NEWCOLD PRIVACY STATEMENT NewCold Coöperatief UA and its affiliates (together: “NewCold” or “we”) have created this Privacy Statement to demonstrate our commitment to the individual’s right to data protection and privacy. This Privacy Statement applies to the processing of Personal Data in the context of our global business operations. This includes the processing of Personal Data through our websites: www.newcold.com, www.davantigroup.com and www.coraxsaaswms.com (each individually: “Website”). This Privacy Statement contains information on the categories of Personal Data we collect, why we collect it, what we do with it, and how we protect it, as well as your individual rights. NewCold is the so-called controller in the sense of the General Data Protection Regulation (‘GDPR’). This Privacy Statement explains in general terms how we seek to comply with data protection laws and regulations, including but not limited to the European General Data Protection Regulation (“GDPR”) and national laws implementing the GDPR, as well as state security breach laws and data protection laws in the United States, and applicable data protection legislation in other jurisdictions, such as Australia. If, after reading our Privacy Statement, or in a more general sense, you have any questions or wish to contact us, you can do so via the contact details at the end of this Privacy Statement. COLLECTION AND PROCESSING OF YOUR PERSONAL DATA We process Personal Data of (contact persons at) our customers, suppliers and other relations, of students and job applicants, and of visitors of our Websites. We obtain your Personal Data i) from you, ii) from third parties (such as customers, suppliers and chain partners), or iii) from public sources, for example, the Trade Register of the Chamber of Commerce. Personal Data that we may process are: basic information such as your first and last name, title, gender; contact details such as your e-mail address, postal address, telephone number, the company you work for and your position; financial information, such as IBAN/bank account number; IP address and statistical data about your use of our Websites; Personal Data you provide us with when applying for a job with us, such as an application letter, CV, date of birth, education and career information; any other Personal Data we obtain from or about you that we use for the purposes mentioned below. We do not always process all of the above data, this depends on the type of relationship, the service in question and (if applicable) the consent you have given us. PURPOSES FOR THE PROCESSING OF PERSONAL DATA We process your Personal Data for one or more of the following purposes (depending on our relationship with you): Marketing and acquisition purposes We use your Personal Data to send out newsletters, invitations to our events and other marketing communications that may be relevant to you, as well as in the context of a (registration for) one of our marketing events. When you have attended one of our events, we may also contact you for feedback. Executing an agreement We process your Personal Data insofar as necessary within the context of the products or services provided by us, including the exchange of Personal Data for quotations, the execution and completion (including invoicing) of an order, service request or assignment. Compliance with legal obligations We process your Personal Data insofar as necessary to comply with legal obligations. For example, the collection and storage of data and the provision of information to the tax authorities and supervisory authorities. Job applications and recruitment The data you share with us if you apply with us (via email/mail, the job application form on our website or via social media) or that we receive via recruiters, is processed by us to contact you for the purposes of our job application procedures and to deal with your job application. We may also process your Personal Data in the context of (a registration for) an internship at one of our branches. Access control and security For safety purposes (evacuation in case of calamities) we keep a list of visitors to our business premise(s). These lists are destroyed at the end of the day in question. We also use camera surveillance to protect the possessions and safety of our employees and visitors. For more information regarding camera surveillance we refer to our CCTV Policy, which is available at the front desk of each site and which apply for all NewCold sites. [ Use and improvement of our website We process statistical data about your visit and use of our website. We do this to analyse and improve the content, layout and use of our website. Other processing We may also process your data to carry out customer satisfaction surveys, or to handle any questions or complaints. DATA PROCESSING PRINCIPLES We process your Personal Data on the basis of one or multiple of the following legal grounds: The performance of an agreement with you or to take measures before the conclusion of an agreement; A legitimate interest; Your consent; Our compliance with legal obligations. SHARING YOUR PERSONAL DATA In some cases, we may share your Personal Data with third parties. We will only do this when we consider this necessary. We only share your data with trustworthy parties and ensure that a transfer of your Personal Data is subject to appropriate safeguards. We may share your personal data with: Government institutions such as the tax authorities and supervisory authorities. NewCold Affiliates, customers, suppliers and subcontractors; Chain partners and other service providers such as banks, insurers, bailiffs, accountants, tax advisers and other advisers; External suppliers such as IT service providers, hosting and cloud service providers or other suppliers to which we outsource support services. If the third party with which your Personal Data is shared is designated a processor in the sense of the GDPR, we will also conclude a data processing agreement with this third party. STORAGE OF PERSONAL DATA We will retain your Personal Data in accordance with applicable data