Haas Automation, Inc., Haas Automation Europe NV, and their affiliates (together, the “Group,” “we,” “us,” or “our”), may process your Personal Data in connection with our products and services. Personal Data may be processed in the United States, where our principal operations are located, as well as in other jurisdictions where the Group operates, and is subject to applicable laws and appropriate safeguards where required. We may process your Personal Data when you visit our websites, including https://www.HaasCNC.com, https://www.HaasTooling.com, and our mobile applications, including MyHaas and HaasService (together, our “websites”).

The Purpose of This Privacy Notice

This Privacy Notice is provided to you in accordance with applicable privacy laws, including, but not limited to, the General Data Protection Regulation (“GDPR”), the California Privacy Rights Act (“CPRA”), and other laws implementing or supplementing the GDPR (together, the “Data Privacy Laws”).

This Website Privacy Notice describes how we will process your Personal Data as part of our business. References to “you” mean any person submitting any Personal Data.

This Website Privacy Notice applies only to Personal Data we process on our own behalf. This Website Privacy Notice does not apply to third-party websites that may be linked to ours. We are not responsible for these third-party sites.

As described in more detail below, you may have rights with respect to the Personal Data we process. We encourage you to read this Website Privacy Notice carefully, and to contact us if you have any questions. If any term in this Website Privacy Notice is unacceptable to you, please do not use the websites, and refrain from providing us with your Personal Data.

How We Process Your Personal Data

We process the Personal Data you provide to us through your use of our websites, or that is obtained through other sources (mentioned below).

“Personal Data”, any information relating to an identified or identifiable natural person (“Data Subject”), directly or indirectly, in particular by reference to an identifier, such as a name, address, telephone number, and driver’s license number, etc.

We have set out below, in table format, descriptions of the Personal Data we process, the purposes for which we may use your Personal Data, the legal basis we rely on to do so, and the recipients with which we will share that Personal Data.

Note that we may rely on more than one lawful basis to use your Personal Data, depending on the specific purpose. Please contact us at [email protected] if you need details about the lawful basis on which we are relying to process your Personal Data, where more than one lawful basis has been set out in the table below.

Depending on the circumstances, we process Personal Data based on one or more legal grounds, including:

• your consent;
• performance of a contract;
• compliance with legal obligations; and
• our legitimate business interests, provided such interests are not overridden by your fundamental rights and freedoms.

We do not “sell” your Personal Data or “share” Personal Data for cross-contextual behavioral advertising purposes, as those terms are defined under applicable privacy laws.

Certain Personal Data we process may be considered Sensitive Personal Data, including account credentials, financial account information, government-issued identification and geolocation data. We process this information only for authorized business purposes, legal compliance, security, fraud prevention and service delivery, as permitted by applicable law.

Who Do We Share Your Personal Data With and Why?

We may also share your Personal Data with third parties as otherwise permitted or required by applicable law.

The Sale, Transfer, or Merger of our Business or Assets

If part of our business or assets are sold, transferred or merged, or if we seek to acquire other businesses or merge with them, it may be necessary to share your Personal Data as part of that transaction. If a change happens to our business, then the new owners may use your Personal Data in the same way as set out in this Website Privacy Notice.

Compliance with Laws or To Protect Ourselves

We may disclose your Personal Data when necessary to:

• comply with applicable laws, regulations, legal processes, court orders, or other requests from regulatory or governmental authorities;
• perform or enforce our contractual obligations, or verify compliance with the agreements governing our relationships with third parties;
• establish, exercise, or defend our legal rights, or protect the rights, property, or safety of Haas, and our affiliates, business partners, customers or others; or
• obtain legal, accounting, auditing, or other professional advice in connection with our business or legal obligations.

We may disclose Personal Data as permitted or required by applicable law.

