Jungheinrich Group companies are well aware of how important it is for users that their personal data is treated in accordance with the law, in particular that their confidentiality, integrity and availability is ensured. That is why we want to assure you that we comply with all legal requirements in the field of privacy and data security. Below we provide detailed information about the nature and scope of the use of personal data and the purpose for which they are used within the Jungheinrich Polska Sp. z o.o. online store available at https://www.shop.jungheinrich.pl/ (hereinafter: "Store") and related websites.

This statement contains the rules for the processing of personal data within the Store and supplements the relevant provisions of the Jungheinrich Polska Sp. z o.o. online store usage regulations available at the address: https://www.shop.jungheinrich.pl/en/p/termsofuse.  The current text of the Privacy Policy is always available at the address: https://www.shop.jungheinrich.pl/en/p/privacy In the meaning of the Privacy Policy, the User is the Customer (when acting independently) or a person acting on behalf and for the benefit of the Customer.

In accordance with the provisions of the Personal Data Protection Act, the administrator is:

Jungheinrich Polska Sp. z o.o. z siedzibą w Broniszach przy ul. Świerkowej 3; 05-850 Ożarów Mazowiecki, wpisaną do rejestru przedsiębiorców Krajowego Rejestru Sądowego prowadzonego przez Sąd Rejonowy dla m. st. Warszawy XIV Wydział Gospodarczy KRS pod numerem KRS 0000137163, o kapitale zakładowym w wysokości 13.000.000,00 zł, NIP PL1130082801, REGON 010465346, BDO 000065321 (dalej: „Jungheinrich”).

Please direct any questions regarding the processing of your personal data, as well as requests to exercise your rights, to our Data Protection Officer:

Jungheinrich Data Protection Officer 

Jungheinrich Polska Sp. z o.o.

Bronisze, ul. Świerkowa 3

05-850 Ożarów Mazowiecki

Email: DPO@jungheinrich.com lub rodo@jh.pl

3.1. Legal basis for processing data

We process personal data exclusively in accordance with the applicable data protection laws. This means that data is processed only when it is lawful, i.e. when we have a legitimate legal basis for processing it.

The personal data provided within the Store is used to create a Customer account, as well as to fulfill, process, or possibly withdraw Customer orders. The Customer or a person acting on behalf of and for the benefit of the Customer accepts the processing of the personal data provided for the purpose of enabling the use of the Store's functions, for communication with Jungheinrich and for making and accepting declarations of intent.

Additional conditions for the processing of personal data in the event of an order, as well as in the event of its fulfillment, are contained in the General Terms of Delivery and Warranty of Jungheinrich Polska Sp. z o.o. available at http://www.shop.jungheinrich.pl/OWDiG (hereinafter: "OWDiG"), in the section on Data Protection. The OWDiG is part of every Customer's order, therefore the Customer or a person acting on behalf of and for the benefit of the Customer is obliged to familiarize themselves with its content and accept it when placing an order.

3.2. Access to our website

When a user enters our website, the browser used on the user's end device automatically transmits information to the server of our website/application, which is stored temporarily in a log file. We have no influence on this. The following information is collected and stored, without any action on the part of the user, until it is automatically deleted:

• IP address of the network device that sent the request
• Date and time of access
• Name and URL of the file accessed
• Website/application used to gain access (so-called referrer URL)
• Used browser and possibly the operating system of the computer with internet access and the name of the access provider

The legal basis for processing the IP address is Article 6 (1) (f) of the GDPR. Our legitimate interest arises from the following purposes of data collection. Please note that the data collected does not allow us to unambiguously identify the user and that we do not draw any conclusions in this regard. We use the IP address of the user's end device and the data listed above for the following purposes:

• To ensure smooth communication
• To ensure a uniform level of experience for users using our websites
• To perform security and system stability assessments
• To track in the event of cyber attacks

We also use cookies and tracking tools on our websites. The exact procedure and how the user's data is used for this purpose are explained in detail in the sections on cookies, embedding services and third-party content.

3.3. Using our service

Our service allows you to browse data about contracts, vehicles, and invoices. In order to be able to use our service and enable its implementation, you must register as its user. Within the user registration and for the purpose of creating service reports, the following personal data are processed:

• User access data;
• Name and address of the company;
• User's first and last name
• Telephone number, e-mail address and customer number;
• Language settings in the device used.

