PRIVACY NOTICE
PLEASE READ: THE FOLLOWING PRIVACY NOTICE PERTAINS TO PERSONAL DATA COLLECTED WHEN YOU ENROLLED, THROUGH OUR WEBSITE, IN THE AFS CONNECT – CONNECTIVITY PROMOTION 2023 PROGRAM. TO VIEW OUR PRIVACY STATEMENT ADDRESSING THE DATA COLLECTED AND PROCESSED BY COMPANY IN YOUR USE OF THE TELEMATICS SERVICES PROVIDED FOR THROUGH AFS CONNECT, PLEASE READ OUR TELEMATICS PRIVACY STATEMENT.

This Privacy Notice explains how personal data (“Data”) provided by you to - and collected by - CNH Industrial America LLC (“Company”) will be handled in compliance with applicable laws and regulations. We are committed to protecting and respecting your privacy.

1. HOW WE OBTAIN DATA
Participation to this promotion is completely voluntary. In case you decide to participate, you agree to the collection, use or disclosure of your Data by the Company in accordance with this Privacy Notice and the Company will process only the personal data strictly necessary to manage the contest, as detailed under paragraph 2:

a. Basic identification and contact information (e.g., name, address, phone number, e-mail, myCaseIH username)
b. Commercial information (e.g. business name, address, phone number, e-mail)
We do not intend to collect, maintain, or disclose Data of categories other than those necessary for the purposes listed in this Privacy Notice.

2. HOW WE USE DATA
We collect, use and process your data for managing your subscription, as well as managing your myCaseIH and AFS CONNECT accounts.
Data will be processed and protected in compliance with principles of fairness, lawfulness and transparency and in accordance with the provisions of applicable laws and regulations. Data may be processed electronically and manually, in digital or paper form.

3. CONSEQUENCES OF FAILURE TO PROVIDE DATA
When you are asked to provide personal data, you may refuse. However, if you choose not to provide data necessary for the conduct of the prize contest, this may result in our inability to allow you to participate in the prize contest.

4. HOW WE SHARE YOUR DATA
Data may be shared and communicated to third party processors or controllers such as: our subsidiaries and affiliates of the CNH Industrial, service providers, business partners, insurance companies, based in and outside the European Union, which are under specific contractual obligations and using the Data solely for the fulfilment of the purposes listed above. For California residents: Under the California Consumer Privacy Act (CCPA) definitions of “sale” and “sharing” of Data, in the preceding twelve (12) months, we have not “sold” your Data for either monetary or other valuable consideration nor have we “shared” your Data for the purpose of cross-context behavioral advertising.

5. HOW WE TRANSFER YOUR DATA
In order to perform Data processing activities as detailed above, we may transfer Data in countries outside of the European Economic Area (EEA), including storing such Data in digital or physical databases managed by entities acting on our behalf. Database management and Data processing are limited to the purposes of the processing and are carried out according to applicable data protection laws and regulations. Data is transferred outside of your country and the EEA (or outside the
Country where the Data Controller is established) only in compliance with the provisions set forth by applicable laws including, if appropriate, participating in the applicable cross-border transfer frameworks or contractual measures to guarantee that data is properly safeguarded and processed.

6. RETAINING YOUR PERSONAL DATA
We maintain Data in our systems and archives for as long as necessary to pursue the purposes described in this Privacy Notice taking into account, when applicable, legal and contractual requirements. When Data is no longer necessary for the purposes for which it is processed, Data is deleted or kept in a form which does not permit the identification of data subjects, provided that we are not legally required or permitted to hold such Data. We may continue to store Data for a longer period, as may be necessary to protect our interests related to potential liability connected to the provision of the services or products or the processing of Data.

7. DATA CONTROLLER
CNH Industrial America LLC, with offices at 700 State Street, Racine WI 53404, is the Controller for the Data it collects, processes and stores in the framework of this Privacy Notice.

8. YOUR RIGHTS REGARDING YOUR DATA
You may exercise your rights as defined by applicable laws and regulations, among these:

- Right of access: right to obtain a confirmation as to whether or not your personal information is being processed, and, if so, to demand to gain access to your personal data.
- Right to rectification: right to obtain the rectification of your personal data that you may consider inaccurate and to have incomplete information being completed, including by means of providing a supplementary statement.
- Right to erasure: right to obtain the erasure of your personal data without undue delay.
- Right to object to data processing: right to object at any time to the processing of your personal data without prejudice to the legitimate interest of the Controller.
- Right to limit the data processing: right to obtain from the Controller a limitation on the processing activities when the accuracy and the precision of personal data is disputed for the time necessary for the Controller to verify the accuracy of personal data.
- Right to data portability: right to receive the personal data you provided to the Controller in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another data Controller.
- Right to make a complaint: if you believe the data processing has been carried out illicitly or not compliant with applicable laws and regulations, you have the right to raise a complaint with the Supervisory Authority of the Member State in which you reside or work habitually or of the State where any breach has occurred.

You can exercise the abovementioned rights by contacting us as follows:

- Filling our online Privacy Request Form.
- Writing an email to Privacy-NA@cnhind.com
- Sending a letter to the Controller at the address indicated in Section 7 of this Privacy Notice, with attention to “Privacy Compliance”
- If you are a California resident, you may also call us at toll-free number (877) 422-7344.

Should you send us a request, we may need to obtain additional personal information from you to verify your identity and contact you, if necessary. This information, together with other Data we already withhold, will then be processed to meet your request, as required by applicable law. Where necessary, certain information may be transferred to other companies within or outside the CNH Industrial Group that act as data processors of your Data, in order to meet your request. Your Data will be processed for the necessary amount of time to evaluate and handle your request, after which your Data will be archived for a suitable time period allowing us to demonstrate that the request has been handled correctly and timely.