Scope of Privacy Policy

At Elo Touch Solutions, Inc. (including our worldwide direct and indirect subsidiaries, Elo Touch Solutions International Inc.; Elo Touch Systems Argentina S.A.; Elo Touch Solutions (Canada) Company; Elo Touch Solutions (Belgium) NV and its branch in France; Elo Touch Solutions (HK) Limited; Elo Touch Solutions (Mexico), S.de R.L. de C.V.; Elo Touch Solutions Servicos e Participacoes Ltda.; Elo Touch Solutions (Shanghai) Limited; Elo Touch Solutions (Singapore) Pte. Ltd. and its branch in Korea; Elo Touch Solutions (Suzhou) Limited; Elo Touch Solutions (Taiwan) Limited; Elo Touch Solutions (UK) Limited and its branches in Sweden, Spain, Germany, and The Netherlands; Sensitive Object, SA; and Touch Panel Systems K.K.) (collectively, "Elo," "we," or "us"), we recognize and respect your privacy. This Privacy Policy (as amended from time to time, this "Privacy Policy") applies to Elo's domain name www.elotouch.com and its other affiliated sites including www.eloview.com (collectively, the "Site"). It applies to our collection and use of the personal information of our customers, suppliers, and visitors to the Site (collectively, "you"). As used in this Privacy Policy, "personal information" means data that may be used to identify an individual, such as name, email address, or other contact information. "Personal information" does not include aggregate, anonymized information.

Elo is a global business headquartered in the United States ("US"). Our management structure and business processes cross borders. Some of our information technology systems and databases are shared among our U.S., European, and other international offices. This means that your personal information may be transferred across borders. If you are located in the European Economic Area ("EEA") or Switzerland, our collection and use of your personal information is governed by the EU-U.S. and Swiss-U.S. Privacy Shield Framework, as described below (the "Framework"). Elo strives to comply with all laws and regulations governing the collection, use, and disclosure of personal information applicable between us and you, including the Framework for those in the EEA or Switzerland (these laws, collectively, "Privacy Laws").

Information Collected and Purposes of Collection

We collect and use personal and corporate information in the specific ways listed below:

EloView User Accounts.

If you are a user of the EloView service (or another one of our services utilizing software hosted on our servers) and have received log-in instructions from our customer support or sales teams for use of the password-protected portion of the Site, you may use those instructions to log in. Upon log-in, you may be asked to register, and following the prompts, supply your name, company name, company address, company website, email address, and phone number ("Contact Information"), as well as your preferred password for access to the Site. This Contact Information is used to carry out actions you request through the Site, such as requests for support, tracking transactions that are performed through the Site, to communicate with you about these actions, and to bill you and collect payment for our services. Your personal information will be shared with any other users designated as administrators for your corporate account, where applicable. Where permitted by Privacy Laws, we may also use your email address to send you promotional messages, surveys, product updates, and other communications, unless you opt out of such emails. See below under "Use of Email and Your Choices" below to understand how you may control use of your Contact Information.

Payment Information.

Certain Elo products and services including EloView (such as trial or paid subscriptions designed to enable your business to accept payments or that allow you to use our Site to make purchases) require you to provide certain information (e.g., credit card information and billing, shipping, and e-mail addresses) solely to initiate payment processing. We do not retain or store your credit card information. All payment processing is done by a designated third-party payment processor. The information you provide to us to process payments will be shared with our payment processor as necessary to carry out the transaction. Any sharing of your personal information with such processors will be made in accordance with Privacy Laws such that the processor will use your information solely to process your payment with us, on a confidential basis, and will not retain your personal information after conclusion of the transaction.

IP Address.

In connection with registration on the Site, we collect other information, such as your IP address, which may be considered personal information in some jurisdictions. This information is used for purposes of validation, verification of a user account, tracking of transactions that you perform through the Site, security, and other purposes. Please see below under "Cookies" for further descriptions of information collected automatically through our Site.

Information Requests and Feedback.

The Site contains various user interfaces to allow visitors to the Site to request more information about our products and services, to use the functionalities of the Site, or to provide us feedback about them. Contact Information is requested in each case, along with information about your computer environment and/or industry, and details of your request or reported feedback. This information is used in order to allow us to respond to your requests, to assure that our software and services work correctly with your computer environment, to better understand our users' needs or your specific issue, to communicate with you about your requests and feedback, and to execute on the actions that you request via the various functions on the Site. Where permitted by Privacy Laws, we may also use your email address to send you promotional messages, surveys, product updates, and other communications, unless you opt out of such emails.

