Privacy Statement for the Creation of Customer Accounts in the New Fleetboard Portal

This Privacy Statement applies to the creation of online customer accounts in the new Fleetboard Portal and to any agreements containing express reference to this Privacy Statement.

The new Fleetboard Portal is a platform for the use of various products and services related to the Fleetboard you have booked as well as Mercedes-Benz Uptime telematics services. The Portal allows you to display and manage your vehicles, your vehicle fleet and associated products and services of Mercedes Benz Germany, Daimler Truck AG and other subsidiaries of Daimler Truck AG.

In this context, protecting your personal data is our top priority and is taken into account for all of our business processes. The following Privacy Statement provides you with a detailed overview of the processing of your personal data by Daimler Truck AG in connection with the creation of customer accounts in the new Fleetboard Portal. "Personal data" means all information that relates to a natural person who has been or can be identified. This data protection notice explains the type, scope and purpose of collecting personal data at Daimler Truck AG and how we handle this data. In addition, you will find out which rights you have with regard to the processing of your personal data.

1. To whom does this privacy statement apply?

On this page, we inform you about the collection and processing of your personal data when you have created a customer account in the new Fleetboard Portal.

If the agreement is related to other services, the data protection notices of these other services also apply.

2. Who is responsible for data processing?

The controller for the processing of personal data as set forth below (unless another controller is expressly listed) is:

Daimler Truck AG

Fasanenweg 10
70771 Leinfelden-Echterdingen

Germany

E-Mail:  contact@daimlertruck.com

HRB No.: 762884

The contact person for your data protection questions is our data protection officer:

Chief Officer for Corporate Data Protection

Daimler Truck AG

Fasanenweg 10

HPC DTF2B

70771 Leinfelden-Echterdingen

Germany

E-Mail: dataprivacy@daimlertruck.com

3. What data will be processed?

We process personal data ("Data") under the principles of data reduction and data minimization only to the extent necessary, as permitted due to applicable legal regulations, according to our obligations, or if you have granted your consent.

Provided that nothing else arises from the following, the terms "process" and "processing" particularly refer to the collection, the use, the disclosure and the transmission of personal data (on this subject, see Article 4 (2) of the EU General Data Protection Regulation ("GDPR")).

Data Related to Your Registration

During registration for the new Fleetboard Portal, we collect data that is required for the fulfillment of our contractual obligations to you or for which you have given your consent. In particular, that data includes the following:

Customer master data (e.g. company name, current address, phone number and e-mail address, first name, last name, language).

Login details (username and password).

Any other data requested on the registration form (role and period of validity).

Data relating to use of the Customer Portal

In the context of using the Customer Portal and its functions (particularly for the migration, display and management of your vehicles and your vehicle fleet and associated products and services), we collect, process and use your data as a processor on behalf of the controller. If you have any questions, please contact the respective controller.

We only process personal data from publicly accessible sources (e.g. authorities, Internet) if permitted by law – for instance, because it is necessary for the provision of our services or you have granted your consent.

4. What is my data used for (purpose of processing) and on what basis (legal basis) does this take place?

Collection and processing to fulfill legal obligations

We collect and process your personal data set forth in more detail in section 3 for initiating and fulfilling our contractual obligations to you (Article 6 (1b) of the GDPR). For example, we process your contact data as part of registration in order to be able to display the services for you.

Processing based on legitimate interest

In addition, we will process your personal data to the extent required for the protection of the legitimate interests of Daimler Truck AG or a third party (Article 6 (1f) GDPR). In particular, this rule applies in the following cases:

- We process personal data for the assertion, exercise and defense of legal claims or to comply with a legal obligation, and in these cases we are entitled to make this data available to third parties (particularly government agencies).

- In order to ensure IT security and IT operations.

Contracted processing (invitation management)

In addition, we also process such personal data on the behalf of authorized contractual partners from whom we have permissibly received contracts, to the extent that doing so is necessary for the fulfillment of the agreement concluded with you on accessing and using the Customer Portal, that you have granted corresponding consent or that you have issued us corresponding instructions. We use this data to connect you to the data you entered during the registration process and enable the display and management of vehicles and your vehicle fleet and the associated services and products.

