Privacy Notice

Update on July 23, 2025

KBC considers that protecting the security and privacy of your Personal Data is important. Thus, we will treat and secure your Personal Data with care and appropriate technology, and in compliance with applicable privacy laws.

This Privacy Notice (the “Notice”) explains how we, KBC Advanced Technologies Limited, a wholly owned subsidiary of Yokogawa Electric Corporation, and where applicable KBC Affiliates as listed here and Yokogawa Affiliates listed here, (also: “KBC ”, “us”, “we”, or “our”), collect and use your Personal Data, including when we provide and maintain our products and services, which includes KBC websites, applications, and online services (collectively referred to as the “Services”) and when we maintain your business relationships with us, unless another specific Privacy Notice applies. The Personal Data that we process about you depends on the context of your interactions with us, the products, the services and features that you use, your location, and the applicable laws. This Notice also informs you about how we protect your Personal Data and the rights and options you have to control your Personal Data. This Notice consists of two parts, Part I concerns the general terms of this Notice, whereas Part II concerns country/jurisdiction specific terms which supplement and/or deviate from the general terms in Part I. If the country in which you reside is included in Part II, please read both Part I of this Notice and the relevant Part II of this Notice.

We advise you to consult this Notice regularly when using our Services, as it may be necessary for us to amend this Notice from time to time. To the extent required by applicable laws, we will notify you of material changes made to this Notice and obtain your consent.

This Notice will provide information on the following:

PART I. GENERAL TERMS OF THE PRIVACY POLICY

1. WHAT TYPE OF PERSONAL DATA WE PROCESS

When we talk about data or Personal Data in this Notice, we refer to all data that can be directly or indirectly traced back to you as an individual. Depending on how you use our Services, we collect and process data that you ask us to process or which you voluntarily provide, or data that we otherwise collect. Such data is referred to as “Personal Data.” To the extent permitted by applicable laws, publicly available information is not considered Personal Data for the purpose of this Notice.

The categories of Personal Data we process are:

Contact Information Data which consists of data such as your full name, job position, company or employer, work address, work telephone and mobile phone number, work fax number and work email address.

Education and Professional Experience Data which consists of data regarding your education and work history.

Customer Support Data which consists of data which is required to provide you with customer support, including correspondence with KBC staff and information submitted as part of a troubleshooting technical assistance or support request, or as part of a survey, chat, feedback or comment.

Technical Data which consists of device and network connection information when you interact with KBC websites and applications, including but not limited to browser history, search history and other information provided by your browser, advertisements and services accessed during your visit, and the date and time of each visitor request, and user identifier information, including IP address, geolocation, information on your operating system, and internet and other electronic network activity information.

Telephone Recordings which consists of data collected through the recording of telephone call conversations.

Video Recordings which consists of data collected through the recording of online meetings.

Customer Profile Data which consists of inferences drawn from any of the above information to create a customer profile in order to help identify your needs for KBC’s Services.

Payment Data which consists of payment information when we pay you based on a contract or engagement with you, including but not limited to bank name, bank account number, withholding of tax, personal number issued by the government.

2. HOW WE COLLECT PERSONAL DATA

We collect your Personal Data in a number of different ways:

Personal Data that you provide to us – you may provide us with your Personal Data when you, for example, create an account profile for our customer portal or register for one of our events or newsletters.
Personal Data that we obtain through your use of our Services or your visit to our websites – we collect Personal Data related to how and where you use or purchase Services and how you use our websites.
Information gathered through external sources – to ensure we have the most up to date information about you, to provide you with better products and increasingly tailored services, we will combine Personal Data that we hold about you, with additional information which is publicly available or obtained through authorized third parties.
Information gathered through Social Media Pages – when you communicate with us through a KBC Social Media Page (for example, when you comment on, share or react to a post, upload media, send a personal message or subscribe to a KBC Social Media Page), we may receive Personal Data about you.

