Haas Automation, Inc., Haas Automation Europe NV, and their affiliates (together, the “Group”, “we”, “us”, or “our”), may process your Personal Data in connection with our products and services. Personal Data may be processed in the United States, where our principal operations are located, as well as in other jurisdictions where the Group operates, and is subject to applicable laws and appropriate safeguards where required.

The Purpose of This Privacy Notice

This Privacy Notice is provided to you in accordance with applicable privacy laws, including, but not limited to, the General Data Protection Regulation (“GDPR”), the California Privacy Rights Act (“CPRA”) and other laws implementing or supplementing the GDPR (together, the “Data Privacy Laws”).

This Customer Privacy Notice explains how we process your Personal Data in connection with our business relationship with you. References to “you” include customers and prospective customers.

This Privacy Notice applies only to Personal Data we process on our own behalf. We do not sell your Personal Data, and we prohibit any sale of the Personal Data we share with our service providers.

The processing of Personal Data relating to visitors to our websites and mobile applications is governed by a separate Website Privacy Notice.

How We Process Your Personal Data

We process your Personal Data in connection with providing our products and services to customers and prospective customers.

“Personal Data,” means information that identifies, relates to, describes, or can be reasonably linked to an individual. Examples of the categories of Personal Data we process are described below.

The table below provides descriptions of the Personal Data we process, how we process it, and why we process it.

In some cases, more than one legal basis may apply to the same processing activity. If you would like additional information about the legal basis for a particular processing activity, please contact us at [email protected].

Depending on the circumstances, we process Personal Data based on one or more legal grounds, including:

• your consent;
• performance of a contract;
• compliance with legal obligations; and
• our legitimate business interests, provided such interests are not overridden by your fundamental rights and freedoms.

Processing in the U.S.

Some of your Personal Data is processed by us in the USA. By using our services, purchasing our products, and providing your Personal Data to us via the website or directly, you expressly acknowledge and agree to the transfer of some of your Personal Data to the USA, which may have a lower standard of data privacy laws than in your country of residence. Our security measures are described below in this Privacy Notice.

Who Do We Share Your Personal Data With and Why?

In addition to the recipients identified, we may share your Personal Data with the following categories of recipients or as otherwise permitted or required by applicable law.

The Sale, Transfer, or Merger of our Business or Assets

If part of our business or assets are sold, transferred or merged, or if we seek to acquire other businesses or merge with them, it may be necessary to share your Personal Data as part of that transaction. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this Customer Privacy Notice.

Compliance with Laws or To Protect Ourselves

We may disclose your Personal Data when necessary to:

• comply with applicable laws, regulations, legal processes, court orders, or other requests from regulatory or governmental authorities;
• perform or enforce our contractual obligations, or verify compliance with the agreements governing our relationships with third parties;
• establish, exercise, or defend our legal rights, or protect the rights, property, or safety of Haas, and our affiliates, business partners, customers or others; or
• obtain legal, accounting, auditing, or other professional advice in connection with our business or legal obligations.

We may disclose Personal Data as permitted or required by applicable law.

How We Protect Personal Data 

Although it is impossible to guarantee complete data security on the internet, we have implemented industry-standard reasonable technical and organizational security measures to protect against the loss, misuse, and alteration of the information under our control. To help ensure the confidentiality of your Personal Data, it is important for you to protect against unauthorized access to your password, and to your computer. Be sure to sign off when you have finished using a shared computer. Further, while we work to ensure the integrity and security of our network and systems, we cannot guarantee that our security measures will prevent third-party “hackers” from illegally obtaining this information.

How Long We Keep Personal Data 

We will retain Personal Data for as long as is necessary to fulfill the purposes mentioned in this Privacy Notice including to provide our products and services, comply with legal obligations, enforce our agreements and protect our legal rights. We may also retain Personal Data for longer periods where required or permitted by applicable law.

What Choices Do You Have About Our Use of Your Information?

Depending on your place of residency and applicable law, you may have rights regarding your Personal Data. These rights are subject to exemptions, limitations, or conditions under applicable law. Where appropriate, we may choose to extend certain rights even where not legally required.

