GKN Powder Metallurgy GmbH

1) Preamble Welcome to our website! We take the protection of your data and your privacy very seriously. The purpose of this document is to provide you with information about what types of data we process and when, for what purpose and on what legal basis we process data. In this document, we would like to explain to you how our services work and how we protect your personal data. In accordance with Article 4 (1) of the GDPR, personal data means all information relating to an identified or identifiable individual. An identifiable natural person is someone who can be identified, either directly or indirectly. For further information, please refer to Article 4 (1) of the GDPR. This privacy policy is accessible electronically via https://www.gknpm.com/en/Utilities/privacypolicy/ and may be downloaded, saved and printed any time. If we use our legitimate interest or the legitimate interest of a third party as the legal basis for processing your personal data (Article 6 (1) point f) of the GDPR), you have the right to object to this processing pursuant to Article 21 of the GDPR: Under Article 21 of the GDPR, you have the right to object to the processing of your personal data at any time. We shall then no longer process your personal data for purposes of direct marketing or any related profiling. Likewise, we shall then no longer process your personal data for any other purpose, unless we can demonstrate compelling legitimate reasons for processing that override your interests, rights and freedoms, or unless the processing serves to enforce, exercise or defend legal claims (see Article 21 (1) of the GDPR, the so-called ‘Limited right of objection’). In this case, you have to set out the reasons for the objection that relate to your particular situation. Where personal data is processed for scientific or historical research purposes or statistical purposes pursuant to Article 89 (1) of the GDPR, you have the right to object to the processing of your personal data for reasons relating to your particular situation, unless processing is required to carry out a task for reasons of public interest (see Article 21 (6) of the GDPR). In the individual sections, we will point out the right to object separately to you (e.g. by saying: "You have the right to object") if this right applies. There you will also find further information on how to exercise your right to object. In order to keep the following privacy policy transparent, we refer to information and privacy notices on external websites (see also the section "Social Networks & External Links" in this privacy policy) in various places via links. We endeavour to keep the links listed in this privacy statement up to date. Nevertheless, due to the constant updating of the websites, it cannot be excluded that links do not function correctly. Should you notice such a link, we would be pleased if you inform us so that we can include the latest link. © GKN Sinter Metals Engineering, 1907-I 2 2) Controller The controller for the processing of personal data within the meaning of Article 4 (7) of the GDPR is: GKN Sinter Metals Engineering GmbH Krebsöge 10 42477 Radevormwald Germany3) Contact details of the data protection officer If you have any questions regarding the processing of your personal data or your rights with respect to data protection, please contact: Datenschutz.pm@nn.gknpm.com 4) Log files Every time you visit our website, we automatically collect data and information from your device's system and store it in so-called ‘server log files’. This is data that relates to an identified or identifiable natural person (in this case: website visitors). The data is automatically transmitted by your browser when you visit our website. This following data is collected: • your IP address • browser type • domain names • internet service provider (ISP) • files viewed on our site (e.g., HTML pages, graphics, etc.) • operating system • clickstream data • access times and referring website addresses. We process this data to ensure that our website is accessible from your device, and that it displays correctly on your device or in your browser. In addition, the data is used to optimise the website and to ensure the security of our systems. An evaluation of this data for the purpose of marketing does not take place. The legal basis for this processing is Article 6 (1) point (f) of the GDPR. We have a legitimate interest in presenting you with a website that is optimised for your browser, and to facilitate communication between our server and your device. The latter, in particular, requires your IP address to be processed. The information processed shall be stored only for as long as is necessary for the purpose for which it was processed. The recipient of the data is our server host and our customer relationship management provider ("HubSpot"), who works for us within the framework of a data processing agreement. Further information on "HubSpot" can be found in section 8 of this privacy policy. Right of objection You have the right to object. You can send or inform us of your objection at any time (e.g. by e-mail to contact@gknpm.com). © GKN Sinter Metals Engineering, 1907-I 3 The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use all the features of the website fully. 