When we target you on social media platforms or through Programmatic Advertising platforms, we can act as Joint Data Controller with the relevant platform provider. Specific information and agreements will be in place with the platform provider before sending of any communication to you. We process your Data to exclude you from promotional communications, in case such communications are not consistent with your profile (e.g., if you are based in Italy, we will not share promotions pertaining to France etc.). This processing is based on the execution of a contractual obligation or pre-contractual measures taken at your request. We also limit the amount of Data accessible, transferred or disclosed to Recipients to only what is necessary to fulfil the purposes or specific tasks performed by the Recipient. Our selected Partners: when you consented to the communication to them of your Personal Data for their own marketing and/or profiling purposes and who act as autonomous Data Controllers.

These purposes rest on our legitimate interest in safeguarding our interests and protecting our users, including you. This processing is based on our legitimate interest in fastening and reducing or effectively use our marketing budget and on your legitimate interest in not receiving irrelevant communications. If you provide us with the data of third parties, you will be held responsible for having shared such information. You must be legally authorized to share it (i.e., authorized by the third party to share their information, or for any other legitimate reason). You must fully indemnify us against any complaints, claims or demands for compensation of damages which may arise from the processing of third-party Personal Data in violation of applicable data protection lawIn some cases, communications may include product or service promotions from selected Partners . When we send out this type of communications, we can act as Joint Data Controller with the rel evant Partners . Specific information and agreements will be in place with such Partners before sending of any communication to you. Stellantis Europe S.p.A. with registered offices in Corso Agnelli 200, 10135 Turin, Italy (hereinafter, “ Stellantis Europe ”; “ we ” or “ us ”) is the Data Controller of your Personal Data . Once the relevant retention period/criterion has expired, your Data is erased pursuant to our retention policy. You can ask us for more information on our data retention criteria and policy by writing us here: [email protected] is not created using Sensitive Data such as those that may be derived from Information about your location; Exercise your right to portability of your Personal Data (right to data portability): according to your use of our Services , we will provide you with an interoperable file containing the Data we have about you .

Persons authorized by us to perform any of the data-related activities described in this document: our employees and collaborators who have undertaken an obligation of confidentiality and abide by specific rules concerning the processing of your Data; Paper copies of any documents containing your Data (if any) are kept in a secure environment as well. Device Sensors: depending on your device, these are sensors such as accelerometers, gyroscopes, Bluetooth, Wi-fi and GPS which in one way or another share the information they collect through the Device and therefore through the Application. If enabled by the Device settings, these allow us to obtain information about your location.As far as possible, we use anonymous or pseudonymous data for these purposes. Only in exceptional cases a personal reference may be possible. In such cases, the following applies: Except for your consent to the customization of our Services, measuring the effectiveness of our Services and the creation of new Services is based on our legitimate interest in creating and maintaining Services that are truly useful to our users.