Koenig & Bauer : Information on data protection

Annual General Meeting 2024

Information on Data Protection

*This version of the data protection information for shareholders, shareholder representatives and guests at the Annual General Meeting of Koenig & Bauer prepared for the convenience of English-speaking readers is a translation of the German original. For purposes of interpretation, the German text shall be authoritative and final.

Annual General Meeting 2024

Data protection information for shareholders, shareholder representatives and and guests at the Annual General Meeting of Koenig & Bauer AG

The following information aims to outline to you how we process your personal data in connection with the preparation and organisation of our Annual General Meeting as well as your rights under data protection law.

1. Data controller

Koenig & Bauer AG is the responsible controller for the processing of your personal data.

2. Categories of personal data

The Company processes the following personal data of its shareholders and any shareholder representatives for the purpose of preparing and holding its Annual General Meeting:

• full name and title, if applicable,
• Date of birth,
• Town or city of residence resp. address,
• If you contact us or provide this to us as part of the registration process, an e-mail address or telephone number,
• The number of shares held (number, type and nature of possession),
• The admission ticket number and the grant of any voting proxies.
• In addition, we store the access data for the InvestorPortal as well as data on your use of the investor portal, such as the type and amount of data retrieved, date and time of access, notification whether the access was successful, the type of web browser used, referrer URL (the website previously visited), IP address, as well as timestamp of your login and logout, which your web browser transmits to us.

If guests attend the Annual General Meeting, their name, address and any e-mail address will be processed as personal data.

To the extent that the Company does not receive this data directly from the shareholder or shareholder representative concerned, it is usually provided by the depository bank via the registration office.

Koenig & Bauer AG

Information on Data Protection | 1

3. Purpose and legal basis

The purpose of processing this data is to enable shareholders and shareholder representatives to attend the Annual General Meeting and to exercise their rights before and during the Annual General Meeting. Furthermore, it should be possible for guests to attend the Annual General Meeting. The legal basis for processing the data are the following:

• Article 6 (1) ( c) of the General Data Protection Regulation ("GDPR") insofar as compliance with our statutory duties in connection with the conduct of general meetings is concerned, in particular within the scope of our duties pursuant to sections 118 et seq. German Stock Corporation Act (Aktiengesetz, AktG). This includes in particular our duty to verify your eligibility to participate in the Annual General Meeting as a shareholder or shareholder representative, to ensure the proper adoption of resolutions and valuation of votes at the Annual General Meeting and the fulfilment of other legal obligations such as e.g. regulatory requirements as well as retention obligations under stock corporation, commercial and tax law (e.g. the obligation to retain the declaration of proxy for three years when authorising the proxies appointed by us for the Annual General Meeting).
• Article 6 (1) (f) of the GDPR insofar as it is a matter of safeguarding our legitimate interests in the context of preparing, conducting and ensuring the smooth running of the Annual General Meeting. This includes in particular the technical provision and operation of the InvestorPortal.

4. Recipient

The Company utilises various service providers and consultants in connection with its Annual General Meeting. They only receive the personal data that they require to perform their specific duties from the Company. The service providers and consultants process this data solely in accordance with the Company's instructions and the Company remains responsible for the protection of your personal data in such cases.

Furthermore, in accordance with statutory regulations, personal data shall be provided to shareholders and shareholder representatives, by listing names in the subscriber directory. In addition, we may transmit your personal data to other recipients if we are obliged to do so, for example when publishing notifications of voting rights in accordance with the provisions of the German Securities Trading Act, or to authorities for the fulfilment of statutory notification obligations (e.g. to financial or law enforcement authorities).

5. Storage period

Your personal data is stored for as long as this is required by law, in particular if and insofar as we are subject to statutory obligations to provide proof and to retain data (e.g. under the German Stock Corporation Act, the German Commercial Code (Handelsgesetzbuch) or the German Fiscal Code (Abgabenordnung)). Beyond that, we only store your personal data if the Company has a legitimate interest in storing it for a longer period of time, e.g. in the event of

Koenig & Bauer AG

Information on Data Protection | 2

judicial or out-of-court disputes arising in connection with the Annual General Meeting. In these cases, we will store your personal data until the legal or otherwise final conclusion of the relevant proceedings, including any enforcement proceedings. Your personal data will subsequently be deleted.

6. Rights of the data subject

Provided that relevant legal requirements are met, you have the right to

• Obtain information about the data processing as well as a copy of the processed data (right to access, Article 15 of the GDPR),
• Request the correction of inaccurate data or the completion of incomplete data (right to rectification, Article 16 of GDPR),
• Demand the immediate deletion of your personal data (right to erasure, Article 17 of the GDPR),
• Request the restriction of data processing (right to restriction of processing, Article 18 of the GDPR),
• Receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller (right to data portability, Article 20 of the GDPR).

Right to object pursuant to Article 21 of the GDPR: You may also object to the processing of your personal data for the protection of our legitimate interests (see above) on grounds relating to your particular situation. In this case, we will terminate the data processing unless compelling legitimate grounds override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You have the right to lodge a complaint with the supervisory authority in accordance with Article 77 of the GDPR.

The data protection supervisory authority responsible for Koenig & Bauer AG is

Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)) Promenade 18

91522 Ansbach

Tel. : [phone]

Fax.: [phone]

E-Mail: [e-mail]

Internet:https://www.lda.bayern.de/

Koenig & Bauer AG

Information on Data Protection | 3

7. Contact

If you have any questions or complaints in connection with the processing of your personal data, you can contact the Company or our Data Protection Officer at any time:

The Company's contact details are as follows:

Koenig & Bauer AG

Friedrich-Koenig-Straße 4

97080 Würzburg

Tel.: [phone]

Fax: [phone]

Germany

You can reach our Data Protection Officer at:

Herr Steffen Demuß

Koenig & Bauer AG

Friedrich-Koenig-Straße 4

97080 Würzburg

Tel.: + 49 931 909-6055

E-Mail:[e-mail]

Koenig & Bauer AG

Information on Data Protection | 4