Daimler Truck : Information on data protection (Daimler Truck IR AGM 2026 information on data protection)

Daimler Truck Holding AG

Information on data protection

Convenience translation.

The German text is legally binding.

Annual General Meeting on May 06, 2026

‌Information on data protection for shareholders of Daimler Truck Holding AG, for shareholders' proxies and for guests of the General Meeting

Thank you for your interest in the General Meeting of Daimler Truck Holding AG and the InvestorPortal for shareholders1. Protecting your personal data is our top priority. In the following data protection notice, we explain how personal data is processed by us for the purpose of maintaining our share register, preparing and holding the General Meeting, communicating with our shareholders and in connection with the use of our InvestorPortal (https://www.daimlertruck.com/investorportal/DE.html). You will also learn about your rights in relation to the processing of your personal data.

We will hold the 2026 Annual General Meeting as a virtual Annual General Meeting (§ 118a German Stock Corporation Act). Shareholders and their proxies as well as guests can therefore not physically participate in the General Meeting. However, they can follow the entire General Meeting by means of audio and video transmission via a special online portal, which also provides additional functions for shareholders and their proxies as described in more detail below (InvestorPortal).

Information on the personal data we collect and store about you when you visit our website at https://www.daimlertruck.com can be found at https://www.daimlertruck.com/privacy.

1. ‌Who is the data protection notice addressed to?

   The following notice is addressed to shareholders of Daimler Truck Holding AG and their proxies who participate virtually in the Annual General Meeting. If you attend the General Meeting as a guest, you will also find information on the processing of your personal data in this context in this data protection notice.

   ‌1For the sole purpose of better readability, this document does not use gender-specific language. All personal designations and terms are to be understood as being gender-neutral for the purposes of equal treatment.

2. ‌Who is the controller in relation to the processing of my personal data and whom can I contact about data protection?‌

   The controller in relation to the processing of personal data described below is: Daimler Truck Holding AG

   Fasanenweg 10

   70771 Leinfelden-Echterdingen Germany

   E-mail: [e-mail] Telephone: [phone]

   The contact information for the Chief Data Privacy Officer is as follows:

   Daimler Truck AG

   Chief Data Privacy Officer / KonzerndatenschutzbeauDragter HPC DTF2B

   70745 Leinfelden-Echterdingen Germany

   E-mail: [e-mail]

3. ‌What categories of personal data do we process?‌
   1. ‌Data of shareholders and their proxies‌

      We process the following personal data of our shareholders in connection with maintaining our share register and holding our virtual General Meeting: Shareholder number, title, name, given name, name at birth, date of birth, nationality/citizenship, postal address, email address, number of shares held, type of share ownership, remitting bank, date of share acquisition, individual access data for the InvestorPortal, instructions/voting and other data provided or collected in connection with the virtual General Meeting.

      If a shareholder is represented by proxy, we also process the name, postal address and - if indicated - the e-mail address of the proxy.

      If shareholders or their proxies contact us, we also process the personal data that they provide to us in this context or that we need to process the respective request, in particular the e-mail address and/or telephone number. This also applies if shareholders or their proxies participate in the General Meeting with speaking contributions, questions, motions, election nominations, requests for additions to the Agenda, written statements or other requests.

   2. ‌Attendance of guests‌

      If you attend our virtual General Meeting as a guest, we process the following data about you: Name, given name, postal address and individual access data for either the InvestorPortal or a password-protected section of our website (guest card or access number and PIN).

   3. ‌Data that we process when you use the InvestorPortal
      1. ‌Technical data

         If you visit our InvestorPortal on the Internet, we collect data on access to our InvestorPortal. The following data and device information are logged in the web server log files:

         » Data retrieved or requested;

         » Date and time of retrieval;

         » Message whether the retrieval was successful;

         » Content of the request (specific webpage);

         » Type of web browser used;

         » Referrer URL (the previously visited webpage);

         » IP address;

         » Shareholder/proxy card number and session ID.

         Your browser automatically transmits this data to us when you visit our InvestorPortal.

      2. ‌Web storage

         We use what is known as web storage functions. This means that small text files are stored in the local memory of your browser on your terminal device and saved there. As part of session storage technology, we collect information on the respective authentication token (i.e., your "virtual" admission ticket) and your session data aDer your login, including your acceptance of our terms of use. This recognises you as a user if you switch to another page of the portal during an active session, return to our website, or need to reload the page. When you close the browser, this data is automatically deleted.

