economic Area

a. When using service providers (see section 4. d.) and passing on data to third parties with your consent (see section 3.c), personal data may be transferred to recipients in countries outside the European Union (EU), Iceland, Liechtenstein and Norway (= European Economic Area) and processed there, in particular the USA, India.

b. From the standpoint of the EU, the following countries do not provide an appropriate level of protection in accordance with EU standards for the processing of personal information ("Appropriateness Assessment"): Andorra, Argentina, Canada (restricted), Faroe Islands, Guernsey, Israel, Isle of Man, Japan, Jersey, New Zealand, Switzerland, Uruguay. In the case of recipients in other countries, we agree to use EU standard contractual clauses, binding corporate regulations, or other permissible mechanisms to provide an "adequate level of protection" in accordance with legal requirements. Information about this is freely available using the contact details shown in section 9.d. above.

Last revised: October 2021