Berentzen-Gruppe Aktiengesellschaft, as the "controller" as defined in Art. 4 no. 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), processes personal data of shareholders and shareholder representatives (in particular surname and first name, address, e-mail address, number of shares, class of shares, type of ownership of the shares and registration number; if applicable, surname, first name and address of the shareholder representative nominated by the respective shareholder; access data for the password-protected AGM-Portal ("AGM-Portal")) and information for the use of the AGM-Portal (e.g. access data and device information) on the basis of the data protection regulations applicable in Germany in order to enable shareholders and shareholder representatives to exercise their rights at the annual general meeting and to ensure that the discussions and resolutions of the annual general meeting are conducted lawfully and in accordance with the Articles of Association. If Berentzen-Gruppe Aktiengesellschaft does not receive these data from shareholders and/or shareholder representatives, the depositary bank transfers these personal data to Berentzen-Gruppe Aktiengesellschaft.
The processing of personal data of shareholders and shareholder representatives is absolutely necessary for the exercise of shareholder rights in the annual general meeting. The legal basis for the processing is Art. 6 (1) subparagraph 1 lit. c) GDPR in conjunction with Sections 123, 129, 135 of the German Stock Corporation Act (AktG).
Berentzen-Gruppe Aktiengesellschaft commissions various service providers and consultants for the purpose of organising the annual general meeting. These only receive personal data that are necessary for the execution of the respective task. The service providers and consultants process these data exclusively in accordance with the instructions of Berentzen-Gruppe Aktiengesellschaft. Personal data will also be made available to shareholders and shareholder representatives as permitted by statutory provisions (e.g. inspection of the list of participants, cf. Section 129 (4) AktG).
Berentzen-Gruppe Aktiengesellschaft also processes the necessary personal data in order to be able to provide the AGM-Portal technically as well as for the purpose of detecting misuse, eliminating malfunctions and ensuring the smooth running of the annual general meeting. In this respect, Berentzen-Gruppe Aktiengesellschaft has a legitimate interest in providing the AGM-Portal as a service for shareholders and their proxies in order to be able to exercise shareholders' rights in a user-friendly manner. Technically necessary cookies are used for the AGM-Portal. Cookies are small files that are stored on the desktop, notebook or mobile device when a website is visited in order to be able to recognise whether a connection already exists between the device and the AGM-Portal. Cookies can also contain technical connection-related data. The setting or deletion of cookies can be set via the browser. If the setting of cookies is not set, it is possible that not all functions of the AGM-Portal will be available. The legal basis for this processing is Art. 6 (1) subparagraph 1 lit. f) GDPR.
Personal data will be stored as long as required by law or if the Company has a legitimate interest in storing such data, e.g. in the event of court or out-of-court disputes arising from the annual general meeting. The personal data will then be erased.
Under the statutory requirements, the applicability of which must be checked on a case-by-case basis, shareholders and shareholder representatives have the right to obtain information on the processing of their personal data, to request the rectification or erasure of their personal data or the restriction of processing, and to receive their personal data in a structured, commonly used and machine-readable format (data portability). Under the statutory requirements, the applicability of which must be checked on a case-by-case basis, shareholders and shareholder representatives also have the right to object to the processing of their personal data.
These rights may be exercised by shareholders and shareholder representatives by contacting Berentzen-Gruppe Aktiengesellschaft using the following contact information:
Berentzen-Gruppe Aktiengesellschaft Ritterstr. 7
49740 Haselünne Germany
Phone: +49 (0) 59 61 502 0
E-mail: info@berentzen.de
Shareholders and shareholder representatives also have the right to lodge a complaint with data protection supervisory authorities in accordance with Article 77 of the GDPR.
The Data Protection Officer of Berentzen-Gruppe Aktiengesellschaft can be contacted as follows: Sebastian Feldmann
Prico GmbH Unterer Markt 1
49477 Ibbenbüren Germany
Phone: +49 (0)5451 562 213 1
E-mail: datenschutz@berentzen.de
Haselünne, March 2026
Berentzen-Gruppe AktiengesellschaftThe Executive Board