Privacy Notice Concerning WinCan SaaS Services

• Information About the Controller

WinCan AG, a Private Limited corporation in Switzerland owned by IDEX Corporation with of- fices located at Irisweg 12, 3280 Murten, Switzerland, (hereinafter ”WinCan”, „we„ or „us„) is the controller within the meaning of the EU General Data Protection Regulation (“GDPR”) for certain processing of your personal data in connection with our SaaS Services (“Services”).

12 Scope of this Privacy Notice

To the extend the GDPR applies to the processing of your personal data (which can in particular be the case if you are located in the European Union or the European Economic Area), we describe how we process your personal data when you are registered for or use one of the Services in this privacy notice. Any rights and obligations described in this privacy notice only apply insofar as the GDPR applies to the processing of personal data.

13 Information About Your Personal Data and Why We Use It

• General description of processing activities: We make the Services available to cus- tomers of WinCan who own and operate a terminal or use a terminal for storage (“Customer”). The Services integrate with other WinCan software solutions installed on the terminal or its This allows the Customer to read/enter data and control certain functions remotely and digitally through its employees who are regis- tered for use of the respective Service. For some of the Services, the Customer has the option to give their own clients direct access to the Service.

WinCan processes the data of these employees to enable their registration with the service and acts as a controller of the data in this regard. WinCan processes per- sonal data of the Customer’s clients or employees which are provided in the course of using the Services as a (mere) processor on behalf and as instructed by the Cus- tomer, not as a controller. The same applies in regards to any other personal data entered into one of the Services by the Customer.

• Collected data and purposes of processing

• User (including admin) information: We collect, and associate with your account, the information provided for your registration as a We use your business email ad- dress for authentication.
• Usage information: We may collect information on how and when you use a Service, meaning the day and time of usage and type of action We do so to properly document the time of relevant usage, to track the correct operation of the Service, to enable workflow management and to make sure the notifications are be- ing sent to the person responsible. Please also see the further purposes of processing below.

• Purposes of processing: We process the personal data for the following purposes

• Fulfilling our contract with our Customer

• Invoicing

• Authentication of Users

• To defend ourselves against legal claims

• Verification of compliance with Master Agreement, in particular license agree- ment

• IT-security

• Service related communication with you

• To fulfil legal retention obligations

• To enforce applicable statutory obligations or obligations and rights resulting from the legal relationship with the Customer and/or individual users

• To prove our compliance with statutory obligations

• Sources of data: The data we process has been provided either by yourself directly in the course of using the

 

14 Lawfulness of Data Processing

The legal basis for processing is Art. 6 (1) (f) GDPR, as the processing is necessary for the purposes of fulfilling our contract with our Customer and the further purposes listed in section 2.3, which is a legitimate interest pursued by us. While we bear in mind the interests and fun- damental rights and freedoms of you, your need for data protection does not override our inter- est as specified above

15 Contact and Data Protection Officer

If you have any questions regarding data protection and the exercise of your rights, you can contact our data protection officer directly via the following contact details: privacy@idexcorp.com

16 Storage Period

• We will erase your personal data when it is no longer required for the purposes men- tioned in section 2 subject to retention If our contract with the Customer is terminated, your personal data will be erased 30 days after the termination.

• We may retain your personal data for the purposes of legal defense and law enforce- ment for as long as is necessary for the preparation or execution of a possible legal dispute (usually up to four years, whereby the legal dispute itself may inhibit the course of this period)

• If longer retention periods apply after the time period listed above (e.g., because we are obliged to store the data for tax purposes or civil or criminal proceedings were initiated) we will block the data until the end of the respective retention period and then erase

17 Sharing Data within IDEX Corporation

Your data will be shared within IDEX Corporation and processed by entities located outside the EU/EEA. If and when transferring your personal data to which the GDPR applies onwards outside the EU/EEA, we will do so using one of the following safeguards:

• the transfer is to a non-EU/EEA country for which has an adequacy decision by the EU Commission exists;
• the transfer is covered by a contractual agreement, which covers the GDPR require- ments relating to transfers to countries outside the EU/EEA;
• the transfer is to an organization which has implemented Binding Corporate Rules ap- proved by an EU data protection authority; or
• the transfer is covered by other approved safeguards in order to protect your personal data in a degree that equals the level of data protection in the European

International transfers within IDEX Corporation are governed by EU Commission approved Standard Contractual Clauses for controllers (as defined under the GDPR) and, where relevant, for Processors (as defined under the GDPR).   You may request a copy of the standard contractual clauses or other applicable safeguards by contacting privacy@idexcorp.com.