Referrals.

We receive referrals of new customers and business partners from other customers, business partners, or distributors of our products. These referrals usually consist only of business contact information such as company name, and contact person name and email. We use this information to contact the referred company directly for interest in our products and services.

Applicants for Positions.

The Site contains a user interface under which you may scan the Site for open employment positions within Elo and apply for the position directly via the Site. In such case, we collect your name, address, email address, phone number(s), preferred time and method of communication, as well as your resume. We use this information in order to evaluate your application and communicate with you about the position. In processing your job application, we may send information about you to credit reference agencies and fraud prevention agencies and use information from those agencies. We may also share information about you with your former employers and may use information from them.

Click-thru URLs in Email Communications.

Submission of your email address on the Site may result in your being added to our mailing list for purposes of product updates, promotional and marketing messages, and other communications, until such time as you opt out. In some of our email messages, we use a "click-through URL" linked to certain websites administered by or on behalf of Elo. Elo may track click-through data to assist in determining interest in particular topics and measure the effectiveness of these communications. If you prefer not to be tracked in this way, you should not click on text or graphic links in the email messages. See below under "Use of Your Email and Your Choices" to understand how you may control use of your Contact Information.

Use of EloView Products.

If you use our EloView service to deliver and display your own content via our hosted environment and you enable the optional analytics function, we collect device usage-related data to analyze the effectiveness and performance of your Elo device(s). The data collected includes number of touches on the device per minute and the number of faces coming into view of the device. Once images are processed to extract the number of faces, the images are deleted. The anonymous analytics data is shared with Google for its Google Analytics service (see below), as well as other similar services, and is used by us generally to improve our products and services.

Web Logs.

We may collect information about how you use the Site such as general demographic information, viewership data, and other anonymous information (e.g., what content is viewed, related transfer rates, length of viewing, which pages are viewed, from which websites end-users came to our Site, IP address(es), browser type and other information relating to the device through which the Site is accessed, for certain service or product offerings selected by you, or other information relating to the device through which the Site or services are accessed.

Third-Party Vendors.

We may collect certain information provided by third parties such as information for identity verification purposes, credit checks, financial or credit bureau information (such as a business owner's credit score, credit history, and bank account information) and publicly available information. We use this information in order to determine whether to extend credit in connection with sale of products and services, and to collect amounts owed to us.

General Uses.

In addition to the specific uses of your personal information described above, we may also make use of your personal information for the following purposes:

• Conduct our business with our worldwide affiliates and subsidiaries, consultants, and service providers;

• Improve the Site and our products and services;

• Deliver and support our services and products;

• Carry out transactions you have requested;

• Perform auditing, data analysis, and research;

• Enforce our Terms of Sale and Terms of Use as found on our Site, our Privacy Policy, and other agreements with you;

• Prevent illegal activity, protect or enforce our rights, property, or customers, and contact appropriate authorities in accordance with Privacy Laws; and

• Comply with applicable law (including Privacy Laws), and with subpoenas or other mandatory legal process.

Please note, we will keep your personal information for as long as necessary for us to provide you services. We will also keep your information as necessary for backup, archiving, audit, preventing fraud, resolving disputes, and troubleshooting problems.

Cookies and Location-Based Services

Elo and certain third-party service providers use cookies, web beacons (clear GIFs, web bugs), and similar technologies to track user activity and collect Site data. We do not combine this data with other collected information including your personal information. Below we describe the technologies used on the Site and in the EloView product, as well as your choices in terms of their use.

Cookies.

"Cookies" are small text files that are stored by your web browser on your computer's hard drive. They allow websites to store such things as user preferences. Websites generally use both session cookies and persistent cookies. Session cookies are temporary cookies that expire (and are automatically erased) when you close your browser. Persistent cookies usually have an expiration date far into the future and thus stay in your browser until they expire, or until you manually delete them. While some cookies are strictly necessary to use our website or required for the performance of certain functionalities of our website, other cookies are used for marketing purposes.