5) Cookies Our websites use cookies. Cookies are text files that are saved on your device to make the use of this website more convenient, or to recognize a user’s device and save settings, etc. Input into and settings for a website can be saved in cookies so that you don’t have to re-enter anything or change the settings every time your revisit a website. Cookies contain a ‘cookieID’, which is used to assign a device on which the cookie is saved. We specifically use the following cookies: • Cookies that contain a randomly generated, concrete identification number that makes you or your device identifiable during your visit to our website (ASP.NET_SessionId - Preserves the visitor's session state across page requests). These cookies are automatically deleted at the end of your visit. • Cookies which contain a randomly generated, concrete identification number which makes you or your device identifiable on our website: _ga, gat, gid These cookies are used to collect information about how visitors use our website. We use the information to compile reports and to help us improve the website. The cookies collect information in an anonymous form, including the number of visitors to the website, where visitors have come to the website from and the pages they visited. Google stores the information collected by the cookie on servers in the United States. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. These cookies are automatically deleted after two years. • In particular, the following cookies are set by us and by the services we use: Cookie Provider / Service Expiration period Description _hs_opt_out HubSpot 2 Years. This cookie is used by the opt-in privacy policy to remember not to ask the visitor to accept cookies again. This cookie is set when you give visitors the choice to opt out of cookies. _hs_do_not_tra ck HubSpot 2 Years. This cookie can be set to prevent the tracking code from sending any information to HubSpot. Setting this cookie is different from opting out of cookies, as it still allows anonymized information to be sent to HubSpot. © GKN Sinter Metals Engineering, 1907-I 4 _hs_testcookie HubSpot End of session. This cookie is used to test whether the visitor has support for cookies enabled. hs_ab_test HubSpot End of session. This cookie is used to consistently serve visitors the same version of an A/B test page they’ve seen before. _key HubSpot When visiting a passwordprotected page, this cookie is set so future visits to the page from the same browser do not require login again. The cookie name is unique for each password-protected page. hs-messagesis-open HubSpot 30 minutes This cookie is used to determine and save whether the chat widget is open for future visits. It resets to reclose the widget after 30 minutes of inactivity. hs-messageshide-welcomemessages HubSpot 1 day. This cookie is used to prevent the welcome message from appearing again for one day after it is dismissed. _hsmem HubSpot This cookie is set when visitors log in to a HubSpot-hosted site. _hstc HubSpot 2 Years. The main cookie for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). Hubspotutk HubSpot 10 Years. This cookie is used to keep track of a visitor's identity. This cookie is passed to HubSpot on form submission and used when deduplicating contacts. _hssc HubSpot 30 minutes. This cookie keeps track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp. © GKN Sinter Metals Engineering, 1907-I 5 _hssrc HubSpot End of Session. Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session. All cookies set by us on the respective website and further information on these can also be displayed at any time via your browser. The purpose of this type of processing is to make your use of our website convenient and to give you the option of saving your settings. The legal basis for this processing is Article 6 (1) point (f) of the GDPR. We have a legitimate interest in presenting you with a website that saves your personal settings and makes your visit to our website easier. Right of objection You have the right to object to data processing. You can restrict the use of cookies or completely disable them in your browser settings. You can also enable the automatic deletion of cookies when you close your browser window. You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings etc. here: Google Chrome: Website Mozilla Firefox: Website Apple Safari: Website Microsoft Internet Explorer: Website The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use all the features of the website fully. Other services that we use also use cookies. We shall draw your attention separately to the use of cookies when dealing with those individual services. © GKN Sinter Metals Engineering, 1907-I 6 6) Information about Google services We use various services from Google LLC. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our website. You can find more information about each of the specific Google services that we use on this website in another privacy policy. In some circumstances, embedding Google services means that Google collects and processes information (including personal data). In such cases, we cannot rule out the fact that Google may also transmit the information to a server in a third country. As outlined in Google’s Privacy Shield certification (available at https://www.privacyshield.gov/list by searching for ‘Google’), Google is obligated to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework with respect to the collection, use and storage of personal data from EU member states, or Switzerland. Through certification, Google, including Google LLC and its wholly owned subsidiaries in the USA declares that it complies with Privacy Shield principles. You can find more information about this at https://www.google.de/policies/privacy/frameworks/. We have no influence over the information that Google actually collects and processes. However, Google states that it can generally only process the following information (including personal data): • protocol data (particularly the IP address); • location-related information; • unique application numbers; and • cookies and similar technologies. If you are signed into your Google account, Google may add the processed information to your account, depending on your account settings, and treat it as personal data; also refer particularly to https://www.google.de/policies/privacy/partners/. Among others, Google would like to state the following: ‘In some circumstances, we associate personal information from one service with information and personal data from other Google services. We do this to make it easier for you to share content with friends and acquaintances, for example. Depending on your account settings, your activity on other sites and apps may be associated with your personal information in order to improve Google’s services and the ads displayed by Google.’ (https://www.google.com/intl/de/policies/privacy/index.html) You can prevent this data from being directly added to your account by signing out of your Google account or changing your account settings accordingly. You can also prevent cookies from being installed - if used by Google - by changing your browser settings accordingly; please note that in this case, you may not be able to use all of this website’s features fully. You can learn more about how to delete cookies in the most common browsers, and about how to change cookie settings etc. here: © GKN Sinter Metals Engineering, 1907-I 7 • Google Chrome: https://support.google.com/chrome/answer/95647?hl=de • Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-vonwebsites-entfernen • Apple Safari: https://support.apple.com/kb/PH21411?locale=de_DE • Microsoft Internet Explorer: https://support.microsoft.com/de-de/help/17442/windowsinternet-explorer-delete-manage-cookies You can find more information in Google’s privacy policies, which can be accessed here: • https://developers.google.com/terms/ • https://www.google.com/policies/privacy/ You can find information about Google’s privacy settings at https://privacy.google.com/takecontrol.html 7) Google Analytics On our website, we use Google Analytics, a web analysis service provided by Google LLC "("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses "cookies", which are text files placed on your device, to help the website analyze how users use the site. Google Analytics may also use so-called web beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic to websites. The information generated by cookies and web beacons about the use of our website (including the user's IP address) will be transmitted to and stored by Google on servers in the United States or other third countries. This information can be passed on by Google to Google's contractual partners. Information regarding Google's existing Privacy Shield certification and other relevant information regarding data processing by Google in relation to the use of Google services can be found in this Privacy Policy under the section "6) Information about Google services". The following data types are processed by Google: • Online identifiers (including cookie identifiers) • IP address • device IDs In addition, you can find more detailed information about the information processed at https://www.google.com/intl/de/policies/privacy/#infocollect under "Data we receive as a result of your use of our services" and at https://privacy.google.com/businesses/adsservices/ We only use Google Analytics with IP anonymization enabled ("anonymize IP"). This means that your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases the full IP address is transmitted to a Google server in the USA and shortened there. © GKN Sinter Metals Engineering, 1907-I 8 Furthermore, we have concluded a data processing agreement with Google for the use of Google Analytics (Art. 28 of the GDPR). Google processes the data on our behalf in order to evaluate your use of the website, to compile reports on website activity for us and to provide us with other services associated with website and Internet use. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. The integration of Google Analytics enables us to analyze user behavior on our website and to respond to it. This enables us to continuously improve our services. The legal basis for this processing is Article 6 (1) point (f) of the GDPR. We have a legitimate interest in the great benefit that the functions described above have for our services. The statistical evaluation of user behaviour enables us, in particular, to react and optimise our offer in line with the interests of our customers. Google has the right to use subcontractors in the context of the data processing agreement. A list of these subcontractors can be found at https://privacy.google.com/businesses/subprocessors/ Right of objection You have the right to object to data processing. You can prevent Google from processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en You can also prevent Google Analytics from collecting your data by clicking on the following link. An Opt-Out-Cookie is set, which prevents the future collection of your data when visiting our website: Google Analytics deaktivieren. Furthermore, you can prevent the collection of data by web beacons by downloading and installing the add-on available under the following link for the respective browser:https://adblockplus.org/ It is also possible to prevent the installation of cookies by making the appropriate settings in your browser; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. For information on how to delete cookies in the most common browsers and how to change cookie settings, click here: Google Chrome: Webseite Mozilla Firefox: Webseite Apple Safari: Webseite Microsoft Internet Explorer: Webseite The processed information is stored for 14 months and automatically deleted at the end of this storage period. © GKN Sinter Metals Engineering, 1907-I 9 For more information on data processing regarding Google Analytics, please refer to Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de Information about Google's privacy settings can be found at https://privacy.google.com/take-control.html?categories_activeEl=sign-in The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use all the features of the website fully. 8) Use of YouTube We use videos from YouTube and YouTube plug-ins on our website. YouTube is a service of YouTube LLC (‘YouTube’), 901 Cherry Ave., San Bruno, CA 94066, USA and is provided by this company. YouTube LLC is a subsidiary of Google Inc. (‘Google’), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The integration of YouTube is done by embedding the service into our website using ‘iFrames’. In some circumstances, YouTube/Google collects and processes information (including personal data) when these iFrames are loaded. In this process, we cannot rule out that YouTube/Google may also transmit this information to a server in a third country. Information about Google’s current Privacy Shield certification and other relevant data concerning data processing by Google as part of using Google services can be found in this privacy policy under the section “6. Information about Google services”. We do not collect any data when you watch a YouTube video on our website. We use YouTube in the so-called "extended data protection mode". According to the information provided by Google, a video can be played without the user behaviour being recorded by cookies. We do not collect any data ourselves when you watch a YouTube video with us. By integrating YouTube, we are pursuing the purpose of being able to show you various videos on our website so that you can view these directly on the website. The legal basis for processing personal data as described above is Article 6 (1) point f) of the GDPR. Our justified legitimate interest lies in the great benefits that YouTube offers. The integration of external videos takes some burden off our servers and enables us to use the freed resources elsewhere. This can, among other things, increase the stability of our servers. YouTube/Google also has a legitimate interest in the collected (personal) data to improve its own services. © GKN Sinter Metals Engineering, 1907-I 10 Right of objection You have the right to object to data processing. You can send us or communicate to us your objection at any time (e.g. by email to contact@gknpm.com). You can also change your cookie settings (e.g. delete cookies, block cookies, etc.). Further information on this can be found under section "5) Cookies”. The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use all the features of the website fully. You can find more information in YouTube’s/Google’s privacy policies, which can be accessed here: www.google.com/policies/privacy/ You can find information about Google’s privacy settings at https://privacy.google.com/takecontrol.html?categories_activeEl=sign-in 9) HubSpot On our website we use services from HubSpot, Inc. ("HubSpot"), 25 First Street, 2nd Floor Cambridge, MA 02141, USA. HubSpot is a provider of hosting services and customer relationship management systems. HubSpot provides the necessary product infrastructure. HubSpot uses services of the Google Cloud Platform (GCP) in Germany (Frankfurt a. M.), and the Amazon Web Services, Inc. ("AWS") 410 Terry Avenue North, Seattle WA 98109, USA. HubSpot has concluded a contract with AWS and Google (GPC) for data processing agreement. The data