3. PURPOSE AND LEGAL BASIS OF THE PROCESSING

KBC may process your Personal Data for the purposes contained in the table below. Local applicable laws in certain countries require us to have what is called a “legal basis” or “lawful ground” for processing Personal Data, the table below includes reference to such legal bases. Where required by applicable laws, further information on processing purposes and/or legal bases for processing as relevant for your country is included in Part II below.

Purpose of processing	Categories of Personal Data	Corresponding legal basis
To establish and manage business and customer relationships	Contact Information Data Education and Professional Experience Data Customer Support Data Technical Data	It is our legitimate business interest to establish and manage business and customer relationships. Where required by applicable law we will ask for your consent.
To help manage or fulfil contracts and orders (e.g., the sale, packaging, delivery, execution and invoicing of our Services and to execute payments), and to provide product/service-related information, documents, invoices, and software for product lifecycle management	Contact Information Data	This is necessary for us to fulfil our contracts with you.
To answer your inquiries and to put you in contact with our representatives to respond to your request for a quote (including sending catalogues, specifications and technical materials), and to provide troubleshooting, support and technical assistance on our Services	Contact Information Data Customer Support Data Telephone recordings	It is our legitimate business interest to answer your inquiries and requests, and to provide you with a helpful and seamless technical support experience Where required by applicable laws we will ask for your consent.
To analyze and better understand your business needs and to improve our Services, including our customer services, and to invite you to participate in surveys, questionnaires or other research related initiatives	Contact Information Data Education and Professional Experience Data Customer Support Data Telephone recordings Technical Data Customer Profile Data	It is our legitimate business interest to develop and improve our Services (including by understanding how you use the Services) and to develop new services or products Where required by applicable law we will ask for your consent.
To provide you with information about our offers on KBC’s Services (including invitations to events including webinars, exhibitions, campaigns, seminars and the possibility of hosting such events) through KBC websites and applications, or by email or phone calls	Contact Information Data Technical Data Customer Profile Data	It is our legitimate business interest to provide you with information about our offers on our Services. Where required by applicable law we will ask for your consent.
To create a profile based on your interactions with our Services to understand your interest in KBC’s Services and to provide you with a personalized experience	Contact Information Data Education and Professional Experience Data Customer Support Data Technical Data Customer Profile Data	It is our legitimate business interest to provide you with a personalized experience. Where required by applicable law we will ask for your consent.
To detect and prevent illegal activity, including fraud, and to keep our Services and information technology systems secure, and to protect establish, exercise, or defend our and third parties’ rights, to defend against lawsuits	Contact Information Data Customer Support Data Technical Data	It is our legitimate business interest to protect our and third parties’ rights and to detect, investigate and prevent crime and fraud within or related to our Services, and the products and services of third parties to the extent permitted by applicable law.
To comply with our legal obligations, for instance our fiscal, bookkeeping and tax obligations	Contact Information Data Education and Professional Experience Data Customer Support Data Technical Data	This processing is necessary for our compliance with our legal obligations.
To provide shareholders and other investors with notices of general meetings of shareholders and other necessary information including information on our financial results briefings and business briefings	Contact Information Data	This processing is necessary for our compliance with our legal obligations.

If you fail to provide certain information as requested, we may not be able to provide you with certain Services and/or we may not be able to perform a contract we have entered into with you.

Our Services are directed at adults and not directed at minors or children, generally aged under 18. We do not knowingly collect or process Personal Data within our Services from minors. If we learn we have collected or received Personal Data from anyone under the age of 18, we will delete such data. Please contact us if you believe we might have collected or received data from minors under the age of 18.

4. RETENTION PERIODS

We will retain your Personal Data for the duration of your interaction with our Services, unless a shorter retention period is required by applicable laws or the data is no longer necessary for the purposes for which the data was obtained. Once you no longer interact with our Services, as permitted by applicable laws, we will retain your Personal Data for the period of time that enables us to:

fulfil our legal obligations, including legal retention periods;
initiate, investigate or defend against legal claims;
address your questions, requests or complaints; and
keep our records for analysis and audit purposes.