We may use cookies to uniquely identify devices and browsers and to track end-user activity on the Site. Our cookies assign a random, unique number to the end-user device. Cookies do not contain information that would personally identify the end-user although we can associate a cookie with any identifying information that is or has been provided to us while visiting our Site. Most browsers allow users to refuse cookies but doing so may impede the functionality of some portions of our Site. Cookies also enable Elo to improve the quality of the Site and services, improve searching functions and results and track trends. Certain web browsers allow end-users to enable "Do Not Track" functionality or to specifically disable cookies through the settings of the browser. Currently, various browsers including Internet Explorer, Firefox, and Safari offer a "do not track" or "DNT" option that relies on a technology known as a DNT header, which sends a signal to websites visited by the user about the user's browser DNT preference setting. You may enable or disable those capabilities through the browser of your choice. Elo currently adopts the browsers' DNT signals with respect to the Site. This may result in users having to re-enter data to use a service. Please see your browser settings for cookie preferences and settings.

The cookies used on our site are categorized as follows:

Strictly necessary cookies - let you move around the Site and use essential features like secure areas and shopping baskets. Without these cookies, we may not be able to provide services you have requested. Please note that these cookies do not gather any information about you that could be used for marketing or tracking where you have been on the internet. We use these strictly necessary cookies to enable you to submit information via online forms such as registration forms. Accepting these cookies is a condition of using the full functionality of the Site, so if you prevent these cookies we can't guarantee your use of our Site, or how the security on our Site will perform during your visit.

Performance cookies - collect information about how you use our Site, e.g. which pages you visit and if you experience any errors. These cookies used to help us improve how our Site works, understand what interests our users, and measure how effective our content is. We use performance cookies to provide anonymous statistics on how our Site is used. Some of our performance cookies are managed for us by third parties. We do not allow the third party to use the cookies for any purpose other than those listed above. Accepting these cookies is a condition of using the full functionality of our Site, so if you prevent them we cannot guarantee how our Site will perform for you. Please see the information on our use of Google Analytics.

Functionality cookies - are used to provide services or to remember settings to improve your visit. These cookies are only placed on your hard drive if the related functionality is used.

Server Logs.

Elo servers automatically record information that your browser sends whenever you visit the Site. The server logs may include information such as your web request, IP address, browser type, and language, dates, times, and cookies.

Third Parties.

We may engage third parties to track and analyze Site activity. These third parties may place cookies or web beacons to track user activity on our Site. We use the data collected by such third parties to help us administer and improve the quality of the Site, analyze usage of the Site, and provide a more enhanced user experience on the Site, such as personalizing and delivering relevant offers and content based on user activity on the Site.

Location-Based Services.

Elo and its partners may provide certain features as part of the Service that rely upon device-based location information in order to pre-fill certain fields or supply localized information. To provide such features, Elo may collect, use, transmit, process, and maintain your location data, including the real-time geographic location of your device, and you hereby consent to Elo's collection, use, transmission, processing, and maintenance of such location data to provide such services. Such information may include device ID, device type, and real-time geographic location of your device at the time of your request. You hereby acknowledge that Elo may associate certain personal identifiable information with the location of your device. In addition, we may store your "last known location" on your device, and we collect, maintain, or track your location history. If your location data is transmitted to a partner in order to provide a feature or service, it is passed anonymously and not shared in such a way as to be personally identifiable. Currently, various browsers - including Internet Explorer, Firefox, and Safari - offer a "do not track" or "DNT" option that relies on a technology known as a DNT header, which sends a signal to Web sites' visited by the user about the user's browser DNT preference setting. You may enable or disable those capabilities through the browser of your choice. Elo currently adopts the browsers' DNT signals with respect to the Site.

Google Analytics.

Our Site and EloView service use Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses cookies, described above. The information generated by the cookie regarding your use of the Site is normally transferred to a Google server in the USA and is stored there. As the IP anonymize function is activated on our Site, your IP address will first be shortened by Google within Member States of the European Union or other contracting states of the Agreement on the EEA. Only in exceptional cases will Google transfer the full IP address to a Google server in the USA and will shorten it there. On behalf of Elo, Google will use this information to analyze your usage of our Site, to compile reports on website activities, and to provide further services to the website provider relating to the usage of the Site and the internet. The IP address transferred by your browser within the framework of Google Analytics will not be combined by Google with other data. In case you prevent the storage of cookies by setting your browser software accordingly, you may not be able to fully use all features on this Site. Furthermore, you can prevent collection by Google of the data generated by the cookie and relating to your use of the Site (including your IP address), as well as processing of these data by Google, by downloading and installing the browser plug-in provided under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Social Plug-ins:

