GENESIS G70, G70 SB, G80, G90, GV70, GV80, GV80 Coupe, EV GV70, EV G80, EV GV60

WHAT IS THIS PRIVACY NOTICE ABOUT?

In this privacy notice ("Privacy Notice") we will inform you about the collection and processing of your personal data in connection with the provision of the Genesis Account and your rights as a data subject. We take your privacy very seriously and will process your personal data only in accordance with the applicable data protection and privacy laws. Any processing of your personal data in connection with the provision of any linked services to your Genesis Account is subject to a separate privacy notice.

1. WHO IS RESPONSIBLE FOR PROCESSING MY DATA?

Responsible for the processing of your personal data as explained in this Privacy Notice is the respective HYUNDAI CONNECTED MOBILITY MIDDLE EAST AND AFRICA L.L.C (“HCMMEA”) with its registered office in United Arabic Emirate-Dubai. HCMMEA will be referred to as “we”, “our” or “us”.

2. HOW CAN I CONTACT THE CONTROLLER AND THE DATA PROTECTION OFFICER?

If you have any questions about or in connection with this Privacy Notice or the exercising of any of your rights, you may contact the Genesis Connected Services Call Centre at the phone number [971-4-543-6999]. You may also contact HCMMEA by sending an email to GCSMEA@hcmmea.com. Alternatively, you may also contact our data protection officer at the email address HCMMEA@hyundai.com, or by writing to: c/o Data Protection Officer Hyundai Connected Mobility Middle East and Africa L.L.C. L01, L02, Podium Level, U-Bora Tower, Business Bay, Dubai, United Arab Emirates

3. WHAT CATEGORIES OF PERSONAL DATA ARE PROCESSED?

In connection with the Genesis Account we collect and process your name, your email address, your phone number, the password, country, preferred language and the fact that you accepted the Terms of Use and Privacy Notice.

4. FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS IS MY DATA PROCESSED

We process your personal data that you provide in connection with the registration of your Genesis Account and the further use of your Genesis account. The purpose of our processing is : • to manage your Genesis Account (from logging in until the possible termination of the Genesis Account), • to provide you with all the Genesis Account features, • to ensure access to the services for which a Genesis Account is required, • to provide you with guidance by e.g. providing support services when using the Genesis Account, and • to notify you of updates to the Genesis Account We process your personal data on the basis that it is necessary to perform our contract with you regarding the Genesis Account and based on the legitimate interests of HCMMEA to enable you an optimised customer experience via connected GCS MEA Services. Any further data processing regarding linked services, in particular telematics services and personal data connected to it (such as a particular VIN or vehicle use related data) is subject to separate Privacy Notices for the GCS MEA Services. We may process your personal data for other reasons only if we are obligated to do so, on the basis of legal requirements (e.g., transfer to courts or criminal prosecution authorities), if you have consented to the respective processing or if the processing is otherwise lawful under applicable law. In such cases we will provide you with additional information about the processing of your personal data, if appropriate. We do not engage in automated decision-making including profiling in connection with the App Services unless we have expressly notified you of such automated decision-making including profiling by other means.

5. WITH WHOM IS MY DATA SHARED?

Any access to your personal data within HCMMEA is restricted to those individuals that have a need to know in order to fulfill their job responsibilities. Your personal data may be transferred for specific purposes to the recipients and categories of recipients listed below and processed by those recipients for those specific purposes: • Private third parties – Affiliated or unaffiliated private entities other than us that, alone or jointly with others, determine the purposes and means of the processing of personal data. • Data processors – We share your personal data with certain third parties, whether affiliated or unaffiliated, that process your data on behalf of us under appropriate instructions as necessary for the respective processing purposes. The data processors will be subject to contractual obligations to implement appropriate technical and organizational security measures to safeguard the personal data, and to process your personal data only as instructed. The current data processor for the Genesis Account is as below: Company Name Address Hyundai AutoEver 510, Teheran-ro, Gangnam-gu, Seoul, Republic of Korea Hyundai AutoEver Middle East and Africa 1301, The Onyx Tower1, The Greens. Dubai, UAE Hyundai Motor Company 12, Heolleung-ro, Seocho-gu, Seoul, Republic of Korea Hyundai Middle East and Africa 2501, U-Bora Tower, Business Bay, Dubai, United Arab Emirates (P.O. Box 34406) Cupola Teleservices Ground Floor, Building 8, Dubai Outsource City, Dubai, United Arab Emirates (P.O. Box 500220) Wallan Trading Company P.O. Box 3176, Riyadh 11471, KSA Mohammed Yousuf Naghi Motors Co. P.O. Box 704, Jeddah 21421, KSA Almajdouie Motors P.O. Box 336, Damman 31411, KSA Juma Al Majid Co. P.O. Box 156, Al Ittihad Road, Deira, Dubai UAE SkyLine Automotive Manarat Al Doha Building No. 54, 15 New Doha B-Ring Northern Gulf Trading P.O. Box 25908, Safat 13120, Kuwait First Motors Building 90, Road 3402, Maamer 634, Kingdom of Bahrain The HCMMEA within your country of residence may also use data processors for call center services and/or for CRM operations. Governmental authorities, courts, external advisors, and similar third parties that are public bodies as required or permitted by applicable law.

