This privacy policy applies to the FAW-LINKS APP and its related services provided to you by China FAW Group Import & Export Co., Ltd. and its affiliated companies (hereinafter referred to as “we” or “our”) in the following Middle Eastern regions, including Saudi Arabia, Qatar, Bahrain, Kuwait. Please read the following sections to learn how we collect, use, share, and protect your information.

This privacy policy does not apply to products/services provided to you by other third parties. When using products/services provided by third parties, you should carefully read the personal data processing rules of the third parties and make informed decisions. We will exercise due diligence and require third parties to provide legal and compliant products/services to ensure your personal data protection.

This privacy policy will help you understand the following contents:

1 How to contact us

If you have any requests regarding the exercise of your rights, such as accessing, correcting, or deleting personal data, withdrawing consent, raising questions about the retention period of personal data, requesting a copy of the privacy policy, understanding our practices regarding personal data and privacy protection, or providing any other opinions and suggestions, you can contact our personal data protection team using the following details:

2 Changes to privacy policy

We may update this privacy policy from time to time. You can view historical versions of the privacy policy by going to FAW-LINKS APP ->“My” ->“About Us” ->“Privacy Policy”.

If we decide to update our privacy policy, we will publish the changes on our FAW-LINKS APP, which will constitute part of this privacy policy. If we substantially change the way we process your personal data, we will inform you through pop-ups or other clear and prominent forms and seek your consent before implementing such changes. We will not reduce your rights under this policy without your consent.

If there are significant changes, we will inform you in a clear manner based on the specific situation. Significant and substantial changes include but are not limited to:

3 The types of personal data we collect

Your FAW-LINKS APP sends certain data to our IT system or the service provider's IT system we use. Based on the data sent by your FAW-LINKS APP, we provide you with services or content directly to your vehicle from our service provider's IT systems.

Currently, we will collect and process your personal data as follows:

Personal data category	Personal data field content
User account data	Mobile phone number, email, mobile account password, email account password, PIN (personal identification number in your app)
Contact person data	Emergency contact mobile phone number
Vehicle identification data	Vehicle identification number (VIN), vehicle number
Vehicle status data	Status of car doors, locks, windows, headlights, tires, steering wheel, seats, air conditioning, seat belts
Location data	Vehicle location information (GPS positioning)
Mobile device data	Device ID

4 How we use your personal data and the purposes of use

5 How do we share your personal data

We will share your personal data when necessary to fulfill our obligations, provide services to you, or when permitted by laws, enforcement authorities, court orders or applicable laws. All data sent to third parties will be transmitted through encrypted transmission.

We engage the subcontractors to help us deliver our services to you:

6 The lawful basis on which we collect your personal data

We only process your personal data on the premise of at least one of the following legitimate foundations. Please note that the legitimate foundations we rely on may vary due to the differences from the laws and regulations in the country or region where you are located and your jurisdiction, but generally include at least one of the following:

7 How do we store your personal data and for how long

Your information is securely stored in Huawei Cloud Data Center in Jeddah, Saudi Arabia. For detailed information on third-party data storage, please refer to Section 5 "How do we share your personal data".

We will store your data for the time required to provide you with the service, or we have the legitimate right to continue storing the data, especially for the purpose of correcting faults or optimizing services. We only store data required for relevant purposes, or we create aliases or anonymize the data to meet the scope of our services.

8 Whether your data will be transmitted to the regions outside of Middle Eastern countries

We may need to transfer your personal data to us or third parties who process personal data on our behalf outside the jurisdiction where you provide the data. For cross-border data transfer by third parties processing personal data on our behalf, please refer to Section 5 "How we share your personal data".

We will take appropriate measures in accordance with applicable data protection regulations to ensure that your personal data remains protected and secure when transferred outside the jurisdiction where you provide the data. These measures include data transmission protocols that enforce standard data protection clauses, encryption, identity authentication and access control.

We may transfer anonymous and/or aggregated data to us or third parties who process personal data on our behalf. In case of such transmissions, we will take appropriate protective measures to ensure the security and integrity of your data, as well as all rights relating to your personal data that you may have under applicable mandatory laws.

9 How do we protect personal data of minors据

We do not collect personal data from minors. We attach great importance to protecting the personal data of minors. If we become aware that certain personal data of minors has been improperly collected, we will immediately take reasonable measures to delete such data. As data subjects, parents or other legal entities, you can also contact us through the contact information provided in Section 1 "How to contact us" and request to delete the data.

10 Your data protection rights

According to the personal data protection laws of Saudi Arabia and neighboring Gulf countries, you have the following rights:

Your right to access - You have the right to request access to your personal data by the following methods:

Your right to correction - You have the right to request us to correct personal data that you believe is inaccurate. You also have the right to request us to fill in any information you consider incomplete. You have the right to exercise this right by the following methods:

Your right to deletion - In some cases, you have the right to request us to delete your personal data or cancel your account:

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal data in certain circumstances.

Your right to object to processing - You have the right to object to the processing of your personal data in certain circumstances.

You can change certain privacy settings in your vehicle menu and use the menu to deactivate data processing at any time. Note that such revocation only applies to future processing. Any processing carried out before the revocation is not affected.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances. You are not required to pay any charge for exercising your rights. If you make a request, we have 30 days to respond to you.

If you have any requests for the above data rights, please contact us through the contact information provided in Section 1 "How to contact us".