Where KBC is processing your Personal Data on the basis of your consent, KBC will use your Personal Data (i) only for as long as it is required to fulfil the purposes set out above or (ii) until you withdraw your consent.

To the extent required under applicable laws, we will delete or otherwise destroy your Personal Data after the retention period has elapsed, as described above.

5. SECURITY

The security of your Personal Data is important to us. To protect your Personal Data against accidental or unlawful destruction, loss, use, or alteration and against unauthorized disclosure or access, we use and maintain appropriate physical, technical and organizational security measures. This includes measures such as: (i) assuring that third-party service providers who access or handle Personal Data on our behalf maintain such safeguards, (ii) KBC has established a Privacy and Data Protection Governance Team (iii) KBC has implemented numerous privacy and security practices including training employees on security and privacy practices, conducting privacy impact assessments and maintaining records of processing activities, (iv) physical access to KBC offices are subject to access control such as visitor management and video surveillance, and (v) systematic implementation of technical measures such as data encryption, event monitoring and multifactor authentication. However, no method of internet transmission or electronic storage is 100% secure or error-free. Accordingly, we cannot guarantee absolute security of our systems and databases, and, to the extent permitted by applicable laws, we accept no liability for any unintentional disclosure that is not the result of our fault. Please help keep your Personal Data secured by keeping your password confidential, changing it from time to time, protecting your computer or mobile against unauthorized access and by logging out after using our Services.

If you have reason to believe that the security of your interaction with us is no longer secure (e.g., if you feel that the security of any account you might have with us has been compromised), please immediately notify us by email.

Email: privacydataprotection@kbc.global

6. DISCLOSURE OF YOUR PERSONAL DATA

Where relevant and necessary, KBC may provide access to your Personal Data or transfer your Personal Data to:

KBC and Yokogawa Affiliates, to support us with processing your data for the purposes described in this Notice;
KBC Business Partners, including service providers (e.g., cloud service, IT maintenance and support services, marketing services, data digitization services and system development services), who support us in connection with the purposes set out in this Notice or in our business relationship with you. Depending on the context of your business relationship with KBC such Business Partners can include our distributors, agents, suppliers, contractors, vendors, sub-processors, or organizations contracted to provide services for or on KBC's behalf. Business Partners are under confidentiality and privacy obligations with KBC;
Payment service providers for the purpose of processing payments relating to our Services. These payment service providers use your payment data to process payments and may support us in detection and prevention of fraud;
Third parties in connection with investments, reorganizations, restructurings, mergers, joint ventures or sale of shares or assets of KBC. It is our legitimate interest to enable such investments, reorganization, restructuring, merger or sale of our business in whole or in part;
Public authorities, justice and law enforcement, fiscal authorities and other authorities assigned with investigative powers or public authority, to the extent we are legally required or have legitimate interests to do so;
With professional advisors, investigators, or credit reference agencies to the extent we are legally required or have legitimate interests to establish, exercise or defend our legal rights or those of our Affiliates, or prevent or detect crime and fraud.

7. TRANSFER OF YOUR PERSONAL DATA

Where we share or transfer your Personal Data to our Affiliates or other third parties, these recipients of your Personal Data may be located outside of the country in which you reside and which may not provide an adequate level of protection consistent with the applicable laws of the jurisdiction from which the Personal Data is exported. Such transfers will only take place to the extent permitted by applicable laws and where KBC takes appropriate safeguards as required by applicable laws (e.g., execution of standard contractual clauses or codes of conduct). Where required by applicable laws we will ask your consent before we transfer your Personal Data outside of the country in which you reside.

For more information on the safeguards relating to Personal Data transfers outside of the country in which you reside, please contact our Privacy and Data Protection Governance Team at the contact details below.

Where required by applicable laws, further information on international data transfers relevant for your country is included in Part II below.