18 Requirements to provide personal data

You are not legally nor by a contract with us obliged to provide us with the personal data. However if you fail to do so, we might not be able to provide you with a user account for any of the Services or provide the Service towards the Customer.

19 Automated decision making

No automated decision-making according to Art. 22(1) and (4) GDPR occurs with respect to your personal data.

110 Recipients of the Personal Data

We might transmit your personal data in parts or as a whole to other entities. This includes (a) authorities, who we are obliged to provide your personal data to, e.g., data protection authori- ties; (b) auditors or similar external consultants like lawyers or tax advisers and (c) IT service provider including cloud service and subscription service providers who process personal data on our behalf but have to follow our instructions on such processing; these service providers will not be allowed to use your personal data for other than our purposes and will act as data processors.

111 Your Rights as a Data Subject

• You have the right to request from us information on which personal data about you we process at any Likewise, if data about you is inaccurate, you have the right to obtain from us rectification of such data without undue delay.

• Under the requirements set out in 17 GDPR you have the right to request from us the erasure of your personal data. In particular, you may ask us to erase personal data, if (i) it is no longer necessary for the purposes for which it was collected or oth- erwise processed; (ii) the personal data has been unlawfully processed, (iii) you ob- ject to the processing pursuant to Art. 21(1) GDPR and there are no overriding legiti- mate grounds for the processing, (iv) the personal data has to be erased for compli- ance with a legal obligation in Union or Member State law to which we are subject or

(v) you withdraw your consent on which the processing is based and there is no other legal ground for the processing.

• You have the right to obtain from us restriction of processing, where one of the fol- lowing applies: (i) The accuracy of the personal data is contested by you, processing will be restricted for a period enabling us to verify the accuracy of the personal data,

(ii) the processing is un-lawful and you oppose the erasure of the personal data and request the restriction of their use instead, (iii) we no longer need the personal data for the purposes of the processing, but are required by you to keep them for the es- tablishment, exercise or defense of legal claims or (iv) you have objected to pro- cessing pursuant to Art. 21(1) GDPR and the verification whether our legitimate in- terests override yours is pending.

• According to Art 20 GDPR you have the right to receive the personal data concern- ing you, which you have provided to us, in a structured, commonly used and ma- chine-readable

• Please send your requests to privacy@idexcorp.com.

111.6   Pursuant to Art 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concern- ing you which is based on point f) of Art 6 para. 1 GDPR. We will no longer pro- cess your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the purpose of establishing, exercising or defending legal claims.

• In addition, you have the right to complain to a data protection supervisory authority,

e.g. in the EU Member State of your habitual residence or your place of work, if you are of the opinion that the processing of your personal data by us violates applicable data protection law.

GDPR Privacy Addendum

Information to Residents in the European Economic Area and the UK

  Effective Date: 5^th of May 2023 This GDPR Privacy Addendum supplements our Statement and applies to residents of the European Economic Area, i.e. the European Union plus Iceland, Norway, and Lichtenstein, as well as to residents of the United Kingdom. The data controller pursuant to Art. 4 No. 7 General Data Protection Regulation (Regulation (EU) 2016/679) and the UK General Data Protection Regulation and the Data Protection Act of 2018 (collectively, the “GDPR”) is WinCan AG, a company owned by IDEX Corporation with its principal place of business at Irisweg 12, 3280 Murten will process your personal data pursuant to this Statement as a personal data handler under PIPL, and can be contacted at the following email addresses: Privacy@idexcorp.com. IDEX may have business unit-specific Data Protection Officers when necessary to comply with the GDPR. Some of our business units may also have a representative in the European Union and/or the United Kingdom when necessary, however our business units that are European Economic Area may not be not required to appoint a representative and have elected not to do so. More information about contacting IDEX’s representative (when appropriate) and Data Protection Officer is set forth below under the “Contact Information” portion of this GDPR Privacy Addendum.  

