Last updated: September 2023

Rimac Technology d.o.o. (“Rimac Technology”) is committed to protecting and respecting your privacy. We are a company established in Croatia with a registered office at Ljubljanska 7, 10431 Sveta Nedelja, Croatia and registered company number / OIB: 70036017051.


For the purpose of applicable EU laws we are the data controller for the processing described in this Privacy Policy.


This Privacy Policy explains how we process your personal data in connection with: (i) your use of our website(s), including the Rimac Technology website (https://www.rimac-technology.com/), Campus website (https://campus.rimac-group.com/home/), Aftersales Portal website (https://aftersales.rimac-technology.com/login/ ) and Energy website (https://www.rimacenergy.com/ ) (each a “Website” and collectively, our “Websites”), and (ii) in connection with any other products or services we provide to you, such as when you register at and use our Aftersales Portal (together, the “Services”). Data processing means any operation which is performed on personal data, such as collection, recording, storage, alteration, retrieval, use, disclosure, erasure or destruction.


This Privacy Policy supplements any other privacy related notices and policies we may provide to you from time to time, and is not intended to override them. If you do not agree with this Privacy Policy in general or with any part of it, you should not access the Website, use our Services or otherwise provide your information to us.


Our Website and Services are not intended for children, and we do not knowingly collect data relating to children.


We change our Privacy Policy from time to time. We will note on our Website when our Privacy Policy has been updated. Please check the Website regularly for notices of changes to our Privacy Policy.

THE INFORMATION WE COLLECT


Information you provide to us


You provide some or all of the following personal data to us when you use our Websites and/or Services, by filling in forms connected to the Services (such as the newsletter form), by creating an account with us (such as the registration at the Aftersales Portal), when you enter into any of our competitions, promotions or surveys, when you correspond with us by phone, e-mail or via the Aftersales Portal, when you report a problem with our Services, when you make a claim, when you submit a service request through our Aftersales Portal, when you request a spare part through our
[Aftersales Portal], or through your other activities connected to our Services or usage of our Websites:


• your identity and contact details, such as your first and last name, email address, phone number, the name of and your relationship with a particular distributor or customer, username and password. This information is mandatory when registering an account on our Aftersales Portal, otherwise it is provided on a voluntary basis. For the avoidance of doubt, we have established the Aftersales Portal as part of our B2B (business to business ) customer service offering and this Aftersales Portal shall not be used, nor is intended to be used, by end customers. For more information about the Aftersales Portal please consult the Terms of Use-Aftersales portal of Rimac Technology.


Information we collect automatically


When you visit our Website and use our Services we automatically collect the information sent to us by your computer, mobile phone or other device. This information includes the name of the domain you use to access the Internet, the country from which the visit originated, the browser and operating system (OS) you use to view our Website, the date and time you visited our Website, model of mobile
device you use, which Services you use, when and in which manner you use our Services. If you have used another website to find us, we will obtain the name of the website from which you have linked to our web page.


Information we collect from third parties


We may collect your information from third parties, such as from Facebook or Google, such as when you decide to log in to the Website by using your Facebook or Google account. In such cases we will only collect the following information: your first and last name, and your email address.


HOW DO WE USE YOUR PERSONAL DATA AND WHAT LAWFUL BASIS DO WE RELY ON?


In order to be responsive, provide effective services, and maintain our business relationship, as a matter of our legitimate interests, and/or the legitimate interest of our business customer and/or distributor in case of the Aftersales Portal, we process your personal data for the following purposes:

• your registration at and usage of our Aftersales Portal as a representative of our business
customer and/or distributor;
• administer the Website and Services, and for internal operations, in order to conduct
troubleshooting, data analysis, testing, research, statistical and survey analysis;
• maintain the safety and security of our users, the Website, our Services, and business;
• send you announcements in relation to security, privacy or administrative related
communications (these communications are not marketing orientated so you cannot opt out of them);
• personalize our Website and our Services to ensure content is presented in the most effective manner for you and your device; and
• improve and develop our Website and Services.


We obtain your consent to process your personal data for the following purposes:


• sign you up for our newsletters or alerts and communicate with you about our products, services, marketing, promotions, events and other news or those of our affiliates that we think will be of interest to you; and
• personalize our Services for you.


In addition, we use some or all of the above information to comply with any applicable legal obligations, to enforce any applicable terms and conditions and/ or terms of service, and to protect or defend the Websites, Services, our rights, the rights of our users, or others.


COOKIES


We use cookies and other similar technologies to collect information about your browsing activities over time and across different websites following your use of our Websites and Services. Cookies allow us to recognize and count the number of users and to see how users move around our website when they are using it. This helps us to improve our Services and the way our website works. You can find more information about cookies and how to manage them here. As required by applicable law, we will
collect your consent to use cookies and similar technologies unless these are strictly necessary.
For more information, please refer to our Cookies Policy.