To the extent certain third-party website features are available on our Site, the following terms apply:

Facebook. We use Facebook Like / Share button social plug-ins provided by Facebook Inc., to enable our website users to easily "Like" / "Share" content found on our Site, and thereby share this content with their Facebook "Friends." Whenever you view a page of our Site containing such plug-in, your browser establishes a direct connection to the servers operated by Facebook. As a result, the content of the social plug-in is transferred by Facebook directly to your browser and embedded in the website being shown. If you visit our Site while signed into your Facebook user account, information concerning your visit to our Site will be transferred to Facebook and Facebook can assign your visit to our Site to your user account. Please note that a data transfer is triggered already when you visit our Site, irrespective of whether you interact with the plug-in. Information arising from interaction with the Facebook plug-ins (such as by clicking the Facebook "Like" / "Share" buttons or by leaving a comment) will be directly transferred to and stored by Facebook. To prevent this, you must log out of your Facebook account before visiting our Site. Please refer to Facebook's privacy policy at https://www.facebook.com for more information on the purpose and scope of data collection and data analysis undertaken by Facebook as well as your options to modify settings and how to protect your privacy.

Twitter. We use a Twitter plug-in provided by Twitter, Inc., to enable users to easily share content found on our Site by sending a Tweet via their Twitter Account. By using this plug-in, the webpages you viewed will be connected with your Twitter account and disclosed to other users. This includes the sharing of certain information with Twitter. Please see Twitter's privacy policy at https://www.twitter.com for more on the type of information tracked by Twitter via this feature.

YouTube (Videos). We use YouTube plug-ins provided by YouTube (Google, Inc.) to enable you to share content of our Site. Whenever you view a page of our Site containing such plug-in, your browser establishes a direct connection to the servers operated by YouTube and the plug-in is displayed on our website. As a result, YouTube will receive information about which of our Sites you have visited. If you visit our Site while signed into your YouTube user account, then YouTube can assign information concerning your visit to our Site to your user account. Information arising from interaction with the YouTube plug-ins (such as clicking or starting videos or posting a comment) will also be assigned by YouTube to your YouTube user account. To prevent this, you must log out of your YouTube account before visiting our Site. Please refer to the privacy policy of YouTube at https://www.youtube.com for more information on the purpose and scope of data collection and data analysis undertaken by YouTube as well as your options to modify settings and how to protect your privacy.

LinkedIn. We use LinkedIn plug-ins (provided by LinkedIn Corporation) to enable you to share content of our Site. Whenever you view a page of our Site containing such plug-in, your browser establishes a direct connection to the servers operated by LinkedIn and the plug-in is displayed on our website. As a result, LinkedIn will receive information about which of our Sites you have visited. If you visit our Site while signed into your LinkedIn user account, then LinkedIn can assign information concerning your visit to our Site to your user account. Information arising from interaction with the LinkedIn plug-ins (such as by clicking the LinkedIn button) will also be assigned by LinkedIn to your LinkedIn user account. To prevent this, you must log out of your LinkedIn account before visiting our Site. Please refer to the privacy policy of LinkedIn at https://www.linkedin.com for more information on the purpose and scope of data collection and data analysis undertaken by LinkedIn as well as your options to modify settings and how to protect your privacy.

Use of Emails and Your Choices

Where permitted by Privacy Laws, we may use your email address to communicate with you about:

• Your use of the Site, our products and services, and your account;

• Orders you have placed, and to send you receipts and possibly other transactional emails;

• Inquiries or requests that you have made;

• Other notices necessary and specific to you as a subscriber to one of our services and or a product offering, and

• Where permitted by Privacy Laws, we may send you emails to inform you about our products and services, news, promotional activities, and other opportunities that we believe may be of interest to you. If, at any time, you would like to stop receiving these types of promotional e-mails, you may follow the opt-out instructions contained in any such e-mail or contact us as described under "Contact Elo with any Questions" below. Please note, changes may not be effective immediately but will be made as provided under applicable law.

If at any time you wish to discontinue receiving promotional and other non-transactional emails from us, you may either follow the opt-out instructions in the message or contact us as described below under "Contact Elo with any Questions." If you have an account on the Site, you may update your Contact Information with an alternative email address at any time.