11 Personal data protection officer

12 How to complain

13 Data regulatory agencies

（1）Regulatory agency in Saudi Arabia

（2）Regulatory agency in Qatar

（3）Regulatory agency of Qatar Financial Centre (QFC)

（4）Regulatory agency in Bahrain

（5）Regulatory agency in Kuwait

This Privacy Policy provides information about how your personal data are processed by China FAW Group Import & Export Co., Ltd. , No.4888 Weishan Road, High tech Development Zone, Changchun City, Jilin Province, P.R. China (referred to as either “we", "us" or "our") in connection with data processing and data transmission from your vehicle.

Please note that this Privacy Policy does not govern our collection or use of the personal data we process via other solutions.

With that in mind, this Privacy Policy is designed to describe:

1.How to contact us

Our Data Protection Officer

The Data Protection Regulation requires us to appoint a “Data Protection Officer”, this is a person who is responsible for overseeing and advising us in relation to our compliance with the Data Protection Regulation.

Our Data Protection officer can be contacted directly at the following address:

Email address: Bestunemenaservice@hotmail.com

Telephone number: 0086-431-8112-1055

Address: No.4888 Weishan Road, High tech Development Zone, Changchun City, Jilin Province, P.R. China

2.How do we update the Privacy Policy

Eg. The Privacy Policy was last updated on May 2025. You can review the update history through .http://rs.faw-tsp-sa.com/agree/file/en/APP/privacy.html

3.The type of personal information we collect

We currently collect and process the following information:

● Vehicle identification number (VIN): one unique vehicle number.

● Vehicle data: we will process the following data or categories from your vehicle:

Collected data whcich is required by laws and regulations: The E-Call function collects data such as vehicle location, cabin audio, and vehicle status.

4.How we get the personal information and for which purposes

Vehicle identification number: we collect your vehicle identification number from your vehilce to clearly identify your vehicle. we will not directly transmit to any other service provider. Under certain circumstances, your vehicle identification number will be transmitted in encrypted form.

Under the Data Protection Regulation, the lawful basis we rely on for processing this information is legitimate interest.

Vehicle data: These data are transferred to our systems to enable remote control over the control elements integrated in your vehicle.

Under the Data Protection Regulation, the lawful basis we rely on for processing this information is your consent,we store the last ten actions here and overwrite previous ones on a continuous basis.

Operational statuses of system components: operational statuses of system components can be stored locally in your vehicle or they can be located on a device that you have linked with the vehicle (e.g. USB stick). Based on your consent, we could process the data specified above for the purpose of monitoring and maintaining the vehicle and product safety for the after-sales service and other services.

E-call data : In the event of a potential vehicle accident, we will activate the E-call function, which collects your vehicle location, cabin audio, and vehicle data to ensure that we can locate your position more quickly to protect your personal safety.

5.How we Share your Personal Data

We will share your personal information in those cases that are necessary to fulfill our obligations, provide a service to you or in those cases where we are required to do so by law or by enforcing an authority or court order or permitted by applicable law.

We engage the subcontractors to help us deliver our services to you. Below you will find some examples of such:

Location data: Location data is the current location of your vehicle.

when the remote control function is registered and open, the collection of your vehicle location data will start and only use for your electronic fense function.

6.How we store your personal information and for how long

Your information is securely stored in Jeddah ,Saudi Arabia.

We store your data as long as required to provide our services to you or we have a legitimate interest in continuing to store them, particularly to correct faults or to optimise services. We only store the data that we need for the relevant purpose, or we encrypt the data processed beyond what we require for the provision of our services to the extent possible.

Most of your data is locally store in your vehicle. Under some circumstances, we will store your vehicle data for the last ten actions, details about data can be found in the section two “The type of personal information we collect”.

Details about data store by third parties can be found in the section four “sharing your personal data”.

7.Whether your data will be transmitted to the regions outside of Middle Eastern countries.

Some of the recipients of your personal information may be located or have relevant activities outside the Saudi Arabia and Gulf countries, where data protection laws may provide a different level of protection compared to the laws of your jurisdiction, and where there is no adequacy decision from the Saudi Arabia and Gulf countries.

Once the data has been transferred the regions outside of Middle Eastern countries, we will inform you as far as is necessary in accordance with applicable laws. With regard to data transfers to such recipients outside the Saudi Arabia and Gulf countries, we provide appropriate security measures, in particular by entering into data transfer agreements that include standard contract clauses adopted by the Saudi Arabia and Gulf countries with the recipients or by taking other measures to provide an adequate level of data protection.

8.Your data protection rights

Under data protection law, you have rights including:

Your right of access - You have the right to ask us for copies of your personal information.

Your right to rectification - You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure - You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing - You have the right to ask us to restrict the processing of your personal information in certain circumstances.

Your right to object to processing - You have the the right to object to the processing of your personal information in certain circumstances. You can change certain privacy settings in your vehicle menu and use the menu to deactivate data processing at any time. Note that such revocation only applies to future processing. Any processing carried out before the revocation is not affected.

Your right to data portability - You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have 10 to 30 days to respond to you.

Please contact us at [Jiwei Yang , email:Yangjiwei_iec@faw.com.cn, Exit 4 Branch, Financial District, Riyadh-KSA] if you wish to exercise any of these rights.

9.How to complain

If you have any questions about our processing of your personal information, you can contact Jiwei Yang, via email Yangjiwei_iec@faw.com.cn, and address Exit 4 Branch, Financial District, Riyadh-KSA.

If you are dissatisfied with our processing of your personal data, you have the right to complain.

10.SDAIA Address

Address

Kingdom of Saudi Arabia Riyadh

Website

Saudi Data & AI Authority (sdaia.gov.sa)

National Data Governance Platform “DGP” (dgp.sdaia.gov.sa)