Mobis Georgia, LLC

Data Privacy Policy

The privacy and security of personal data (the “Personal Information”) which MAL collects from its Team Members is important. It is equally important that all MAL Team Members understand how MAL handles this data.

By accepting employment with MAL, you expressly acknowledge that you have read, understood, and agreed to all of the terms of this Privacy Policy as outlined below and as it may be modified by MAL from time to time with or without prior notice.

Collection of Information

In the course of conducting business and complying with federal, state, and local government regulations governing such matters as employment, tax, insurance, etc., MAL must collect Personal Information from its Team Members. The nature of the Information collected varies somewhat for each Team Member, depending on employment responsibilities, citizenship, the location of the facility worked in, and other factors. MAL collects Personal Information from its Team members solely for business purposes, including those related directly to employment with MAL, and those required by governmental agencies.

Data collected may include, without limitation, such things as:

• Team Member name

• User ID(s)

• Phone numbers

• Email address (es)

• Mailing addresses

• Banking and other financial data

• Government identification numbers, e.g., Social Security number, driver’s license number

• Date of birth

• Gender, race, and ethnicity

• Health and disability data

• Family-related data, e.g., marital status,

• Personal and health -related data for Team Members and their family

• Biometrics data

Anyone who sends unsolicited data to MAL by any means, e.g., mail, email, fax, expressly consents to the storage, destruction, processing, or disclosure of the data, as well as any other reasonable business-related use by MAL or any government agency of the unsolicited data.

MAL monitors Team Member use of the internet in order to detect access to inappropriate websites or other misuse of MAL’s computer network. MAL also uses

email filters to block spam and computer viruses. These filters may from time to time block legitimate email messages.

MAL will not knowingly collect or use Personal Data in any manner not consistent with this Policy, as it may be amended from time to time, and applicable laws.

Because the Personal Information collected by MAL is necessary for business purposes, Team members are required to provide it. Refusal or failure to provide the requested Personal Information may, therefore, result in disqualification from employment with MAL or from receipt or enjoyment of certain MAL benefits.

Use of Collected Information

The primary purposes for collection, storage and/or use of Personal Information include, but are not limited to:

• Human Resources Management. MAL collects, stores, analyzes, and shares (internally) Personal Information in order to attract, retain and motivate a highly qualified workforce. This includes recruiting, compensation planning, succession planning, reorganization needs, performance assessment, training, Team Member benefit administration, compliance with applicable legal requirements, and communication with Team Members and/or their representatives.

• Business Processes and Management. Personal Information is used to run business operations including, for example, scheduling work assignments, managing company assets, reporting and/releasing public data (e.g., Annual Reports, etc.); and populating Team Member directories. Information may also be used to comply with government regulation.

• Safety and Security Management. MAL uses such Information as appropriate to ensure the safety and protection of Team Members, assets, resources, and communities.

• Communication and Identification. MAL uses Personal Information to identify and communicate with Team Members.

Disclosure of Data

MAL acts to protect Personal Information and ensure that unauthorized individuals do not have access to the Information by using security measures to protect Personal Information. MAL will not knowingly disclose, sell or otherwise distribute Personal Information to any third party without a Team Member’s knowledge and, where appropriate, the Team Member’s express written permission, except under the following circumstances.

• Legal requests and investigations. MAL may disclose Personal Information when such disclosure is reasonably necessary (i) to prevent fraud; (ii) to comply with any applicable statute, law, rule or regulation; or (iii) to comply with a court order.

• Third-party vendors and service providers. MAL may, from time to time, outsource services, functions, or operations of its business to third -party service providers. When engaging in such outsourcing, it may be necessary to disclose Personal Information to those service providers, e.g., a payroll service, a benefits provider. In some cases, the service providers may collect Personal Information directly from the Team Member on behalf of MAL. MAL will work with any such providers to restrict how the providers may access, use and disclose Information.

• Business Transfers: MAL may buy other companies, create new subsidiaries or business units or sell part or all of MAL or its assets. It is likely that some or all Personal Information will be transferred to another company as part of any such the transaction. However, Personal Information will remain subject to protection outlined in the then current Privacy Policy.

• Protection of Company and Other. MAL may release Personal Information when it believes release is necessary to comply with the law; enforce or apply MAL policies and other agreements; or protect the rights, property, or safety of MAL, Team Members, or others. This disclosure will never, however, include selling, renting, sharing or otherwise disclosing Team Member Personal Information for commercial purposes in violation of the commitments set forth in this Privacy Policy.

Security of Personal Information

MAL employs reasonable security measures and technologies, such as password protection, encryption, physical locks, etc., to protect the confidentiality of Personal Information Only authorized Team Members have access to Personal Information. Any Team Member with such authorization must take appropriate safeguards to protect such Information. Paper and other hard copies containing Personal Information (or any other confidential information) should be secured in a locked location when not in use. Computers and other access points should be secured when not in use by logging out or locking. Passwords and user ID's should be guarded and not shared. When no longer necessary for business purposes, paper and hard copies should be immediately destroyed using paper shredders or similar devices. Copies should not be left in unsecured locations waiting to be shredded or otherwise destroyed. Unauthorized copies of documents or other tangible medium containing personal data. Electronic files containing Personal Information should not be made and should only be stored on secure computers and not copied or otherwise shared with unauthorized individuals within or outside of Company.

MAL will make reasonable efforts to secure Personal Information stored or transmitted electronically from hackers or other persons who are not authorized to access such Information.

Compliance with this Privacy Policy is important to MAL. Any violation or potential violation of this Policy should be reported to the Head of Department of Human Resources. The failure by any Team Member to follow these privacy policies may result in corrective action up to and including termination of employment. Any questions or suggestions regarding this policy may also be directed to the Head of Department of Human Resources.

Updating and Accessing Personal Data

Team Members must promptly notify MAL when changes occur in the Personal Information that has been provided so that MAL can maintain accurate Information. Although Team Members may update or change Information, MAL may maintain such Personal Information previously submitted in historical archives.