1. Processing of Personal Data

The types of information about you that we process and the purposes for that processing is described in our Statement. As described in our Statement we process personal data for different purposes. The legal bases according to the GDPR for such processing are listed below (Please see our our Cookie Notice www.wincan.com for information about processing of data derived from cookies):

Processing purposes					Lawful basis
Ÿ   Learn about our website(s) users’ browsing pattern and the performance of our website(s) or for marketing purposes via cookie dataor similar tracking technologies					We only process this kind of cookie or similar tracking data if you have given us your prior consent (Art. 6 (1) (a) GDPR).
Ÿ   Visits media	or	interactions	with	social	These data are processed on the basis of statutory regulations, which allow us to process personal data to the extent necessary for the use of a service (Art. 6 (1)(b) GDPR) or because we have a predominant legitimate interest in providing you with, or optimize the functions on our presences on social media (Art. 6 (1)(f) GDPR), as well as your consent vis-á-vis the respective operator of the social

 

	media platform (Art. 6 (1)(a) GDPR). We might act as joint controller with the respective social media site. For further information, please seeSection 2 below.
Ÿ   Providing our Sites to our usersŸ   Maintaining and improving our Sites Ÿ   Providing and improving our customer service, including responding to your comments, questions and requests (e.g. product queries or technical questions) Ÿ   Processing employment inquiries Ÿ   Learning about how our products and services may be used	This data is processed on the basis of statutory provisions which allow us to process personal data to the extent necessary for the use of a service or the performance of a contract (Art. 6 (1) (b) GDPR), any processing for these purposes that is not necessary for the use of our website and the functions provided on the website is necessary for pursuing our or a third party’s legitimate interests which are not overridden by the interests or fundamental rights and freedoms of the users which require the protection of personal data (Art. 6 (1) (f) GDPR). Insofar as the processing is based on our legitimate interests, such interests are running a stable and efficient website, having a good customer service, employing people, making our business processes more efficientand improving our business and services.
Ÿ   Analysing and managing our businessŸ   Improving our IT security Ÿ   Defending our legal interests, e.g. when claiming remedies of attacks on our website Ÿ   Establishing and managing our business relationship, e.g. when you as a customer contact us via one of the Sites and we connect this request to your business account	The personal data is processed for pursuing our or a third party’s legitimate interests which are not overridden by the interests or fundamental rights and freedoms of the users which require the protection of personal data (Art. 6 (1) (f) GDPR). The legitimate interests are running a user-friendly website, improving our offers by tailoring our offers to the individual user, running a secure and stable website, making our business processes moreefficient and pursuing our legal rights.
Ÿ   Communicating with you about services, offers, promotions, rewards, and events offered by IDEX and others	Depending on the individual case such communication can be based on different legal bases. We might provide you with certain information based on a declaration of consent (Art. 6 (1) (a) GDPR), we might also provide you the information because you have subscribed to a specific service in which case the processing is necessary for the performance of a contract with you (Art. 6 (1) (b) GDPR). Certain communication might also be based on our legitimate interest to provide tailored marketing information tothe users of the Sites (Art. 6 (1) (f) GDPR).

 

Ÿ   Carrying out any other purpose described to you at the time the information was collected

The legal basis will depend on the individual case.

