Haas Website Privacy Notice

Haas Automation, Inc., of 2800 Sturgis Rd., Oxnard, CA 93030, USA, Haas Automation Europe NV, and their other affiliates (together, the “Group,” “we,” “us,” or “our”), are “controllers” of your Personal Data, which we collect when you visit our websites, including https://www.HaasCNC.com, https://www.HaasTooling.com, and our mobile applications, including MyHaas and HaasService (together, our “websites”).

The Purpose of This Privacy Notice

This Privacy Notice is provided to you in accordance with applicable privacy laws, including, but not limited to, the General Data Protection Regulation 2016/679 (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”), the UK Data Protection Act 2018, and other laws implementing or supplementing the GDPR (together, the “Data Privacy Laws”).

This Website Privacy Notice describes how we will collect and use your Personal Data as part of our business. References to “you” mean any person submitting any data, personal or otherwise.

This Website Privacy Notice applies only to Personal Data we collect or maintain on our own behalf. We do not sell your Personal Data, and we prohibit any sale of the Personal Data we share with our service providers.

This Website Privacy Notice does not apply to third-party websites that may be linked to ours. Read the privacy policies of other websites carefully. We are not responsible for these third-party sites.

As described in more detail below, you may have rights with respect to the Personal Data we collect about you on our own behalf. We encourage you to read this Website Privacy Notice carefully, and to contact us if you have any questions. If any term in this Website Privacy Notice is unacceptable to you, please do not use the websites, and refrain from providing us with your Personal Data.

How We Process Your Personal Data

We collect and use the Personal Data you provide to us through your use of our websites, or that is obtained through other sources (mentioned below).

“Personal Data,” sometimes referred to as personal information, generally means anything that can, alone or in combination with other information, identify you. For example, name, address, telephone number, and driver’s license number.

We have set out below, in table format, descriptions of the Personal Data we collect and use, the purposes for which we may use your Personal Data, the legal basis we rely on to do so, and the recipients with which we will share that Personal Data. We have also identified what our legitimate interests are, where appropriate.

Note that we may rely on more than one lawful basis to use your Personal Data, depending on the specific purpose. Please contact us at [email protected] if you need details about the lawful basis on which we are relying to process your Personal Data, where more than one lawful basis has been set out in the table below.

Additional disclosures related to collection, use, and disclosure of personal data for residents of certain U.S. states.

Certain states, including California, require us to provide additional disclosures about our collection, use, and disclosure of Personal Data. The information in this section is provided as a supplement to the information provided in this Website Privacy Notice. Please read the entire Website Privacy Notice for a full description of our privacy practices.

The Personal Data we collect about you includes information within the categories of data below. Note that the “category of data” column listed below refers to the category of personal data as defined under California law, and represents the categories of Personal Data that we have collected, and how it has been shared, over the past 12 months. Inclusion of a category in the list below indicates only that we may collect some information within that category. We do not necessarily collect all information listed in a particular category, nor do we necessarily collect all categories of information for all individuals. While the categories are as defined under California law, the disclosures below may also apply to residents of other states as well.

We have disclosed Personal Data in each of the categories below with our affiliates and service providers, as well as with government entities, as necessary, for our business purposes within the last 12 months. We have not necessarily shared all information listed in a category. We have also shared your internet or other electronic network activity information (as described below) with our advertising partners.

We do not “sell” your Personal Data or “share” Personal Data for cross-contextual behavioral advertising purposes, as those terms are defined under applicable privacy laws.

In addition to the categories of Personal Data above, we collect the following categories of Sensitive Personal Data. We will only use or disclose Sensitive Personal Data that we collect with your specific consent, when required, or as otherwise permitted by law, including under California law.

Who Do We Share Your Personal Data With and Why?

In addition to the recipients identified in the tables above, we may also share your Personal Data with the third parties below, or for other reasons we may describe to you from time to time.

Sharing with Third Parties

We endeavor to require all third parties to whom we transfer your data to respect the security of your Personal Data, and treat it in accordance with the law.

The Sale, Transfer, or Merger of our Business or Assets

If part of our business or assets are sold, transferred or merged, or if we seek to acquire other businesses or merge with them, it may be necessary to share your Personal Data as part of that transaction. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this Website Privacy Notice.

