Privacy Notice Content Production and Publishing

1. Who is responsible for the processing of your personal data?

This Privacy Notice ("Notice") applies to the ABB Group of companies, which means ABB Ltd, Switzerland and each entity in which ABB Ltd, Switzerland, directly or indirectly, has a majority holding or owns or controls the majority of voting rights. The ABB company that is communicating with you or to which you are providing goods or services (referred to as "ABB" or "we"), is responsible for the processing of your personal data and controls how it is used, in accordance with this Notice. Other subsidiary companies of ABB may also receive and process your personal data, either in the capacity of controller or processor and this Notice applies equally to them.

2. The types of information we collect and use?

We collect and use personal data that concerns you in connection with our content production. We may collect the following categories of personal data:

• The contact information you share with us to create the content for an article or press release: such as first and last name, birth date, business email address, personal email address, business mobile phone number, personal mobile phone number, your assistant name and email address (if applicable), personal address.
• Media assets such as photographs, videos and recordings taken in the course of an event, interview, photoshoot or other appointments.

3. Why we use your personal data?

We may use your personal data as described above for the following purposes:

• create media assets (photographs, videos and recordings) and store those assets in our brand data base;
• produce content for articles, publications, press releases and brochures; and
• publish media assets, articles, publications, press releases and brochures on ABB channels, third party channels and social media channels.

We collect only the personal data from you that we need for the purposes described above. For statistical purposes, improvement of our services and testing of our IT systems we use as much as reasonably possible anonymized data. This means that these data can no longer (in)directly identify you or single you out as an individual.

4. What happens if you do not provide us with the information we had asked you for or if you ask us to stop processing your information?

Where it concerns processing operations related to the business relationship with you, ABB will not be able to adequately establish, conduct or terminate a business relationship with you or your company and generally perform the purposes described above without certain personal data. Although we cannot obligate you to share your personal data with us, please note that this then may have consequences which could affect the business relationship in a negative manner, such as not being able to take requested pre-contractual measures to enter into a contract with you or your company or to establish and continue the business relationship you have asked for.

5. The legal basis we rely on

We use your personal data for the purposes described in this notice based on one of the following legal bases, as applicable:

• We will request your consent for the activities described in this privacy notice, for example for the publication of your image on different channels.
• We will rely on our legitimate interest to process your personal data within the scope of the employment or business relationship we have with you. Our legitimate interests to collect and use the personal data for this purpose is storing media assets in our brand asset management database and sharing them with ABB subsidiaries.

You may obtain a copy of our assessment of why we may process your personal data for these interests by submitting a request at www.abb.com/privacy.

6. Parties we share your personal data with (in and outside the EU and EEA or outside the country where the ABB company that controls your data is located)

We only share your personal data with other ABB affiliates or third parties as necessary for the purposes described in the table below. Where we share your personal data with an affiliate or third party so that it is transferred to or becomes accessible from outside the European Union (“EU”) and the European Economic Area ("EEA") or outside the country where the ABB company that controls your data is located, we always put adequate safeguards in place to protect your personal data. Examples of these safeguards are an adequacy decision of the European Commission, Standard Contractual Clauses. We have taken additional measures for the transfer of data from within to outside the EU, EEA and outside the country where the ABB company that controls your data is located to protect your personal data. If you would like an overview of the safeguards which are in place, please submit a request at www.abb.com/privacy.

7. How long we keep your personal data

Based on mandatory legislation, ABB must keep certain personal data for a minimum period of time. We only keep your personal data for as long as necessary for the purposes described in this privacy notice, but not longer than for five years or until you withdraw your consent.

At the same time, applicable data protection laws require that we do not keep personal data in an identifiable form for any longer than is necessary for the purpose for which the personal data is being processed. Through the setting of IT applications and policies we ensure that our keeping of your personal data is deleted when we no longer need it. ABB will to the extent necessary delete posts, articles, press releases or destroy brochures, where your image was used; and will remove it from all databases to avoid further usage.

For more information regarding specific retention periods that apply to your personal data, please submit a request at www.abb.com/privacy.

8. Your data privacy rights

Depending on the jurisdiction in which you are located and in which your personal data is processed, you may have the following rights:

Please note that the rights described above are not absolute, and that your request cannot always be met entirely. For example, sometimes we cannot delete or restrict the processing of your personal data as we may have legal obligations or contractual obligations to keep certain such personal data.

You may request to enforce your data privacy rights at www.abb.com/privacy.

Contact and further information

If you want to access your personal data, make use of any of your other rights mentioned above or if you have any questions or concerns about how ABB processes your personal data, please contact our Group Data Protection Officer at privacy@abb.com, or submit your complaint at www.abb.com/privacy.

Should you not be satisfied with our response or believe we are processing your personal data against the law, you may also have the right to file a complaint with the Data Privacy Authority in your country of residence or work or seek a remedy through the courts where you believe an infringement of data privacy laws may have taken place.

Date of publication: June 2023