PRIVACY NOTICE

1. Data Controller Details

2. Personal Data We Collect

We may collect and process the following categories of personal data, depending on the nature of our relationship with you:

• Identification data, such as name and surname, and identification details
• Contact information, such as telephone number, email address, and address
• Media-related information, such as photographs, video recordings, and participation records
• Vehicle information, such as vehicle model, VIN, technical specifications, usage, and service-related information
• Transaction information, such as purchase, sale, payment, and related records
• Retailer, vendor, and business partner related information, including retailer personnel and contact details
• Test drive and activity-related information
• Information relating to vehicle issues, returns, or repurchase cases
• Cookies and technical information, such as website usage data and online identifiers
• Recruitment information, such as job application details and qualifications

3. Purposes of Processing

We may collect, use, and disclose your personal data for the following purposes:

• to distribute and sell commercial vehicles to retailers and end customers;
• to manage and administer retailer relationships and operations;
• to support vehicle registration processes with the Department of Land Transport;
• to arrange and manage test drive activities;
• to manage vehicle return, repurchase, or defect-related cases;
• to prepare and manage internal reports and support business operations;
• to manage inquiries, complaints, and customer service requests;
• to advertise and promote products and services;
• to coordinate with customers, retailers, and business partners;
• to disclose information to motor insurance companies as necessary for the performance of vehicle sale agreements;
• to recruit and consider applicants for employment; and
• to comply with applicable laws, regulations, and legal obligations.

In certain cases, the provision of personal data is necessary for the Company to enter into or perform a contract, to comply with legal obligations, or to provide products and services to you. If you do not provide the required personal data, the Company may not be able to provide certain services or proceed with the relevant transactions.

4. Disclosure of Personal Data

We may disclose your personal data to the following persons or entities, to the extent necessary for the purposes described in this Privacy Notice:

• companies within the Rêver Group and the BYD group for business operations and brand management;
• retailers and automotive distributors;
• government authorities, including the Department of Land Transport;
• insurance companies and insurance-related service providers;
• external service providers, advisors, and consultants; and
• IT service providers and system support providers.

5. Overseas Transfer of Personal Data

We may transfer personal data to overseas recipients as necessary for business operations. In such case, we will implement appropriate safeguards and measures for the transfer or disclosure of personal data in accordance with applicable laws.

6. Retention Period

We will retain personal data only for as long as necessary for the purposes described in this Privacy Notice and to comply with applicable laws. In any event, personal data will be retained for no longer than 10 years from the end of the relevant relationship, unless a longer retention period is required or permitted by law.

7. Rights of Data Subjects

Subject to applicable law, you have the following rights:

• right to access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw consent; and
• right to lodge a complaint with the supervisory authority.

8. Contact Us

If you have any questions about this Privacy Notice or wish to exercise your rights, please contact the Company or the DPO using the contact details set out above.