5. Will my data be shared?

We do not share your personal data with third parties unless you have consented to the disclosure of this data or we are entitled or obligated to disclose data due to legal requirements and/or by official order or court order.

We use external data processors (e.g. IT service providers) to perform our services. The disclosure of your data to these organizations takes place under strict confidentiality obligations and under the criteria of the GDPR and the German Federal Act on Data Protection. The data processors commissioned by us, who may only process the data for us and not for their own purposes, are obligated to comply with the strict standards of Daimler Truck AG.

6. Will my data also be transmitted to non-EU countries?

Personal data is generally not processed outside the EU/EEA. In exceptional cases, service providers who operate our systems for us, potentially in non-European countries, may be able to access the aforementioned data in the event of system maintenance. Our service providers do not actively process this data, but for organizational reasons, the possibility of access cannot be ruled out. We currently use a service provider in India for the operation of the systems used for the aforementioned purposes. If personal data is transmitted outside the EEA, the EU Commission's "standard contractual clauses," which can be accessed at https://ec.europa.eu/info/law/law-topic/data , shall generally apply.

7. Does automated decision-making take place?

No automated decision-making takes place.

8. How long will my data be stored?

We process and store your personal data only as long as we need it to meet our contractual or legal obligations. If there is no longer a legitimate interest, we will delete the data or, if this is not possible, block it. We normally delete your contractual data one year after the end of the contractual relationship at latest.

9. What rights do I have with respect to the controller?

You have extensive rights regarding the processing of your personal data. Making you aware of these rights is very important to us:

Right of access: You have the right to access personal data stored by us, particularly to determine for what purpose the data is processed and how long the data is stored (Art. 15 GDPR).

Right to rectification of inaccurate data: You have a right to demand from us the immediate rectification of your personal data, should it be inaccurate (Art. 16 GDPR).

Right to erasure: You have the right to demand that we erase your personal data. You can demand the erasure of your personal data if we, for instance, no longer need the personal data for the purposes for which it was collected or otherwise processed, if we unlawfully process the data, or if you have rightfully objected to the use of your data, revoked your consent to the same or there is a legal obligation to delete it (Art. 17 GDPR).

Right to restriction of processing: You have the right to demand a restriction of the processing of your data. This right especially applies for the duration of the review if you have disputed the accuracy of your personal data, as well as in the case that, for an existing right to deletion, you request restricted processing instead of erasure. Furthermore, there will be a restriction of processing in the case that the data is no longer needed for our purposes, but you still need the data in order to assert, exercise or defend legal rights, as well as if the successful assertion of an objection is disputed between you and us (Art. 18 GDPR).

Right to data portability: You have the right to receive personal data about you that you have provided to us in a structured, commonly used and machine-readable format (Art. 20 GDPR) if it has not been deleted yet.

If you would like to exercise one of your rights or receive more information about them, please send an e-mail to dataprivacy@daimlertruck.com or write to:

Daimler Truck AG

Birte Mössner (data protection officer)

Fasanenweg 10

HPC DTF2B
70771 Leinfelden-Echterdingen

10. Can I object to the processing of my personal data?

For reasons relating to your particular situation, you have the right to file an objection at any time to the processing of personal data pertaining to you that is collected under Art. 6, 1 sentence 1 f) GDPR. We will no longer process your personal data unless we can prove compulsory, legitimate reasons for processing that outweigh your interests, rights and freedoms, or if the processing is required to assert, exercise or defend against legal claims.

If you wish to object to the processing of your personal data, please send us an e-mail at dataprivacy@daimlertruck.com or a written notice addressed to Daimler Truck AG, Birte Mössner (data protection officer), Fasanenweg 10, HPC DTF2B, 70771 Leinfelden-Echterdingen. In case of an objection, however, it is possible that we will no longer be able to provide the services agreed with you or not within the agreed scope.

11. Right to lodge a complaint with a supervisory authority

If you feel that we are violating the GDPR by processing personal data about you, you have the right to lodge a complaint with a supervisory authority, e.g. a data protection agency responsible for your place of residence, workplace or location where the alleged data protection violation occurred.

Last update: November 2021

Daimler Truck AG