HOW THE COMPANY SHARES YOUR INFORMATION


We share your personal data as follows:


With service providers and vendors for business purposes in our legitimate interests. Such third parties include: (i) data analytics vendors; (ii) security vendors; and (iii) website hosting vendors. These service providers assist us with many different functions and tasks, such as providing data storage and disaster recovery services and communicating with you. Such service providers will have access only to the information necessary for performing their obligations towards us and will process your personal data under strict contractual obligations and in accordance with applicable data privacy laws.

With our business customer and/or distributor which you represent, in our legitimate interests, for purposes of business communication and performance of the contract with customer and/or distributor, all in relation with our Aftersales Portal. With professional advisors, in our legitimate interests or as required by law. As necessary, we will share your personal data with professional advisors functioning as service providers such as auditors, law firms, or accounting firms.

For legal and security reasons and to protect our services and business, in our legitimate interests or as required by law. We will share your personal data with regulators, law enforcement agencies, public authorities, or any other relevant organizations: (i) in response to a legal obligation; (ii) if we have determined that it is necessary to share your personal data to comply with applicable laws or any
obligations thereunder, including cooperation with law enforcement, judicial orders, and regulatory inquiries; (iii) to protect the interests of, and ensure the safety and security, of us, our users, a third party or the public; (iv) to exercise or defend legal claims; and (v) to enforce our terms and conditions, other applicable terms of service, or other agreements.


With our affiliates, in our legitimate interests. We may share your personal data with companies within our corporate family.


In connection with an asset sale or purchase, a share sale, purchase or merger, bankruptcy, or other business transaction or re-organization, in our legitimate interests. We will share your personal data with a prospective buyer, seller, new owner, or other relevant third party as necessary while negotiating or in relation to a change of corporate control such as a restructuring, merger, or sale of our assets.

WHERE WE STORE YOUR INFORMATION


Your personal data will be processed in the Republic of Croatia. However, in some cases, your personal data will be transferred to, and stored at/processed in countries outside the European Economic Area (“EEA”). For example, your personal data is processed by service providers who act on our behalf and are located outside the EEA.


To legitimize transfers of data outside the EEA or countries which have not been deemed by the European Commission as providing an adequate level of protection for personal data, we rely on the European Commission Standard Contractual Clauses. Please contact our Data Protection Officer for more information about this.


HOW LONG DO WE STORE YOUR PERSONAL DATA


We will retain your personal data as follows:


• your account data as a representative or contact of our business customer or a distributor at
the Aftersales portal 12 months after the account has been closed;
• your technical usage information for 24 (twenty-four) months.


We also retain and process your personal data as necessary to comply with our legal obligations, resolve disputes and enforce our terms and conditions, other applicable terms of service, and our policies. If you stop using our Services, if you delete your account with us or if you stop using our Website, we may store your information in an aggregated and anonymized format; we may use anonymized information indefinitely without further notice to you.

SECURITY


Although we do our best to protect your personal data, we cannot guarantee the security of your information transmitted through the Website, over email, or text/SMS; any transmission is at your own risk.


YOUR RIGHTS


You have certain rights in relation to your personal data:
Access: You have the right to access personal data we hold about you, how we use it, and who we share it with.

Portability: You have the right to receive a copy of the personal data we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

Correction: You have the right to correct any of your personal data we hold that is inaccurate.

Erasure: In certain circumstances, you have the right to delete the personal data we hold about you.

Restriction of processing to storage only: You have the right to require us to stop processing the personal data we hold about you, other than for storage purposes, in certain circumstances.

Objection: You have the right to object to our processing of your personal data.
Some of these rights only apply in certain circumstances and all of these rights may be limited by law. For example, where fulfilling your request would adversely affect other individuals or our trade secrets or intellectual property, where there are overriding public interests or where we are required by law to retain your personal data.

To exercise any of these rights, you can contact dpo@rimac-technology.com. We will respond to requests to exercise these rights without undue delay and at least within one month (though this may be extended by a further two months in certain circumstances).


THIRD PARTY LINKS


Our Website may contain links to other online platforms, plug-ins or other applications operated by third parties. We do not control such other sites or applications, and are not responsible for their content, their privacy policies, or their use of your information. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Website and/or users of those third-party online platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself,
imply any endorsement of the content on such platforms or of their owners or operators except as disclosed on the Website. We expressly disclaim any and all liability for the actions of third parties, including but without limitation to actions relating to the use and/or disclosure of personal data by third parties. Any information submitted by you directly to these third parties is subject to that third party’s privacy policy.

COMPLAINTS


If you have complaints about how we process your personal data, please contact our Data Protection Officer at dpo@rimac-technology.com and we will respond to your request as soon as possible.
If you think we have infringed data protection laws, you can file a claim with the data protection supervisory authority in the EEA country in which you live or work or where you think we have infringed data protection laws, as applicable to you.


CONTACT


We welcome your questions, comments, and concerns about this Privacy Policy or your personal data. Please send us any feedback to the following address: Rimac Technology d.o.o., Ljubljanska 7, 10431 Sveta Nedelja, Republic of Croatia.

You can also contact our Data Protection Officer at dpo@rimactechnology.com