II. Personal Information

A. Personal Information Collected

Although most areas of the Services can be accessed without submitting any information that personally identifies you, some areas (such as registering for training with Körber University) require certain personal information from you. The types of personal information that we may collect from you may include, without limitation:

• Contact information, such as name, postal address, email address, and phone number; or
• Demographic information, such as age, date of birth, gender, job information, and postal code.

B. Legal Basis

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.

However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you (for example, when providing the Services), or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. In some cases, we may also have a legal obligation to process personal information about you or may need to process personal information in order to exercise, establish, or defend legal claims.

C. How We Use Personal Information

We may use information we obtain about you to:

• Process orders you place and complete other transactions you have requested using the Services, and provide you with products and services you request;
• Send you information or materials you request;
• Maintain a record of your purchases and other transactions using the Services;
• Respond to your questions and comments and provide customer support;
• With your consent, communicate with you about our products, services, offers, and promotions;
• Operate, evaluate, and improve our business and the products and services we offer;
• Analyze and enhance our marketing communications and strategies;
• Analyze trends and statistics regarding use of the Services and transactions conducted using the Services;
• Protect against and prevent fraud, unauthorized transactions, claims, and other liabilities, and manage risk exposure, including by identifying potential hackers and other unauthorized users;
• Enforce our Terms of Use and other agreements; and
• Comply with applicable legal requirements and industry standards.

We may combine the information we collect with publicly available information and information we receive from our parent, affiliate, or subsidiary companies, business partners, and other third parties.

We also may use the information we obtain about you in other ways for which we provide specific notice at the time of collection.

D. How We Disclose Personal Information

We may disclose aggregated information about our user, and information that does not identify any individual user, without restriction. We may disclose personal information about you:

• To contractors, service providers, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them;
• To comply with any court order, law, or legal process, including to respond to any government or regulatory request;
• To enforce or apply our Terms of Use and other agreements;
• If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Körber, users of the Services, or others; and
• With your consent.

We also reserve the right to transfer your personal information to a buyer or other transferee in the event of a merger, divestiture, restructuring, reorganization, dissolution, sale, or other transfer of some or all of our assets. Should such a sale, merger, or transfer occur, we will use reasonable efforts to direct the transferee to use your personal information in a manner that is consistent with our Statement.

E. Data Security and Retention

We have implemented measures intended to protect your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. Please note that the electronic transmission of information is not completely secure. We cannot guarantee that the security measures we have in place to safeguard personal information will never be defeated or fail, or that such measures will always be sufficient or effective. Any transmission of personal information is at your own risk.

We will retain your information for as long as your account is active or as needed to for our internal purposes. You may request to delete your account information by contacting us at info.sc.msp@koerber-supplychain.com.

F. Where We Store your Personal Information

The data we collect from you may be transferred to and stored at a destination outside of the European Economic Area ("EEA"). It may also be processed by staff operating outside of the EEA who works for us, one of our group companies or our suppliers for the purposes set out in this Statement. In order to ensure that any third party processes your personal data in a way which is consistent with the EU’s laws on data protection, to the extent that we share data outside of the EEA, we will seek to put in place agreements with those third parties, including with our group companies, which contain provisions approved by the EU for protecting personal data.

• Right to Access. You have the right to request a copy of any information that we hold about you. If you would like a copy of this information, please contact us by writing to us at the address or email address listed below. We may request proof of your identity before sharing such information with you.
• Right to Rectify. If you discover that the personal information we hold about you is incorrect or out of date, you may ask us to correct that information.
• Right to be Forgotten/Cease Processing. You may ask us to delete or cease processing the personal information we hold about you in certain circumstances. It may not be possible for us to delete or cease processing all the personal information we hold about you where we have an ongoing relationship, however please contact us and we will do our best to assist with your request.
• Right to Withdraw Consent. Where we process your data on the basis that you have consented to such processing, you have the right to withdraw your consent at any time by unsubscribing or contacting us, as applicable.
• Right to Portability. You may ask us to transfer your personal information to a third party in certain circumstances. If you would like any other information regarding this right, please contact us.
• Promotional Communications. If you do not want us to use your email address/contact information to promote our products or services, you can opt out by sending us an email stating your request to info.sc.msp@koerber-supplychain.com. If you have received a promotional email from us, you can also opt out of receiving future promotional emails from us by following the unsubscribe instructions contained in such email.