Information on the processing of personal data in the context of the Jim Beam Promotion My Beam Label

The following describes how Beam Suntory processes your personal data as part of the Promotion. The Promotion is carried out in cooperation with our cooperation partner [Edrington-Beam Suntory UK](hereinafter referred to as "Cooperation Partner"). For the further processing of your personal data by Cooperation Partners, the data protection information provided by the Cooperation Partners shall apply exclusively. Beam Suntory is not responsible for data processing by Cooperation Partners. Please contact Edrington-Beam Suntory UK, 191 West George Street, G2 2LD.

Beam Suntory will point this out to you and by giving your consent, you declare that you have taken note of the fact that information on the Internet is accessible worldwide and can be linked to other information, from which personality profiles can possibly be created. You understand that information posted on the Internet, including photographs, can be easily copied and redistributed. You understand that such sharing is especially possible and likely if you upload your photo to the so-called social network. This can lead to information published on the Internet still being found elsewhere even after it has been deleted.

You have noted that information that is accessible worldwide on the Internet can be retrieved by search engines and that there are special archiving services that aim to permanently document the state of certain websites on certain dates. This can lead to information published on the Internet still being found elsewhere on the original page even after it has been deleted.

Data processing by Beam Suntory:

Controller

Beam Suntory Inc., 222 W Merchandise Mart Plaza, Chicago, IL 60654 ("Beam Suntory" or "Promoter") is responsible for the processing of your personal data within the scope of the Promotion. Beam Suntory has appointed a data protection officer, who you can reach under dpo@beamsuntory.com, Calle Mahonia, 2, 28043, Madrid, Spain.

Data categories

The following data categories will be processed by Beam Suntory during the Promotion:

Your first and last name, e-mail address, date of birth and address.

If you upload a photo as part of the Promotion, biometric data may be collected from you that allows clear identification based on your facial shape and includes references to your ethical origin, religion or health (e.g. skin colour, headgear or glasses). Your consent relates to this information and in particular to the processing of your biometric data.

Beam Suntory itself does not use your data for biometric identification and does not perform such analysis.

Purpose of processing

Beam Suntory needs your personal data for the execution and handling of the Promotion, in particular to identify you as a recipient of a personalized label or to sweep out the label. In the event that you have ordered a label and there are difficulties in making your label available, Beam Suntory will need your address or email address to contact you.

Beam Suntory needs your photo according to the above information to provide you with the desired label you have selected.

To ensure that you are of legal age and therefore eligible to participate, Beam Suntory requires confirmation of your date of birth.

You have the option to opt out of providing your personal information or to provide Beam Suntory with incomplete information. However, this may prevent you from participating in the Promotion or from receiving a promotional label.

Legal basis of the processing

The legal basis for the processing of your personal data is the participation relationship in the campaign (Art. 6 para. 1 lit. b) GDPR.

Recipient

Only employees of Beam Suntory, its subsidiaries and/or cooperation partner who is responsible for the implementation of the Promotion within the scope of their duties have access to your personal data. In order to protect your personal data, Beam Suntory has also concluded data protection agreements with all of its cooperation partners who have access to your personal data.

Your personal data will be collected from cooperation partners who operate the "My Beam Label" campaign website. The cooperation partner is responsible for sending the desired labels on behalf of Beam Suntory.

In addition, Beam Suntory, its subsidiaries and/or its cooperation partners may use third party IT maintenance or service companies to provide you with access to your personal information.

Beam Suntory will not disclose your personal information to any government agency or court unless Beam Suntory is required to do so by applicable law or court order. Beam Suntory assures you that it will

• will treat your personal data in accordance with the aforementioned provisions, guidelines and applicable laws and with contractual obligations;
• will use your personal data only for the legitimate business purposes for which it was collected;
• will act transparently with respect to the purpose for which your personal data was collected;
• has limited access to sensitive personal data so that access is granted only to those who have a professional or contractual obligation to maintain confidentiality.

As Beam Suntory is an international enterprise, there may be instances where it may be necessary for us to transfer your information outside the European Union, e.g. to our headquarters and various subsidiaries, or if we use third party service providers from another country. In these circumstances, we will put in place suitable safeguards, for example an intra-group data transfer agreement or standard contractual clauses approved by the European Commission, to ensure that your information is processed securely and in accordance with this Privacy Notice and applicable regulations. If you require further information about the safeguards we put in place, you can request such information by contacting us by email at dpo@beamsuntory.com.

Automated decision making and profile building

Your personal data will not be used by Beam Suntory for automated decision-making processes.

How long are your personal data stored?

Your personal data will only be stored for the duration of the Promotion and will then be deleted immediately or in accordance with the following description as soon as you have withdrawn your consent. Photos will be removed by Beam Suntory within a maximum of two weeks and will not be used again.

Your rights

You may contact Beam Suntroy in writing or by e-mail dpo@beamsuntory.com to exercise the following rights under applicable law:

• You may request access to your data in order to verify it;
• You can request a copy of your personal data;
• You may request the completion, correction or deletion of your personal data or request that the collection, processing, use or disclosure of your personal data be discontinued or restricted; the right of rectification includes the right to have incomplete personal data completed, including by sending an additional notice;
• You may object to the processing of your personal data;
• You may request your personal data in a structured, common and machine-readable format and have it transferred to another data controller, provided that it is processed with your consent or to fulfill a contractual relationship or a pre-contractual relationship with you;
• You can lodge a complaint with a supervisory authority regarding the processing of your personal data.

If you have any questions, please contact: dpo@beamsuntory.com