8. YOUR RIGHTS

We respect the rights granted to you under applicable laws. Depending on your location and such applicable laws, these may include the right to access your Personal Data that we hold about you, to rectify or erase certain Personal Data, to restrict processing of your Personal Data and to get an electronic copy of your Personal Data for purposes of transmitting it to another company. These rights may be subject to certain limitations or restrictions as allowed or imposed by applicable laws. We will inform you of such limitations or restrictions upon your request.

In addition, where we rely on our legitimate interest to process your Personal Data, you may have the right to object to such processing, wholly or partly, on grounds related to your particular situation and in accordance with the laws applicable to you. For instance, depending on your country this may include a right to opt-out to marketing communications via an opt-out link in the respective marketing message, or for communications by phone, via the available opt-out mechanism provided in the phone communication you received. You can also opt-out by sending an email to KBC’s Data Privacy Contact as indicated below, with the subject “Opt-out from Marketing Communications” and including your name, and phone number and/or email address. Where we rely on your consent to process your Personal Data, you may have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Under applicable laws you may also have the right to lodge a complaint with your supervisory authority.

9. COOKIES AND SIMILAR TECHNOLOGIES

Our websites, applications and online services may use cookies or similar technologies, including unique identifiers used to identify an application or device you are using. Cookies and similar technologies may store or access certain information about your application or device, which helps us to provide or improve our Services. If used by us without your consent, these cookies and similar technologies are strictly necessary to provide you with certain functionalities or features of our websites or to provide you with a Service. Other cookies and similar technologies (e.g., cookies for marketing purposes) will only be used based on your consent.

To the extent required by applicable laws, we will obtain your prior consent for or allow you to opt-out to placing such cookies on your device. For further details, to manage your cookie preferences, or withdraw your consent from the cookie declaration on our website, please click the cookie icon located at the bottom left-hand corner of any web page.

10. LINKS TO OTHER WEBSITES

Our Services may contain links to third party services or websites. We are not responsible for the way in which these third parties collect or process your Personal Data. We advise you to read the privacy notice of the third party when you make use of their service or visit their website to understand how this third party collects and uses your personal data.

11. OTHER APPLICABLE TERMS

Our Services may be provided to you at the request of the organization by which you are employed or which you otherwise represent. If this is the case, our processing of your Personal Data may be subject to a data processing agreement between your organization and us. In such instance, you should first direct any questions about how your Personal Data is processed to your organization.

In the event of a conflict between this Notice and the Personal Data processing terms of an agreement between you (or your organization) and KBC for our Services, the terms of such agreement will prevail unless otherwise set forth in the agreement between you (or your organization) and KBC.

12. DATA PRIVACY CONTACT

If you want to exercise your data privacy rights as referenced in this Notice or if you have any questions, our contact information is as follows:

Privacy and Data Protection Governance Team

Email: privacydataprotection@kbc.global

You may have a specific data privacy contact for your country or region listed in Part II below.

PART II. COUNTRY SPECIFIC INFORMATION

13.1 CHINA

The Personal Information Protection Law and its relevant regulations and rules (collectively, “PIPL”) of the People’s republic of China shall govern when Personal Data (or “Personal Information” as used and defined in PIPL) collection and processing (i) occurs in China, or (ii) concerns Personal Information of individuals located within the territory of China for the purpose of providing services or products or analyzing and evaluating the individual’s behaviour.