We process and use the personal data collected from the user exclusively for the purpose of enabling the use of the Store or placing and processing orders. In the case where the user is a Customer acting independently, the processing of data for the above-mentioned purposes takes place within the framework of the implementation of the contract for the provision of electronic services (Article 6 (1) (b) of the GDPR). In the case where the user is a person acting on behalf and for the benefit of the Customer, the processing of data for the above-mentioned purposes takes place on the basis of our legitimate interest (Article 6 (1) (f) of the GDPR).

3.4. Contacts

The data provided by the user contacting us (via the contact form or e-mail) we use to fulfill the order. We can store the user's data in our customer relationship management systems ("CRM system") or in similar data sets, which enables us to provide services tailored to individual needs. For processing the user's data in strict accordance with our privacy policy and exclusively for the purpose of ensuring compliance with the EU data privacy requirements, we use the CRM system.

4.1. General information

In our website, we use cookies or other storage technologies (local storage, session storage) of the user's browser if the user has given his consent (Article 6 (1) (a) of the GDPR), if there is a legitimate interest on our part (Article 6 (1) (f) of the GDPR) or if this is necessary for technical reasons. These are small text files that are transferred from the website to the device from which the user is using (computer, tablet, etc.) and are stored in the user's browser memory. They are used, for example, to identify users as authorized when using the product. Without such temporary "intermediate storage", entries already made in some applications would have to be made repeatedly. The cookie contains only data provided by the server and/or entered on request by the user (e.g. structure, domain information, path, expiration date, name and value of the cookie). The cookie cannot spy on data on the hard drive. This does not mean that we can directly obtain knowledge about the identity of the user.

The use of cookies is intended to make it more comfortable for the user to use our shop. To recognize whether the user has already visited individual pages on our website, we use so-called session cookies. These cookies are automatically deleted when the user leaves our website. In addition, we use temporary cookies to improve the user's comfort, which are stored on the user's end device for a specified period of time. When the user visits our website again, the system automatically recognizes whether the user has already been on our pages and which data and settings the user has entered, eliminating the need to enter them again.

More specifically, the following cookies are set during use of the product, as described below. On the one hand, these are so-called first-party cookies, which we ourselves use, and on the other hand, third-party cookies, which are set by third parties to achieve specific goals. If the user does not want cookies to be stored on his computer, he can disable the corresponding option in the system settings of his browser. Cookies that have already been stored can be deleted in the system settings of the browser. However, it should be noted that disabling cookies may restrict the ability to use the product.

In order to provide the ability to view the cookies used and to make it easier to give consent or refuse to use cookies, we use the "Cookie Bot" tool. After the user enters our website, this tool asks him to give his consent.

We also use cookies to collect statistics on the use of our websites and to conduct evaluations that enable us to optimize our offer for the user and to display information specifically tailored to his requirements. These cookies allow us to automatically recognize whether the user has already been on our pages. Such cookies are automatically deleted after a previously specified period of time. Most browsers automatically accept cookies.

However, the user can configure his browser so that no cookies are stored on his computer or so that a message always appears before a new cookie is created. Completely disabling cookies may prevent the use of all functions of our website. The storage period of cookies depends on their individual purpose and is different in different cases. Information on the storage period of the cookies used is available here.

Please visit the following website: https://www.shop.jungheinrich.pl/en/p/cookies to view a list of the cookies used.

4.2. Google Analytics

In order to enable the individualized design and current optimization of our websites, in accordance with Article 6 (1) (f) of the GDPR (legitimate interests), we use the Google Analytics web analysis service provided by the company Google Inc. ("Google"). In addition, our website uses the Google Optimize extension. It creates anonymous user profiles, which is why it uses cookies. The information generated by the cookie about the use of this website, such as

• type/version of the browser
• language settings
• operating system used
• hostname of the computer accessing (IP address)
• URL of the referring page (previously visited page)
• time of the server request
• pages viewed (URLs and titles of pages)
• events such as downloading PDF files, navigation clicks, etc.
• user behavior, such as session length, scroll depth, browsing abandonment

The collected information about the use of our website is combined with a pseudonymous identifier (customer ID) and transmitted to Google servers via a secure connection (SSL, HTTPS), where it is stored.