protection legislation and specific mandatory retention periods. The data will not be retained for longer than strictly necessary to achieve the purpose for which the data has been collected and to comply with legal obligations. YOUR PRIVACY RIGHTS Under the GDPR, you have the following rights: You have the right to request us to access, rectify, erase, restrict and transfer your personal data. You also have the right to object to the processing of your personal data. If you wish to exercise your rights, please submit a request per e-mail. Our contact details can be found at the end of this Privacy Statement. Please note that individuals’ rights under the GDPR are subject to certain restrictions and may not always be granted. A request may be denied in part or in full following these restrictions, such as legal obligations, the rights of third parties and the legitimate interests of NewCold. If we are unable to grant a particular request, we will inform you of this, with statement of reasons. Insofar as the processing of your Personal Data is based on consent, you have the right to revoke this consent at any time. Any withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. Within the EU, EU citizens have the right to lodge a complaint with a supervisory data protection authority. A list of all EU supervisory authorities is available on the European Data Protection Board website: https://edpb.europa.eu/about-edpb/board/members_en. In the Netherlands this is the ‘Autoriteit Persoonsgegevens’ (‘AP’). More information can be found on the website of the AP (https://autoriteitpersoonsgegevens.nl/). We would appreciate it if you would contact us first so that we try to reach an amicable solution. DATA SECURITY We take appropriate security measures to limit abuse of and unauthorized access to Personal Data. For example, we ensure that only authorised persons have access to the data, that access to and transfer of the data is protected by appropriate safeguards such as secured connections and firewalls and that our security measures are evaluated and updated regularly. TRANSFER OF PERSONAL DATA OUTSIDE THE EEA All information you provide to us via our Websites will be stored on servers in the European Economic Area (EEA). If necessary, we may share information with our Affiliated Companies in and outside the EEA. If we share and or store personal information outside the EEA, appropriate safeguards will be put in place. COOKIES We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services. You consent to our cookies if you continue to use our website. Cookies are small text files that can be used by websites to make a user's experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages. You can at any time change or withdraw your consent from the Cookie Declaration on our website. Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy. Your consent applies to the following domains: www.newcold.com Your current state: Deny. Change your consent Cookie declaration last updated on 11/17/21 by Cookiebot: Necessary (1) Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies. NAME PROVIDER PURPOSE EXPIRY TYPE CookieConsent Cookiebot Stores the user's cookie consent state for the current domain 1 year HTTP Cookie Statistics (4) Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously. NAME PROVIDER PURPOSE EXPIRY TYPE _ga newcold.com Registers a unique ID that is used to generate statistical data on how the visitor uses the website. 2 years HTTP Cookie _ga_# newcold.com Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit. 2 years HTTP Cookie _gat newcold.com Used by Google Analytics to throttle request rate 1 day HTTP Cookie _gid newcold.com Registers a unique ID that is used to generate statistical data on how the visitor uses the website. 1 day HTTP Cookie Marketing (6) Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers. NAME PROVIDER PURPOSE EXPIRY TYPE _gcl_au Google Tag Manager Used by Google AdSense for experimenting with advertisement efficiency across websites using their services. 3 months HTTP Cookie IDE Google Used by Google DoubleClick to register and report the website user's actions after viewing or clicking one of the advertiser's ads with the purpose of measuring the efficacy of an ad and to present targeted ads to the user. 1 year HTTP Cookie pagead/1p-user-list/# Google Tracks if the user has shown interest in specific products or events across multiple websites and detects how the user navigates between sites. This is used for measurement of advertisement efforts and facilitates payment of referral-fees between websites. Session Pixel Tracker pagead/landing [x2] Google Collects data on visitor behaviour from multiple websites, in order to present more relevant advertisement - This also allows the website to limit the number of times that they are shown the same advertisement. Session Pixel Tracker test_cookie Google Used to check if the user's browser supports cookies. 1 day HTTP Cookie Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. You can also individualise cookie settings on our Websites through the pop-up notice. If you choose to decline certain cookies, it could be that you may not be able to access all or parts of our Websites. CHILDREN We do not knowingly collect personally identifiable information from children. If you become aware that a child has provided us with Personal Data, please contact us. CHANGES TO THIS PRIVACY STATEMENT We may change this Privacy Statement from time to time. Changes will be published on our Websites. It is therefore advisable to consult our Websites regularly to keep up to date with any changes. CONTACT INFORMATION NewCold welcomes your comments regarding this Privacy Statement. For any questions or requests regarding the processing of your Personal Data, please contact us through the contact details below. privacy@newcold.com NewCold Coöperatief UA P.O. Box 1893 4801 BW Breda The Netherlands This Privacy Statement was last updated and posted on May 6th, 2021 Responsible Disclosure Privacy Statement NewCold | Our Company News Newsletter © Copyright - NewCold 2021