         We also use what is known as local storage function to enable you to use the webcast of the General Meeting. The timestamp of your login is stored, which for security reasons enables an automatic logout aDer a previously defined period of inactivity.

      3. ‌Cookies

         We also use cookies to make our InvestorPortal available to you. Cookies are small files

         that are stored on your desktop, notebook or mobile device by a website you visit. From

         this we can see, for example, whether there has already been a connection between your device and our media content.

         We use the following technically necessary cookies for the webcast of the General Meeting, the provision of media content in our InvestorPortal and the video communication with shareholders and their proxies in the context of speaking contributions at the General Meeting.

         Cookie name	Description and purpose	Storage duration
         X-XSRF-TOKEN	Technically necessary cookie that ensures a secure connection between InvestorPortal and Q-Live.	Until the end of the session or closing the browser.
         AspNetCore.Anti forgery.8-SwGiRsH58 Netscaler 14.1 (http-Cookie)	Technically necessary cookie that ensures a secure connection between InvestorPortal and Q-Live.	Until the end of the session or closing the browser.
         PHDSESSID	Technically necessary cookie for storing data of the current session.	Until the end of the session or closing the browser.
         ASP.NET_Sessio nId	Technically necessary cookie for establishing the connection during a speaking contribution.	Until the end of the session or closing the browser.
         jwplayerLocalID	Technically necessary cookie for the webcast video player.	Until the end of the session or closing the browser.
         ng2Idle.main.exp iry ng2Idle.main.idli ng	A session store is intended for scenarios in which the user performs a single action. This is used for automatic logout aDer 30 minutes of inactivity.	Valid only for the respective session, but remains on the end device aDer closing the browser.
         eServiceStorage IVPLanguage authorizationDat a hostPortalConte xt translationTags	The SessionStorage attribute of the window object preserves key-value pairs for all pages loaded during the validity period of a single tab (for the duration of the top-level browser context). Temporary storage (e-mail address) for automated sending of confirmations.	Until the end of the session or closing the browser.

         These cookies are technically necessary, as we cannot make the InvestorPortal available to you without the cookies, or only to a limited extent.

4. ‌For which purposes and on which legal basis do we process personal data?

   We process your personal data in compliance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz -BDSG), the German Stock Corporation Act (Aktiengesetz - AktG), the German Securities Trading Act (Wertpapierhandelsgesetz - WpHG) and all other relevant legal provisions and for the purposes described below.

   1. ‌Maintaining the share register

      We process the personal data of shareholders referred to in Section III.1 in order to maintain and keep up to date our share register.

      Shares of Daimler Truck Holding AG are registered shares. § 67 German Stock Corporation Act stipulates that registered shares must be entered in the Company's share register, stating the shareholder's name, date of birth, postal address and e-mail address, as well as the number of shares held by that shareholder. Shareholders are generally obliged to provide this information to the Company.

      The credit institutions or other intermediaries involved in purchasing or holding in custody any registered shares in Daimler Truck Holding AG routinely forward the shareholder information relevant for maintaining the share register (e.g., shareholder number, title, first name, surname, name at birth, date of birth, nationality/citizenship, postal address, e-mail address, number of shares held, type of share ownership, remitting bank) to us. This is done via Clearstream Banking AG, Eschborn, the central securities depository that performs the technical processing of security transactions and holds the shares in custody for the credit institutions and other intermediaries. A sale of shares is also reported to us via Clearstream Banking AG. Daimler Truck Holding AG may also request information relevant to maintaining the share register from the credit institutions and other intermediaries involved.

      Via our InvestorPortal, shareholders have the opportunity to notify us of changes to their e-mail address for the purpose of receiving the Annual General Meeting documents electronically or for the purpose of receiving customised information. In addition, with this service you are also enabled to directly see the key information recorded for you in the share register online. Shareholders are requested to please notify any name changes or changes to their residential/mailing address to their depositary bank, which will then arrange for the share register to be updated.