We only use Google Analytics with activated IP anonymization. This means that the user's IP address is shortened by Google within the member states of the European Union or in other countries that are parties to the Agreement on the European Economic Area. Only in https://policies.google.com/terms exceptional cases is the full IP address transmitted to the Google server in the USA, where it is shortened there. Apart from Google

https://policies.google.com/privacy 

https://policies.google.com/terms 

https://policies.google.com/terms/information-requests 

https://marketingplatform.google.com/about/analytics/terms/pl/

5.1. FriendlyCaptcha

Our website uses the "FriendlyCaptcha" service provided by FriendlyCapcha GmbH, Am Anger 3-5, 82237 Wörthsee. The FriendlyCaptcha service is used to check whether data entered on our website (e.g. in a contact form) is entered by a human or automatically entered by a program. For this purpose, FriendlyCapcha GmbH analyzes the behavior of the website visitor using various properties. The FriendlyCaptcha service evaluates various information, including the IP address of the website visitor, which is immediately anonymized.

The purpose of data processing associated with the use of FriendlyCaptcha services is to ensure the security of our websites. The legal basis for data processing is Article 6 (1) (f) GDPR. Our legitimate interest is to comply with legal requirements in order to ensure the security of data processing.

Further information on how FriendlyCapcha GmbH handles user data can be found on the website and in the data protection statement of the provider, which can be accessed via the following links:

• Website: https://friendlycaptcha.com
• Data protection statement: https://friendlycaptcha.com/legal/privacy-end-users/

5.2. Google Tag Manager

In connection with our legitimate interests (i.e. interests in analysis, optimization, and the economic operation of our online offer within the meaning of Article 6 (1) (f) GDPR), this website uses the Google Tag Manager service. This service enables the management of website tags via an interface. Google Tag Manager simply implements tags. For this purpose, no cookies are stored and no personal data is recorded. Google Tag Manager launches other tags that may record data. Google Tag Manager does not have access to this data.

Disabling at the domain or cookie level will apply to all tracking tags, provided they have been implemented using Google Tag Manager.

More information on Google Tag Manager can be found on the website at http://www.google.de/tagmanager/use-policy.html

This service enables the management of so-called website tags via an interface. Google Tag Manager implements scripts and general services on our website according to specified rules and triggers, which in turn may use cookies, tracking pixels, or comparable technologies, and collect data. Google Tag Manager itself does not operate as a tracking or analysis service, but only enables the integration of such services, as well as the inclusion of opt-out scripts (opt-out option) and the like. Google Tag Manager is an important tool for us to fulfill our transparency obligations and legal data protection requirements. For example, based on the consent we have received from the user using our Cookie Consent Manager, we can control whether to enable analytical or advertising services or not.

Google Tag Manager is not actively tracking users on its own. However, when the website is accessed and the Google Tag Gateway feature is not used, your device will download a JavaScript file called gtm.js from Google servers, which may be located in the United States, and store it locally. As with all transmission processes on the Internet, in this case too, the IP address of the user's device is inevitably transmitted together with metadata such as the browser version used, unless you have changed this in your local settings and plugins. Against this background, strictly speaking, the Google Tag Manager service stores data on your device and can be used to read data as defined by the Google Tag Manager configuration.

More information on Google Tag Manager and data protection at Google can be found at the following addresses:

• https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
• https://policies.google.com/privacy
• https://policies.google.com/terms

The user can opt out of the future sending of statistical and marketing tags by Google Tag Manager. To do this, the user must click on this opt-out link to save a Google Tag Manager deactivation cookie in their web browser. This will only block future integration via Google Tag Manager for this browser, not for other browsers and/or end devices. This will not delete existing cookies. We would like to emphasize that in this case, users may not be able to fully use all the features and functionality of this website. If cookies are deleted in the browser, the "opt-out" cookie must be set again.

5.3. You Tube

In accordance with our legitimate interests (i.e. interests in analysis, optimization, and the economic operation of our online offer within the meaning of Article 6 (1) (f) GDPR), we have embedded functions of the YouTube service into the Jungheinrich website that enable the display and playback of videos. These functions are provided by YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066, USA. More information can be found in the YouTube data privacy policy.

In this case, the advanced privacy mode is used, in which, according to information from the provider, information about the user is only stored when the video is started. If a YouTube video embedded on our website is started, YouTube collects information about the user's behavior using cookies. According to information provided by YouTube, this is used, among other things, to create video playback statistics, to improve the user-friendliness of the service, and to prevent abuse.