2. Social Media

1. LinkedIn

For users located in the European Economic Area and Switzerland, LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland („LinkedIn Ireland„). The privacy statement of LinkedIn Ireland can be accessed here: https://de.linkedin.com/legal/privacy- policy?trk=organization-guest_footer-privacy-policy. In it, you will also find information on the privacy setting options for your LinkedIn profile.   We are also jointly responsible with LinkedIn Ireland for the processing of so-called Page Insights data when people visit our LinkedIn company page. For this purpose, we have concluded a joint processing responsibility agreement with LinkedIn Ireland, which can be accessed here: https://legal.linkedin.com/pages-joint-controller-addendum. LinkedIn Ireland undertakes, among other things, to assume primary responsibility under the GDPR for the processing of Page Insights Data and to comply with all obligations under the GDPR with respect to the processing of Page Insights Data. We receive non-personal information and analytics about the use of our account or interactions with our posts from LinkedIn Ireland as part of so-called Page Insights. With this information, we can analyze and optimize the effectiveness of our LinkedIn activities. For this purpose, LinkedIn Ireland processes in particular data that you have provided to LinkedIn Ireland via the information in your profile. This especially includes the following data:  

• occupational data,
• country,
• industry,
• seniority,
• company size, and
• employment

  In addition, LinkedIn Ireland will process information about how you interact with our LinkedIn company page, such as whether you are a follower of our LinkedIn company page.

1. Twitter

Twitter is operated by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA („Twitter„). The privacy statement of Twitter can be accessed here: http://twitter.com/privacy. Further setting options can be found at https://twitter.com/personalization. Twitter also transfers personal data to the USA and other third countries outside the European Economic Area for which there is no EU Commission adequacy decision. Further information can be found here: https://twitter.com/de/privacy. You can change your privacy settings on Twitter in the account settings at: http://twitter.com/account/settings.  

3. Retention Periods

We delete or anonymize your personal data as soon as it is no longer required for the purpose for which we processed it. In general, we store your personal data for the duration of the usage or the contractual relationship via the website plus a period of 15 days for IT security purposes. We store general web log files for a period of one year and for analytical information, we store the data for three years. In the event that you have given us your consent to process your data (e.g. for marketing purposes including the associated profiling), we will store your data until you revoke your consent or the processing purpose does not apply anymore. For the retention period of cookies and other tracking, please refer to the details in our WinCan AG Cookie Notice at www.WinCan.com. After these periods have expired, the data will be erased unless this data is required for a longer period due to legal retention periods, alternative purposes or for criminal prosecution. Beyond these retention periods, we may retain the data for the purposes of legal defense and law enforcement for as long as is necessary for the preparation or execution of a possible legal dispute (usually up to four years, whereby the legal dispute itself may inhibit the course of this period). If data can be stored for these reasons, it will be blocked. The data will then no longer be available for further use.

4. Rights of Residents in the European Economic Area and the United Kingdom

The GDPR provides you with certain rights in relation to the processing of your personal data. These rights are subject to various conditions under the GDPR and/or your countries specific implementation of the GDPR. All such requests to exercise these rights may be sent to privacy@idexcorp.com or to the other contact information listed below. Those rights include:

• Request access to personal data about you (commonly known as a “data subject access re- quest”). This enables you to receive a copy of the personal data we hold about you, and to check that we are lawfully processing
• Request rectification, correction, or updating to any of the personal data that we hold about This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request personal data provided by you to be transferred in machine-readable format (“data portability”).
• Request erasure of personal This enables you to ask us to delete or remove personal data where there is no valid reason for us continuing to process it. You also have the right to ask us to delete or remove personal data where you have exercised your right to object to processing (see below).

 

• Request the restriction of processing of your personal This enables you to ask us to suspend the processing of personal data about you (e.g. if you want us to establish its accuracy or the reason for processing it).
• Withdraw your You may withdraw your consent at any time by sending an email request to privacy@idexcorp.com. You may also disable some types of cookies of our website directly through this site’s Advanced Cookie Settings control panel. Click the following button to access the control panel: Advanced settings The withdrawal does not affect the lawfulness of the prior processing.
• Lodge a complaint with a supervisory You have the right to make a complaint with a data protection authority.

RIGHT OF OBJECTION. YOU HAVE THE RIGHT; FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON THE BASIS OF ART. 6 (1) (e) OR (f) OF THE GDPR. WE WILL STOP PROCESSING YOUR PERSONAL DATA UNLESS WE CAN PROVE COMPELLING REASONS FOR PROCESSING WORTHY OF PROTECTION WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

5.    Obligation to Provide Personal Data

You are under no contractual or statutory obligation to provide personal data. However, if you do not provide the personal data we require to process your request (e.g. when you contact us with questions about our products), we may not be able to respond to such request.

