U.S. AND CANADA PRIVACY NOTICE

Effective Date: October 16, 2023

This Privacy Notice describes how Mack Trucks, Inc. (the “Company,” “we,” “us,” or “our”) collect, use, disclose, and protect your Personal Information (“PI”) when you visit our website https://www.macktrucks.com or use our products and services (collectively “Services”). This U.S. and Canada Privacy Notice applies to U.S. and Canada residents that use our Services, and is a supplement to the Volvo Group Privacy Policy. There are other Volvo Group websites and services that are subject to separate privacy policies and notices that should be consulted when you visit those websites or other applicable properties. In the event of a conflict between this U.S. and Canada Privacy Notice and Volvo Group’s Privacy Policy, this U.S. and Canada Notice shall govern as to your rights and obligations under U.S. and Canadian Privacy Laws.

Depending on your state/province of residence, this U.S. and Canada Privacy Notice will tell you what rights and choices you may have with respect to your PI. Unless specifically indicated, this U.S. and Canada Privacy Notice applies to your PI that we collect through our websites, microsites, mobile or other applications, stores, products, services, programs, or otherwise through any interaction you have with us and our Services. We encourage you to read this U.S. and Canada Privacy Notice and our Terms & Conditions, upon accessing our Services. For specific websites, microsites, mobile or other applications, stores, products, services, or programs that have separate privacy notices, policies, and/or terms and conditions, please review them accordingly prior to your interaction.

If you are a job applicant, please review our Candidate Privacy Notice.

Additionally, by using our website or by purchasing or availing yourself of any of our Services, you acknowledge that you have read, understand, and agree with the terms of this U.S. and Canada Privacy Notice.

1. Notice at Collection of Personal Information

Generally, we collect, use, and disclose your PI to provide our Services to you, or as otherwise related to the operation of our business. In addition, we may collect, use and disclose your PI as required or permitted by applicable law, or as directed by you, in accordance with this U.S. and Canada Privacy Notice. Note that the categories and examples of PI we collect about you, the purposes, the recipients of your PI, and the sources of your PI may vary depending on the nature of your interactions with us, and may not include all the examples listed below.

1. 1. Information We Collect About You

The following are the categories of personal information that we collect:

Identifiers, such as your real name, any alias, postal address, online identifier, IP address, email address, social security number (SSN) or social insurance number (SIN), driver’s license number, passport number, or other similar identifiers.

Personal Records, such as bank account number, credit card number, debit card number, or any other financial information; medical information; health insurance information; or physical characteristics or description.

Characteristics of protected classifications under applicable laws, such as age and gender, race, veteran status, disability.

Commercial information, such as records of personal property; products or services purchased, obtained, or considered; or other purchasing or consuming histories or tendencies.

Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer’s interaction with an internet website application or advertisement.

Geolocation data, such as data associated with or collected from specific products and services that use geolocation data, including live GPS coordinates, as appropriate.

Sensory data, such as audio, electronic, visual, or similar information.

Inferences drawn from PI collected, such as a profile about a consumer reflecting the consumer’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sensitive PI, such as SSN/SIN, driver’s license, state/government ID, or passport number; race, ethnic origin, religious or philosophical beliefs, or union membership; your precise geolocation. This also includes PI collected and analyzed concerning health, sex life, or sexual orientation.

1. 2. How We Collect Information About You

We collect the above categories of PI directly from you, your device or browser, suppliers, public databases, social media platforms, and affiliates.

1. 3. How We Use Your Personal Information

Each of the above referenced categories of PI may be collected and used to comply with valid legal procedures, requirements, regulations, or statutes, including with the government and law enforcement; to you or other parties at your request; for other operational or business purposes reasonably necessary and proportionate to achieve the purposes for which the PI is collected; and to assignees as part of a merger or asset sale. The business purposes for which we may use personal information include:

• Providing our Services, including confirming your orders, delivering the merchandise and services that you purchase online, billing you for your purchases, managing fleets, maintaining and servicing trucks, and responding to your customer-service inquiries or requests.
• Administering or facilitating surveys or contests.
• Auditing related to counting ad impressions to unique visitors, verifying positioning and quality of ad impressions, and auditing compliance with this specification and other standards.
• Helping to ensure security and integrity, including to prevent fraud.
• Debugging to identify and repair errors that impair existing intended functionality.
• Short-term, transient use without disclosing PI to another third party or use in building a consumer profile or altering an individual consumer’s experience outside the current interaction with us.
• Internal research and development.
• Quality and safety assurance; and improving, upgrading, and enhancing our Services, and developing new products and services.
• Personalizing your experience including your website experience, and to deliver content and product and service offerings relevant to your interests.

1. 4. How We Disclose Your Personal Information

Each of the above referenced categories of PI may be disclosed to the following categories of recipients: affiliates, agents, representatives, service providers, and contractors.

1. 5. Retention of Your Personal Information

Except as otherwise permitted or required by applicable law or regulation, we will only retain your PI (which includes the categories of PI set forth in the chart) for as long as necessary to fulfill the purposes we collected it for, as required to satisfy any legal obligations, or as necessary to resolve disputes. To determine the appropriate retention period for PI, we consider applicable legal requirements; the amount, nature, and sensitivity of the PI; the potential risk of harm from unauthorized use or disclosure of your PI; the purposes for which we process your PI; and whether we can achieve those purposes through other means. For certain types of PI, we will only maintain it for a limited duration.

1. 6. Cross Border Transfer of Personal Information

If you are located in Canada, your PI may be transferred to service providers and/or affiliates outside of Canada. If you are located in Quebec, Canada, your PI may be communicated outside of Quebec. Accordingly, your PI may be accessible to courts, law enforcement and national security entities in such countries.