6. IS MY DATA TRANSFERRED ABROAD?

Your personal data will be located in United Arab Emirates, and may be accessed from outside of your place of residence, e.g. Republic of Korea, where the data protection laws may provide a different level of protection compared to the laws in your jurisdiction. By accepting this Privacy Notice, you agree that your personal data will be transferred outside of your country. With regard to data transfers to such recipients outside of your country, we provide appropriate safeguards, in particular, by way of entering into data transfer agreements which include standard clauses adopted by relevant government bodies (e.g. Standard Contractual Clauses) with the recipients or taking other measures to provide an adequate level of data protection. A copy of the respective measure we have taken is available via our data protection officer (see section 2 above).

7. COOKIES

We use cookies on this website/app. Cookies are small text files that are sent to your browser by our web servers when you visit our website/app and are stored on your computer for when you re-visit our website at a later time. Cookies allow our website/app to access or store information from your browser about you, your settings or your device. They are mainly used to ensure the website's expected functionality. As a rule, cookies do not contain any information that could identify you directly. They do, however, make it possible to offer you a more personalized web experience. Session cookies (transient cookies) This website/app uses session cookies (also referred to as temporary or transient cookies). Session cookies are only stored for the duration of your visit to our website/app. The session cookies used by us serve solely to identify you for as long as you are logged on to your Genesis Account and are erased at the end of each session. They are not used for any other purposes. These cookies are required for the functionality of our website/app and cannot be disabled on our systems. As a rule, these cookies are only set as a response to an action taken by you constituting a service request, such as setting your privacy preferences, logging in or filling out forms. You can set your browser to block cookies or notify you of them. However, this may impair the functionality of the website in some areas. If we did not use these cookies, you would not be able to technically access or use the website/app content and services. Functional cookies These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly. The data processing is based on your consent.

8. HOW LONG WILL MY DATA BE STORED?

We and/or our service providers store your personal data to the extent necessary for the performance of our obligations and for the time necessary for the purposes for which we have collected your personal data, in accordance with the applicable data protection laws. When we no longer need to process your personal data for such purposes, we will erase it from our systems and/or records and/or take steps to properly anonymize it so that you can no longer be identified from the data, (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject)

9. WHAT RIGHTS DO I HAVE AND HOW CAN I EXERCISE THEM?

If you have given your consent to the processing of your personal data, you can withdraw your consent at any time with immediate effect. Such a withdrawal will not affect the lawfulness of the processing prior to your consent withdrawal. In accordance with the applicable data protection law, you have the following rights with respect to the processing of your personal data. Please note that these rights might be limited under the applicable data protection law. 9.1 Right of access : You have the right to obtain from us confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, to request access to your personal data. This information includes – inter alia – the purposes of the processing, the categories of your personal data concerned, and the recipients or categories of recipients to whom your personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access. 9.2 Right to rectification : You have the right to the rectification of any inaccurate personal data about you. Depending on the purposes of the processing, you have the right to have any incomplete personal data rectified, including by means of providing a supplementary statement. 9.3 Right to erasure ("right to be forgotten") : Under certain circumstances, you have the right to request the erasure of your personal data, and in certain circumstances we may be obliged to erase your personal data. 9.4 Right to restriction of processing : Under certain circumstances, you have the right to request us to restrict the processing your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes. 9.5 Right to data portability : Under certain circumstances, you have the right to obtain from us your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right, without hindrance from us, to transmit those data or have it transmitted directly by us to another entity. 9.6 Right to object : Under certain circumstances, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, and we can be required to no longer process your personal data. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us. 9.7 Right to lodge complaint : You also have the right to lodge a complaint with the competent data protection supervisory authority, in your country of residence. For the Kingdom of Saudi Arabia, this is the Saudi Data and AI Authority (their website with contact details is accessible at: sdaia.gov.sa). Unless otherwise stipulated by law, you will not be required to pay any fees in return for exercising these rights. To exercise your rights please contact us as stated in section 2 above.

10. AM I OBLIGED TO PROVIDE MY DATA?

You are not obliged by any statutory or contractual obligation to provide us with your personal data. However, if you do not provide your personal data as indicated in the registration process for your Genesis Account, you cannot register for a Genesis Account.

11. HOW CAN THIS PRIVACY NOTICE BE CHANGED

We may change and/or supplement this Privacy Notice from time to time in the future. In the case of material changes (e.g., in particular, any changes that materially affect your rights), we will notify you. The Privacy Notice in the respective applicable version can be accessed and viewed in your Genesis Account at any time.