6. Automated Decision-Making

No automated decision- making as referred to in Art. 22 GDPR occurs on the Sites.

7. International Data Transfers

WinCan AG is an affiliate of the IDEX Corporation which operates internationally, as such, your information may be made available to companies and/or branches within our group which may be located outside of the U.S., including in countries which may not provide the same level of protection of your information as in your home jurisdiction. In some countries, the federal, state, local, provincial, or other governments, courts, and law enforcement or other regulatory agencies may be able to obtain disclosure of your information through their laws. If and when transferring your personal data to which the GDPR applies onwards outside the EU/EEA or the United Kingdom, we will do so using one of the following safeguards:

• the transfer is to a non-EU/EEA country which has an adequacy decision by the EU Commission and/or is covered by UK “adequacy regulations” (as applicable);
• the transfer is covered by a contractual agreement, which covers the GDPR requirements relating to transfers to countries outside the EU/EEA and/or the United Kingdom;
• the transfer is to an organization which has Binding Corporate Rules approved by an EU data protection authority or the Information Commissioner’s Office in the United Kingdom (as applicable); or

• the transfer is covered by other approved safeguards in order to protect your personal data in a degree that equals the level of data protection in the European Union and/or the United Kingdom (as applicable).

International transfers within WinCan AG and IDEX are governed by Standard Contractual Clauses (as defined under the GDPR) approved by the EU Commission and/or the Information Commissioner’s Office in the United Kingdom. You may request a copy of the Standard Contractual Clauses or other applicable safeguards by contacting privacy@idexcorp.com.

8. Contact Information

If you have any questions or comments about this GDPR Privacy Addendum, the ways in which WinCan AG collects and uses your information described above and in the Statement, your choices and rights regarding such use, or wish to exercise your rights under the GDPR, please do not hesitate to contact us at: privacy@IDEXcorp.com   To Contact IDEX: Phone: 1-847-498-7070 Email: privacy@IDEXcorp.com Postal Address: IDEX Corporation Attn: Legal Department: Compliance/Privacy 3100 Sanders Road, Suite 301 Northbrook, IL 60062, USA

PIPL Privacy Addendum

Privacy Statement Addendum for China Residents

Effective Date: 5^th of May 2023 This Addendum applies to residents of the in the People’s Republic of China (“China”, which, solely for the purposes herein, is exclusive of Taiwan, Hong Kong and Macau). We are committed to processing and protecting your personal data under Chinese law, including the Personal Information Protection Law of the People’s Republic of China (PIPL). WinCan AG a company owned by IDEX Corporation with its principal place of business at Irisweg 12, 3280 Murten, Switzerland, will process your personal data pursuant to this Statement as a personal data handler under PIPL, and can be contacted at the following email addresses: Privacy@idexcorp.com.

1. Collection of Information

We collect the following information on our website.

a) Information We Collect Automatically:

When you access or use our Sites, we automatically collect the following information which is stored separate from other data that you may provide to us. We use this information to provide the Sites to you, deduce statistical and anonymous information about the users of the Sites and for the technical administration and the security of the Sites:

• Log Information – We log information about each session and the use of the Sites, including the type of browser you use, access times, pages viewed, your IP address and the page you visited before navigating to our Sites.
• Device Information – We collect information about the computer or mobile device you use to access our Sites, including the hardware model, operating system and version and mobile network information.
• Information Collected by Cookies and Other Tracking Technologies– We use various technologies to collect information, specifically cookies and web beacons. Cookies are small text files that a website or its service provider transfers to your devices, such as mobile devices or computers, through your web browser (if allowed by you), that enables the websites or service providers’ systems to recognize your browser and capture and remember certain We use cookies to understand and save your preferences for future visits and compile aggregate data about site traffic and site interaction. Our Website and our emails may also contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifts) that permit IDEX, for example, to count the number of users who have visited those pages of the Website or opened an email and for other related statistics (for example, determining the popularity of certain content and verifying server integrity). Please see our IDEX Cookie Notice for more information on our use of cookies.

b) Information You Provide to Us:

We also collect information you provide directly to us. For example, when you visit the Sites, we collect information when you request to create an account, respond to a survey, participate in any interactive features of the Sites, sign up for a newsletter or provide general feedback. The types of information we may collect include your name, company name, title, street address, telephone number, email address and any other information you choose to provide. We collect this information for offering the function that you use respectively.

