Page number 4

Agreement are Performing the Agreement, Legal compliance, Data controller’s legitimate secured interest. Information relating to Client’s creditworthiness and trustworthiness Negotiations on the conclusion of the Agreement or in connection with the conclusion of the Agreement, Communicating in connection with and processing the Client’s financing application, Assessing the Client’s creditworthiness, credit history and trustworthiness necessary to assess the Client’s financing application, Performing the Agreement, Legal compliance, Data controller’s legitimate interest. MANNER OF PERSONAL DATA PROCESSING Scania will keep personal data of the Client or other Data Subjects secured in electronic or documentary form and Scania is authorised to process such personal data manually or by automated means. Personal data of the Client or other Data Subjects will be kept in Scania’s information systems along with all data and information relating to the Client or other Data Subject, creditworthiness, credit history and other information on financial standing provided to Scania by the Client or other Data Subject or acquired by Scania from third parties or through its own activities. For the purposes of legal compliance pursuant to Act no. 253/2008 Sb., on certain measures against legalisation of criminal proceeds and terrorism financing, as amended, Scania is authorised to make photocopies of the Client’s proofs of identity (with the Client’s consent) and to record the Client’s birth identification number. PERSONAL DATA RECIPIENTS Personal data is disclosed only to Scania’s authorised employees or the respective Scania’s data processors and controllers only to an extent necessary to fulfil the respective purposes of processing or, as applicable, on the basis of consent to personal data processing. Scania may anonymise the Client’s personal data and based on such data create aggregate reports that are sent primarily to its parent company SCANIA CV AB, with its registered office at Södertälje, S- 15184, Sweden, as well as all entities from within the Volkswagen Group in order to inform them on its financial standing. The current list of Scania’s personal data recipients is available to the Client or other Data Subject at their request at the e-mail address of the data processing officer dpoSF@scania.cz and upon the conclusion of the Agreement or at any time during its term. In cases stipulated by law Scania is authorised and/or obliged to transfer personal data on the basis of the applicable legal regulations to law enforcements agencies or other public authorities. DATA RETENTION PERIOD Scania processes personal data for as long as it is necessary to secure all rights and obligations arising from the relevant contractual relationship, and for the period for which Scania as the data controller is obliged to retain personal data pursuant to generally applicable legal regulations, or for the period for which the Data Subject granted their consent to data processing. Depending on the purpose of processing Scania processes personal data for the following periods: Purpose of processing Retention period 4 / 8

Page number 5

Negotiations on the conclusion of the Agreement or in connection with the conclusion of the Agreement For the period of 6 months from the provision of personal data, if the Agreement is not concluded. If the Agreement is concluded between the Data Subject and the Company, then for the term of the Agreement and for the period of another 3 years from the expiry of the Agreement or, as applicable, for the period of existence of Scania’s claims against the Client under the Agreement (if after the termination of the Agreement Scania has a claim against the Client arising from the Agreement). For the period of 6 months from the provision of personal data, if the Agreement is not concluded. Communicating in connection with and processing the Client’s financing application If the Agreement is concluded between the Data Subject and the Company, then for the term of the Agreement and for the period of another 11 years from the termination of the Agreement or, as applicable, for as long as Scania has claims against the Client arising from the Agreement (if after the termination of the Agreement Scania has a claim against the Client arising from the Agreement). Assessing the Client’s creditworthiness, credit history and trustworthiness necessary to assess the Client’s financing application For the period of 6 months from the provision of personal data, if the Agreement is not concluded. If the Agreement is concluded between the Data Subject and the Company, then for the term of the Agreement and the period of another 11 years from the termination of the Agreement or, as applicable, for as long as Scania has claims against the Client arising from the Agreement (if after the termination of the Agreement Scania has a claim against the Client arising from the Agreement). Performing the Agreement For the term of the Agreement and for the period of another 11 years from the termination of the Agreement or, as applicable, for as long as Scania has claims against the Client arising from the Agreement (if after the termination of the Agreement Scania has a claim against the Client arising from the Agreement). Legal compliance For the period prescribed by the relevant legal regulation. Data processor’s legitimate For the period necessary for a particular purpose of processing, unless interest otherwise provided by special legal regulations. Negotiating on the For as long as negotiations are held for the purposes of concluding an conclusion of agreements on insurance agreement, unless a justified need arises to retain personal supplementary insurance data for a longer period in connection with a particular case. products Providing assistance in connection with the settlement of an insured event For the period prescribed by the relevant legal regulation or, as applicable, for as long as necessary in connection with a particular case. 5 / 8

    ...