Sharing and Disclosure of Information

Unless you have provided us with your consent, Elo does not share, sell, transfer, or otherwise disseminate your personal information to third parties, unless required by law, for the purpose of carrying out your transactions with us; provided that:

• We may share your personal information with our subsidiaries, affiliates, and other related companies for purposes that are consistent with this Privacy Policy;

• Consistent with Privacy Laws, in the event of a corporate transaction such as a sale, merger or reorganization, or of a bankruptcy or similar restructuring involving all or a portion of Elo, we reserve the right to disclose or transfer your personal and corporate information to the non-affiliated third-party acquiring company(ies) and other third parties. In the event of such a sale or transfer, we will use reasonable efforts to direct the transferee(s) to use personal and corporate information you have provided through the Site in a manner that is consistent with this Privacy Policy; and

• In addition, Elo may disclose personal information to third-party vendors and service providers that work with Elo. We will only share personal information to these vendors and service providers to help us carry out the operations described in this Privacy Policy. Examples of third parties we work with are shippers, servicers, information processors, financial institutions, consultants, or business partners. These third parties only have access to personal information that is necessary for them to complete their service, are required to maintain the confidentiality of information they receive from us, and are restricted from using the information for any purposes other than those authorized by us.

Security

We take reasonable physical, technical, and administrative measures designed to protect the security of information that you provide to us. Despite our efforts, no data security measures can guarantee the security of any information you disclose online. We do not make any warranty, express, implied or otherwise, that we will be able to prevent loss, misuse, unauthorized access to, or alteration of personally identifiable information you provide to us.

Third-Party Advertising

We may use third-party advertising companies to serve ads when you visit the Site. These third-party advertising companies may also separately place or recognize a cookie on your browser in the course of delivering advertisements on the Site. Using cookies or other technology, these advertising providers may use information about your computer or device, combined with personally identifiable information collected from their advertiser or customer, about your visits to the Site and other websites in order to provide targeted advertisements of interest to you. You may visit the website, linked here, of the Network Advertising Initiative, an alliance of digital advertisers, to learn more about practices with respect to personal data within this industry, and to opt-out from such practices where possible.

Third-Party Links

At times, our Site may contain links to other, third-party websites (such as links to events we are participating in). Any access to and use of such linked websites is not governed by this Privacy Policy, but instead is governed by the privacy policies of those third-party websites. Elo is not responsible for the privacy policies and/or practices of third parties. When linking to another website or using a third-party service, you should read the privacy policy on that website or service.

Minors

Elo does not knowingly permit children under the age of 18 to register on the Site or use any of its functionality for which registration is required. Elo does not knowingly collect the personal information of children under age 18. If you are under 18 years of age, you may not use the Site and you should not provide any information to Elo. If Elo determines that a minor under the age of 18 is using the Site or has provided information to Elo, then Elo will terminate the account, the minor's use of the account and delete all related information. In addition, if you are a minor under the age of 18 and wish to remove any content you have provided on the site, then please send an email to EloDPO@elotouch.com with a copy to generalcounsel@elotouch.com requesting removal of any content provided.

Disclosures to and Rights of Users in EEA

Legal Basis for Processing

If you are a user from the EEA, our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. However, we will normally collect personal information from you only where we have your consent to do so, where we need the personal information to perform a contract with you, or where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms. If we ask you to provide personal information to comply with a legal requirement or to perform a contact with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). If you have questions about or need further information concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided under the "Contact Elo" heading below.

Your Data Protection Rights

Users in the EEA have the following data protection rights, all of which you may exercise as stated below or by contacting us using the contact details provided under the "Contact Elo" heading below:

• You may access, correct, update, or request deletion of your personal information.

• You can object to processing of your personal information, ask us to restrict processing of your personal information, or request portability of your personal information.

• You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing e-mails we send you. To opt-out of other forms of marketing (such as postal marketing or telemarketing), then please contact us using the contact details provided under the "Contact Elo" heading below.

• Similarly, if we have collected and process your personal information with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.

• You have the right to complain to a data protection authority about our collection and use of your personal information. For more information, please contact your local data protection authority. Our primary data protection authority is the Belgian Commission for the Protection of Privacy, whose contact information is here.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

EU-US and Swiss-U.S. Privacy Shield Framework

Elo complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the EEA and Switzerland to the US, respectively. Elo has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield Framework and to view Elo's certification, please visit https://www.privacyshield.gov/welcome.