2. Use of Information

We may use information about you for various purposes, including:

• Providing our Sites to the users; Maintaining and improving our Sites;
• Providing and improving our customer service, including responding to your comments, questions and requests (e.g. product queries or technical questions);
• Analysing and managing our business;
• Establishing and managing our business relationship, g. when you as a customer contact us via one of the Sites and we connect this request to your business account;
• Improving our IT security;
• Defending our legal interests, g. when claiming remedies of attacks on our website;
• Processing employment inquiries;
• Communicating with you about services, offers, promotions, rewards, and events offered by IDEX and others; and
• Carrying out any other purpose described to you at the time the information was collected or for any other purpose with your

We may also use your information to contact you about our own goods and services that may be of interest to you. If you do not want us to use your information in this way, please see the section of this Statement entitled “Choices About How We Use and Disclose Your Information.”

3. Legal Basis for processing

We are entitled to process your personal data because one or more of the following legal bases applies:

• You have given consent;
• Processing is necessary for the conclusion or performance of a contract with you or necessary to conduct human resources management in accordance with lawfully formulated labor rules and regulations and lawfully concluded contracts;
• Processing is necessary for compliance with legal or regulatory obligations that we may discharge;
• Processing is necessary to respond to sudden public health incidents or protect individuals’ lives and health, or the security of their property, under emergency conditions; or
• Processing is necessary to undertake news reporting, public opinion supervision, and the performance of other tasks carried out in the public interest.

4. International Data Transfers

To the extent permitted by PIPL, we may transfer your personal data outside of China to companies and/or branches within our group or to third parties as described in this Statement, and we will ensure the recipient is bound by applicable laws in its jurisdiction to provide a standard of protection for your personal data that is equivalent to that under this Statement.

5. Retention Periods

We delete or anonymise your personal data as soon as it is no longer required for the purpose for which we processed it. In general, we store your personal data for the duration of the usage or the contractual relationship via the website plus a period of fifteen (15) days for IT security purposes. In the event that you have given us your consent to process your data (e.g. for marketing purposes including the associated profiling), we will store your data until you revoke your consent or the processing purpose does not apply anymore. For the retention period of cookies and other tracking, please refer to the details in our IDEX Cookie Notice, available here WinCan AG Cookie Notice www.wincan.com. After these periods have expired, the data will be erased unless this data is required for a longer period due to legal retention periods, alternative purposes or for criminal prosecution. Beyond these retention periods, we may retain the data for the purposes of legal defence and law enforcement for as long as is necessary for the preparation or execution of a possible legal dispute (usually up to four years, whereby the legal dispute itself may inhibit the course of this period). If data can be stored for these reasons, it will be blocked. The data will then no longer be available for further use.

6. Your Rights

The PIPL provides you with certain rights in relation to the processing of your personal data. Besides the rights listed below, you also have the right to request us to interpret this Statement for you. All such requests to exercise these rights may be sent to privacy@idexcorp.com or to the other contact information listed below. Those rights include:

• Request access to personal data about you (commonly known as a “data subject access re- quest”). This enables you to receive a copy of the personal data we hold about you, and to check that we are lawfully processing
• Request rectification, correction, or updating to any of the personal data that we hold about This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request personal data provided by you to be transferred in machine-readable format (“data portability”).
• Request erasure of personal data. This enables you to ask us to delete or remove personal data where there is no valid reason for us continuing to process Please note that there may be circumstances where we are legally entitled to retain personal data regardless of any such request.
• Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you (e.g. if you want us to establish its accuracy or the reason for processing it).
• Withdraw your consent. You may withdraw your consent at any time by sending an email request to privacy@idexcorp.com. You may also disable some types of cookies of our website directly through this site’s Advanced Cookie Settings control Click the following button

to access the control panel: Advanced settings The withdrawal does not affect the lawfulness of the prior processing.

