This Privacy notice informs you of Schneider Electric privacy practices and how

we protect personal information.

As a global company, we commit to ensure an adequate level of protection for personal

information in compliance with applicable laws. We have adopted internal policies which
impose common rules for the collection, use and disclosure of personal information by
all entities globally. To know more, please read our Data Privacy Policy.

We commit to serve you, our customers with care, consideration, and respect and to
protect your privacy and personal information.

1. What is the scope of this privacy notice?

This privacy notice applies to a collection of Schneider Electric services delivered via
WhatsApp (“the service”) website and mobile application. The service provides access
to a range of Schneider Electric provisions such as the ability to search and view
product offer information, access promotional content, and engage online customer
support.

This notice supplements our Global Data Privacy Policy. It explains what personal
information will be collected through your use of the service, how the information will be
used and how you can control the collection, correction and/or deletion of information.

2. Who is in charge of data processing?

The processing of personal information is carried out as data controller by the entities of
the Schneider Electric Group (“we”) you interact with when you enter in contact with us
for instance by using this application.

Schneider Electric Industries SAS, 35 Rue Joseph Monier 92500 Rueil Malmaison -
France, Schneider Electric’s European Head Office, is the data controller of central data
processing activities by providing a platform that manages the access to several
services offered by Schneider Electric.

Third-party vendors, including Salesforce.com and WhatsApp (owned by Meta), are

engaged in processing personal information collected while using this service. We
recommend that you read and understand both Salesforce.com's privacy
policy and Meta's privacy policy to be informed of how your data may be processed and
managed by these organizations and be aware of any risks associated with that
processing.

3. What types of personal information do we process? And why do we collect and

use personal information?

Public
To provide you with a better service, we process the following categories of personal
information:

Categories of personal
Source In a nutshell
information
We obtain basic information required, including
contact details, to register and identify you as a
user of our services and delivery platform
(WhatsApp).

To ensure your consent and preferences are

Contact Information:
recorded and honored.
• Mobile number
Information
• Name registered on
you provide
WhatsApp
For relationship management purposes which
may, based on your consent, include
communicating promotional messaging about
products, services and digital content.

It is important that you refrain from sharing sensitive personal information during chat
interactions. Some examples of sensitive personal information include information
related to health, financial status, sexuality or gender, political or religious affiliations,
and other personal characteristics or conditions.

4. How long do we keep your personal information?

We keep information as needed to perform the purposes described above, taking into
consideration the need to provide the services, security requirements, legal
requirements, and statute of limitations.

Any personal information we obtain with your consent for marketing purposes will be
retained for three years after the end of our relationship or since the last interaction with
us.

As personal information may be processed by or through third parties

including Salesforce.com and Meta, Schneider Electric does not control how long these
entities may retain your data. We encourage you to read and understand
both Salesforce.com's privacy policy and Meta's privacy policy for information related to
their data retention policies.

Public
5. Who do we share personal information with and where is it processed?

Personal information will be processed by our affiliates and suppliers involved in the
provision of the services and in the performance of the purposes. Their activities include
hosting and maintenance, performance monitoring and security. We engage the
services of Salesforce.com and Meta, both US-based companies, to facilitate the
experiences and services offered in this application.

As we are a global company, teams and suppliers may have global or multi-country
roles, and they can be located anywhere in the world, in countries with different privacy
standards than the country of our customers. We take measures to ensure that personal
information receives an adequate level of protection.

We do not sell your personal information.

We have internal policies applied by our affiliates and we conclude relevant contracts
with our suppliers to ensure appropriate safeguards. Our group has adopted Binding
Corporate Rules (BCR). In addition, we conclude Standard Contractual Clauses and
rely on EU Commission’s adequacy decisions. To obtain more details and copies of
safeguards put into place, you may contact global-data-privacy@schneider-
electric.com.

We may also share your information, as necessary:

• with competent authorities, based on a good faith belief that disclosure is

necessary to respond to a judicial process, a valid official inquiry, or if
otherwise required by law.
• to defend our legal rights, or to protect the rights or safety of any person or
entity;
• as instructed by you, the contractor or the user.

If you authorize third parties to collect information from connected devices, to access
information processed within the service, or to issue commands to connected devices
(for instance using a third-party voice assistant), we will also share information with
these third parties in order to perform your requests. Schneider Electric does not control
these third parties or their privacy practices. You should review their privacy policies
before engaging with them.

5.1 Social Media Sharing

Personal information shared via the service may pass through infrastructure and
technologies controlled by Meta, the parent company of WhatsApp. When sharing
personal information with Meta or other social media platforms you may interact with, it
is important to note that the data will be processed by that service’s platforms, not
Schneider Electric. We strongly encourage you to review the privacy policy of Meta and

Public
other social media platforms to gain a comprehensive understanding of how your data
will be handled once it has been shared.

6. How do we secure information?

Where Schneider Electric has control over the processing of your data, we follow
generally accepted industry standards to protect the information submitted to us, both
during transmission and once we receive it. We maintain appropriate administrative,
technical, and physical safeguards to protect information against accidental or unlawful
destruction, accidental loss and unauthorized alteration.

As the services and experiences provided herein are delivered via WhatsApp, the
possibility exists that data may be processed outside the control of Schneider Electric.
Please be aware that Schneider Electric has no visibility or control over such processing
nor about if or how data may protected by WhatsApp or its parent company, Meta. This
includes how Meta or WhatsApp manage disaster recovery, breach management, and
patches or updates.

Please note that no method of transmission over the internet, or method of electronic
storage, is 100% secure. Therefore, we cannot guarantee its absolute security of any
internet-connected service.

7. How to exercise your choices and rights about your personal information?

To exercise the data protection rights granted under applicable data protection law,
such as the rights to access, to rectify, to request erasure or restriction of personal
information, the right to object and data portability, you may:

• access and edit your personal information and your choices, using settings
and preferences
• make a request or request the deletion of your information at the contact
details available within the application or at Global-Data-
Privacy@schneider-electric.com. To ensure the security of your personal
information, we may ask you to provide other details to verify your identity.

If you choose to combine the service with those provided by third parties, you can
exercise your rights by contacting them.

8. How to contact us?

You may address questions or comments about our privacy practices or this privacy
notice to our Group Data Protection Officer:

Public
DPO@schneider-electric.com

DPO Schneider Electric

35 rue Joseph Monier

CS 30323

92506 Rueil Malmaison

France

If you believe that Schneider Electric has processed your personal information in
violation of applicable law, you may file a complaint with the Group DPO at the contact
details above, or with a supervisory authority.

Please note that this privacy notice may change from time to time. If we make any
material changes, we will notify you by email (to the e-mail address specified in your
account) or by means of a notice on our website or application.

Public