GENERAL TERMS AND CONDITIONS FOR THE PROVISION OF Alfa ... · GENERAL TERMS AND CONDITIONS FOR THE...

1

Fiat Chrysler Automobiles UK Ltd with CRN 00201514 and registered office at 240 Bath Road, Slough, Berks SL1 4DX


GENERAL TERMS AND CONDITIONS FOR THE PROVISION OF Alfa Connect / Mopar® Connect FLEET services for brand vehicles Fiat, Lancia, Alfa Romeo, Jeep, Fiat Professional,

Abarth

PREAMBLE Whereas: a. FCA offers a series of services connected to the DEVICE on its own VEHICLES, as described in more detail herein; b. The SUBSCRIBER is interested in being able to use the aforementioned SERVICES; c. In order to make use of the SERVICES that are the subject of these GENERAL TERMS AND CONDITIONS, it is first necessary for the VEHICLE to be equipped with the DEVICE. Now therefore, the SUBSCRIBER, acting in his/her own name and on his/her own behalf, signs this document containing the GENERAL TERMS AND CONDITIONS FOR THE PROVISION OF INFOMOBILITY AND TELE-DIAGNOSTICS SERVICES, which constitutes an integral part of the contract to purchase the OEM Vehicles equipped with the DEVICE, and of the terms and conditions governing the purchase by the SUBSCRIBER of the DEVICE for independent and subsequent aftermarket installation on the VEHICLE. A signature is mandatory in order to be able to use the SERVICES. By signing and accepting these GENERAL TERMS AND CONDITIONS, the SUBSCRIBER confirms he/she has read and accepted the measures in full. The SUBSCRIBER understands and accepts that the SERVICES subscription is linked to the VEHICLE. These SERVICES and the DEVICE cannot be transferred to any vehicle other than the VEHICLE identified at the time of signing, to which these GENERAL TERMS AND CONDITIONS refer. MOPAR® CONNECT FLEET's commercial offer dedicated to small fleets envisages two types of subscription modes:

Basic Pack, which includes all the basic SERVICES described in art. 10;

High Pack, which in addition to the basic Services includes the advanced services described in art. 11.

The details of the relative content of each type of subscription are set out in paragraphs 10 and 11. These SERVICES have the following characteristics: - the price for the first 12 months includes the cost of installing the DEVICE and the fleet management functions. - in the case of initial activation of a VEHICLE which is to be added to an existing fleet, the subscription type must be the same as that selected upon initial activation of the fleet to which the VEHICLE is to be added. - if the SERVICES are renewed after the initial 12 months, the renewal must refer to the same type of SERVICES selected upon initial activation of the fleet to which the VEHICLE is to be added (BASIC Pack or HIGH Pack) (see art. 14) - the SERVICES may evolve in line with new technical and/or regulatory requirements; - their use is controlled by the SUBSCRIBER who chooses the SERVICES offered according to his/her own needs. The SUBSCRIBER who wishes to use the SERVICES is assumed to have read these GENERAL TERMS AND CONDITIONS governing the use of the DEVICE. It is understood that these GENERAL TERMS AND CONDITIONS constitute the set of rules to be followed by all SUBSCRIBERS of the SERVICES. It is also forbidden to transfer the ownership of the GENERAL TERMS AND CONDITIONS in the event of the sale of the VEHICLE without the written consent of FCA, pursuant to that established by art. 14.3. 1. DEFINITIONS - “MOBILE APP”: this is the app for the Smartphone device, on which the SUBSCRIBER can use part of the SERVICES (as