• Lodge a complaint with a supervisory You have the right to make a complaint with a data protection authority.

7. Obligation to Provide Personal Data

You are under no contractual or statutory obligation to provide personal data. However, if you do not provide the personal data we require to process your request (e.g. when you contact us with questions about our products), we may not be able to respond to such request.

8. Automated Decision-Making

No automated decision occurs on the Sites.

9. Changes to This PIPL Privacy Addendum

IDEX reserves the right to amend this PIPL Privacy Addendum at our discretion and at any time. When we make changes to this PIPL Privacy Addendum, we will post the updated addendum on the Website and update the addendum’s effective date. Your continued use of our Website following the posting of changes constitutes your acceptance of such changes.

10. Contact Information

If you have any question, concerns, complaints or suggestions, or would like to exercise your rights with respect to your information pursuant to the PIPL, or otherwise need to contact us, you must contact both us and our representative in China (when applicable) at the contact information below General privacy contact: privacy@IDEXcorp.com To Contact IDEX: Phone: 1-847-498-7070 Email: privacy@IDEXcorp.com Postal Address: IDEX Corporation Attn: Legal Department: Compliance/Privacy 3100 Sanders Road, Suite 301 Northbrook, IL 60062, USA To Contact our Representative: Phone: +86 (21) 52415599 Email: kko@idexcorp.com Postal Address: IDEX Trading (Shanghai) Co., Ltd. Attn: Legal Department: Compliance/Privacy Rm 3502-3504, Zhao Feng Plaza, No. 1027 Chang Ning Road Shanghai 200050

WinCan AG Cookie Notice

1. Introduction

This Cookie Notice (“Notice”) applies to the WinCan AG web site: www.wincan.com and supplements the Website Privacy Statement, which may be accessed here: www.wincan.com. Please refer to this Website Privacy Statement to receive information about the processing of personal data in general and also specific information provided according to the General Data Protection Regulation. Any questions or concerns relating to the use of cookies by our web sites and the processing of personal data obtained through their use may be directed to: privacy@idexcorp.com  

2. Cookies – What are they and how does this site use them?

A cookie is a small text file that is stored on a user’s computer for record-keeping purposes. WinCan AG uses cookies and similar technologies to collect information about the use of our web sites in order to make them function effectively, to improve our visitors’ experience when they browse our web sites, to analyze the use of our web site and to display particular relevant advertisements on our web site and on third party web sites. WinCan AG uses session cookies and persistent cookies. The purpose of session cookies is to help distinguish your browsing session from those of other concurrent users and to make it easier for you to navigate our site. A session cookie expires when you close your browser. A persistent cookie remains on your computer after you close your browser. This type of cookie is typically used to preserve across browsing sessions any site-specific preferences you may have selected while using our site.

3. How can I control my cookie preferences?

We will ask you to allow us to place cookies. You do not have to accept all of the cookies used by our web site. You can manage your cookie preferences in two ways, described below.

a)  Browser settings

Each web browser comes with its own built-in interface for managing cookie preferences. This is the preferred tool for carrying out the following cookie admin tasks:

• Block ALL cookies from this site
• Delete existing cookies from this site

For instructions on how to use your browser’s built-in cookie management tool, refer to the instructions in the help section in your browser or visit allaboutcookies.org.

b)  Site settings

This site provides a pop-up control panel on which you can manage your cookie preferences specifically for this site. You will need to use this interface in order to permit some cookies and reject others from this site. Access the control panel by clicking the button found at www.wincan.com. Bear in mind that this control panel does not allow you to disable cookies that are classified as “necessary” for the performance of this site; you must use your browser’s built-in cookie management interface to do that, as previously described.

