Article Version 7.0.7

Privacy Notice – Vehicle Data Analytics

Controller

Volvo Car Corporation, a Swedish legal entity with company registration number 556074-3089, whose address is Assar Gabrielssons Väg, SE-405 31, Gothenburg, Sweden, hereinafter referred to as "Volvo," "we," "our," and "us," will, as controller, process your personal data as described below.

Purpose and legal basis for processingVolvo Cars is required to collect In-Use Monitoring Performance Ratio (IUMPR) data and report it to the California Air Resource Board (ARB), as can be found at the following link for the ARB: https://www.arb.ca.gov/msprog/obdprog/obdregs.htm

The purpose of processing vehicle-recorded data is for Volvo Cars to conduct product research and development: for instance, to enhance and monitor vehicle quality and safety features. The purpose of the processing is also to manage Volvo Cars' warranty undertakings and to fulfill legal requirements related to engine emission data.

The legal basis for processing is the legitimate interest based on the purposes pursued by us as described above.

The legal basis for disclosing real-world engine emission data is to comply with Volvo's legal obligations.

Data Categories

We collect data such as status and statistics from vehicle components, basic car usage statistics such as odometer or number of starts/stops, and how you use and interact with the vehicle functions and services, which that will result in statistical data to correlate with component statistics, vehicle data that identifies the vehicles hardware and its software, Diagnostic Trouble Codes (DTCs), sensor data from related DTCs, sensor data from the vehicle's active safety system, and the Vehicle Identification Number (VIN).

We also collect security data such as unauthorized access, authenticity of software updates, and anomalies in the vehicle network (intrusion detection). In addition to this, we will collect vehicle parameters related to emissions.

Disclosure / Recipients of your personal data / Transfer

The data categories listed above are transferred from your vehicle to Volvo Cars. Vehicle parameters related to emission monitoring are reported to the authorities according to local regulations. The vehicle data will be disclosed to and processed by our affiliates and our business partners for the above purposes in order for them to perform work on behalf of Volvo.

In relation to our business partners located outside of the European Economic Area (EEA), we will transfer your personal data on the basis of the Standard Contractual Clauses adopted by the European Commission.

Retention time

We will retain data relating to the legal obligations for up to 3 years after collection, unless we are required to process certain personal data for a longer period of time due to legal requirements. Security incident data, active safety event data, and others will be retained for 2 years.

Your rights and contact information

As an individual, you are hold certain rights according to the General Data Protection Regulation. The rights that apply to this processing of vehicle data are:

Right of access

You have the right to request a copy of the personal data that we store about you.

Right to rectification

We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information you think is inaccurate.

Right to erasure

You also have the right to have your personal data deleted if your data has been processed in an unlawful way.

Right to object to processing / restrict processing

In addition, you have the right to object to and stop our collection of vehicle data and have processing restricted in certain circumstances.

To terminate the collection of the vehicle-recorded data described above, you, as the owner of the vehicle, need to contact our Customer Service, either by phone, email, or the form described in the end. To find the contact information relevant to your market, please visit the link support.volvocars.com/contact.

Right to lodge a complaint with a supervisory authority

If you believe that we are processing your personal data in violation of privacy laws and regulations, you have the right to lodge a complaint with the supervisory authority. The supervisory authority in Sweden is Datainspektionen, and their address is:

Datainspektionen

Box 8114

SE 104 20 Stockholm

Sweden

If you would like to exercise your rights, please use our online WEB FORM.

For more information on your rights in relation to our processing of your personal data and contact details for further information and complaints, as well as contact details for our Data Protection Officer, please see Volvo Car Group Customer Privacy Policy (https://support.volvocars.com/privacy).