Ecostruxure Building Commission Privacy Notice

We commit to serve you, our customers, with care, consideration, and respect and to protect your privacy and personal information.

Our Data Privacy Policy explains how and why we use personal information. This supplemental notice provides additional information about Ecostruxure Building Commission

  1. Who is in charge of data processing?

The processing of personal information is carried out by Schneider Electric USA, Inc. (“we”) as data controller for global processing such as operating and improving the service.

  1. What types of personal information do we process?

In cases where your account is managed by someone else (such as an administrator or employer), they may provide data on your behalf.

We use information for the purpose of delivering our services, interacting with users, managing customer relationships, ensuring security and compliance with contract and terms of use, and analyzing use of services to improve them. This is based on our legitimate interest to operate the platform and to provide services to our customers. We will also ask for your consent as required by laws.

We may collect and use other types of personal information as described in our Data Privacy Policy. Depending on the circumstances, these activities may be based on the execution of a contract with you, on our legitimate interest, on the legitimate interest of a third party, or for compliance with a legal obligation.

We do not make decisions based solely on automated processing which may produce legal effects or similarly affect you.

  1. How long do we keep your personal information?

We keep information as needed to perform the purposes described above, taking into consideration the need to provide the services, marketing requirements, security requirements, legal requirements and statute of limitations.

  1. Who do we share personal information with and where is it processed?

Personal information will be processed by our affiliates and suppliers involved in the provision of the services and in the performance of the purposes described in Section 2. We take measures to ensure that personal information receives an adequate level of protection. We do not sell your personal information or rent your information for monetary consideration to a third party without your permission.

Our affiliates and suppliers provide service including hosting and maintenance, performance monitoring and security. As we are a global company, teams and suppliers may have global or multi-country roles, and they can be located anywhere in the world, in countries with different privacy standards than the country of our customers.

We have internal policies applied by our affiliates and we conclude contracts with our suppliers to ensure appropriate safeguards. Our group has adopted Binding Corporate Rules (BCR). In addition, we conclude Standard Contractual Clauses and rely on EU Commission’s adequacy decisions. To obtain more details and copies of safeguards put into place, you may contact global-data-privacy@schneider-electric.com.

We may also share your information, as necessary:

  1. How do we secure personal information?

We follow generally accepted industry standards to protect personal information and we maintain appropriate administrative, technical and physical safeguards to protect it against accidental or unlawful destruction, accidental loss and unauthorized alteration.

However, no method of transmission over the internet or of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.

  1. How to exercise your choices and rights about your personal information?

To exercise the data protection rights granted under applicable data protection law, such as the rights to be informed, to access, to rectify, to withdraw consent, to request restriction or erasure, the right to object and data portabilitythe right to opt out of sale or share, the right to object to the use of your personal information for online targeted advertising, the right to object to our use of profiling and/or automated decision that significantly affects you, you may make a request at the contact details available within the service or at Global-Data-Privacy@schneider-electric.com. To ensure the security of your personal information, we may ask you to provide other details to verify your identity.

Please understand that these rights are subject to some limitations. For example, we may require documentation to support certain corrections to your information, and we generally cannot restrict or delete personal information in those situations where our retention is required for our internal business purposes or to comply with law.

You may address questions or comments about our privacy practices or this privacy notice to our Group Data Protection Officer (Group DPO):[1]

DPO@schneider-electric.com

DPO Schneider Electric

35 rue Joseph Monier

CS 30323

92506 Rueil Malmaison-

France