Compliance with Laws or To Protect Ourselves

We may disclose your Personal Data to other recipients:

• to comply with the law (e.g., tax law), or respond to compulsory legal process (such as a search warrant or court order) or a request for information from a regulator, or otherwise for legal purposes;
• to verify or enforce compliance with the policies governing our third-party contracts;
• to fulfill contractual requirements, or for legitimate interests of the Group or a third-party (including HFOs); or
• to protect the rights, property, or safety of the Company, or any of our respective affiliates, business partners, or customers, or otherwise in the legitimate business interests of the Company and/or our affiliates, and in accordance with Data Privacy Laws.

We may also disclose information to our accountants, auditors, agents, lawyers, and other advisors in connection with the enforcement or protection of our legal rights, or to protect the interests or safety of our clients, our clients’ customers or employees, or others, in accordance with or as authorized by law.

How We Protect Personal Data

We take the security of your information very seriously. Although it is impossible to guarantee complete data security on the internet, we have implemented industry-standard reasonable technical and organizational security measures to protect against the loss, misuse, and alteration of the information under our control. To help ensure the confidentiality of your Personal Data, it is important for you to protect against unauthorized access to your password, and to your computer. Be sure to sign off when finished using a shared computer. Further, while we work to ensure the integrity and security of our network and systems, we cannot guarantee that our security measures will prevent third-party “hackers” from illegally obtaining this information.

How Long We Keep Personal Data

We will store your Personal Data (i) as long as is necessary to process your Personal Data for the purposes mentioned above, and as long as the legal basis applies, (ii) as long as you make use of our services and have not deleted your account, and a legal basis and purpose applies for the processing, or (iii) as long as we are legally obliged to store your Personal Data in accordance with our Data Retention Policy.

Marketing Communications

We may use Personal Data, Technical Usage Data, and Marketing Data, based on your consent, to deliver relevant website content and advertisements to you, including display advertisements, and to measure or understand the effectiveness of the advertising we serve you.

You can unsubscribe from marketing emails at any time by following the unsubscribe links on any marketing email sent to you, or by emailing us at [email protected].

Preference-Based Advertising, Analytics, and Services

We engage third parties for preference-based advertising. Such third parties may include third-party advertising networks and website analysis firms who may use cookies, and similar tracking technologies to collect information about your use of our websites, including your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. The information collected may be used by Haas and these third parties to analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our products and services, and better understand your online activity. For more information on how this type of advertising works, go to http://www.aboutads.info/.

To find out more about how our websites work, and how we put you in control, see our Cookie Notice. You can manage your preferences at any time throughout our consent manager.

Do Not Track

Various third parties are developing ways for consumers to express their choice about the collection of the individual consumer’s online activities over time and across third-party websites or online services. We have tools in place to better detect and honor requests made using the Global Privacy Control (“GPC”) signal as requests to opt out of the sharing of Personal Data to the extent required by applicable law. We endeavor to honor these requests with respect to any Personal Data connected to the GPC opt out request based on the information made available by GPC. Note that we may not be able to tie a GPC request to all Personal Data we have about you.

What Choices Do You Have About Our Use of Your Information?

Depending on your residency, the type of Personal Data collected, and subject to certain exemptions, you may have rights with respect to your Personal Data, and some of these rights are subject exemptions and qualifications. We may choose to extend these rights to you even if we are not required to under applicable law:

• Right to access/know: You may be entitled to request that we provide to you a copy of the Personal Data we have collected about you, including the categories of Personal Data, the categories of sources from which we collected the information, the business or commercial purposes of collecting the information, the categories of third parties with whom we have shared the information, and the categories of Personal Data that we have shared with third parties for a business purpose. In some instances, you may have the right to receive a copy of your Personal Data which we hold, in a portable and readily usable format. Before providing any of this information, we must be able to verify your identity.
• Right to data portability: Subject to certain conditions, you may be entitled to request that we provide to you the Personal Data we have collected about you in a portable, and to the extent feasible, usable format that allows you to transmit the data to another entity without hindrance.
• Right to limit how we use cookies and similar tracking technologies: We employ an effective cookie consent mechanism that obtains freely given, active opt-in consent to the use of all non-essential cookies, prior to such cookies being placed. Additionally, you can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To find out more about cookies, and how we put you in control, see our Cookie Notice.
• Right to correct: Subject to certain conditions, you may request that we correct any mistakes in your Personal Data or update your preferences; however, we may not be able to accommodate your request if we believe it would violate any law or legal requirement, or cause the information to be incorrect. We may delete the contested Personal Data as an alternative to correcting the information if the deletion of the Personal Data does not negatively impact you, or you consent to the deletion.
• Right to deletion: Subject to certain conditions, you may be entitled to request that we delete Personal Data about you. Before deleting Personal Data, we must be able to verify your identity. We will not delete Personal Data about you when it is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information by law. For example, we cannot delete information about you if your Personal Data is on the contract between us for our services or products.
• Right to non-discrimination: You may have the right to not be discriminated against for exercising any of the above-listed rights. We may, however, provide a different level of service or charge a different rate reasonably relating to the value of your Personal Data.
• Right to opt out of the sale or sharing of Personal Data: We currently do not “sell” Personal Data to third parties or “share” your Personal Data for cross-context behavioral advertising, as those terms are understood under applicable law. When you first accessed our websites you were given the option to select your cookie preferences, including to determine whether or not to allow the use of advertising cookies. You may change your cookie choices here.  We also recognize universal opt-out signals that automatically opt you out of any cookies or signals for the purposes of targeted advertising. You can control your opt-out preferences within your internet browser’s settings.
• Right to limit use and disclosure of Sensitive Personal Data: We only process Sensitive Personal Data for purposes considered necessary under applicable law, and therefore do not offer this option.
• The right to withdraw consent: You have the right to withdraw your consent, where you have consented to our use of your Personal Data. This includes where you have consented to receiving marketing emails.

To stop receiving our marketing emails, follow the unsubscribe link in our marketing email. If you object to our use of your Personal Data for direct marketing purposes, please email us at [email protected]. Even if you opt out of getting marketing messages, we will still send you transactional messages. These include responses to your questions.

• Right to opt out of targeted advertising: The right to opt out of the processing your Personal Data obtained from your activities on nonaffiliated websites or online applications for the purposes of targeted advertising.
• Right to object: You have the right to object to the processing of your Personal Data. However, in certain circumstances where we rely on legitimate interests, we may still be able to process your Personal Data, if we have compelling grounds to do so. You may request us to receive your Personal Data in a structured, commonly used, and machine-readable format. If you wish to raise a complaint about how we have handled your Personal Data, you can contact our Privacy Officer/Team at [email protected], and we will investigate the matter and respond to you promptly.
• The right not to be subject to decisions without human involvement: You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you, or similarly significantly affects you.
• The right to restrict processing: You have the right to request that we restrict the processing of your Personal Data (although we will still need to process your personal data for the duration of the contract and beyond for legal purposes).

We do not discriminate against you if you choose to exercise any of these rights. If we deny your request, you may also have the right to appeal that decision based on state law. Instructions on how to appeal any denial will be included in the notice of denial.

Depending on your residency, these rights may not apply to pseudonymous data if the information necessary to identify the consumer is kept separately and is subject to controls that prevent access to the information. Pseudonymous data is Personal Data that can no longer be attributed to a specific individual without the use of additional information, if the additional information is kept separately and is subject to measures to ensure that personal data is not attributed to the specific individual.

Data solely retained for data backup or archive purposes is principally excluded from these rights until it is restored to an active system or next accessed or used for a sale, disclosure, or commercial purpose.

Profiling (U.S. Only)

This section shall only apply in case we perform a credit check (U.S. customers only) based on your financial information after you have submitted your order on the website. This section shall not apply in case you do not purchase any of our products or are not a U.S. customer.

We may process your Personal Data in order to make a decision based on Profiling in relation to a credit check performed by your financial institution. The consequences of such Profiling for you, and the logic involved in such automated processing, may be that your order is denied, if it appears that you do not have sufficient liquid assets to fund the order you have made.

You have the right to access and obtain communication about the decision based on the Profiling, including the logic involved and the consequences.

You have the right to object to such Profiling that has legal consequences for you.

You also may have and exercise other rights beyond those mentioned in this Website Privacy Notice, stipulated by the applicable privacy and data protection laws.

Submitting Privacy Requests

You can exercise your privacy rights by submitting requests to us to exercise those rights, and by taking other steps that will limit how your Personal Data is collected, used, and shared.

To the extent applicable to you, you may exercise your privacy rights by submitting a Personal Data request by visiting our Data Request Form, by calling us toll free at +1-833-979-0006, or by emailing us at [email protected].

