COOKIE POLICY

COOKIE POLICY

Last updated 18 of April 2023

I. Data Protection and Privacy Commitment

The Cookies or Connection Testimonials Policy governs the processing of data, including personal data, of users ("User" or "Users"), collected in connection with the use of websites or applications through Cookies, by Coindu - Componentes para a Indústria Automóvel, S.A, NIPC 501998055, as the entity in charge of processing, hereinafter referred to as "COINDU".

This Cookies Policy sets out the types of Cookies used by COINDU on its website accessible via the www.coindu.com link, excluding other sites, which may have specific Cookies Policies.

You can choose the types of Cookies that can be downloaded to your internet access device (computer, cell phone, tablet, etc.) via the privacy settings in the options of the internet browser used (hereinafter referred to as "browser").

II. Cookie Policy and Data Protection Policy

This Cookies Policy should be read by the User in conjunction with COINDU's general Personal Data Protection Policy, accessible to the User via the link www.coindu.com .

III. Contact Points

For any questions about the Cookies Policy, you can contact COINDU through the following contact points:

• E-mail Address: dpo@coindu.com
• Postal Address: Transversal à Rua de Rio Pele nº100, 4770-217 Vila de Joane;
• Telephone Contact: (+351) 252920010.

IV. CONTACT POINTS

4. Concept of Cookies

Cookies are small information files placed by websites that the User visits and which are stored in the navigation system ("browser") of the device used to access the internet (for example, the computer or cell phone). These files help websites memorize information about the visit and facilitate the next visit, keeping the actions and preferences of Users for a certain period of time, maintaining or recognizing the name of User, the language in which they want to navigate the sites or other settings, as well as customizing the User experience through specific content or even allowing the collection of information about the use of the sites.

V. Cookie Categorizations

Cookies can be classified according to three major categorizations:

• its purpose
• the placement entity and
• the life or conservation period

VI. Categorization of Cookies as to Purpose

Considering their purpose, cookies are classified as follows:

(a) Required Cookies – are of a functional nature and are necessary to ensure the functioning of the site and/or to ensure the availability of functionalities requested by the User. As well as to save your preferences regarding navigation on the site, whenever you use the same device and request it.

(b) Analytical Cookies – are of an incidental nature and collect statistical information for the purpose of analyzing their use and managing the relationship with visitors, measuring interactions with the ads presented.

(c) Personalization Cookies – are of an accessory nature, not necessary for the functioning of the website and, by improving its performance, allow a personalization of the user's navigation experience.

(d) Advertising Cookies – are of an ancillary nature, seeking to make advertising more attractive to users and advertisers, by selecting advertisements based on User's choices, in order to improve reports on campaign performance and enhance the display of ads that the User has already seen or flagged as relevant.

VII. Categorization of Cookies as to the Placing Entity

Considering the entity that is responsible for placing the Cookies, they are classified as follows:

(a) Own Cookies – Cookies that are sent to the User's device through equipment or domains managed by COINDU and from which the service requested by the User is provided.

(b) Third- party Cookies– are sent to the User's device from a device or domain managed by a third party entity over which COINDU has no control, in which case the third party may possibly process the data collected without COINDU having the ability to configure its operation.

VIII. Categorization of Cookies as to Lifetime

Considering the lifetime of Cookies, they are classified as follows

(a) 'Session' cookies – Temporary cookies that are usually deleted when the User leaves the website that generated them.

(b) 'Resilient' cookies – are Cookies that remain on the User's device until a certain date, at browser level, and are used each time he or she makes a new visit to the site.

IX. Cookies List- Introduction

The following types of Cookies may be used on this website:

a) Analytical cookies;

b) Functional cookies;

c) Necessary cookies;

d) Advertising cookies.

X. Cookie List - Description

To date, detailed information regarding the functionality and use of these Cookies is as follows:

XI. Acceptance of the Use of Cookies

It is not possible for websites to operate without the functional Cookies that are strictly necessary, and the User is therefore obliged to accept their use. With regard to other types of Cookies, the User is free to consent to their use.

We always require your express prior consent unless the placement of certain Cookies is strictly necessary to provide the service you have expressly requested or to provide access to a particular feature of that service, such as access to reserved areas, access to specific features or pages, etc.

XII. Browsers Configuration

Browsers allow individualized control of Cookies stored on your device, as well as immediate deletion of Cookies if you wish to stop allowing local storage of Cookies.

Any User can change his browser settings to block the installation of Cookies or to notify him each time a Cookie is set.

