DATA PROTECTION AND PRIVACY NOTICE FOR CUSTOMERS AND SUPPLIERS

1. Under this privacy notice (hereinafter the “Notice”), Loran Aerospace Incorporated (hereinafter “Loran” “We” or “Us”) informs you how We process your personal data. Your personal data means any information relating to you (hereinafter the “Personal Data”). This Notice relates to our customers and suppliers (to the extent individuals) and employees/contractors of Our customers and
2. Identity and Contact details of Us and of Our Data Protection Officer:

We are: Loran Aerospace Incorporated, 2513 Shallowford Road Building 200 Ste. 260 Marietta GA 30066 tel.: +1 (770) 726-8181

3. Purpose, Categories of Personal Data, Legal Basis, and Retention:

We process the following categories of your Personal Data for the following purposes:

Your business contact details (e.g. name, position, business email address, business telephone number, department, User-ID) and your business function for the purposes of

• communication by email, telephone or otherwise;
• customer/supplier relationship and contract management (including managing airfreight, truck and sea shipments);
• enterprise resource planning as well as managing demand and purchasing of products;
• order processing and acknowledgement;
• payment and invoicing as well as business accounting;
• business intelligence (business planning and reporting) and quality assurance; and
• kitting and bin

for the same purposes, your business contact details and any other personal information of you contained in emails sent by you or others to Us.

4. Legal basis for Our processing of your Personal Data

Our processing of your Personal Data is allowed by law. The corresponding legal basis is (from May 25, 2018 onwards) Art. 6 para. 1 lit. (f) of the General Data Protection Regulation EU 2016/679 (GDPR), permitting the processing of Personal Data for the purposes of Our legitimate interests. To the extent a customer or supplier is an individual, the legal basis is Art. 6 para. 1 lit. (b) GDPR instead, i.e. the processing of Personal Data is permitted for the purpose of the performance of a contract.

As to Your business contact details processed for the purposes set out in Sec. 2.1(1) to (7) and any other Personal Data contained in emails, We are permitted to process your Personal Data as such processing is necessary for Us to pursue Our legitimate interests. The performance of the contract concluded between Us and your employer is not possible without processing the respective Personal Data of you. We only process Personal Data necessary for the reasonable performance of the contract. We will not process any of your Personal Data beyond the purpose of reasonably performing the contract. There are no overriding interests apparent that would require Us to exclude the processing of your Personal Data. In fact, you will yourself be interested in Us processing your Personal Data to the extent necessary for the reasonable performance of the contract as you may otherwise not fully comply with your own employment relationship with your employer.

5. Do you have to provide your Personal Data to Us?

The provision of your Personal Data is not a statutory or contractual requirement. This means that you are not obliged to provide your Personal Data to Us. The consequence if you do not provide your Personal Data to Us is simply that We will not be able to communicate with you and may potentially not be able to fully proceed with Our business relationship with you and your employer.

6. Do We make automated decisions on you?

We do not make any automated decisions solely on automatic processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you.

7. Sources from which We have obtained your Personal Data

Besides from yourself, We may have obtained your Personal Data set out in Section 2.1 above from the following sources: Other colleagues of you, e.g. if they step in for you in case of illness, holiday, etc.; email chains of others may contain business contact details of you (e.g. with regard to past orders), being sent from EU countries as well as non-EU countries depending on the sender/recipient. These sources are not publicly accessible.

8. Retention periods

The retention periods for Personal Data depend on the respective purpose the Personal Data are processed for and the respective tool such data are processed in. It is not possible to outline the various retention periods in a reasonably intelligible format under this notice. The criteria used to determine the applicable retention period are that We will retain Personal Data set out under Sec. 2.1 above for as long as (i) necessary for the respective purpose, (ii) necessary to carry out Our business relationship with you, (iii) you have consented to, and/or (iv) required by applicable statutory retention laws.

9. Your Rights (incl. Right to Object)

Under applicable data protection laws, you have the right

• to access your Personal Data, i.e. you may obtain confirmation from Us as to whether or not We process Personal Data of you and, if so, obtain access to such data;
• to rectification of your Personal Data, i.e. you may obtain modification of inaccurate Personal Data;
• to erasure of your Personal Data, i.e. you may demand your Personal Data to be deleted in certain circumstances (e.g., where processing of such data is no longer necessary for the purposes for which we collected or otherwise processed them);
• to restrict the processing of your Personal Data, e. you may, in certain circumstances, demand the restriction of your Personal Data (e.g., if you contest the accuracy of such data, processing will be restricted for a period enabling Us to verify their accuracy);
• to tell Us that you do not wish to receive marketing information;
• to demand, in some circumstances, certain of your Personal Data to be transferred to you or a third party; and
• not to be subject to a decision based solely on automated processing, including profiling, which produces effects concerning you or similarly significantly affects you.

Furthermore, you have the right to object to Us processing your Personal Data at any time (i) in case of direct marketing, or (ii) on grounds relating to your particular situation, in case We process your Personal Data for the purposes of Our legitimate interests. As to such purposes, you will find more information under Sections 2.1 and 2.2 above.

10. To the extent Our processing of your Personal Data is based on your consent, you also have the right to withdraw your consent, without affecting the lawfulness of Our processing based on your consent before its withdrawal. Exercising any of your rights mentioned above is subject to legal prerequisites and, in certain circumstances, your rights may be limited due to legal exceptions set out in Arts. 17 3 and 22 para. 2 GDPR. Should you have any questions relating to your rights or their limitations, please feel free to contact Our data protection officer under the contact details set out above.

To exercise your rights, you can contact Us as set out in Section 1 above. You can also lodge a complaint about Our processing of your Personal Data with a data protection authority in the EU Member State of your habitual residence, place of work or of an alleged infringement of applicable data protection laws.

11. What We Store and Our Purpose

Loran Aerospace Incorporated
2513 Shallowford Road, Building 200
Marietta, GA 30066-6098, USA

Telephone: +1 (770) 726 – 8181
support@loranaerospace.com                  https://loranaerospace.com
CAGE: 95PC8                                                                DUNS: 085773220