Data Processing Information for Commercial / Contractual Partners (in accordance with the General Data Protection Regulation) of Mark-E Aktiengesellschaft

Preamble

Data protection is important to us. Therefore, we collect and process your data in accordance with the applicable legal requirements, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). With this information notice, we aim to fulfill our obligations regarding information and transparency concerning the collection and processing of your personal data.

1. Data Controller

The controller responsible for the processing of your personal data is Mark-E Aktiengesellschaft, Platz der Impulse 1, 58093 Hagen, Germany, Telephone: +49 (0) 23 31. 123-0, Fax: +49 (0) 23 31. 123-2 22 22, E-mail: info@mark-e.de. The company is represented by its Executive Board members: Erik Höhne (Chairman) and Volker Neumann.

For questions and information regarding data protection, you may contact our Data Protection Officer:

Mark-E AG, Group Data Protection Officer, Platz der Impulse 1, 58093 Hagen, Germany, E-mail: datenschutz@mark-e.de

2. Type, Scope and Source of Collected Data

Mark-E Aktiengesellschaft (Mark-E) generally collects personal data directly from you. In doing so, we only collect those personal data that are required for the respective contractual purpose (principle of data minimization). Any additional information is provided voluntarily.

Mark-E collects and processes:

• Master data of the contractual partner and/or its contact persons, such as name, address, place of residence, telephone number, fax number and e-mail address. Bank details for payment processing.
• Data required for establishing and maintaining a contractual relationship through electronic communication channels.
• Installation-related data, such as market location identifiers or EEG installation codes.

You provide this data to us as part of your order or contractual engagement.

3. Purposes and Legal Basis of Data Processing

We collect and process your data for the following purposes:

Pursuant to Article 6(1)(b) GDPR:

• Conclusion of contracts, contract performance, contract termination and customer support.

Pursuant to Article 6(1)(f) GDPR based on legitimate interests:

• Improvement of our products through statistical evaluations for the development of measures based on calculated key performance indicators.
• Assessment of existing contractual relationships for the purpose of analyzing, maintaining, improving or terminating such relationships.

For compliance with legal obligations or regulatory requirements pursuant to Article 6(1)(c) GDPR:

• Compliance with statutory tax-related retention obligations.

With your consent pursuant to Article 6(1)(a) GDPR and Section 7 of the German Act Against Unfair Competition (UWG):

• Provision of information about products and services offered by companies of the ENERVIE Group through automated communication channels (e.g. e-mail, fax, SMS, messenger services, etc.).

Processing is carried out in accordance with the applicable legal provisions, including the GDPR and the BDSG.

4. Method of Data Processing

Mark-E ensures that your personal data are processed in a manner that guarantees the protection of your data.

Data are processed electronically as well as in paper form. We maintain appropriate security standards to protect your privacy and to prevent unauthorized access to your data.

We have implemented extensive technical and organizational measures to protect the data provided to us against loss, manipulation, destruction and unauthorized access. Our security measures are continuously improved in line with technological developments and legal requirements.

Data that have been appropriately categorized may subsequently be used for internal statistical analyses and marketing reports, although such data are largely anonymized or pseudonymized.

5. Use of Google Maps

For the use of the Direct Marketing Customer Portal, Google Maps, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"), is used.

Google Maps is a service for displaying maps and route planning functions. When Google Maps is activated, data are transmitted to and stored on Google's servers in the United States. This includes information about your visit to this website, your IP address and technical information about your system.

Google may transfer this information to third parties if required by law or if such third parties process the data on Google's behalf. Google states that it does not associate users' IP addresses with other Google data.

From a technical perspective, Google may be able to identify users and further analyze the data, potentially creating user profiles. Mark-E has neither knowledge of nor influence over such processing activities.

Mark-E therefore refers to:

• Google's Terms of Use: http://www.google.de/intl/de/policies/terms/regional.html
• Additional Terms of Use for Google Maps: https://www.google.com/intl/de_US/help/terms_maps.html
• Google's Privacy Policy: http://www.google.de/intl/de/policies/privacy/

You can prevent the transfer of the above-mentioned data to Google by not activating Google Maps for the visualization of your installation(s) within the Direct Marketing Customer Portal.

6. Recipients of Data

Mark-E is the data-collecting entity. It stores all data required for contract fulfillment and customer support within its IT systems.

To provide our contractual services, Mark-E engages selected service providers who receive access to your data to the extent necessary and may only use such data for the performance of the services commissioned by us.

Data recipients may include:

• IT and service providers
• Financial institutions
• Distribution system operators / grid operators
• Metering point operators
• Consulting companies and auditing and tax advisory firms
• Public authorities, including tax authorities
• Service providers within the ENERVIE Group

All service providers engaged by us are reviewed with regard to their data protection standards before being commissioned and are contractually obligated to comply with applicable data protection regulations.

No disclosure of data to third parties beyond the above takes place unless we are legally obliged to do so or you have previously granted your consent.

7. Data Retention Period

Mark-E stores your customer data for the duration of the contractual relationship.

The retention period is determined by various statutory retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). These retention periods generally range from six to ten years.

For this reason, Mark-E will delete the data collected during customer registration and installation registration ten years after the contractual relationship has ended.

8. Data Subject Rights

Mark-E respects and protects your rights under the GDPR. In particular, you have the right:

• To obtain information as to whether we process personal data relating to you. If this is the case, you may receive information about such personal data and all processing purposes described in this notice.
• To request rectification, erasure or restriction of the processing of your personal data, provided that no statutory obligations prevent this. Mark-E maintains a GDPR-compliant deletion concept designed to safeguard your rights.
• To receive your data, including in a structured, commonly used and machine-readable format.
• To withdraw any consent given for the processing of voluntarily provided data, such as your telephone number.
• To object to the use of your data for direct marketing purposes by Mark-E.
• To object, on grounds relating to your particular situation, to the processing of your personal data where such processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR.

To exercise your rights, please contact:

Mark-E AG, Platz der Impulse 1, 58093 Hagen, Germany, Telephone: +49 (0) 23 31. 123-0, Fax: +49 (0) 23 31. 123-2 22 22, E-mail: info@mark-e.de

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Version: November 2025