1. ACCESS RIGHTS

• Right to access/know: You may be entitled to request that we provide to you a copy of the Personal Data we have processed about you, including the categories of Personal Data, the categories of sources from which we processed the information, the business or commercial purposes of processing the information, the categories of third parties with whom we have shared the information, and the categories of Personal Data that we have shared with third parties for a business purpose. In some instances, you may have the right to receive a copy of your Personal Data which we hold, in a portable and readily usable format. Before providing any of this information, we must be able to verify your identity.
• Right to data portability: Subject to certain conditions, you may be entitled to request that we provide to you the Personal Data we have processed about you in a portable, and to the extent feasible, usable format that allows you to transmit the data to another entity without hindrance.

• Right to correct: Subject to certain conditions, you may request that we correct any mistakes in your Personal Data or update your preferences; however, we may not be able to accommodate your request if we believe it would violate any law or legal requirement or cause the information to be incorrect. We may delete the contested Personal Data as an alternative to correcting the information if the deletion of the Personal Data does not negatively impact you, or you consent to the deletion.
• Right to deletion: Subject to certain conditions, you may be entitled to request that we delete Personal Data about you. Before deleting information, we must be able to verify your identity. We will not delete Personal Data about you when the information is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information by law. For example, we cannot delete information about you if your Personal Data is on the contract between us for our services or products.

3. CHOICE & CONTROL

• Right to opt out of the sale or sharing of Personal Data: When you first accessed our websites you were given the option to select your cookie preferences, including to determine whether or not to allow the use of advertising cookies. You may change your cookie choices here. We also recognize universal opt-out signals that automatically opt you out of any cookies or signals for the purposes of targeted advertising. You can control your opt-out preferences within your internet browser’s settings.
• Right to limit use and disclosure of Sensitive Personal Data: We only process Sensitive Personal Data for purposes considered necessary under applicable law, and therefore do not offer this option.
• The right to withdraw consent: You have the right to withdraw your consent, where you have consented to our use of your Personal Data. This includes where you have consented to receiving marketing emails.

To stop receiving our marketing emails, follow the instructions in any marketing email you get from us. If you object to our use of your information for direct marketing purposes, please email us at [email protected]. Even if you opt out of getting marketing messages, we will still send you transactional messages. These include responses to your questions.

• Right to opt out of targeted advertising: The right to opt out of the processing of your Personal Data for the purposes of targeted advertising.
• Right to object: You have the right to object to the processing of your Personal Data. However, in certain circumstances where we rely on legitimate interests, we may still be able to process your Personal Data, if we have compelling grounds to do so. You may request us to receive your Personal Data in a structured, commonly used, and machine-readable format. If you wish to raise a complaint about how we have handled your Personal Data, you can contact our Privacy Officer/Team at [email protected], and we will investigate the matter and respond to you promptly.
• The right to restrict processing: You have the right to request that we restrict the processing of your Personal Data (although we will still need to process your personal data for the duration of the contract and beyond for legal purposes).

4. AUTOMATED DECISION-MAKING

• The right not to be subject to decisions without human involvement: You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you, or similarly significantly affects you.

5. PROTECTION

• Right to non-discrimination: You may have the right to not be discriminated against for exercising any of the above-listed rights. We may, however, provide a different level of service or charge a different rate reasonably relating to the value of your Personal Data.
• Right to Appeal: If we deny your privacy rights request, you may have the right to appeal our decision, depending on your place of residence and applicable law. Instructions for submitting an appeal will be provided with our response to your request, where required by law.
• Right to Submit Complaint to Supervisory Authority: If you believe our processing of your Personal Data violates applicable data protection law, you may have the right to lodge a complaint with the data protection or supervisory authority in your country, state, or other jurisdiction of residence. We encourage you to contact us first so that we may attempt to resolve your concerns directly.

We do not discriminate against you if you choose to exercise any of these rights.

Depending on your residency, these rights may not apply to pseudonymous data if the information necessary to identify the consumer is kept separately and is subject to controls that prevent access to the information. Pseudonymous data is Personal Data that can no longer be attributed to a specific individual without the use of additional information, if the additional information is kept separately and is subject to measures to ensure that personal data is not attributed to the specific individual.

Data solely retained for data backup or archive purposes is principally excluded from these rights until it is restored to an active system or next accessed or used for a sale, disclosure, or commercial purpose.

Certain rights described above may be subject to exceptions or limitations under applicable law, including where Personal Data has been de-identified, pseudonymized, archived, or retained solely for back up purposes.