How We Protect Personal Data

Although it is impossible to guarantee complete data security on the internet, we have implemented industry-standard reasonable technical and organizational security measures to protect against the loss, misuse, and alteration of the information under our control. To help ensure the confidentiality of your Personal Data, it is important for you to protect against unauthorized access to your password, and to your computer. Be sure to sign off when finished using a shared computer. Further, while we work to ensure the integrity and security of our network and systems, we cannot guarantee that our security measures will prevent third-party “hackers” from illegally obtaining this information.

How Long We Keep Personal Data

We will retain Personal Data for as long as is necessary to fulfill the purposes mentioned in this Privacy Notice including to provide our products and services, comply with legal obligations, enforce our agreements and protect our legal rights. We may also retain Personal Data for longer periods where required or permitted by applicable law.

Marketing Communications

We may use Personal Data, Technical Usage Data, and Marketing Data to deliver relevant website content and advertisements to you, including display advertisements, and to measure or understand the effectiveness of the advertising we serve you.

You can unsubscribe from marketing emails at any time by following the unsubscribe links on any marketing email sent to you, or by emailing us at [email protected].

Preference-Based Advertising, Analytics, and Services

We engage third parties for preference-based advertising. Such third parties may include third-party advertising networks and website analysis firms who may use cookies, and similar tracking technologies to process information about your use of our websites, including your IP address, web browser, pages viewed, time spent on pages, links clicked, and conversion information. The information processed may be used by Haas and these third parties to analyze and track data, determine the popularity of certain content, deliver advertising and content targeted to your interests on our products and services, and better understand your online activity.

To find out more about how our websites work, and how we put you in control, see our Cookie Notice. You can manage your preferences at any time throughout our consent manager.

Do Not Track

We have tools in place to better detect and honor requests made using the Global Privacy Control (“GPC”) signal as requests to opt out of the sharing of Personal Data to the extent required by applicable law. We endeavor to honor these requests with respect to any Personal Data connected to the GPC opt out request based on the information made available by GPC. Note that we may not be able to tie a GPC request to all Personal Data we have about you.

What Choices Do You Have About Our Use of Your Information?

Depending on your residency, the type of Personal Data processed, and subject to certain exemptions, you may have rights with respect to your Personal Data, and some of these rights are subject exemptions and qualifications. We may choose to extend these rights to you even if we are not required to under applicable law:

• Right to access/know: You may be entitled to request that we provide to you a copy of the Personal Data we have processed about you, including the categories of Personal Data, the categories of sources from which we processed the information, the business or commercial purposes of processing the information, the categories of third parties with whom we have shared the information, and the categories of Personal Data that we have shared with third parties for a business purpose. In some instances, you may have the right to receive a copy of your Personal Data which we hold, in a portable and readily usable format. Before providing any of this information, we must be able to verify your identity.
• Right to data portability: Subject to certain conditions, you may be entitled to request that we provide to you the Personal Data we have processed about you in a portable, and to the extent feasible, usable format that allows you to transmit the data to another entity without hindrance.
• Right to limit how we use cookies and similar tracking technologies: We employ an effective cookie consent mechanism that allows users to manage their preferences for non-essential cookies in accordance with applicable law. Additionally, you can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. To find out more about cookies, and how we put you in control, see our Cookie Notice.
• Right to correct:  Subject to certain conditions, you may request that we correct any mistakes in your Personal Data or update your preferences; however, we may not be able to accommodate your request if we believe it would violate any law or legal requirement, or cause the information to be incorrect. We may delete the contested Personal Data as an alternative to correcting the information if the deletion of the Personal Data does not negatively impact you, or you consent to the deletion.
• Right to deletion: Subject to certain conditions, you may be entitled to request that we delete Personal Data about you. Before deleting Personal Data, we must be able to verify your identity. We will not delete Personal Data about you when it is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information by law. For example, we cannot delete information about you if your Personal Data is on the contract between us for our services or products.
• Right to non-discrimination: You may have the right to not be discriminated against for exercising any of the above-listed rights. We may, however, provide a different level of service or charge a different rate reasonably relating to the value of your Personal Data.
• Right to opt out of the sale or sharing of Personal Data: When you first accessed our websites you were given the option to select your cookie preferences, including to determine whether or not to allow the use of advertising cookies. You may change your cookie choices here. We also recognize universal opt-out signals that automatically opt you out of any cookies or signals for the purposes of targeted advertising. You can control your opt-out preferences within your internet browser’s settings.
• Right to limit use and disclosure of Sensitive Personal Data: We only process Sensitive Personal Data for purposes considered necessary under applicable law, and therefore do not offer this option.
• The right to withdraw consent: You have the right to withdraw your consent, where you have consented to our use of your Personal Data. This includes where you have consented to receiving marketing emails.

