Marmon Holdings, Inc. Privacy Policy Effective Date – June 9, 2021 Marmon Holdings, Inc. and its subsidiaries (collectively “Marmon,” “we,” “us,” “our”) respects your privacy and takes the responsibility of protecting the Personal Information that you provide to us via our website (the “Site”). This Privacy Policy is intended to outline our practices regarding the collection, use, disclosure, and protection of information received from users of the Site, including users in the European Economic Area (“EEA”) (collectively, “you” or “user”). For the purposes of compliance with the EU General Data Protection Regulation (“GDPR”), we are the “controller” of Personal Data (i.e., Personal Information) we receive from you. Within this Privacy Policy, users may be referred to as Data Subjects. A Data Subject means an identified or identifiable natural person in the EEA as set forth in the GDPR. We have undertaken the steps required to comply with the GDPR, where applicable, regarding the collection, use, and retention of Personal Information transferred from the EEA to the United States, respectively. Scope This Privacy Policy applies to the Site, which includes http://www.marmon.com/index.html, its subdomains, and all of the websites and internet properties owned or operated by us, regardless of the medium in which the Site is accessed by a user (e.g., via a web or mobile browser). Information We Collect We may collect several types of information from and about users of the Site, including: Personal Information: We may collect personally identifiable information (“Personal Information”) from you in a variety of ways including, but not limited to, when you use, navigate, and/or complete forms on the Site as well as in connection with other activities, services, features, or resources we make available. Personal Information may include, without limitation, first and last name, email address, username and password, and IP address. Usage Information: When you use and navigate the Site, we may collect additional information from you that may not, by itself, reasonably identify you as the source (“Usage Information”). Usage Information may include, without limitation, information regarding your computer, the type of internet browser you are using, the location from which you are visiting the Site, the type of computer operating system you are using to access the Site, the domain name of the website from which you linked to the Site, the internet service provider utilized, or the areas of the Site you visited and the actions you performed on the Site. We will take reasonable measures to ensure that the Usage Information we collect is not personally identifiable and may not later be easily used to identify you as otherwise required by applicable law. Children Under the Age of 13 The Site is not intended for children under 13 years of age. We do not market to and do not knowingly collect any Personal Information from or about a child under the age of 13 without the consent of the child’s parent or legal guardian. If we discover that we have inadvertently collected information from a child under 13 years of age, we will promptly take all reasonable measures to delete such information from our systems. How We Collect Information We may also collect Personal Information and Usage Information (collectively, “Your Information”): Directly From You: We may collect Personal Information from you when you voluntarily provide Personal Information to us by, for example, completing forms on the Site, when you email us, and in connection with other Marmon activities, services, features, or resources. Through Your Use of the Site: We may record Usage Information that your browser transmits when you visit the Site. We may also collect Usage Information about how you access and interact with the Site through the use of automated tracking technology, such as “cookies” and “web beacons.” A cookie is a small data file that is transferred to a web browser, which enables the Site to remember and customize your subsequent visits. Most internet browsers automatically accept cookies. You can instruct your browser to block the acceptance of cookies or to provide you with a warning prompt before you accept cookies from the Site. Please refer to your internet browser’s instructions to learn more about these functions. If you reject cookies, the functionality of the Site may be limited and you may not be able to participate in several of the Site’s features. Additionally, we may use web beacons, which are single-pixel, electronic images embedded in the Site that allow us to gather information about your browsing activities on the Site. From Third-Party Services: We may collect Personal Information about you from third parties whose privacy practices may differ from the practices described in this Privacy Policy. We do not endorse or make any representations or warranties concerning, and will not in any way be liable for, any informational content, products, services, software, or other materials available through third parties. Your use of third parties’ services and/or third-party websites is governed by and subject to the terms and conditions of those third parties and/or third-party websites. We encourage you to carefully review the privacy policies and statements of such third parties and/or third-party websites. How We Use Your Information We reserve the right to use Your Information for various general purposes to help enhance your experience. These purposes may include, but are not limited to: Customer Service and User Communications: We may use Your Information, including Personal Information, to help us respond to your inquiries, questions, requests and support needs more efficiently. Provision of and/or Support of Products and Services: We may use Your Information for the purposes of