The processing is based on our need to guarantee the best Services and on our legitimate interest in avoiding any service disruptions. ggregated Information: refers to statistical information about you that does not contain your Personal Data. We use this information for analysing and improving our Services and creating new services and features and to create statistical reports for our Partners and Our Network. For example, we may collect Information on your location or Content that may useful to you that you have viewed. We would like to point out that we do not share your Data in these reports. Once the relevant retention period/criterion has expired, your Data is erased pursuant to our retention policy. You can ask us for more information on our data retention criteria and policy by writing us here: [email protected] This processing is based on the execution of a contractual obligation or pre-contractual measures taken at your request.

Our Network and Car Manufacturers: Our Network in case you requested a service carried out by them (e.g. a request for a test drive close to you) or if your required their assistance or the one provided by the Car Manufacturer;These purposes rest on our legitimate interest in safeguarding our interests and protecting our users, including you. Data processed for the purposes indicated above will be retained for the period deemed strictly necessary to fulfil such purposes. However, the Data might be stored for a longer period in case of potential and/or actual claims and resulting liabilities and/or in case of other mandatory legal retention requirement and/or storage obligations. is not created using Sensitive Data such as those that may be derived from Information about your location; We are global company and our services are available in multiple jurisdictions worldwide . This means that your Data may be stored, accessed, used, processed, and disclosed outside your jurisdiction, including within the European Union, the United States of America, or any other country where our Data Processors and sub-processors are located, or where their servers or cloud computing infrastructures may be hosted. We take steps to ensure that the processing of your Data by our Recipients is compliant with the applicable data protection laws, including EU law to which we are subject. Where required by EU data protection law, transfers of your Data to Recipients outside of the EU will be subject to adequate safeguards (such as the relevant EU standard contractual clauses for data transfers between EU and non-EU countries) , and/or other legal basis according to the EU legislation. For more information about the safeguards implemented by us to protect Data transferred to third countries outside the EU, please write to us at: [email protected]

Sensitive Data: means Personal Data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership and the processing of genetic data, biometric data aimed at uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation. If you provide us with the data of third parties, you will be held responsible for having shared such information. You must be legally authorized to share it (i.e., authorized by the third party to share their information, or for any other legitimate reason). You must fully indemnify us against any complaints, claims or demands for compensation of damages which may arise from the processing of third-party Personal Data in violation of applicable data protection law Device Sensors: depending on your device, these are sensors such as accelerometers, gyroscopes, Bluetooth, Wi-fi and GPS which in one way or another share the information they collect through the Device and therefore through the Application. If enabled by the Device settings, these allow us to obtain information about your location. In some cases, communications may include product or service promotions from selected Partners . When we send out this type of communications, we can act as Joint Data Controller with the rel evant Partners . Specific information and agreements will be in place with such Partners before sending of any communication to you.Data Processor : refers to an entity that we engage to process your Personal Data solely on behalf of and pursuant to the written instructions of Stellantis Europe S.p.A. Exercise your right to portability of your Personal Data (right to data portability): according to your use of our Services , we will provide you with an interoperable file containing the Data we have about you . Our Events: these are events/showrooms organized by Stellantis Europe, Our Network, or in collaboration with other brands with which Stellantis Europe has signed partnership agreements. Delete your Data (right to erasure) : for example, when you do not want to use our Services and may not want us to retain your Data any longer; We ensure that your Data is only accessed and used by, transferred or disclosed to Recipients that need to have access to such Data.