To stop receiving our marketing emails, follow the unsubscribe link in our marketing email. If you object to our use of your Personal Data for direct marketing purposes, please email us at [email protected]. Even if you opt out of getting marketing messages, we will still send you transactional messages. These include responses to your questions.

• Right to opt out of targeted advertising: The right to opt out of the processing of your Personal Data obtained from your activities on nonaffiliated websites or online applications for the purposes of targeted advertising.
• Right to object: You have the right to object to the processing of your Personal Data. However, in certain circumstances where we rely on legitimate interests, we may still be able to process your Personal Data, if we have compelling grounds to do so. You may request us to receive your Personal Data in a structured, commonly used, and machine-readable format. If you wish to raise a complaint about how we have handled your Personal Data, you can contact our Privacy Officer/Team at [email protected], and we will investigate the matter and respond to you promptly.
• The right not to be subject to decisions without human involvement: You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you, or similarly significantly affects you.
• The right to restrict processing: You have the right to request that we restrict the processing of your Personal Data (although we will still need to process your personal data for the duration of the contract and beyond for legal purposes).
• Right to Appeal: If we deny your privacy rights request, you may have the right to appeal our decision, depending on your place of residence and applicable law. Instructions for submitting an appeal will be provided with our response to your request, where required by law.
• Right to Submit Complaint to Supervisory Authority: If you believe our processing of your Personal Data violates applicable data protection law, you may have the right to lodge a complaint with the data protection or supervisory authority in your country, state, or other jurisdiction of residence. We encourage you to contact us first so that we may attempt to resolve your concerns directly.

We do not discriminate against you if you choose to exercise any of these rights.

Depending on your residency, these rights may not apply to pseudonymous data if the information necessary to identify the consumer is kept separately and is subject to controls that prevent access to the information. Pseudonymous data is Personal Data that can no longer be attributed to a specific individual without the use of additional information, if the additional information is kept separately and is subject to measures to ensure that personal data is not attributed to the specific individual.

Data solely retained for data backup or archive purposes is principally excluded from these rights until it is restored to an active system or next accessed or used for a sale, disclosure, or commercial purpose.

Profiling (U.S. Only)

This section shall only apply in case we perform a credit check (U.S. customers only) based on your financial information after you have submitted your order on the website.

This section shall not apply in case you do not purchase any of our products or are not a U.S. customer.

We may process your Personal Data in order to make a decision based on Profiling in relation to a credit check performed by your financial institution. The consequences of such Profiling for you, and the logic involved in such automated processing, may be that your order is denied, if it appears that you do not have sufficient liquid assets to fund the order you have made.

You have the right to access and obtain communication about the decision based on the Profiling, including the logic involved and the consequences.

You have the right to object to such Profiling that has legal consequences for you.

You also may have and exercise other rights beyond those mentioned in this Website Privacy Notice, stipulated by the applicable privacy and data protection laws.

Submitting Privacy Requests

You can exercise your privacy rights by submitting requests to us to exercise those rights, and by taking other steps that will limit how your Personal Data is processed.

To the extent applicable to you, you may exercise your privacy rights by submitting a Personal Data request by visiting our Data Request Form, by calling us toll free at +1-833-979-0006, or by emailing us at [email protected].