processed by GPC are processed and stored on servers in Germany. Furthermore, this data is transferred to AWS in the USA. AWS and Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on AWS's or Google's behalf. HubSpot enables us to integrate various codes and services into our website in an orderly and simplified manner. We link the following services to HubSpot: • Server logs (section 4): HubSpot uses the infrastructure of the Google Cloud Platform (GCP) in the EU (Frankfurt a. M., Germany) to support the processing of local customer data. The personal data processed by the GCP (see Section 4) is secured on Google's servers within the EU and transmitted to and stored by the Amazon Web Service ("AWS") in the United States. By hosting these services with AWS and GCP, HubSpot can increase the performance and reliability of the services. The purpose is to ensure that data can be retrieved and to guarantee data security. The legal basis for the transfer of data to AWS is HubSpot's legitimate interest pursuant to Article 6 (1) point f) GDPR. HubSpot's legitimate interest lies in IT security. Transmission to AWS ensures additional data security. © GKN Sinter Metals Engineering, 1907-I 11 Right of objection You have the right to object. You can send or inform us of your objection at any time (e.g. by e-mail to contact@gknpm.com). • User accounts • newsletter provider • contact form • Google Analytics (section 7) The data collected by HubSpot is transmitted to Google for analysis. The legal basis for the transfer is Article 6 (1) point f) of the GDPR. The purpose of the transfer is the analysis for marketing purposes. HubSpot has a legitimate interest in the transmission for the improvement and optimization of the services. Right of objection You have the right to object. You can send or inform us of your objection at any time (e.g. by e-mail to contact@gknpm.com). As can be seen from HubSpot's Privacy Shield certification (to be found at https://www.privacyshield.gov/list under the search term "HubSpot"), HubSpot has obligated to comply with the EU-US Privacy Shield Framework published by the US Department of Commerce and the Swiss-US Privacy Shield Framework on the collection, use and storage of personal data from the member states of the EU and Switzerland respectively. HubSpot has declared by certification that it complies with the Privacy Shield principles. Information on the existing privacy shield certification of HubSpot and other relevant data on data processing by HubSpot within the scope of using HubSpot can be found at: • https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG&status=Active • https://legal.hubspot.com/legal-stuff?hsLang=fr You can also find more detailed information about HubSpot on their websites https://www.hubspot.com/ and at https://legal.hubspot.com/privacypolicy?_ga=2.3730290.37890199.1552980835- 511272210.1549970169&_gac=1.216713890.1552561725.EAIaIQobChMI37mbjbB4QIVC853Ch3C5Qp5EAAYASAAEgIJzvD_BwE. Furthermore, we have concluded a data processing agreement for the use of Hubspot with HubSpot (Article 28 of the GDPR). HubSpot processes the data on our behalf in order to trigger the stored tags and display the services on our website. HubSpot may transfer this information to third parties if required to do so by law or if third parties process this data on behalf of HubSpot. If you have deactivated individual tracking services (e.g. by setting an opt-out cookie), the deactivation will continue for all affected tracking tags that are integrated by HubSpot. Through the integration of HubSpot, we pursue the purpose of being able to carry out a simplified and clear integration of various services. In addition, the integration of HubSpot optimizes the loading times of the various services. The legal basis for the processing of personal data described here is Article 6 (1) point f) of the GDPR. Our justified interest in this is the great benefit that the integration of various services via the HubSpot brings. By integrating HubSpot, we reduce our maintenance effort as well as © GKN Sinter Metals Engineering, 1907-I 12 the loading effort of the website and the server and traffic load. In addition, HubSpot has a justified interest in the collected (personal) data in order to improve its own services. Right of objection You have the right to object. You have the option of preventing all HubSpot tags from being sent. All you have to do is click on this opt-out link to save the HubSpot_hs_opt_out cookie in your browser. However, we would like to point out that deactivation may result in you not being able to use our website or not being able to use it to its full extent. The processed information will only be stored as long as it is necessary or legally required for the intended purpose. The provision of personal data is neither required by law nor by contract and is also not necessary for the conclusion of a contract. They are also not obliged to provide the personal data. Failure to do so may, however, result in you not being able to use our website or not being able to use it to its full extent. 