Profiling (U.S. Only)

This section shall only apply in case we perform a credit check (U.S. customers only) based on your financial information after you have submitted an order. This section shall not apply in case you do not purchase any of our products or are not a U.S. customer.

We may process your Personal Data in order to make a decision based on Profiling in relation to a credit check performed by your financial institution. The consequences of such Profiling for you, and the logic involved in such automated processing, may be that your order is denied, if it appears that you do not have sufficient liquid assets to fund the order you have made.

You have the right to access and obtain communication about the decision based on the Profiling, including the logic involved and the consequences.

You have the right to object to such Profiling that has legal consequences for you.

You also may have and exercise other rights beyond those mentioned in this Customer Privacy Notice, stipulated by the applicable privacy and data protection laws.

Submitting Privacy Requests

You can exercise your privacy rights by submitting requests to us to exercise those rights, and by taking other steps that will limit how your Personal Data is processed.

Where applicable, you may exercise your privacy rights by submitting a request through our Data Request Form, by calling us toll free at +1-833-979-0006, or by emailing us at [email protected].

Before responding to your request, we may verify your identity using information you provide or information already maintained in our records. Information processed for verification purposes will be used only to verify your identity and process your request.

If we are unable to verify your identity as part of your request, we will not be able to satisfy your request. We are not obligated to process additional information to enable you to verify your identity. For deletion requests, you will be required to submit a verifiable request for deletion and then confirm separately that you want Personal Data about you deleted.

If you would like to appoint an authorized agent to make a request on your behalf, we require you to verify your identity with us directly before we provide any requested information to your approved agent. Alternatively, your authorized agent may provide evidence of having power of attorney or acting as a conservator for you. Note that we may require you to verify your identity with us directly before we provide any requested information to your authorized agent, unless your authorized agent has power of attorney or acts as a conservator, in which case we will not contact you directly. We may also request that any authorized agents verify their identity and may reach out to you directly to confirm that you have provided the agent with your permission to submit the request on your behalf. There may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may need to retain certain Personal Data to comply with our legal obligations or other permitted purposes. We will notify you if we are unable to honor your request. Based on your residency, you may have the right to appeal our decision regarding your request by using the “Contact Us” details provided at the end of this Statement.

In some locations, we are only obligated to respond to Personal Data requests from the same consumer up to two times in a 12-month period. In addition, under applicable privacy law, and for the protection of your Personal Data, we may be limited in what Personal Data we can disclose.

We will maintain all your privacy requests for at least 2 years. This information will not be used for any other purpose except to review compliance processes; it will not be shared except as necessary to comply with a legal obligation.

You may also be entitled to request in writing a list of the types of Personal Data that we have disclosed to a third party for their direct marketing purposes during the preceding year, and to whom that Personal Data was disclosed.

If you have questions or concerns about our handling of your Personal Data, please contact us first so that we may attempt to resolve the issue. Where applicable, you may also have the right to lodge a complaint with a supervisory authority. For the GDPR, the Belgian Data Protection Authority is the supervisory authority selected by us: https://www.dataprotectionauthority.be

International Transfer of Personal Data

Haas transfers your Personal Data within the Group, and/or to other third parties, such as our third-party service providers outside of the EEA and UK. When we do so, we transfer the information in compliance with applicable data protection laws, for example, we have implemented safeguards in the form of standard contractual clauses.

Changes to This Notice

Haas may from time to time make changes to this Customer Privacy Notice. We will post any revised version of this Customer Privacy Notice on our websites. Any changes will be effective on the effective date stated in the revised Customer Privacy Notice. If there are significant changes, we may provide more prominent notice, as required by law.

Contact Us

If you have any questions about this Privacy Notice, or about Haas’s handling of your information, please contact the Privacy Officer by email at: [email protected]. Our full details are:

Legal Name: Haas Automation, Inc.

Our principal place of business: 2800 Sturgis Rd., Oxnard, CA 93030

You can contact us:

• By post at the address provided above;
• Using our Data Request Form;
• By Telephone: +1-833-979-0006; or
• By Email: [email protected]

Legal Name: Haas Automation Europe NV 

Our principal place of business: Mercuriusstraat 28, 1930 Zaventem, Belgium 

You can contact us: 

• By post at the address provided above; 
• Using our Data Request Form; 
• By Email: [email protected]

Dated: August 2026