Privacy Notice For Our Contracting Parties

1- What Is The Purpose Of This Privacy Notice?

This Privacy Notice applies to all businesses operating within STMicroelectronics corporate group (the “Group”).

In this notice we refer to the STMicroelectronics (“ST”) business that you deal with as “ST business”, “Company”, “We”, “Us” and “Our”).

This notice is provided for Our prospective, existing, and former entities that has or will enter into a contract with Us (referred to in this notice as “You” and “Your”). This Privacy Notice tells You about how We process Your personal information, including Our collection, usage and sharing of Your personal information. The information in this notice may not apply to all ST businesses. Some ST businesses may not use your personal information to the full extent described in this Privacy Notice. However, unless You tell Us otherwise each ST business will share Your personal information with other ST businesses.

We will only process Your personal information in accordance with this Privacy Notice (and any additional information We may give to You about how We process Your personal information) and in accordance with applicable data protection legislation.

For the purpose of this Privacy Notice, the terms:

“Data Controller” means the legal entity that determines the purpose of the processing of the personal information.

“personal information” means information relating to an identified or identifiable individual.

2- Your Data Controller

STMicroelectronics N.V. is the Data Controller in relation to Your personal information.

3- Your Personal Information

a) What personal information do We collect about You?

We obtain Your personal information from the following sources:

• From Your staff: Your staff will know what personal information We obtain from them, because the member of staff (or someone they have authorized Us to deal with e.g., another member of your staff) has provided it to Us. Examples of how We obtain personal information about You include when You market, offer and/or agree to supply Us with products and services (including as part of any bid or tender process); when you enter into an agreement with Us (e.g., development agreement).
• From ST: We may obtain personal information about You from legal entities members of ST.
• From Your employees: We may obtain personal information about Your staff from Your other employees who have been introduced to Us.

b) What choices do you have as to the personal information We collect?

We need the following information to enter into the contract: the name, postal address, email address and phone numbers of a contact who is a member of Your staff and details of Your preferred method of contact (“Contact Details”).

c) Using Your Personal Information

For as long as We have access to Your personal information, We will use it for the following purposes, unless otherwise required as a result of Your exercising Your data protection rights:

Use	Basis of Use
To contact You about a potential contractual arrangement with You.	Our legitimate interest in approaching You about possible business opportunities.
To make a decision to buy goods and/or services from You, including making enquiries of You, undertaking supplier approval checks and negotiating the terms of any contract.	Our legitimate interest in approaching You about possible business opportunities and taking steps to enter a contract with you.
To perform Our obligations to You under the contract with You, including the processing of payments to You.	Our legitimate interest in complying with our obligations under a contract with You.
To take legal or administrative action in relation to Our contractual arrangement with You, including to enforce the terms of the contract and resolve any disputes.	Our legitimate interest in enforcing the contract and in resolving disputes with You and as necessary to establish, exercise or defend legal claims.
To undertake financial management, planning and reporting within Our business.	Processing will be in Our legitimate interest in respect of corporate governance and management.

d) Keeping Your Personal Information

We will only retain your personal information for as long as is necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. We will retain details relating to the orders We place with You or Your organization for as long as necessary for Us to establish, exercise or defend legal rights. We could be benefiting from contractual guarantees from You and in such circumstances We will need to hold personal information consisting at least of name(s), contact details and relevant records (such as correspondence) for extended periods in line with the guarantee given by You.

In determining the appropriate period for the retention of Your personal information, We consider the amount, nature and sensitivity of that data, the purposes for which We process your personal information and whether We can achieve these purposes by other means, as well as the applicable legal requirements.

e) Sharing Your Personal Information

For as long as We have access to Your personal information, We may share any of it with any of the following to the extent that they need to have access to Your personal information in order to perform their role:

• Any employee within Our organization.
• Selected third parties who help Us to perform Our contract with You. We do not share Your personal information with third parties for marketing purposes.
• Our banks and other payment processing service providers who process Our payments to You.
• Our professional service providers, such as accountants, auditors, legal advisers, and insurance brokers.
• Any third-party company or companies in the event that We go through a business transition, such as a merger, being acquired by another person or company, or selling a portion of Our assets.
• We reserve the right to disclose Your personal information to other third parties if We have lawful grounds to do so or are under a legal obligation to disclose or share it with them, or in order to establish, exercise or defend Our legal rights.

e) Transferring Your personal information abroad?

In some cases, We will hold in, or transfer Your personal information, to other countries where We are located. This will be the case if you are, or a member of Our supply chain for a particular opportunity or contract located outside the country of the ST’s entity with whom you have entered into a contract.

f) Your Rights

It is important that the information We hold about You is correct and accurate. Please tell us if Your personal information changes during Your relationship with Us.

In certain circumstances and by law, You have the right to:

• Request access: to Your personal information that We hold about You. This enables You to receive a copy of the personal information We hold about You.
• Request Correction: of Your personal information that We hold about You. This enables You to have any incomplete or inaccurate information We hold about You corrected.
• Request Erasure: of Your personal information. This enables You to ask Us to delete or remove personal information.
• Object to processing: of Your personal information where We are relying on a legitimate interest (or those of a third party) and where there is something about your particular situation which makes You want to object to the processing on this ground and there is no exception which applies to permit Us to keep using it.
• Request the restriction of processing: of your personal information: This enables You to ask Us to suspend the processing of personal information about You, for example if You want Us to establish its accuracy or the reason for Our processing it or You consider We no longer need to use Your personal information for the purposes for which it was collected or used.
• Request the transfer: of Your personal information to a third party.

If you want to exercise Your rights, please contact Us via Privacy@st.com.