13.1.1 Transfer of Your Personal Data

In principle, the Personal Information we collect and generate within the People's Republic of China will be stored in the People's Republic of China. As a multinational company, KBC provides Services for customers around the world through its globally distributed service outlets, resources, and servers. Based on our global strategy of customer information management, we may share your Personal Information with our various subsidiaries and affiliates (i.e., KBC and its affiliates over the world, as may be applicable), through KBC’s globally unified customer information management system, in order to integrate KBC’s global resources and provide you with better and timely services. This means that after obtaining your authorized consent, your Personal Information may be transferred to or accessed from overseas jurisdictions in the countries / regions. Note that we only share the minimum Personal Information as required for the purpose and take appropriate technical security measures during the transmission process. We have followed the requirements of PIPL to sign a standard contract and conduct an impact assessment with overseas recipients regarding the export of your Personal Information, in order to identify and control the potential risks of Personal Information export and clarify the rights and obligations of both domestic and foreign parties in the transmission and protection of your Personal Information. Furthermore, we will take necessary technical measures such as encryption during the transmission process and conclude Personal Information transmission/processing agreement with the information recipient or co-processor to clarify the rights and obligations of all the parties to your Personal Information and ensure the security of your Personal Information during cross-border transmission and processing.

Overseas recipient information:

Overseas recipient entity	KBC Advanced Technologies Limited.
Contact information	42-50 Hersham Road, Walton on Thames, Surrey, KT12 1RZ, United Kingdom (Email: privacydataprotection@kbc.global)
Information Type	Contact Information Data Education and professional experience data Customer support data Technical data Customer profile data
Purpose and necessity of processing	To realize the unified global management and execution of orders and businesses, and optimize the management of global business partner resources
Transmission method	Email sending, system transmission

13.1.2 Your Rights

Under the PIPL, you have the following rights to your Personal Information:

1. You have the right to request access to or request a copy of your Personal Information with us.

2. You have the right to request supplement, rectification or update to your Personal Information if you find it incomplete or incorrect.

3. You may request to transfer your Personal Information to other processors if certain conditions are met as set forth by PIPL.

4. You may request to explain our personal information processing rules when necessary.

5. You may request to delete your Personal Information:

- If we process your Personal Information in violation of laws and regulations;
- If we collect and Process your Personal Information without your consent;
- If our processing of Personal Information violates the agreement with you;
- If you withdraw your consent;
- If you no longer use our products or services, or you cancel your account;
- If we no longer offer you products or services.

If we decide to respond to your request for deletion, we will also notify the entities that have obtained your Personal Information from us and ask them to delete them in a timely manner, unless otherwise stipulated by laws and regulations, or if these entities are authorized by you independently. When you delete information from our services, we may not delete the corresponding information in our backup system immediately but will delete the information when the backup is updated.

6. You may change the scope of, or withdraw your consent to us (for instance, cancel your account with us or stop subscription to some of our services). However, such changes or withdrawals will not affect the processing of your Personal Information that has been previously carried out based on your prior authorized consent.

Please send your inquiry, request, or complaint regarding your Personal Information to the following email and we will reply to you within 30 business days. For security reasons, we may ask you to verify your identity before processing your request.

Privacy and Data Protection Governance Team

Email: privacydataprotection@kbc.global

13.2 EEA (European Economic Area)

The General Data Protection Regulation (“GDPR”) shall apply when (i) Personal Data is processed by a KBC Affiliate located in the EEA, or (ii) Personal Data is processed by a KBC Affiliate located outside of the EEA in so far as the processing relates to the offering of goods or services to individuals located in the EEA.

13.2.1 Your Rights

Under the GDPR you may have the following rights with respect to our processing of your Personal Data:

1. Right to request access to your Personal Data

You may have the right to request access to the Personal Data processed by us. Under such request we will provide you with information on our purposes for the processing of your Personal Data, the categories of Personal Data concerned, and the recipients or categories of recipients to whom we have disclosed or will disclose your Personal Data. You may have the right to obtain a copy of your Personal Data processed by us. For additional copies, we may charge a reasonable fee based on our administrative costs.

2. Right to request rectification

You may have the right to request from us the rectification of inaccurate Personal Data concerning you. Depending on our purpose for the processing, you may have the right to have incomplete Personal Data completed.

3. Right to request erasure (right to be forgotten)

You may have the right to request from us the erasure of Personal Data concerning you and we may be obliged to erase such Personal Data.

