PRIVACY POLICY This privacy policy describes how GN Audio A/S ("GN", "we" or "us") processes personal data about you in connection with your use of our BlueParrott App. We will collect and use your personal data in accordance with applicable law and only to the extent necessary for the achievement of the purpose of use specified in advance and in a proper manner. 1. DATA CONTROLLER The legal entity who is controller and responsible for processing your personal data is: GN Audio A/S, Lautrupbjerg 7, 2750 Ballerup, Denmark. Telephone no + 45 45 75 00 00, email info@gn.com Blueparrott is a brand and business line in GN Audio A/S which is part of the GN Group. You can find more information about the GN Group on www.gn.com 1.1 Data Protection Officer For general questions concerning your personal data you may contact our data protection officer on GN Data Privacy Inquiry Site: https://privacyportal-eu.onetrust.com/webform/4c166da3-c2d4-4751-bbdb-9d0adf1bf864/b7d98407-0979-41ac-8134-388364d88f2d For specific requests concerning your personal data you may contact our data protection officer on GN Data Privacy Request Site: https://privacyportal-eu.onetrust.com/webform/4c166da3-c2d4-4751-bbdb-9d0adf1bf864/f6b3adea-5764-4c6f-b962-07f8343d86ed You are also free to contact our Data Protection Officer on telephone +45 45 75 00 00 2. DESCRIPTION OF PROCESSING - PURPOSE, SPECIFIC USE OF PERSONAL DATA AND LEGAL BASIS We collect information from you in connection with your use of the app as described in this section. 2.1 Information collected when you download and use the app When you connect the app to your headset, we collect information about your headset and your firmware version to enable the app to work with your headset and to be able to provide you with updates to your headset. If you choose to make use of the support function in the app we collect and use your name, email, telephone number, country/region in order for us to contact you concerning your enquiry. Also, in order for us to help problem solving, we will collect technical information from the app such as app version, app name, firmware version, last connected headset type and recent debug log information. Please also refer to our privacy policy on blueparrott.com. If you choose to rate the app - you will be directed to blueparrott.com, where we collect and use your review to understand how you regard the app in general and your email to contact you concerning your ratings. In relation to the rating, we also collect your IP-address, app version, app name, firmware version and headset type. We may use your rating and review data to improve the functions of our products and services. We may also use your ratings and reviews data to assist you when you require customer support or to follow up or guide you through our customer support process. To provide you with full functionality of the apps and allow us to learn about the capability of these apps and how they interact with our products, so we can improve and enhance future updates, we use certain automatically collected information through your use, e.g. - Device information: Device-specific information such as your mobile device id, the type of mobile device you use, the ip address of your mobile device, bluetooth name, bluetooth mac address and your mobile operating system. - Unique app numbers: our apps have unique app numbers. Said number and information about your installation (for example, the operating system type and application version number) will be sent to us when you install or uninstall the app or when the app periodically contacts our servers, such as for automatic updates. - Log information in server logs: details of how you used our app, internet protocol address, device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral url. To the extent use of your personal data is governed by the EU personal data regulation or equivalent national regulation you are hereby informed that we collect and process your data because we consider your data necessary to perform under contract with you, and further we rely on our legitimate interest. We need to collect the information as described in order to pursue our legitimate interest to optimize our products and services to you. 2.2 Links to Blueparrott on social media In our app, links to Blueparrott pages on certain social media platforms are included, such as Facebook, Youtube and Twitter. We do not transfer any information to such social media platforms when you use the links. We refer to the privacy policies of such other third parties. 2.3 Registration for Marketing Information If you choose to register your device, you also consent to receive marketing information from us. In such case we use your name and e-mail and certain automatically generated information, e.g. your app key, app version, headset type, firmware version and IP address etc. To the extent use of your personal data is governed by the EU personal data regulation or equivalent national regulation you are hereby informed that the legal basis for our use of your personal data for marketing purposes is your consent. Your registration is voluntary, and your app will be able to work without your registration, however the additional warranty will be not available. You can withdraw your consent by opting out again on your app or unsubscribing by clicking the link in the bottom of any marketing mails received. 3. UNINSTALLING THE APP You can at any time stop all collection of information by any Blueparrott app, by uninstalling the app. You can do this by using the standard uninstall processes which is available as part of your mobile device or via the mobile app marketplace. 4. RETENTION OF DATA We aim to retain any information already collected only for as long as you use the app and for a minimum and reasonable period thereafter. we only retain information in accordance with applicable legislation. 5. COLLECTION OF PERSONAL DATA We only collect your personal data from the following source: - directly from you when you provide them and through automated means during your online use of our app. 6. RECIPIENTS We will generally limit sharing of your personal data and always only share to the extent necessary. However, we might share your personal information with: - Group companies when necessary to carry out the purposes outlined herein. See more about the GN Group on www.gn.com - IT suppliers, e.g. hosting partners, maintenance or technical support. These parties may only process your personal data based on instructions, and they are not allowed to process your personal data for their own purposes. 7. INTERNATIONAL TRANSFERS In some cases, we will transfer personal data to recipients identified above which may be located in countries outside of your jurisdiction. Such transfers will be conducted in strict accordance with applicable laws, and where required we will provide appropriate safeguards for such transfers. When transferring personal data out of the European Union or other jurisdictions requiring appropriate safeguards, we will use either the standard contractual clauses as approved by the European Commission or equivalent national bodies, or any other contractual agreement approved by the competent authorities as a basis for the transfer, and where necessary, implement additional supplementary safeguards to ensure an adequate level of protection. Your personal data will be stored in your jurisdiction if the applicable law requires so. Please contact us by using the contact details in section 1 above, if you would like further information on the specific mechanism used by us when transferring your personal data out of the European Union and/or other jurisdictions requiring appropriate safeguards. 8. YOUR RIGHTS Data protection law gives you a range of rights in connection with our processing of your personal data. In this regard you have the right to request access to the personal data concerning you that we process. You may request that we rectify or delete the personal data or restrict the processing of your personal data, if you think they are inaccurate. You may have the right for data portability. We are required to assess and act on your request. To the extent our use of your personal data is based on your consent, you may withdraw your consent at any time, however, please note that this does not affect our processing of your personal data prior to withdrawal of your consent. The mentioned rights may be subject to conditions or restrictions. Accordingly, there is no certainty that you will be entitled to for example data portability in the specific situation; it will depend on the circumstances of the processing. If you wish to contact us about our processing of your personal data, feel free to contact our Data Protection Officer as specified above in section 1 in this Appendix A. You have the right to file a complaint with your local data protection agency or with the Danish Data Protection authority at datatilsynet.dk 9. ADDITIONAL INFORMATION FOR CALIFORNIA RESIDENTS In addition to the information stated above the following information also applies to you, if you are a California resident. California Civil Code Section 1798.83 permits you to request and obtain from us once a year, free of charge, information about the personal information, (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year. If applicable, this information would include a list of the categories of personal information that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year. We do not sell and have not sold personal information in the preceding 12 months. We do not sell the personal information of minors. You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.