Autoliv Privacy Notice for Research Participants

Autoliv Development AB, with company registration number 556070-0543, (“Autoliv”) with its registered office at Wallentinsvägen 22, 447 83 Vårgårda, Sweden, is processing your personal data in its capacity as a data controller. All the other entities that are processing your data on behalf of Autoliv are listed at the end of this notice, in Annex No. 1

All personal data processing is done following the applicable privacy legislation. If you have any questions regarding the use of your data, please contact our team at the Autoliv Global Privacy Office at [email protected] .

This notice explains how your data will be collected, used, and protected in connection with your participation in one of the research studies conducted by Autoliv. Personal data refers to any information related to an identified or identifiable natural person. This can include but is not limited to details such as names, identification numbers, location data, online identifiers, photos, and videos, etc.

We collect and process your data as part of our research and innovation projects to develop, test, improve, and evaluate the effectiveness of automotive safety products and technologies. These products/technologies aim to enhance road safety, reduce the potential impact of road accidents, and support responsible driving behavior.

For more information about data collection while using the ACSP app, please follow the link: Privacy Notice for the ALV ACSP App | Autoliv

For more information about data collection through On-Board Cameras, please follow the link: Privacy Notice for Onboard Cameras | Autoliv

We engage trusted third-party service providers ("processors") to process personal data on our behalf, by applicable data protection laws. These processors support various business operations, including IT services, cloud storage, communication platforms, analytics, and participant management. We maintain an up-to-date list of these processors, which may be modified from time to time to reflect operational changes. You can request access to the current list of processors at any time by contacting us at [email protected].

Categories of recipients include:

• Third parties that Autoliv Group engages as processors. Your data will be processed by data processors that are Autoliv companies within the Autoliv Group, where sharing is done to provide information to the development and incubation teams, data processors that are contractors who evaluate and analyze the data, data processors that provide systems used by Autoliv to enable communication and storage, data processors that will facilitate the payments to the study participants, where necessary, to conduct interviews with the study participants
• Authorities and law enforcement agencies, if requested for audit purposes or to verify compliance with legal requirements
• Legal or professional advisers, where necessary for the establishment, exercise, or defense of legal claims
• Your data may be shared with other Autoliv entities within the Autoliv Group for purposes of operational management, ensuring IT and information security, and maintaining business continuity. A list of the relevant Autoliv entities is provided in Annex no 2.

We do not otherwise reveal your data to non-Autoliv persons or businesses for their independent use unless: (1) you request or authorize it; (2) the information is provided to comply with the law (for example, to comply with a search warrant, subpoena, or court order), enforce an agreement we have with you, or to protect our rights, property or safety, or the rights, property or safety of our employees or others; (3) the information is provided to our agents, vendors or service providers who perform functions on our behalf; (4) to address emergencies or acts of God; or (5) to address disputes, claims, or to persons demonstrating legal authority to act on your behalf; Those individuals and official authorities may be in one of the countries in Annex No. 1.

Autoliv always ensures that the same high level of protection applies to your data according to the EU General Data Protection Regulation [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons about the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC] and other applicable privacy acts, even when the data is transferred and processed outside of the jurisdiction you are operative in. Your rights concerning your data are not affected when data is transferred to a third country.

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit and at rest
• Secure storage systems with restricted access
• Regular audits and risk assessments
• Anonymization or pseudonymization, where appropriate

If you want more information about the technical and organizational measures or the implemented safeguards, please contact our Privacy Office at [email protected].

You have several rights related to your data and to receive information directly from us about how we process personal data about you. If you want to know more or come in contact with us to exercise your rights and for other types of privacy questions, please email us at [email protected].

The right to have your personal data deleted
You have the right to ask us to delete personal data about you, for example personal data that we no longer need for the purpose it was collected for, or personal data that we process based on a consent that you wish to revoke.

Right to be informed
You have the right to be informed of how we process your personal data. We inform you through this privacy notice, by general employee privacy notices issued from time to time, and by answering your questions at any given time.

Right to receive access to your personal data
You have the right to know if Autoliv processes personal data about you, and to receive a copy (“data extract”) of such data. Through the data extract, you will receive information about what personal data we hold about you and how we process it.

Right to rectification
You have the right to request that we rectify inaccurate information or complete information about you that you consider is inaccurate or incomplete.

Right to restrict processing
If you believe that your personal data is inaccurate, that our processing is unlawful or that we do not need certain information for a specific purpose, you have the right to request that we restrict the processing of such personal data. You also can request that we stop processing your personal data while we assess your request.

Right to object to our processing of your personal data
You have the right to object to processing your personal data, for example when the processing is based on legitimate interest, by referencing your personal circumstances. When you object to our processing, you may also request us to restrict the processing of that personal data (as described above) while we make our assessment.

Right to object to an automated decision that significantly affects you
You have the right to object to our use of automated decisions or conclusions if the decision produces legal effects or significantly similarly affects you. Please note that no automated decision-making is being conducted within the scope of the survey.

Right to withdraw your consent
Where we process your data based on your consent, you have the right to withdraw that consent at any time. Autoliv will respect your decision by ceasing the processing of your data and discontinuing its use. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent. If you have any concerns or want to exercise your right to withdraw your consent, please email us at [email protected] .

Right to lodge a complaint
If you have complaints about our processing of your data, you may complain with the lead supervisory authority (https://www.imy.se/en/individuals/forms-and-e-services/file-a-gdpr-complaint/ ). Please email us at [email protected] in case you need our support to identify a different lead authority or the proper authority to contact in your country.

Profiling and automated decision-making
Autoliv does not take any solely automated decisions, including those based on profiling, that have a legal or similarly significant effect on you.

To provide a good experience and personalized content, we may use cookies in different interfaces, such as on our website. Information about how you can accept or decline cookies, including managing specific cookie preferences, is available in each respective section. For a detailed overview of which cookies we have implemented on the Autoliv website, please consult the Autoliv Cookie Notice available here.

We are constantly working to improve our data protection practices, which may involve modifications to our processing of your data. If that improvement requires a notice or consent under applicable law, you will be notified or allowed to give your consent

For some research projects, we might use our ACSP App. When you access or use our mobile applications, we will collect personal information. For more information about data collection while using our App, please follow the link: Privacy Notice for the ALV ACSP App | Autoliv

Autoliv has a group data protection officer and a team of data protection specialists. You can reach all of these individuals at [email protected].

If you specifically wish to contact Autoliv’s data protection officer, please type so in the subject line.