providing and supporting our products and services. Direct Marketing: We may use Your Information to send you promotional materials. You have the option to opt-out of receiving direct marketing. Business Optimization: We may use Your Information in managing our everyday business needs. We may also use your feedback to improve the Site and our services. How We Disclose Information We will not share, sell, or distribute Your Information with any third parties including any of our affiliated companies, officers, directors, shareholders, subsidiaries, agents, or representatives, except as provided in the following circumstances: Service Providers: Your Information may be shared with third-party service providers that assist us in providing customer support, communicating with customers, and promoting our services, as well as third-party service providers that provide other services to us relating to the Site and/or our services. Law Enforcement, Safety, and Legal Processes: Your Information may be shared with law enforcement or other government officials if it relates to a criminal investigation or alleged criminal activity. We may also share Your Information if required or permitted to do so by law, for fraud protection and credit risk reduction purposes, or in the good-faith belief that such action is necessary to protect and defend the rights, property, or users of the Site. We may further share Your Information to act under urgent circumstances to protect the safety of our employees or a member of the public, or to comply with a judicial proceeding, court order, or legal process. Sale or Acquisition of Assets: If we become involved in a transaction involving the sale of our assets, such as a merger or acquisition, or if we are transferred to another company, we may disclose and/or transfer Your Information as part of the transaction. If the surviving entity in that transaction is not us, the surviving company may use Your Information pursuant to their own privacy policies, and those policies may be different from our Privacy Policy. How to Withdraw Your Consent At any time, Data Subjects from the EEA may withdraw consent you have provided to us for using, disclosing, or otherwise processing your Personal Information. You may withdraw your consent by communicating your request at the Contact Information provided below. Please note that your withdrawal of consent to process certain Personal Information about you (1) may limit our ability to deliver services to you and (2) does not affect the lawfulness of our processing activities based on your consent before its withdrawal. Note that even after withdrawing consent, Marmon may use, disclose, or otherwise process your Personal Information if required by law to do so. Legal Rights EEA Data Subject Rights: Under certain circumstances, Data Subjects from the EEA may have the following rights under the GDPR: To access the Personal Information we maintain about you To be provided with information about how we process your Personal Information To correct your Personal Information To have your Personal Information erased To object to or restrict how we process your Personal Information To request your Personal Information to be transferred to a third-party To exercise the above rights, please contact us at the information provided below. We will consider and process your request within a reasonable period of time. Please be aware that under certain circumstances, the GDPR may limit your exercise of these rights. California Resident Rights: California law provides that California residents have a right to request businesses to tell them how their Personal Information has been shared, if at all, with third parties for the third parties’ direct marketing purposes. To make such a request, please contact us at the information provided below. Data Security The Site uses commercially reasonable security measures to protect Your Information. However, no data transmitted over or accessible through the internet can be guaranteed to be 100% secure. As a result, while we attempt to protect Your Information, we cannot ensure or warrant that Your Information will be completely secure from misappropriation by hackers or from other nefarious or criminal activities, or in the event of a failure of computer hardware, software, or a telecommunications network. Choice To the extent permitted under the GDPR or the Standard Contractual Clauses, Marmon reserves the right to process Personal Data in a manner consistent with the purposes for which the information was collected and without the Data Subject’s knowledge. When required by the GDPR or the Standard Contractual Clauses, Marmon offers Data Subjects the opportunity to opt out of disclosures of Personal Data to a third party or the use of Personal Data for a purpose that is different from the purposes for which it was originally collected or subsequently authorized by the Data Subjects. Marmon will comply with the GDPR and the Standard Contractual Clauses with respect to disclosures of Sensitive Personal Data, including, when applicable, obtaining the explicit consent (i.e., opt-in consent) of a Data Subject prior to disclosing Sensitive Personal Data to a third party or using Sensitive Personal Data for purposes other than those for which it was originally collected or subsequently authorized by the individual. Accountability for Onward Transfer Marmon is potentially accountable and liable in cases of onward transfers of Personal Data to third parties, such as when third parties acting as agents on our behalf process Personal Data in a manner inconsistent with the GDPR and/or the Standard Contractual Clauses. Marmon will ensure that any third party to which we disclose Personal Data provides the same level of privacy protection as is required by the GDPR and the Standard Contractual