      The legal basis for the processing of personal data of shareholders in our share register is the fulfilment of a legal obligation, Art. 6(1) point (c) General Data Protection Regulation in conjunction with § 67e(1) German Stock Corporation Act and our obligation under stock corporation law pursuant to § 67 German Stock Corporation Act. Personal data beyond the information required by §§ 67 and 67e(1) German Stock Corporation

      Act is processed on the basis of our legitimate interests pursuant to Art. 6(1) point (f) General Data Protection Regulation. The legitimate interest is to provide shareholders with easy access to their data, to offer them selected services in our InvestorPortal and, if necessary, to provide to or send them documents electronically.

   2. ‌Preparing, conducting and following up on the virtual General Meeting for shareholders and proxies

      We process the personal data of shareholders and their proxies referred to in Section

      III.1 in order to prepare, conduct and follow up the virtual General Meeting. The processing of the personal data is legally mandatory for the virtual General Meeting to be conducted properly in accordance with the provisions of stock corporation law.

      Shareholders registered in the share register may register for the Annual General Meeting of Daimler Truck Holding AG via the InvestorPortal or in text form and vote by absentee voting or issue a voting proxy and instructions to the proxies of the Company or third parties. They can also follow the entire General Meeting by audiovisual means via the InvestorPortal and exercise their other shareholder rights via the InvestorPortal in accordance with statutory law, the Articles of Incorporation and the convening notice for the Annual General Meeting. We process the personal data of our shareholders and their proxies in order to fulfil our legal obligations to shareholders and proxies, to enable the exercise of shareholder rights and to ensure that shareholder rights are only exercised by authorized persons. In particular, we also process the voting behaviour in order to ensure the proper adoption of resolutions and counting of votes at the General Meeting.

      To the extent shareholders or their proxies participate in the General Meeting with speaking contributions, questions, motions, election nominations, requests for additions to the Agenda, written statements or other requests, we may make these contributions accessible to other shareholders and proxies on the InvestorPortal, stating the name of the shareholder or his/her proxy. If a shareholder requests that items be placed on the Agenda, we will make an announcement of such items, stating the name of the shareholder, if the requirements under the provisions of stock corporation law are met. We will also make counter-motions and election nominations from shareholders available on the Company's website in accordance with the provisions of stock corporation law, stating the name of the shareholder, provided that the requirements are met.

      The legal basis for the processing of personal data of shareholders and proxies for the preparation, holding and following up on the virtual General Meeting is the fulfilment of a legal obligation, Art. 6(1) point (c) General Data Protection Regulation in conjunction with

      § 67e(1) German Stock Corporation Act and our obligation under stock corporation law pursuant to §§ 67, 118 et seqq. German Stock Corporation Act. Personal data beyond the information required by §§ 67 and 67e(1) German Stock Corporation Act is processed on the basis of our legitimate interests pursuant to Art. 6(1) point (f) General Data Protection Regulation. The legitimate interest is to provide shareholders with easy access to their data, to offer them selected services on our InvestorPortal - including the

      opportunity to exercise their shareholder rights at the Annual General Meeting in accordance with statutory law, the Articles of Incorporation and the convening notice for the Annual General Meeting - and to provide to or send them documents electronically, if necessary.

      In connection with preparing, conducting and following up on the virtual General Meeting, we may also transmit personal data of shareholders and their proxies to our external service providers, as we have a legitimate interest in holding the virtual General Meeting in compliance with the applicable legal provisions and in obtaining external advice in this regard. The legal basis for this processing is Art. 6(1) point (f) General Data Protection Regulation.

   3. ‌Admission of guests to the General Meeting

      We process the personal data of guests referred to in Section III.2 to ensure that only selected guests can follow the video and audio transmission of the virtual General Meeting. In particular, we prepare a guest list and send out guest tickets or access data for the InvestorPortal or a password-protected section of our website, via which guests can follow the webcast. The other functions of the InvestorPortal are not available to guests. The legal basis for the processing is Art. 6(1) point (f) General Data Protection Regulation. Our legitimate interest is to control access to our virtual General Meeting and to admit only selected guests.

   4. ‌Operation of the InvestorPortal

      The processing of the technical access data and device information in web server log files referred to in Section III.3 and the use of web storage elements is technically necessary for making available the InvestorPortal as well as for detecting misuse, troubleshooting and ensuring the smooth running of the virtual General Meeting.

      The necessary session cookies used by us are only used for the purpose of providing the media content. They are necessary for the functions of the media content and are deleted when the browser is closed.