specified in articles 10 and 11) and set up configurations for the latter: - Alfa Connect for the Alfa Romeo Giulia and Stelvio models; - Uconnect Live for all the other VEHICLE models. - ”CONTROL CENTRE”: this is the operative centre of the SERVICE PROVIDERS via which the SERVICES to recover the stolen VEHICLE and call the SUBSCRIBER (or users of the VEHICLE) in the event of an accident are provided. - “GENERAL TERMS AND CONDITIONS”: these refer to these General Terms and Conditions for the Provision of the SERVICES. - ”DEVICE”: this refers to: - Alfa Connect for the Alfa Romeo Giulia and Stelvio models; - Mopar® Connect for all the other VEHICLE models and: - installed on the VEHICLE in the original equipment manufacturing phase, or - purchased by the SUBSCRIBER and subsequently installed independently aftermarket as an accessory, designed to acquire the data and information regarding the VEHICLE, including but not limited to its location, speed, direction, distance travelled and other diagnostic data. - “FCA”: this is the company Fiat Chrysler Automobiles UK Ltd with CRN 00201514 and registered office at 240 Bath Road, Slough, Berks SL1 4DX. - “FCA ITALY”: this is the company FCA ITALY S.p.A., with head office in Turin, Corso Giovanni Agnelli No. 200, Post Code 10135, Tax ID and VAT 07973780013, share capital subscribed and paid up: EUR 745,031,979, registered in the Economic and Administrative Index (R.E.A.) of Turin under no. 934697, managed and coordinated as established by art. 2497 of the Italian Civil Code by Fiat Chrysler Automobiles N.V. - “SERVICE PROVIDER”: this indicates any party which provides any service, equipment or structure whatsoever, connected with the SERVICES. - “THEFT”: this is an offence envisaged by The Theft Act 1968 committed by anyone who steals another person’s Vehicle; - ”VEHICLE LOCATION”: this is the DEVICE functionality which, if active, makes it possible to locate the position of the VEHICLE. - ”TELEMATIC PLATFORM”: this is the informatic system connected with the DEVICE installed on the VEHICLE, via which the SERVICES are provided. - ”ROBBERY”: this is an offence envisaged by The Theft Act 1968 committed by anyone who steals a person’s Vehicle, and immediately before or at the time of doing so, and in order to do so, uses force on any person or puts or seeks to put any person in fear of being then and there subjected to force. “SERVICE/S: these are the services of info-mobility and tele-diagnostics described in these GENERAL TERMS AND CONDITIONS. - ”SIM CARD”: this is the telephone Service subscription card contained within the DEVICE, used to transfer the data from the DEVICE to the TELEMATIC PLATFORM. - “WEBSITE”: this is the web portal which can be reached via the Internet address www.alfaromeoconnect.eu for Alfa Romeo Giulia and Stelvio models and www.driveuconnect.eu for all the other VEHICLE models, on which the SUBSCRIBER can find the information about the features and functions of the SERVICES, and about their availability and coverage according to the model and country in which the VEHICLE was sold, and where he/she can access a personal area to use the SERVICES and carry out a set of configurations for the latter. - “SUBSCRIBER”: the owner of the VEHICLE who signs these GENERAL TERMS AND CONDITIONS. In the case of a legal entity signing these GENERAL TERMS AND CONDITIONS, the duly authorised representative of said entity will indicate the individuals who will be entitled to use the SERVICES.