4. Right to request restriction of processing

You may have the right to obtain from us restriction of our processing of your Personal Data. In such case, your Personal Data will be marked and will only be processed by us for certain purposes.

5. Right to request data portability

You may have the right to receive the Personal Data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.

6. Right to object

You may have the right to object, on grounds relating to your particular situation, at any time to our processing of your Personal Data and we might be required to stop processing your Personal Data. The right to object may especially apply if we process your Personal Data for profiling purposes in order to better understand your business interests in KBC’s products and services. Further you may object to the use of your Personal Data for direct marketing purposes. If you have a right to object and you exercise this right, your Personal Data will no longer be processed for the objected purposes by us.

7. Right to lodge a complaint with the competent data protection supervisory authority You can execute this right at a supervisory authority in particular in the EEA Member State of your habitual residence, place of work or place of the alleged infringement.

13.3 INDIA

When the collection and processing of Personal Data takes place (1) within the territory of India, where Personal Data is collected: (i) in digital form, or (ii) in non-digital form and digitized subsequently, or (2) outside the territory of India, if such processing is in connection with any activity related to offering of our goods or services to individual, to whom the Personal Data relates, within the territory of India, the following applies:

13.3.1 Correction of Information and Right to withdraw consent

You may request any modifications/corrections to your Personal Data to rectify inaccuracies and you may choose to withdraw your consent at any point in time. You can do so by making such request for correction/modification or withdrawal of consent in writing to privacydataprotection@kbc.global.

Further, it is notified that under the Information Technology Act 2000 and Information Technology (Personal Data Protection) Rules 2011, KBC Advanced Technologies Private Limited has designated a Grievance Officer, to redress the grievances under the said Act and Rules. The details are below;

Anuradha Bhattacharya

Email: privacydataprotection@kbc.global

13.4 JAPAN

The Japanese Act on the Protection of Personal Information (“APPI”) shall apply (i) when Personal Data collection and processing occurs in Japan, or (ii) when Personal Data collection and processing concerns data of individuals located in Japan.

This Privacy Notice shall apply to Japanese KBC Affiliates.

13.4.1 Joint Use of Personal Data

To the extent permitted by applicable laws, we may jointly use collected Personal Data subject to the following conditions.

Categories of Personal Data to be used jointly	Type of Personal Data as stated in Part I Section 1 above My Number Information
Purposes of joint use	Purpose of processing as stated in Part I Section 2 above Purposes of processing of My Number Information as state in 13.4.3
Scope of joint users	KBC Affiliates
Person responsible for managing joint use of Personal Data	KBC Advanced Technologies Limited.

13.4.2 Protection of Personal Data in Foreign Countries

Where your Personal Data is provided to a third party in a foreign country on the basis of your consent, you shall be provided in advance with necessary information in accordance with the rules of the Personal Information Protection Commission, Government of Japan.

If your Personal Data is provided to a third party in a foreign country without relying on your consent, the information will be provided in accordance with the APPI by making a request to the contact detail below.

13.4.3 My Number

When handling affairs that involve the use of Individual Number and Specific Personal Information, based on the “Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures,” we will handle your My Number appropriately within the scope of legally prescribed personal number-related affairs. The purposes of use are as follows.

Preparation and submission of withholding tax certificates and other related matters
Preparation and submission of statements of payment of remuneration, fees, contract money and prizes
Preparation and submission of statements of payment related to stocks
Rental fees for real estate, consideration for the transfer of real estate, etc.
Matters related to the above items

13.4.4 Procedure for Requesting Disclosure

If you wish to request disclosure, correction, addition, deletion, suspension of use, suspension of provision to a third party, notification of purpose of use, disclosure of records of provision to a third party or provision of information regarding data transfer to foreign country of your Personal Data in our possession, or if you wish to make a complaint or request about our processing of your Personal Data (collectively "Request"), please contact us at privacydataprotection@kbc.global.