We must verify your identity before fulfilling your Personal Data request. To verify your identity, we may collect information from you, including, to the extent applicable, your name, contact information, your account information, or other personal identifying information. We will match this information against the Personal Data we have previously collected about you, or against information available from consumer reports, to verify your identity and respond to your request. Personal Data collected to verify your request will only be used for verification and to respond to your Personal Data request. If you maintain an account with us, we may require you to log in to that account as part of submitting your request.

If we are unable to verify your identity as part of your request, we will not be able to satisfy your request. We are not obligated to collect additional information to enable you to verify your identity. For deletion requests, you will be required to submit a verifiable request for deletion, and then confirm separately that you want Personal Data about you deleted.

If you would like to appoint an authorized agent to make a request on your behalf, we require you to verify your identity with us directly before we provide any requested information to your approved agent. Alternatively, your authorized agent may provide evidence of having power of attorney or acting as a conservator for you. Note that we may require you to verify your identity with us directly before we provide any requested information to your authorized agent, unless your authorized agent has power of attorney or acts as a conservator, in which case we will not contact you directly. We may also request that any authorized agents verify their identity and may reach out to you directly to confirm that you have provided the agent with your permission to submit the request on your behalf. There may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may need to retain certain Personal Data to comply with our legal obligations or other permitted purposes. We will notify you if we are unable to honor your request. Based on your residency, you may have the right to appeal our decision regarding your request by using the “Contact Us” details provided at the end of this Statement.

In some locations, we are only obligated to respond to Personal Data requests from the same consumer up to two times in a 12-month period. In addition, under applicable privacy law, and for the protection of your Personal Data, we may be limited in what Personal Data we can disclose.

We will maintain all of your privacy requests for at least 2 years. This information will not be used for any other purpose except to review compliance processes; it will not be shared except as necessary to comply with a legal obligation.

You may also be entitled to request in writing a list of the types of Personal Data that we have disclosed to a third party for their direct marketing purposes during the preceding year, and to whom that Personal Data was disclosed.

If you wish to raise a complaint about how we have handled your Personal Data, you can contact us, and we will investigate the matter and respond to you promptly. If you are not satisfied with our response, or if you prefer not to engage with us first, you can complain to any applicable data privacy authority in your country of residence.

The Belgian Supervisory Authority is the Data Protection Authority selected by us: https://www.dataprotectionauthority.be or any other authority replacing the Belgian Data Protection Authority.

Children’s Privacy

Our websites are not intended for children under the age of 15. We will not knowingly collect Personal Data online from anyone under 15, without verifiable parental consent. If we become aware that we have inadvertently received Personal Data from a child under the age of 15, we will delete such Personal Data from our records. If a parent, guardian, or anyone else becomes aware of Personal Data we have collected from an individual under the age of 15, please contact us at [email protected].

International Transfer of Personal Data

Our principal operations are located in the United States, including our hosting facilities for our websites, and the server(s) that make(s) the websites available, which may be located outside the country from which you access the websites.

Haas transfers your Personal Data within the Group, and/or to other third parties, such as our third-party service providers outside of the EEA and UK. When we do so, we transfer the Personal Data in compliance with applicable data protection laws. In particular, we have implemented safeguards in the form of standard contractual clauses as adopted and amended by the implementing decision of the European Commission 2021/914.

Changes to This Notice

Haas may from time to time make changes to this Website Privacy Notice. We will post any revised version of this Website Privacy Notice on our websites. Any changes will be effective on the effective date stated in the revised Website Privacy Notice. If there are significant changes, we may provide more prominent notice, as required by law. If you do not wish to accept the changes, you should cease using the websites.

Contact Us

If you have any questions about this Privacy Notice, or about the Group’s handling of your Personal Data, please contact the Privacy Officer by email at: [email protected]. Our full details are:

Legal Name: Haas Automation, Inc.

Our principal place of business: 2800 Sturgis Rd., Oxnard, CA 93030

You can contact us:

• By post at the address provided above;
• Using our Data Request Form;
• By Telephone: +1-833-979-0006; or
• By Email: [email protected]

Legal Name: Haas Automation Europe NV

Our principal place of business: Mercuriusstraat 28, 1930 Zaventem, Belgium

You can contact us:

• By post at the address provided above;
• Using our Data Request Form;
• By Email: [email protected]

Dated: August 2024