PNE : Data Protection Notices

Data Protection Notices for Shareholders

In its function as the controller, PNE AG, Peter-Henlein-Straße2-4, 27472 Cuxhaven, processes the shareholders' personal data (last name and first name, address, email address, number of shares, class of shares, type of ownership of the shares, postal votes, powers of attorney/instructions and admission ticket number) as well as personal data of proxies, where applicable, in accordance with applicable data protection laws. The shares in PNE AG are registered shares. The processing of personal data is a mandatory requirement for the proper preparation and conduct of the General Meeting of PNE AG, for attending the General Meeting, for exercising the right to speak, the right to information and the voting right, and for maintaining the share register. The legal basis for the processing is Article 6 (1) sentence 1 point (c) of the General Data Protection Regulation (GDPR) in conjunction with Sections 118 et seqq. and Section 67 of the German Stock Corporation Act. In addition, to the extent that this is required to organize the General Meeting, data may be processed on the basis of overriding legitimate interests (Article 6 (1) sentence 1 point (f) GDPR). To the extent that the shareholders do not themselves provide their personal data, PNE AG will generally obtain such data from the shareholder's depositary bank.

The service providers commissioned by PNE AG for the purpose of organizing the General Meeting will process the shareholders' personal data exclusively as instructed by PNE AG and only to the extent this is necessary for the performance of the services commissioned. Each of the employees of PNE AG as well as all staff of commissioned service providers who have access to and/or process the shareholders' personal data are obliged to treat such data confidentially. Also, personal data of shareholders and/or their proxies attending the General Meeting can be viewed by other shareholders and proxies subject to applicable laws (in particular via the list of participants (Section 129 of the German Stock Corporation Act)). Personal data of shareholders and/or their proxies will also be published or made available to other shareholders and proxies in the event of motions for additions to the agenda, countermotions, election proposals or lodged objections, under certain conditions and subject to the statutory requirements.

PNE AG will erase the shareholders' personal data in accordance with the statutory provisions, specifically if the personal data are no longer required for the purposes for which they were initially collected or processed, the data are no longer required in connection with

2

administrative or court proceedings, if any, and if no statutory record retention requirements apply.

Subject to the statutory requirements, the shareholders have the right to access their personal data that were processed and to require rectification or erasure of their personal data or the restriction of the processing. The shareholders also have the right to lodge a complaint with the supervisory authorities. If personal data are processed on the basis of Article 6 (1) sentence 1 point (f) GDPR, shareholders or their proxies, as the case may be, also have a right of objection subject to the statutory requirements.

Shareholders may address their questions or comments on the processing of personal data to the data protection officer of PNE AG at:

Francis Parbey Peter-Henlein-Straße 2-427472 Cuxhaven Germany

Email: [e-mail]

Phone: [phone]

Telefax: [phone].