Data Protection Privacy Statement

Hitachi Vantara LLC, on behalf of itself and its subsidiaries (collectively, "We" or "the Company") are committed to protecting and respecting your privacy.

This statement sets out the basis on which any personal data we collect from you, or that you provide to us, will be collected or processed (together, "processed") by us. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. We will not use your personal data to make any decisions concerning your employment only by automated means.

For the purpose of EU Regulation 2016/679 (i.e. the General Data Protection Regulation; "GDPR"), the Company operates as the Data Controller of your personal data.

Please note that the data that the Company requests of you is information about you related to your interest and candidacy for employment with the Company and it is required for purposes of evaluating your candidacy for employment. Such data may include identifiers, professional or employment-related information, education information, internet or other electronic network activity information, or geolocation data. California residents: some of the above-listed information constitutes "Personal Information" as defined in Cal. Civ. Code §1798.80(e) and/or protected classifications under California or US federal law.

1. USES MADE OF THE PERSONAL DATA

We use personal data held about you for the purpose of evaluating your candidacy for employment. If we hire you, your personal data will be used as part of your employee file in accordance with our internal corporate privacy policy, which will be available to you at the time you are hired.

2. DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your personal data, as listed above, to any other company within our organisation. We may also disclose your personal data to third parties if such third-party suppliers are contracted by us to assist with the management of your employment application or the evaluation of your candidacy for employment.

We will carry out the aforementioned disclosures provided that they are deemed necessary to ensure the correct performance of purposes for what the data is being collected.

3. HOW AND WHERE WE STORE YOUR PERSONAL DATA

We will ensure that your data is used only for the purpose for which it is collected, that it will be kept no longer than required and that there are appropriate technical and organizational measures in place to protect your data against destruction, loss or any form of unlawful processing. In particular, your data will be erased once it is no longer necessary for the purposes for which it was collected and once no responsibilities can be demanded to the Company as a consequence of its relationship with you, that is, approximately 5 years after the termination of our relationship with you.

The data that we collect from you may be transferred to, stored and processed at a destination outside of your country of residence and, for EEA residents, outside of the EEA. In particular, your personal data may be transferred to the United States. Transfers of data to third parties or to locations outside of the EEA are managed in accordance with the provisions of the GDPR or other applicable law. We take all steps reasonably necessary to ensure that third parties are compliant including the signing of European Union Standard Contractual Clauses (Decision 2010/87/EU) to ensure that your data is protected.

4. YOUR RIGHTS

According to applicable laws, you may have the following rights as a data subject:

• The right to know what data is being processed, the purposes of the processing, the categories of data concerned and the recipients or categories of recipients to whom the data is being disclosed.
• The right to request access to your personal data.
• The right to receive a disclosure of the sources from which Hitachi collects your personal data.
• The right to have your data corrected and/or deleted where allowed by applicable law.
• The right to request the restriction of the processing of your personal data in those circumstances allowed by applicable law.
• The right to request the portability of your personal data.
• The right to object to certain data processing activities carried out by the Company
• The right to withdraw any consent initially provided to the Company;
• The right to lodge complaints with the local data protection supervision authority.

You may exercise any of the aforementioned rights via the contact information listed in the following section.

By electronically signing this statement, you acknowledge that you are aware of the data privacy rights available to you.

5. CONTACT FOR PRIVACY REQUESTS

Questions, comments and requests regarding this "Data Protection Notification and Consent Form" are welcomed and can be directed to any of the following:

• Hitachi's online DSAR form;
• Via email to privacy@hitachivantara.com; or
• Via toll-free telephone call to Hitachi Vantara's Reporting Hotline (click the hyperlink for the correct number to dial for your location).

6. CONSENT FOR THE PROCESSING OF SENSTIVE DATA

Sensitive personal data is only gathered if authorised and required by applicable local law and the Company only processes this type of personal data based on a legitimate legally authorized purpose and by enforcement of the local applicable laws.

Where such processing is required by applicable local law, we request that you kindly provide your consent to the processing of your sensitive personal data, including personal data about your physical or mental health (in order to manage sick leave, make workplace adaptations or take decisions as to your fitness for work); personal data about your racial or ethnic origin or religious or similar information (only insofar that this is required and/or authorized by relevant local laws); and personal data relating to any criminal proceedings in which you have been involved (only insofar that this is required and/or authorized by relevant local laws). It should be noted that under applicable law, you have the right to withhold your consent.

By checking the box labeled "I Consent" on the submission page and submitting my personal data to the Company, I confirm that I have read, understand, and consent to the terms and conditions in which my personal data will be processed by the Company.