      The legal basis for the setting of the essential cookies, the use of the technically necessary web storage elements and access to the data stored therein as well as the processing of personal data in connection therewith is § 25(2) no. 2 German Telecommunications and Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz - TTDSG), as this is indispensably necessary to provide the InvestorPortal requested by the relevant persons. The further processing of the information collected via the essential cookies, and of the above-mentioned access data and device information, is necessary to safeguard our legitimate interest in enabling our shareholders, their proxies and guests to use the InvestorPortal, including the media content. The legal basis for this processing is Art. 6(1) point (f) General Data Protection Regulation.

      When shareholders or their proxies register on the InvestorPortal, we will process their registration information in order to verify their authorization to connect to the virtual General Meeting as a shareholder or proxy or to take preparatory measures. The legal basis for these processing operations is Art. 6(1) point (c) GDPR in conjunction with

      § 67e(1) German Stock Corporation Act.

      When guests register on the InvestorPortal, we will process their registration information in order to verify their authorization to connect to the virtual General Meeting as a guest and to enable them to follow the webcast of the virtual General Meeting. The legal basis for the processing is Art. 6(1) point (f) General Data Protection Regulation. Our legitimate interest is to be able to make the InvestorPortal and the webcast of the virtual General Meeting technically available to selected guests as well.

   5. ‌Communicating with shareholders, providing corporate information and maintaining shareholder contact (investor relations)

      In addition, we process the shareholders' personal data referred to in Section III.1 in order to communicate with our shareholders. In particular, we use the email address recorded in our share register to send shareholders information relevant under securities law, such as the notice convening the General Meeting, if they have expressly consented to the transmission of such information by means of remote data transmission in accordance with § 49(3) no. 1 lit. d) German Securities Trading Act (Wertpapierhandelsgesetz - WpHG) or have not objected to a request for consent in text form within a reasonable period of time and have not revoked their consent at a later date. The personal data of shareholders referred to above may also be processed for the purpose of providing corporate information and maintaining contact with our shareholders (investor relations). The legal basis for these processing operations is our legitimate interest, Art. 6(1) point (f) General Data Protection Regulation. Our legitimate interest is to communicate with shareholders in order to send shareholders corporate information or the invitation to the General Meeting, and generally to maintain contact with our shareholders.

   6. ‌Processing for the fulfilment of other statutory obligations

      The personal data of shareholders and their proxies referred to in Section III.1 will also be processed for the purpose of complying with any statutory reporting and publication obligations. In addition, these personal data may also be processed to satisfy further statutory obligations such as regulatory requirements as well as retention obligations under stock corporation law, commercial law and tax law. For example, if power of attorney is granted to the proxy designated by us for the General Meeting, we are required to record the proxy declaration in such manner that it can be verified for a period of three years. The relevant statutory provisions in conjunction with Art. 6(1) point (c) General Data Protection Regulation serve as the legal basis for processing data in these cases.

5. ‌To which categories of recipients will we potentially forward personal data?
   1. ‌External service providers

      We partly use external service providers for the administration and technical management of the share register, as well as for preparing and conducting the General Meetings. Our partners are undertakings from the following categories: service providers for maintaining the share register, IT service providers, service providers for preparing and conducting the General Meeting and their subcontractors. In particular, we use ComSat Media GmbH for making the webcast of the General Meeting and the media content technically available on the InvestorPortal.

      The InvestorPortal is operated by our service provider,

      Computershare Deutschland GmbH & Co. KG

      Elsenheimerstr. 61

      80687 Munich

      exclusively on our behalf and in accordance with our instructions. It can be accessed via the Internet address https://www.daimlertruck.com/investorportal/DE.html.

   2. ‌Other recipients

      We may also be obliged to transmit the personal data referred to in Section III to other recipients, for example to meet statutory disclosure obligations vis-à-vis public authorities (e.g., if a legally specified voting-rights threshold is exceeded) or financial authorities or law enforcement agencies. Within Daimler Truck Holding AG, those persons have access to the data for whom that is necessary to fulfil our tasks.

      In connection with the preparation, conducting and follow-up of the General Meeting, we may also transmit the aforementioned personal data to our legal advisors, tax advisors, auditors or the notary.

