Virtual Events Privacy Notice

This notice applies to all countries except Thailand.

View privacy notice for Thailand:

• Thai version
• English version

1. Who is responsible for the processing of your personal data?

This Virtual Event Privacy Notice ("Notice") applies to the ABB Group of companies, which means ABB Ltd, Switzerland and each entity in which ABB Ltd, Switzerland, directly or indirectly, has a majority holding or owns or controls the majority of voting rights. The ABB company that is communicating with you (referred to as "ABB" or "we"), is responsible for the processing of your personal data and controls how it is used, in accordance with this Notice. Other subsidiary companies of ABB may also receive and process your personal data, either in the capacity of controller or processor and this Notice applies equally to them.

2. The types of information we collect and use?

We collect and use personal data that concerns you in connection with the virtual event. We may collect the following categories of personal data:

• The contact information you share with us to register and communicate in the course of the event such as first and last name (including what name you indicate to appear on your virtual account ), business email address, business mobile phone number, your assistant name and email address, IP address, device identifier data (if applicable, for example mobile device ID/PC ID, tracking analytics data, cookies).
• Additional information you provide to us for invoicing, such as: business address, nationality, credit card number.
• Media assets such as photographs, videos and recordings in the course of the event. Such assets will never focus on you directly, but rather to showcase impressions of the event itself.

3. Why we use your personal data?

We may use your personal data as described above for the following purposes:

• register your attendance to virtual events and forums;
• provide you with information and services associated with the virtual event;
• provide a personal virtual event experience;
• facilitate the virtual event and provide you with an acceptable service;
• conduct and facilitate event satisfaction surveys;
• create media assets (photographs, videos and recordings) to showcase event impressions and store those assets in our brand data base;
• produce content for articles and publications about the virtual event; and
• publish photographs taken at the virtual event on ABB channels, third party channels and social media channels.

We collect only the personal data from you that we need for the purposes described above. For statistical purposes, improvement of our services and testing of our IT systems we use as much as reasonably possible anonymized data. This means that these data can no longer (in)directly identify you or single you out as an individual.

4. What happens if you do not provide us with the information we had asked you for or if you ask us to stop processing your information?

Where it concerns processing operations related to the business relationship with you, ABB will not be able to adequately establish, conduct or terminate a business relationship with you or your company and generally perform the purposes described above without certain personal data. Although we cannot obligate you to share your personal data with us, please note that this then may have consequences which could affect the business relationship in a negative manner, such as not being able to take requested pre-contractual measures to enter into a contract with you or your company or to establish and continue the business relationship you have asked for.

5. The legal basis we rely on

We use your personal data for the purposes described in this notice based on one of the following legal bases, as applicable:

• We will rely on our legitimate interests to process your personal data within the scope of the employment or business relationship we have with you. Our legitimate interests to collect and use the personal data for this purpose are event management and interaction (e.g. registration, , etc.).

You may obtain a copy of our assessment of why we may process your personal data for these interests by submitting a request at www.abb.com/privacy.

6. Parties we share your personal data with (in and outside the EU and EEA or outside the country where the ABB company that controls your data is located)

We only share your personal data with other ABB affiliates or third parties as necessary for the purposes described in the table below. Where we share your personal data with an affiliate or third party so that it is transferred to or becomes accessible from outside the European Union (“EU”) and the European Economic Area ("EEA") or outside the country where the ABB company that controls your data is located, we always put adequate safeguards in place to protect your personal data. Examples of these safeguards are an adequacy decision of the European Commission, Standard Contractual Clauses. We have taken additional measures for the transfer of data from within to outside the EU, EEA and outside the country where the ABB company that controls your data is located to protect your personal data. If you would like an overview of the safeguards which are in place, please submit a request at www.abb.com/privacy.

7. How long we keep your personal data

Based on mandatory legislation, ABB must keep certain personal data for a minimum period of time. We only keep your personal data that we have collected in the course of the event registration for 5 years.

Specifically, regarding the chat, files, registration, attendance report, transcript and Q&A functionalities used in MS Teams – if they are available for a specific type of event – the personal data collected for these purposes will be stored depending on the source of data storage (Mailbox, SharePoint, OneDrive), also for 5 years maximum. After the initial removal of this type of data, it is retained for 186 days overall, and following that period it is stored with access limited to a restricted number of platform administrators only, and not processed for any other purposes than storage, until the 5 years period elapses.

At the same time, applicable data protection laws require that we do not keep personal data in an identifiable form for any longer than is necessary for the purpose for which the personal data is being processed. Through the setting of IT applications and policies we ensure that our keeping of your personal data is deleted when we no longer need it.

For more information regarding specific retention periods that apply to your personal data, please submit a request at www.abb.com/privacy.

8. Your data privacy rights

Depending on the jurisdiction in which you are located and in which your personal data is processed, you may have the following rights:

Please note that the rights described above are not absolute, and that your request cannot always be met entirely. For example, sometimes we cannot delete or restrict the processing of your personal data as we may have legal obligations or contractual obligations to keep certain such personal data.

You may request to enforce your data privacy rights at www.abb.com/privacy.

Contact and further information

If you want to access your personal data, make use of any of your other rights mentioned above or if you have any questions or concerns about how ABB processes your personal data, please contact our Group Data Protection Officer at privacy@abb.com, or submit your complaint at www.abb.com/privacy.

Should you not be satisfied with our response or believe we are processing your personal data against the law, you may also have the right to file a complaint with the Data Privacy Authority in your country of residence or work, or seek a remedy through the courts where you believe an infringement of data privacy laws may have taken place.

Date of publication: April 2024