10) Newsletter You have the possibility to subscribe to our newsletter on our website. To send the newsletter we use the HubSpot newsletter service. Provider is HubSpot, Inc. ("HubSpot"), 25 First Street, 2nd Floor Cambridge, MA 02141, USA. HubSpot is a service with which, among other things, the dispatch of newsletters can be organized and analyzed. If you enter data for the purpose of subscribing to the newsletter (e-mail address), this data is processed on the servers of the Google Cloud Platform (Frankfurt a. M.) and stored by AWS in the USA. HubSpot is Privacy-Shield certified, more information about HubSpot can be found in section 8 of this privacy policy. In addition, we have concluded a "Data Processing Agreement" with HubSpot. This is a contract in which HubSpot undertakes to protect the data of our users, to process the data exclusively in accordance with the data protection regulations on our behalf and in accordance with our instructions. Further information can be found at: https://legal.hubspot.com/dpa If you register for our newsletter, we process the following information (also personal data) from you: • E-mail address • First name and surname In order to be able to display the proof of consent and the proof of subscription in a legally compliant manner, we keep the following data on the events entry, change, confirmation and subscription of the newsletter for each user profile which is generated with an e-mail address confirmed by the double opt-in procedure: • Date and time • IP address • opt-in status © GKN Sinter Metals Engineering, 1907-I 13 • lead status • lifecycle status In addition, we process the following information (also personal data) from you within the scope of your use of our newsletter: • Object and profile reference • email address • Date and time • IP address • Action type (entry, update) • permission change • Metadata of the action The data is processed by HubSpot and - if available - subcontractors of HubSpot within the scope of data processing. Subcontractors process the data according to instructions and on our behalf in the same way as HubSpot itself. With the help of the HubSpot service, we analyze the success and reach of our newsletters (campaigns) by click, source and identity tracking. With click tracking, we track how many times each link in our email is clicked. With source tracking, we identify the origin of traffic to our website by adding tags to our email links to ensure proper source attribution. With identity tracking we recognize contacts that have visited our site before and we can track their pages views and site activity. For this purpose, HubSpot uses and stores cookies, for example, to enable statistical surveys and to build up interest profiles. It is possible for us to understand how you react to individual newsletters from us (e.g. whether you have opened the newsletter). When registering for the newsletter, you consent to the processing of your personal data (Article 6 (1) point a) of the GDPR), whereby we secure the registration by means of a double opt-in procedure: In a first step, you enter the mandatory information (e.g. e-mail address) and consent to the processing of your personal data by activating the appropriate box. In a second step, you will then automatically receive an e-mail with a confirmation or activation link, which you should also confirm or activate. This will ensure that the email address you enter on our website is yours. The collection and processing of the user's e-mail address serves the purpose of delivering the newsletter. The collection and processing of further personal data as part of the registration process has the purpose of preventing misuse of our newsletter or the e-mail address used. In addition, the processing described above serves to enable us to prove that we have received your consent. The purpose of processing cookie and measurement data is to track the success and reach of our newsletters. Legal basis for the processing of personal data, which is necessary for the technical provision of the newsletter to you, as well as for the processing of cookie and measurement data is your consent according to Article 6 (1) point a) of the GDPR. The legal basis for the processing of further personal data is our legitimate interest pursuant to Article 6 (1) point f) of the GDPR. We have a legitimate interest in being able to prove that © GKN Sinter Metals Engineering, 1907-I 14 you have given us your consent. In addition, we have a legitimate interest in being able to prevent or prove misuse of our newsletter. Your rights: 1. Right of withdrawal Right of withdrawal You have the right to revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until revocation. You can send or inform us of your revocation of consent at any time (e.g. by e-mail to contact@gknpm.com). You can also exercise your consent simply by clicking on the appropriate link in our newsletter. 