      If shareholders attend the General Meeting, we are obliged pursuant to § 129(1) sentence 2 German Stock Corporation Act to enter shareholders' names, places of residence, number of shares held and type of share ownership in the register of participants. This data may be inspected by participants in the General Meeting or other shareholders during the meeting and by shareholders for up to two years thereaDer (§ 129(4) German Stock Corporation Act). To the extent shareholders or their proxies participate in the General Meeting with speaking contributions, questions, motions, election nominations, written statements or other requests, we may make these contributions accessible to other shareholders and proxies on the InvestorPortal, stating the name of the shareholder or, respectively, his/her proxy. If a shareholder requests that items be placed on the Agenda, we will make an announcement of such items, stating the name of the shareholder, if the requirements under the provisions of stock

      corporation law are met. We will also make counter-motions and election nominations from shareholders available on the Company's website in accordance with the provisions of stock corporation law, stating the name of the shareholder, provided that the requirements are met.

6. ‌How long do we store personal data?

   As a general rule, we erase the personal data referred to in this data protection notice as soon as it is no longer required for the purposes referred to above, unless we are obliged to continue to store such data by statutory obligations to provide proof and keep records (e.g., under the German Stock Corporation Act, the German Commercial Code, the German Fiscal Code). For personal data collected in connection with general meetings, the storage period is generally 3 years, unless a shorter retention period is prescribed, for example pursuant to § 67e(2) German Stock Corporation Act; we store counter-motions and election nominations for 5 years. Other than that, we only retain personal data in individual cases if this is necessary in connection with claims asserted against our Company.

7. ‌Data sources

   We, or the service providers commissioned by us, receive the personal data of the shareholders either from the shareholders themselves, or via Clearstream Banking AG from the credit institutions or other intermediaries of the shareholders. Where shareholders authorize proxies, we receive the proxy's personal data from the shareholder or directly from the proxy.

   We receive the personal data of persons attending the virtual General Meeting as guests either directly from the respective guest, in particular if the guest himself/herself applies for admission as a guest with us (e.g. as a representative of the media or authorities), or from one of our shareholders if the latter applies for admission of a guest, or, as the case may be, in the course of our business activities from internal or external sources, some of which are also publicly accessible.

8. ‌Do we plan to transfer data to third countries or international organisations?

   We do not currently plan to transfer your personal data to third countries or to international organisations. Should we transfer personal data to service providers or other recipients outside the European Economic Area (EEA), such transfer only occurs if the European Commission has confirmed that the third country has an adequate level of data protection or if other appropriate data protection guarantees are in place. In the case of adequate data protection guarantees, a copy may be obtained via the contact details of the Daimler Truck AG Chief Data Privacy Officer (see Section II. above).

9. ‌What are your rights as a data subject?

   If the statutory requirements are met, you have the following rights as a data subject in connection with the processing of your personal data:

   » the right to request information about the data stored by us (Art. 15 General Data Protection Regulation);

   » the right to rectification of your data (Art. 16 General Data Protection Regulation);

   » the right to erasure of your data (Art. 17 General Data Protection Regulation);

   » the right to request restriction of the processing of your personal data (Art. 18 General Data Protection Regulation);

   » the right to data portability (Art. 20 General Data Protection Regulation);

   » the right to lodge a complaint with a supervisory authority (Art. 77 General Data Protection Regulation).

   Where we process your data to protect the legitimate interests of Daimler Truck Holding AG or a third party, you are entitled to object to such processing on grounds arising from your particular situation (Art. 21 General Data Protection Regulation). In this case, we will no longer process your personal data unless we can provide evidence of compelling legitimate grounds for the processing that override your interests, rights and freedoms or if the processing serves the purpose of asserting, exercising or defending legal claims.

If we process your personal data on the basis of consent you have given us, you have the right to revoke such consent at any time with effect for the future. This does not affect the lawfulness of the processing of your personal data until such revocation. The revocation is to be addressed to the referred to in Section II.

1. ‌Would you like to assert your rights?

You have the option of contacting our Chief Data Privacy Officer (see Section II) or a competent data protection supervisory authority to assert your rights. The competent data protection supervisory authority for us is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Der Landesbeaukragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg) Post box 10 29 32

70025 Stuttgart

Telephone: [phone] Telefax: 0711/615541-15

E-mail: [e-mail]

***

1

Daimler Truck Holding AG Fasanenweg 10

70771 Leinfelden-Echterdingen Germany https://www.daimlertruck.com