For more information on how to perform "Private Browsing or No Data Logging" and efficient Cookie management please refer to:

• Firefox, click here: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox- desktop?redirectslug=enable-and-disable-cookies-website-preferences&redirectlocale=en-US
• Chrome, click here: https://support.google.com/chrome/answer/95647?hl=en?hl=n
• Internet Explorer, click here: https://support.microsoft.com/pt-pt/windows/eliminar-e-gerir-cookies-168dab11-0753-043d- 7c16-ede5947fc64d
• Microsoft Edge, click here: https://support.microsoft.com/pt-pt/windows/eliminar-e-gerir-cookies-168dab11-0753-043d- 7c16-ede5947fc64d
• Safari, click here: https://support.apple.com/en-us/HT201265
• Opera, click here: https://help.opera.com/en/latest/security-and-privacy/#privateWindow

You should be aware of the consequences of deactivating Cookies, as this may have an impact on the operation of the respective websites, as the settings panel of most modern browsers does not offer a level of detail that would allow Users to turn off only those Cookies that are not strictly necessary to enable the use of the websites visited.

XIII. Privacy Applications

On sites, devices or equipment that offer this type of functionality, the User may have greater control over their Cookies using free privacy protection applications that are available on various online platforms - some examples of such applications are, among others, the following:

• Ghostery;
• Privacy Possum;
• Cookie AutoDelete;
• etc.

XIV. Changes to Cookie Policy

COINDU reserves the right to freely and at any time, without prior notice and with immediate effect, change, add to, or revoke, in part or in whole, this Cookies Policy.

All changes will be immediately disclosed in the organization's Communication Channels, and Users may access the information and, depending on the specific type of cookie in question, consent, in an informed manner, to its use, or, as the case may be, withdrawing consent previously granted, by configuring their "browsers.

XV. Exercise of Rights

Users may, as holders of personal data, at any time, exercise their data protection and privacy rights, including the rights of withdrawal of consent, access, rectification, erasure, portability, limitation or opposition to processing, under the terms and with the limitations set forth in the applicable rules.

Any request for the exercise of data protection and privacy rights should be made in writing by the data subject to the email address of the COINDU Data Protection Officer dpo@coindu.com , be submitted using the Exercise of Rights Form accessible at any service point or at https://www.dataprotectionofficer.help/coindu/forms/ .

XVI. Incident Reporting

The COINDU has implemented an incident management system for data protection and information security.

Should any User wish to report the occurrence of any personal data breach that causes the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of or access to personal data transmitted, stored or otherwise processed, he or she may contact the Data Protection Officer at dpo@coindu.com or use COINDU's general contacts.

The COINDU Data Breach Incident Reporting Form is accessible at any service point or at https://www.dataprotectionofficer.help/coindu/forms/ .

XVII. Suggestions or Complaints

Users can make suggestions on technical or organizational measures they consider most appropriate to improve data protection and privacy conditions by sending an e-mail to the COINDU Data Protection Officer or using the Data Protection and Privacy Suggestion Form accessible at any service point or at https://www.dataprotectionofficer.help/coindu/forms/ .

Users also have the right to lodge a complaint, either by registering the complaint in the Complaints Book or by filing a complaint with the supervisory authorities. In the latter case, they may petition or complain directly to the national Supervisory Authority using the contacts available at www.cnpd.pt .

XVIII. Data Protection Officer

The COINDU has appointed a Data Protection Officer, whose contact points are as follows:

• E-mail address: dpo@coindu.com
• Postal Address: Coindu – Componentes para a Indústria Automóvel, S.A - Transversal à Rua de Rio Pele nº100, 4770-217 Vila de Joane.

XIX. Permanent Security Point of Contact

COINDU has implemented a Permanent Contact Point for information security and cyberspace security incident management.

Should any User, Service Recipient or User wish to report the occurrence of an information security incident or a cyberspace security incident, he or she may contact the COINDU Permanent Point of Contact through the following communication channels:

• Telephone: +351 252 181 501;
• Email: incident.report@coindu.com .

An Information Security or Cyberspace Security Incident Report Form is available at any COINDU service point, and may also be requested by email by request to the Permanent Contact Point.

XX. Data Processing Information Sheet

For more detailed information on the Processing of User Data by Cookies, please contact the Data Protection Officer at dpo@coindu.com .

XXI. Useful Links

For more information about Cookies, including applicable standards, browser settings, user rights, etc., please see www.politicasdecookies.com .

X. Cookie Policy Version and Date

Date: 18 of April 2023;

Version: 2023.04;

For previous versions of the Cookie Policy, please contact the Data Protection Officer at dpo@coindu.com .