Identification Documents:

If the person concerned is the principal, a copy of an official document such as a driver's license, health insurance card, passport or other document that confirms the person's identity.
If by proxy, documents confirming the identity of the person concerned and the proxy, a power of attorney signed and sealed by the person concerned and a certificate of seal impression.

13.4.5 Contact details for query about processing of Personal Data:

KBC Advanced Technologies Limited

Privacy and Data Protection Governance Team

Email: privacydataprotection@kbc.global
Address: Nishi-Shimbashi YS Building 5F, 2-19-2 Nishi-Shimbashi, Minato-ku, Tokyo 105-0003, Japan

13.5 UK

The Data Protection Act 2018 and/or the UK General Data Protection Regulation (“UK GDPR”) shall apply when (i) Personal Data is processed by a KBC Affiliate located in the UK, or (ii) Personal Data is processed by a KBC Affiliate located outside of the UK in so far as the processing relates to the offering of goods or services to individuals located in the UK.

13.5.1 Your Rights

Under the UK GDPR you may have the following rights with respect to our processing of your Personal Data:

1. Right to request access to your Personal Data

2. Right to request rectification

3. Right to request erasure (right to be forgotten)

You may have the right to request from us the erasure of Personal Data concerning you and we may be obliged to erase such Personal Data.

4. Right to request restriction of processing

You may have the right to obtain from us restriction of our processing of your Personal Data. In such case, your Personal Data will be marked and will only be processed by us for certain purposes.

5. Right to request data portability

6. Right to object

7. Right to lodge a complaint with UK data protection authority, the Information Commissioner’s Office

You have the right to lodge a complaint about Us to the Information Commissioner’s Office.

13.6 CALIFORNIA & TEXAS (UNITED STATES)

This section applies to the Personal Information of residents of California and Texas. In this section, the term “Personal Information” has the same definition as in the California Consumer Privacy Act (“CCPA”) and the same meaning as “Personal Data” under the Texas Data Privacy and Security Act (“TDPSA”). The terms “sale” or “sell” have the same definitions as in the CCPA and TDPSA.

13.6.1 Collection and Use of Personal Information

We may collect Personal Information directly from you, automatically from your devices when using the Services, or from third-party sources. We may have collected the following categories of Personal Information about you in the past 12 months:

Identifiers, such as full name, job position, company or employer, work address, work telephone and mobile phone number, work fax number, work email address, and IP address
Commercial information, such as purchase history, payment information, and data which is required to provide you with customer support, including correspondence with KBC staff and information submitted as part of a troubleshooting technical assistance or support request, or as part of a survey, chat, feedback or comment.
Internet or other electronic network activity information, such as device and network connection information when you interact with the KBC Websites and Applications, including browser history, search history and other information provided by your browser, advertisements and services accessed during your visit, information regarding the date and time of each visitor request, and information on your operating system
Geolocation data, such as general geolocation data obtained from internet or other electronic network activity information
Audio, electronic, visual, thermal, olfactory, or similar information, such as data collected through the recording of telephone call conversations, to the extent permitted by applicable laws
Professional or employment-related information, such as data you provide and which we automatically collect when using our Services regarding your education and work history
Inferences drawn from other Personal Information, such as a customer profile data, which consists of inferences drawn from any of the above information to create a customer profile in order to help identify your needs for KBC’s Services
Sensitive Personal Information, such as precise geolocation

13.6.2 Purpose

We may use your Personal Information for the following purposes:

To establish and manage business or customer relationships
To help manage or fulfil contracts and orders, and to provide you with product/service-related information, documents and software for product lifecycle management
To answer your inquiries and to put you in contact with our representatives to respond to your request for a quote, and to provide troubleshooting, support and technical assistance on our Services
To analyze and better understand your business needs and to improve our Services, including our customer services
To provide you with information about our offers on KBC’s products and services
To create a profile based on your interactions on our Services to understand your interest on KBC’s products and services and to provide you with a personalized experience
To detect and prevent illegal activity, including fraud, and to keep our Services and information technology systems secure, and to protect establish, exercise or defend our and third parties’ rights, to defend against lawsuits
To comply with our legal obligations, for instance our fiscal, bookkeeping and tax obligations

For more information about the purposes for which we collect and use your Personal Information, please refer to Part I Section 3 “Purpose and Legal Basis of the Processing” of this Privacy Notice. Please note that we do not use or disclose sensitive Personal Information for business purposes, other than as permitted by law.