Regardless of whether the embedded video is played or not, a connection is established to the Google "DoubleClick" service every time the Jungheinrich website is accessed, which may result in further data processing outside the control of Jungheinrich.

For more information on how YouTube uses cookies, please visit the YouTube privacy policy at: http://www.youtube.com/t/privacy_at_youtube.

We cooperate with third parties who, on our behalf, take over specific technical tasks related to providing the Store. When engaging external service providers, it is always done in accordance with the law and the regulations of the applicable privacy policy. Data recipients are obliged to use them only for specified purposes. Jungheinrich AG administers and supports the website on which the Store operates and in this respect it is a service provider (data processor) for its subsidiaries (data controllers) - in this case for Jungheinrich Polska Sp. z o. o. If data is transferred to a recipient outside the Jungheinrich Group based in a third country outside the European Union/EEA, the data recipient guarantees an equivalent level of data protection in accordance with Art. 44 et seq. GDPR. Exceptions are countries where the level of data protection has been deemed adequate by the European Commission in accordance with Art. 45 GDPR. Microsoft, as our service provider, conducts access and login control. Only the data necessary for this purpose (e.g. access data) is transferred to the service provider.

Microsoft Enterprise Service 

Microsoft Corporation 

One Microsoft Way 

Redmond 

Washington 98052, USA 

Representative for Data Protection in the European Economic Area and Switzerland:

Microsoft Ireland Operations, Ltd. 

One Microsoft Place 

South County Business Park 

Leopardstown 

Dublin 18, D18 P521, Irlandia 

Only data necessary for this purpose (e.g. access data) are transferred to service providers.

7.1. Overview

In addition to the right to withdraw consent, users also have the following rights under the GDPR:

• The right to obtain information about the personal data we store about you, pursuant to Article 15 of the GDPR
• The right to rectify inaccurate or incomplete data pursuant to Article 16 of the GDPR
• The right to have personal data we store about you erased, pursuant to Article 17 of the GDPR, unless they are necessary to fulfill legal or contractual obligations regarding storage periods or other statutory obligations/rights regarding further storage
• The right to restrict the processing of personal data pursuant to Article 18 of the GDPR
• The right to data portability pursuant to Article 20 of the GDPR
• The right to lodge a complaint with the President of the Office for Personal Data Protection

7.2. Objection and withdrawal of consent

Pursuant to the GDPR, the user has the right to: to receive free information about your data stored by us and to correct, block or delete it, to object to or withdraw consent to the use of data for advertising purposes at any time. If you do not want Jungheinrich to actively use your data for internal purposes, you have the right to object to the use and processing of your data at any time in accordance with Art. 21 section 2-4 GDPR. To do this, simply send an e-mail with the relevant information to rodo@jh.pl. This does not affect the special case of legally required restriction of data processing instead of deletion in accordance with Art. 17-19 GDPR.

We implement technical and organizational security measures, in accordance with the latest state of knowledge, to ensure compliance with the requirements of European and national privacy law and to protect the data we process against accidental or intentional loss, destruction or access by unauthorized persons. In particular, all communication via the browser related to the visit and use of the product is encrypted using the TLS procedure. In addition, we use appropriate technical and organizational security measures to protect the personal data we store against interference, partial or total loss and unauthorized access by third parties. Our security measures are constantly improved in line with technological developments.

As a general rule, we retain your personal data for as long as necessary for the purposes for which it was collected. Longer storage takes place if statutory retention periods apply or if the user has consented to storage for a longer period. This does not affect Jungheinrich's obligation to keep copies of the data for archiving purposes provided for by law or for other purposes specified in the contract. Information about user access is stored until the user requests its deletion. User access information may be deleted after submitting the request to the customer's contact person or to the data protection officer (see point 2 of this Policy). Upon final termination of the product use agreement or deletion of your user profile, we will initially restrict access to your registration data and delete it as soon as it is no longer necessary for the assertion, exercise or defense of legal claims.

Links contained on our website may refer to other Jungheinrich websites. In such a case, the privacy policy provided for this purpose and contained on the relevant websites is directly applicable. The same applies to any links to third-party websites.

We will update this Privacy Policy as necessary for legal or factual reasons. Please check the status of this Privacy Policy regularly.