2. right of objection If the processing of your data is not covered by the consent (especially protocol files), you have the right to object. Right of objection You can send or inform us of your objection at any time (e.g. by e-mail to contact@gknpm.com). The data will be deleted as soon as they are no longer required for the purpose of their collection. Your registration data will therefore only be stored as long as the newsletter subscription is active. Tracking and cookie data are deleted after 13 months. The data will be deleted if you so wish. You can send an e-mail to contact@gknpm.com to do this. If you do not confirm the e-mail as part of the double opt-in procedure, your registration will be automatically deleted after 72 hours. The provision of personal data is neither required by law nor by contract and is also not necessary for the conclusion of a contract. You are also not obliged to provide the personal data. Failure to do so, however, would mean that we would not be able to provide you with a newsletter. 11) Contact form On our website you will find a contact form which you can use to contact us electronically. If you contact us via this contact form, the data entered in the input fields will be processed by us. This includes the following data as mandatory data: • E-mail address • The information that is derived from the message text In addition, you can add further data as voluntary information. This may simplify and speed up the processing of your request. The following data are potentially affected: • Salutation • First name • Surname • Telephone number © GKN Sinter Metals Engineering, 1907-I 15 • Company and • Street and house number • Postcode and city • The information that is derived from the message text Mandatory and voluntary information are treated equally by us. The mandatory information is necessary in order to contact you and process your request. The following data will also be processed when the message is sent: • Your IP address • Date and time of sending Please note that the extent of the personal data collected in the contact form also depends on which data you yourself disclose in the contact form in the message text. The purpose of processing personal data within the scope of mandatory and voluntary information is to process the contact request and to be able to contact the requesting party in order to answer the request. The other personal data processed during sending (IP address, date and time of sending) serve to prevent misuse of our contact form. The legal basis for the processing of the personal data provided by you is your express consent pursuant to Article 6 (1) point a) of the GDPR. The legal basis for the processing of further personal data is our legitimate interest pursuant to Article 6 (1) point f) of the GDPR. We have a legitimate interest in being able to prove that you have given us your consent. In addition, we have a legitimate interest in being able to prevent or prove misuse of our contact form. The data will only be processed as long as this is necessary for the provision of the function. The recipient of the data is our custom relation management provider HubSpot, who works for us within the framework of a data processing agreement. Your rights: 1. Right of revocation Right of withdrawal You have the right to revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until revocation. You can send or inform us of your revocation of consent at any time (e.g. by e-mail to contact@gknpm.com). You can also revoke your consent simply by clicking on the appropriate link in our confirmation e-mail or reply e-mail. 2. Right of objection If the processing of your data is not covered by the consent (especially log files), you have the right to object. Right of objection You can send us your objection at any time (e.g. by e-mail to contact@gknpm.com). © GKN Sinter Metals Engineering, 1907-I 16 The provision of personal data is neither required by law nor by contract and is not necessary for the conclusion of a contract. You are also not obliged to provide personal data. Failure to do so may, however, result in you not being able to use our contact form. 12) Contacting us by post, telephone, fax or e-mail There is the option of contacting us by post, telephone, fax or e-mail. If you contact us by post, we may in particular process your address data (e.g. surname, first name, street, place of residence, postal code), date and time of receipt of the mail as well as any data resulting from your letter itself. If you contact us by telephone, we may in particular process your telephone number and, if necessary, your name, e-mail address, time of call and details of your request within the framework of the conversation. If you contact us by fax, we can in particular process the fax number or the sender identification as well as the data resulting from the fax. If you contact us by e-mail, your e-mail address, the time of the e-mail and the data resulting from the message text (including attachments, if applicable) will be processed. The purpose of processing the above-mentioned data is to process the contact request and to be able to contact the requesting party in order to answer the request. The legal basis for the processing of personal data described here is Art. 6 Para. 1 lit. f) of the GDPR. It is our legitimate interest to give you the opportunity to contact us at any time and to answer your questions. Personal data will be deleted as soon as they are no longer required for the purpose for which they were collected. Right of objection You have the right to object to data processing. You can send us or communicate to us your objection at any time (e.g. by email to contact@gknpm.com). The provision of personal data is not a statutory or contractual requirement, nor a requirement necessary to enter into a contract. While you are not under any obligation to provide us with your personal data, if you do not do so, you may not be able to use all the features of the website fully. 