Clauses and agrees in writing to provide an adequate level of privacy protection. Marmon may transfer Personal Data to third party agents, or service providers, who perform functions on our behalf. We enter into written agreements with those third party agents and service providers requiring them to provide the same level of protection required by the GDPR and the Standard Contractual Clauses and limit their use of Personal Data to the specified services provided on our behalf. Under some circumstances, Marmon may be required to disclose Personal Data when necessary to respond to lawful requests by public authorities, including to meet national security or law enforcement requirements. Data Security and Integrity Marmon applies administrative, technical, and physical safeguards designed to provide Personal Information in our possession with reasonable protections from loss, misuse, unauthorized access, disclosure, alteration, or destruction. However, we cannot guarantee the security of Personal Information accessible on or transmitted via the internet. Marmon processes Personal Information in ways compatible with the purpose for which Personal Information was collected, or as otherwise authorized by an individual. To the extent necessary for such purposes, Marmon takes reasonable steps to make sure that Personal Information is accurate, complete, current, and otherwise reliable with respect to its intended use. Access Data Subjects have the right to obtain Marmon’s confirmation of whether we maintain Personal Data relating to you. Further, Marmon will provide you access to Personal Data we maintain about you upon your request and within a reasonable time period. If you become aware that Personal Data we maintain about you is inaccurate, or if you would like to update, delete, or review your Personal Data, you may contact Marmon using the contact information provided below. Marmon may also limit or deny access to Personal Data where providing such access would be unreasonably burdensome or expensive in the circumstances, or as otherwise permitted by the GDPR and/or the Standard Contractual Clauses. If Marmon determines that your access should be restricted in a particular instance, we will provide you with an explanation of our determination and respond to any inquiries you may have. In some circumstances, Marmon may charge a reasonable fee, where warranted, for access to Personal Data. Recourse, Enforcement, and Liability Marmon commits to resolve complaints about our collection or use of individual Personal Information. Individuals residing in the EEA with inquiries or complaints regarding our privacy practices or this policy should contact Dan Hanrahan, Chief Compliance Officer of Marmon Holdings, Inc., at (312) 845-5312 or daniel.hanrahan@marmon.com, or at the Contact Information provided below. Modifications This Privacy Policy was last modified at the date first printed above. Please note that we may update this Privacy Policy from time-to-time in our sole discretion. We encourage you to frequently check this Privacy Policy for any changes to stay informed about how we are helping to protect Your Information. We will not lessen your rights under this Privacy Policy without your explicit consent. You acknowledge and agree that it is your responsibility to review this Privacy Policy periodically and become aware of modifications. External Links This Site may contain links to other websites. We do not endorse or make any representations or warranties concerning, and will not in any way be liable for, any informational content, products, services, software, or other materials available on an external website, even if one or more pages of the external website are framed within a page of this Site. Please be aware that we are not responsible for the privacy practices or policies of such other websites. Accessing and Updating Information If you ever wish to access Your Information or to have Your Information deleted, updated, changed, or modified, you may do so by contacting us at the information provided below. To cancel your account and have your information returned to you, please also contact us at the information provided below. We will make commercially reasonable efforts to handle requests to update or modify Your Information within thirty (30) days. If you would like to opt-out of receiving direct marketing communications from us, you may do so by following any instructions included in the communication or by contacting us at the information provided below How to File a Complaint You may file a complaint regarding this Privacy Policy or our privacy practices by communicating with us using the Contact Information provided below. Additionally, Data Subjects from the EEA may file a complaint with EU data protection authorities (“DPAs”). A list of DPAs from the European Commission may be found here: http://ec.europa.eu/newsroom/article29/document.cfm?action=display&doc_id=50061. Contact Information If you would like to contact us with questions or comments concerning the accuracy and/or privacy of Your Information, or if you believe that we have not adhered to this Privacy Policy, please notify us by contacting the following: Marmon Holdings, Inc. 181 West Madison Street, 26th Floor Chicago, Illinois 60602 (312) 372-9500 commdept@marmon.com We welcome your questions and comments. Marmon Holdings, Inc., a Berkshire Hathaway company, comprises 11 groups and more than 100 autonomous businesses with total annual revenue of $10 billion. Marmon’s 20,000-plus team members serve diverse industries and markets worldwide. How We Work Business Groups The Marmon Career Path The Marmon Method Company About Us The Marmon Team Contact 2021 © Marmon Holdings, Inc. All Rights Reserved Privacy Policy Applicant Privacy Notice UK Tax Strategy Sitemap Cookie Consent LinkedIn