If you are located in Alberta, Canada, and have any questions, or wish to receive additional written information about our policies and practices with respect to the processing of your PI by our service providers or affiliates located outside of Canada, please contact our Group Privacy Office at gpo.office@volvo.com.

2. Selling and Sharing of Personal Information

Under some US state privacy laws, the manner in which we may use certain data may constitute a “sale,” such as the use of data for analytics and fleet management purposes. In those states, we only sell or share the following categories of Personal Information: identifiers, internet or other electronic network activity information, and geolocation data, and inferences. You may have the right to opt out of the sale of Personal Information depending on how your state defines “sale.”

We do not knowingly share or sell the PI of persons we know are under 16.

3. Submitting Requests Related to your Personal Information

You may have certain rights related to your PI depending on your jurisdiction. You may have the right to submit certain requests relating to your PI as described below. To exercise any of these rights, please submit a request by email to gpo.office@volvo.com or by mailing your request to Mack Trucks c/o AB Volvo Attn: Group Privacy Office, Dept AA14100, VGHQ, SE-405 08 Göteborg, Sweden. Please note that, depending on the nature of your request, you may be asked to provide information to verify your identity before your request can be processed. You may designate an authorized agent to make a request on your behalf; however, you will still need to verify your identity directly with us before your request can be processed.

Right to Request Know More Information.

You may submit a request to know the following:

1. The specific pieces of PI we have collected about you
2. The categories of PI we collected about you
3. The categories of PI we sold or shared about you and the categories of third parties to which each category of PI was sold or shared
4. The categories of PI we disclosed about you for a business purpose and the categories of persons to which it was disclosed

Please note that due to the different requirements of the applicable laws, our response times may vary depending on the specific type(s) of information sought. We respond to all verifiable requests for information as soon as we reasonably can and no later than legally required.

Right to Withdraw Consent. You may have the right to withdraw consent to the continued use or disclosure of your personal information. This right may be subject to legal and/or contractual restrictions and reasonable notice, depending on your jurisdiction.

Right to Opt-out of the Sale and Sharing of Your Personal Information. You may have the right to opt out of the sale of your PI. You may also request that we do not share your PI for cross-contextual, behavioral, or targeted advertising.

To opt out of the “sale” or “sharing” of your PI, please click the “Do Not Sell or Share My Personal Information” button in the footer of our website. You will need to do this on each browser and each device that you use to access our Services and clearing cookies on your browser(s) may disable your preference settings. You may also opt out of the “sale” or “sharing” of your PI through an opt-out preference signal. If you choose to use the preference signal, you will need to turn it on for each supported browser or browser extension you use.

Right to Correct Inaccurate Information. You may request that we correct inaccurate PI that we maintain about you. Upon receipt of a verifiable request to correct inaccurate PI, we will take into account the nature of the PI and the purposes for which we process it. We may require documentation from you in order to process your request where we have reliable documentation showing the accuracy of the information.

Right to Request Deletion of Your Personal Information. You may also have the right to request that we delete PI collected or maintained by us. Following receipt of a verifiable request to delete, we will let you know what, if any, PI we can delete from our records. We will also notify our service providers and contractors, and any third parties to which we transferred your information about your request to delete. If we cannot delete all of your Personal Information, we will provide an explanation.

Right to Limit the Use and Disclosure of Your Sensitive Personal Information.

We do not use or disclose Sensitive PI for the purpose of inferring characteristics about you, or for any other reasons besides the permitted purposes including: to provide our goods and services; as needed to ensure security and integrity; to prevent fraud or illegal activity; for physical safety; for short-term, transient use, including for non-personalized advertising; to perform services on behalf of the business; and to verify or maintain the quality or safety of a service or device owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance such services or devices. For this reason, we do not treat the Sensitive PI we process as subject to a limit use and disclosure request and, therefore, we do not offer a way for you to submit such a request.

Rights Related to Automated Decision-Making and Profiling.

You may have the right to opt out of profiling based on your PI. Our use of profiling technologies and automated decision-making is subject to applicable requirements under Quebec privacy law.

Right to Appeal Decision

If you are a Colorado, Connecticut, or Virginia resident, and you would like to submit an appeal about our decision to your request regarding your Personal Information, you may contact us at gpo.office@volvo.com. We respond to all appeal requests as soon as we reasonably can and no later than legally required.

Right to Non-Discrimination for the Exercise of Your Privacy Rights

If you choose to exercise any of the privacy rights described above, we will not discriminate against you. This means that, consistent with applicable state privacy law, we will not deny providing our products or services to you, charge you different prices, or provide a different level or quality of products or services to you unless those differences are related to the value of your PI.

4. Shine the Light

Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the Personal Information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third party sharing in the prior calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to gpo.office@volvo.com. In your request, please attest to the fact that you are a California resident and provide a current California address.

5. Changes to This U.S. and Canada Privacy Notice

We reserve the right to amend this U.S. and Canada Privacy Notice at any time in order to address future developments of the Company, the Services, or changes in industry or legal trends. We will post the revised U.S. and Canada Privacy Notice on this page. Any changes will become effective upon the posting of the revised U.S. and Canada Privacy Notice on this page. By continuing to use our Services following such changes, you will be deemed to have agreed to such changes. If you do not agree with the terms of this U.S. and Canada Privacy Notice, in whole or part, you can choose to not continue to use our Services.

6. How to Contact Us

If you have questions about our privacy practices, would like to make a complaint, or to request a printable version of this U.S. and Canada Privacy Notice, please contact us at gpo.office@volvo.com.