13.6.3 Disclosure of Personal Information

We may disclose your Personal Information to third parties for the business purposes outlined in the “Disclosure of Your Personal Data” section of this Notice. We also may “sell” or “share” your Personal Information with third parties for those business purposes. In the preceding twelve (12) months, we may have sold or shared your Personal Information, or disclosed it for a business purpose, to the following categories of recipients:

Category	Categories of Third Parties to Whom We Disclosed Personal Information for Business Purposes	Categories of Third Parties to Whom We Sold or Shared Personal Information
Identifiers	Affiliates and subsidiaries. Service providers such as: customer service partners; data analytics providers; customer support providers; audit and consulting service providers. Legal authorities such as law enforcement.	Affiliates and subsidiaries. Service providers such as: customer service partners; data analytics providers; customer support providers.
Commercial information	Affiliates and subsidiaries. Service providers such as: customer service partners; data analytics providers; customer support providers; audit and consulting service providers. Legal authorities such as law enforcement.	Affiliates and subsidiaries. Service providers such as: customer service partners; data analytics providers; customer support providers.
Geolocation data	Affiliates and subsidiaries. Service providers such as: customer service partners; data analytics providers; customer support providers; audit and consulting service providers. Legal authorities such as law enforcement.	Affiliates and subsidiaries. Service providers such as: customer service partners; data analytics providers; customer support providers.

We do not knowingly sell or share the Personal Information of anyone under the age of 16.

13.6.4. California and Texas Privacy Rights

If you are a California or Texas resident, you may have the following rights:

Right to Know: You have the right to request to know and access what Personal Information we have collected about you. For California residents, this can include the categories of Personal Information, the categories of sources from which the Personal Information is collected, the business or commercial purpose for collecting, selling, or sharing Personal Information, the categories of third parties to whom we disclose Personal Information, and the specific pieces of Personal Information that we have collected about you.
Right to Delete: You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions.
Right to Correct: You have the right to request that we correct Personal Information that we maintain about you.
Right to Opt-out of Sales/Sharing: You have the right to opt-out of the sale or sharing of your Personal Information by us.
Right to Limit: You have the right to limit our use or disclosure of your sensitive Personal Information to certain purposes.
Right to Non-discrimination: You have the right not to receive discriminatory treatment for exercising any of your CCPA or TDPSA rights.
Right to Appeal – For Texas Residents: You have the right to appeal our decision with regard to your request. To submit an appeal by contacting us at the information provided in the “Data Privacy Contact” section. Please include the phrase “Personal Data Privacy Request” in the subject line. In order for us to verify your request, we need to verify your identity, so the request should include your name, address, and email address, along with a clear indication of the right(s) you wish to exercise. Please note that we may require additional data from you in order to honour your requests.

You may opt out of sales and/or sharing by following the instructions.

You may submit a request to know, delete, or correct by contacting us at the information provided in the “Data Privacy Contact” section . Please include the phrase “Personal Data Privacy Request” in the subject line. In order for us to verify your request, we need to verify your identity, so the request should include your name, address, and email address, along with a clear indication of the right(s) you wish to exercise. Please note that we may require additional data from you in order to honour your requests.

You may also use an authorized agent to act on your behalf to submit requests to exercise your rights. We will honour a request from an authorized agent provided that (i) you provide written authorization to the authorized agent to act on your behalf and we can verify your identity, and (ii) the agent submits proof of authorization. Authorized agents may use the same methods noted above to submit requests on your behalf.