We must verify your identity before fulfilling your Personal Data request. To verify your identity, we may process information, including, to the extent applicable, your name, contact information, your account information, or other personal identifying information. We will match this information against the Personal Data we have previously processed about you, or against information available from consumer reports, to verify your identity and respond to your request. Personal Data processed to verify your request will only be used for verification and to respond to your Personal Data request. If you maintain an account with us, we may require you to log in to that account as part of submitting your request.

If we are unable to verify your identity as part of your request, we will not be able to satisfy your request. We are not obligated to process additional information to enable you to verify your identity. For deletion requests, you will be required to submit a verifiable request for deletion, and then confirm separately that you want Personal Data about you deleted.

If you would like to appoint an authorized agent to make a request on your behalf, we require you to verify your identity with us directly before we provide any requested

information to your approved agent. Alternatively, your authorized agent may provide evidence of having power of attorney or acting as a conservator for you. Note that we may require you to verify your identity with us directly before we provide any requested information to your authorized agent, unless your authorized agent has power of attorney or acts as a conservator, in which case we will not contact you directly. We may also request that any authorized agents verify their identity and may reach out to you directly to confirm that you have provided the agent with your permission to submit the request on your behalf. There may be circumstances where we will not be able to honor your request. For example, if you request deletion, we may need to retain certain Personal Data to comply with our legal obligations or other permitted purposes. We will notify you if we are unable to honor your request. Based on your residency, you may have the right to appeal our decision regarding your request by using the “Contact Us” details provided at the end of this Statement.

In some locations, we are only obligated to respond to Personal Data requests from the same consumer up to two times in a 12-month period. In addition, under applicable privacy law, and for the protection of your Personal Data, we may be limited in what Personal Data we can disclose.

We will maintain all your privacy requests for at least 2 years. This information will not be used for any other purpose except to review compliance processes; it will not be shared except as necessary to comply with a legal obligation.

You may also be entitled to request in writing a list of the types of Personal Data that we have disclosed to a third party for their direct marketing purposes during the preceding year, and to whom that Personal Data was disclosed.

If you wish to raise a complaint about how we have handled your Personal Data, you can contact us, and we will investigate the matter and respond to you promptly. If you are not satisfied with our response, or if you prefer not to engage with us first, you can complain to any applicable data privacy authority in your country of residence.

The Belgian Supervisory Authority is the Data Protection Authority selected by us: https://www.dataprotectionauthority.be or any other authority replacing the Belgian Data Protection Authority.

International Transfer of Personal Data

Our principal operations are located in the United States, including our hosting facilities for our websites, and the server(s) that make(s) the websites available, which may be located outside the country from which you access the websites.

If you are outside of the US, within the European Economic Area (EEA) your Personal Data may be transferred to the United States, or elsewhere within the Group. Where this happens, we use appropriate safeguards and safety measures such as standard contractual clauses (SCCs).

Changes to This Notice

Haas may from time to time make changes to this Website Privacy Notice. We will post any revised version of this Website Privacy Notice on our websites. Any changes will be effective on the effective date stated in the revised Website Privacy Notice. If there are significant changes, we may provide more prominent notice, as required by law.

Contact Us

If you have any questions about this Privacy Notice, or about the Group’s handling of your Personal Data, please contact the Privacy Officer by email at: [email protected]. Our full details are:

Legal Name: Haas Automation, Inc.

Our principal place of business: 2800 Sturgis Rd., Oxnard, CA 93030

You can contact us:

• By post at the address provided above;
• Using our Data Request Form;
• By Telephone: +1-833-979-0006; or
• By Email: [email protected]

Legal Name: Haas Automation Europe NV

Our principal place of business: Mercuriusstraat 28, 1930 Zaventem, Belgium

You can contact us:

• By post at the address provided above;
• Using our Data Request Form;
• By Email: [email protected]

Dated: August 2026