13) Social Networks & External Links In addition to this website, we also maintain presences in various social media, which you can reach via the corresponding buttons on our website. If you visit such a presence, personal data may be transmitted to the provider of the social network. © GKN Sinter Metals Engineering, 1907-I 17 Please note that user data is hereby transferred to a server in a third country and can therefore be processed outside the European Union. US providers who are certified under the Privacy Shield have committed themselves to comply with EU data protection standards. Further information can be found at https://www.privacyshield.gov/Program-Overview. It is possible that in addition to the storage of the data you have specifically entered in this social medium, other information may also be processed by the social network provider. In addition, the social network provider may process the most important information about the computer system from which you visit it, such as your IP address, the type of processor you are using, and the browser version and plug-ins you are using. If you are logged in with your personal user account of the respective network during the visit of such a website, this network can assign the visit to this account. The purpose and scope of the data collection by the respective medium and the further processing of your data there as well as your rights in this regard can be found in the respective regulations of the respective controller, e.g. below: ? Facebook (Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA): o For fanpages: Agreement on joint processing of personal data (Art. 26 (1) of the GDPR) https://www.facebook.com/legal/terms/page_controller_addendum o Privacy policy: https://www.facebook.com/about/privacy/, o Opt-Out possibility t: https://www.facebook.com/settings?tab=ads und http://www.youronlinechoices.com/, o Privacy Shield certification : https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status= Active Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA): o Privacy policy: https://twitter.com/de/privacy o Opt-Out possibility:: https://twitter.com/personalizatio, o Privacy Shield certification : https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status= Active ? Google und YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA): o Privacy policy: https://policies.google.com/privacy, o Opt-Out possibility:: https://adssettings.google.com/authenticated, o Privacy Shield certification : https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=A ctive ? Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA): o Privacy policy and opt-out option: https://help.instagram.com/155833707900388 ? LinkedIn Corporation (700 E Middlefield Rd, Mountain View, CA 94043, USA) o Privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=uno-regguest-home-privacy-policy © GKN Sinter Metals Engineering, 1907-I 18 o Privacy Shield certification : https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0 We would also like to point out that our website contains further links to external external websites, whereby we have no influence on the processing of data on these external websites. 14) Data security We use technical and organisational measures to protect our website and other systems against loss, destruction, access, modification, or distribution of your data by unauthorised persons. Notwithstanding our best efforts, data security and protection against all risks cannot be fully guaranteed. 15) Amendments to the privacy policy We may have to amend our privacy policy to reflect changes in the law or changes in our internal processes. If we have to amend our privacy policy on this basis, we shall communicate this to you with the subject line: ‘Privacy policy’. 16) Withdrawal You have the right to withdraw your consent with future effect at any time, without affecting the legality of the processing done before withdrawal and based on your consent. 17) Data subject rights As a data subject, you have the following rights: • right of access (Article 15 of the GDPR); • right to rectification of data (Article 16 of the GDPR); • right of objection (Article 21 of the GDPR); • right to erasure (Article 17 of the GDPR); • right to restriction of processing (Article 18 et seq. of the GDPR); and • right to data portability (Article 20 of the GDPR). If you have any questions regarding your rights, please contact Datenschutz.pm@nn.gknpm.com Please note that in this case, we have to ensure that we are dealing with the actual data subject. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority. We do not use automated decision-making on our website. Radevormwald, 25.07.2019

https://www.gknpm.com/en/Utilities/privacy-policy/