4. What do we collect?

We use the following types of cookies on our web site www.wincan.com

a)  Necessary

These cookies are absolutely essential for the web site to function properly. This category only includes cookies that ensure basic functional and security features of the web site. These cookies do not store any personal information.

b)  Performance

These cookies help web site owners to understand how their visitors engage with their properties. The analytics cookies used on our site collect information and report site usage statistics without personally identifying individual visitors. They allow us to count visits and traffic sources so we can measure and improve the performance of our web site. They help us to know which pages are the most and least popular and see how visitors move around the site. All information these cookies collect is aggregated by third-party providers or immediately by us. If you block these cookies, we will not know when you have visited our web site and will not be able to remember your preferences when you make subsequent visits.

c)  Advertisement

These cookies may be set through our web site by third parties, such as Google. They may be used to build a profile of your interests and show you relevant advertisements on other sites. They do not directly store your personal details but do uniquely identify your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. The cookies listed above include both first party cookies and third-party cookies.

• First party cookies are those, which are stored by a domain managed by us
• Third party cookies are created by domains other than from us

The list below describes in detail the individual cookies used on our web site www.wincan.com

Cookie	Description	Duration	Type
Necessary
cookielawinfo- checkbox-necessary	This cookie is set by this site’s GDPR Cookie Consent module. It is used to store the user’s consent choice for cookies classified under the category „Necessary.“		First Party
cookielawinfo- checkbox-analytics	This cookie is set by this site’s GDPR Cookie Consent module. It is used to store the user’s consent choice for cookies classified under the category „Analytics.“		First Party
cookielawinfo- checkbox- performance	This cookie is set by this site’s GDPR Cookie Consent module. It is used to store the user’s consent choice for cookies classified under the category „Performance.“		First Party
cookielawinfo- checkbox- advertisement	This cookie is set by this site’s GDPR Cookie Consent module. It is used to store the user’s consent choice for cookies classified under the category „Advertisement.“		First Party
viewed_cookie_policy	This cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not the user has consented to the use of cookies. It does not store any personal data.		First Party
wp-session	This cookie generates a randomly assigned unique value to identify the session. When the user is done visiting the site the cookie is deleted. This is a first- party cookie that carries no personal information.		First Party
emFontsLoaded	This cookie lets the web site know whether the user has previously downloaded third-party web fonts and whether the page is safe to paint with them. Typically when a site uses uses third-party web fonts there can be a delay or “blank” load of text while the web fonts load. To prevent this, the page initially loads a standard font and then repaints the page with the third-party web fonts. This is a first-party cookie that carries no personal information.		Third Party
Performance
_gid	This cookie is part of Google Analytics. It creates a unique ID to identify your session and allow Google Analytics to collect data and generate aggregate reports on how visitors use the web site. This data cannot be used or shared by Google. For more information see this site: https://www.google.com/analytics/terms/us.html.		Third Party
_gat	This cookie is used by Google Analytics to throttle requests to the site. If this cookie is present, it minimizes the number of requests for new information made to the server and loads pages more quickly.		Third Party
_ga	This cookie is part of Google Analytics. It stores a unique ID to identify your session, which allows Google Analytics to collect data and generate aggregate reports on how you use the web site. This data cannot be used or shared by Google. For more information see this site: https://www.google.com/analytics/terms/us.html.		Third Party
YSC	This cookie is set by YouTube to track views of embedded videos on the site. YouTube aggregates this data with profile data from other Google services in order to display targeted advertising to web visitors across a broad range of their own and other web sites.		Third Party
GPS	This cookie is set by YouTube and registers a unique ID for tracking users based on their geographical location.		Third Party
Advertisement

IDE	This cookie is used by Google DoubleClick and stores information about how the user uses the web site and any other advertisements before visiting this web site. The data collected is used to present users with ads that are relevant to them according to their user profile.		Third Party
VISITOR_INFO1_LIVE	This cookie is set by YouTube to keep track of user preferences for YouTube videos embedded in the site. It can also be used to determine whether the web site visitor is using the new or old version of the YouTube interface.		Third Party