Information Regarding Data Protection for Users of the

SupplyOn Service MobileApp DeliverMe ("DeliverMe")

Version 1.0, December 2021

Declaration of consent (privacy)

I herewith revocably declare my consent that within the framework of all transport orders in road traffic of SupplyOn for the customer specified above are deployed with GPS tracking systems from EuroLOG AG by usage the DeliverMe app.
I have been informed and revocably declare my consent that the following personal data shall be collected by means of the systems specified above:

• Location data
• Vehicle number plate:
• Mobile telephone number;
• Time of the departure of the transport from HUB to factory;
• Time of arrival of the transport;
• My respective current location using Geo data as a basis;
• Amount and duration of unplanned work stoppages;
• Real-time location / ETA calculation over the entire period of the processing;
• Geofencing.

1. Name and Contact Details of the Controller

As a user of this DeliverMe, you work for a business partner, e.g. a logistics service provider or supplier, ("Business Partner") of a customer ("Buyer"). A Business Partner is always associated with at least one Buyer at SupplyOn. The Buyer is responsible for the processing of your personal data, for which SupplyOn has been commissioned to work for in accordance with the instructions given by the Buyer pursuant to the requirements of applicable law, including the General Data Protection Regulation (GDPR).

2. Contact Details of the Controller

SupplyOn is a processor working under the instructions of Buyers, therefore, we will respond to any requests for information sent to dpo@supplyon.com by providing the contact details of the Buyer (including, if appointed, its data protection officer) responsible for the processing of the personal data in question. Alternatively, you may contact the Buyer directly at any time.

3. Purposes of Processing, Legal Basis & Personal Data in Scope

The personal data is used for contract fulfillment between Buyers and Business Partner in order to enable shipment tracking for specific customers to provide timely information on the status of shipment transportation and real-time transmission of data regarding the shipment's transportation, such as unplanned interruptions in transportation. The legal basis for the processing of personal data is the legitimate interest of the responsible Buyer in this context.

In context of this DeliverMe, the following personal data is processed in particular: International Mobile Equipment Identity (IMEI), telephone number, geographical position information, time of arrival, time of departure.

4. Recipients of Data and Involvement of Service Providers located outside the EU/EEA

Operation of the DeliverMe and the underlying IT infrastructure is carried out by companies of the SupplyOn Group (SupplyOn AG and EURO-LOG AG) within the scope of commissioned processing on behalf of the respective Buyer. The Buyer as data controller as well as the Business Partner does not have access to personal data, but may only view process-relevant information (position information, arrival time, departure time). Beyond that, there are no other recipients of the data. A transfer to countries outside EU/EEA does not take place.

5. Data Erasure

After 90 days the latest, the following data points will be deleted: International Mobile Equipment Identity (IMEI), telephone number, geographical position information. The residual data points do not constitute personal data anymore and are retained beyond the 90 days.

6. Consequences of Not Providing Personal Data

The provision of your personal data is necessary for the execution of the contract between the Buyer and the Business Partner. If you do not provide your personal data, the contract cannot be executed as agreed.

7. Existing Rights: Access, Rectification, Erasure, Restriction, Objection, Data Portability, Complaint to a Supervisory Authority

Regardless of which company is specifically responsible for the processing of your data, you are entitled to various rights as a data subject, which we would like to explain to you below.

You have the right to be informed by the controller about the personal data concerning you and to have incorrect data corrected or deleted, if one of the reasons stated in applicable law applies, e.g. if the data is no longer required for the purposes pursued. You have also the right to limit the processing if one of the conditions mentioned in applicable law applies and, if applicable, the right to data portability. If your data is processed for the fulfilment of official tasks or the protection of the public interest or to pursue legitimate interests, you have the right to object to the processing at any time for reasons arising from your particular situation. Your personal data will then no longer be processed unless there are verifiable compelling grounds for the processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend a legal claim.

Furthermore, you have the right to complain to a supervisory authority if you consider that the processing of your data is in breach of applicable data protection law. The competent supervisory authority for SupplyOn is the Bayerisches Landesamt führ Datenschutzaufsicht, Promenade 27 (Schloss), 91522 Ansbach, Germany.

To exercise your rights vis-à-vis the controller, reference is made to the section "Contact Details of the Controller" in this document.