- “VEHICLE”: this refers to a new or used Fiat, Lancia, Alfa Romeo, Jeep, Fiat Professional or Abarth brand vehicle equipped with the DEVICE. 2 Prerequisites The SUBSCRIBER may use SERVICES offered in accordance with the following prerequisites: - the VEHICLE must be equipped with the DEVICE; - the parties must have the legal capacity to enter into a contract under these GENERAL TERMS AND CONDITIONS. The SUBSCRIBER, accepting the GENERAL TERMS AND CONDITIONS acknowledges that: - the SERVICES are provided remotely through available touchpoints; - he/she has received all the information necessary to consider that the SERVICES correspond to his/her expectations, objectives, needs and performance requirements; - he/she has all the technical skills necessary to access and use the SERVICES in optimum conditions; - he/she ensures compliance with the necessary technical prerequisites. BY SIGNING THESE GENERAL TERMS AND CONDITIONS, THE SUBSCRIBER ACCEPTS THAT THE DATA TO LOCATE THE VEHICLE WILL BE PROCESSED AND TRANSMITTED TO THE TELEMATIC PLATFORM AND TO THE CONTROL CENTRE IN ORDER TO ENABLE THE SERVICES TO BE PROVIDED, AS REQUIRED BY THE PROVISIONS OF ART. 16. 3 Functions of the DEVICE Installation of the DEVICE on the VEHICLE enables transmission to the TELEMATIC PLATFORM, via the GSM - GPRS network, of: - the data regarding the distance travelled by the VEHICLE (including, but not limited to places, speed, distance); - the places and times the engine was switched on and off; - the data to promptly locate the VEHICLE; - the “alarms” including, but not limited to: battery cable cut, battery diagnostics, device buffer battery, movement of the VEHICLE with the key disconnected, notification of suspected impact; - diagnostic data for the vehicle including, but not limited to oil and fuel levels, tyre pressure, engine condition. BY SIGNING THESE GENERAL TERMS AND CONDITIONS, THE SUBSCRIBER ACCEPTS THAT THE DATA TO LOCATE THE VEHICLE WILL BE PROCESSED AND TRANSMITTED TO THE TELEMATIC PLATFORM IN ORDER TO ENABLE THE SERVICES TO BE PROVIDED, AS REQUIRED BY THE PROVISIONS OF ART. 16. 4. Purpose The purpose of these GENERAL TERMS AND CONDITIONS is to govern the relationship with the SUBSCRIBER who uses and interacts with the SERVICES. 5. Acceptance, amendment and enforceability 5.1. Acceptance Use of the DEVICE is subject to the SUBSCRIBER’s prior acceptance of these GENERAL TERMS AND CONDITIONS. The SUBSCRIBER acknowledges and expressly recognizes to have obtained from FCA all the necessary information regarding the provided SERVICES and accepts without reservation these GENERAL TERMS AND CONDITIONS. 5.2. Modification It is agreed that these GENERAL TERMS AND CONDITIONS may be modified at any time by FCA to expand the WEBSITE. In case of a modification, the SUBSCRIBER will be given notice of the new GENERAL TERMS AND CONDITIONS upon first

http://www.alfaromeoconnect.eu/

http://www.driveuconnect.eu/

2



accessing the WEBSITE after such a modification, and will be required to accept them. The GENERAL TERMS AND CONDITIONS published on the WEBSITE prevail over any earlier version, whether printed or not. 5.3. Enforceability The GENERAL TERMS AND CONDITIONS are enforceable against the SUBSCRIBER as soon as he/she accepts them before using the SERVICES. The SUBSCRIBER may, at any time, cease using the WEBSITE and related SERVICES but remains liable for any prior use. 6 RIGHT OF WITHDRAWAL Pursuant to the provisions of the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 SUBSCRIBER has a (14) fourteen-day withdrawal period as of the conclusion of the contract, provided that, no use of the service has been made. In accordance with Regulation 37 of the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 the right of withdrawal may not be exercised in the context of the digital content’s supply not provided on a physical medium whose execution began after prior agreement of the SUBSCRIBER and express renunciation of his/her right of withdrawal. Accordingly, by accessing the content offered via the SERVICE, the SUBSCRIBER accepts the supply and execution of the service and expressly waives the right of withdrawal. 7. Conditions for DEVICE to work properly and limitation of liability FCA will be able to provide the SERVICES on condition that:

the GPS network is operative and correctly functioning;

the GSM and GSM-GPRS telephone network and the fixed line telephone lines are operative and correctly functioning;

the map database of the entire national and European territory is updated. The CONTROL CENTRE guarantees the use of a top quality, updated map at all times.

In the event: I. of a lack of maps; II. of insufficient GPS and/or GSM GSM-GPRS signal coverage; III. of incompatibility of the SERVICES with the hardware; IV. that the VEHICLE is in an area not covered by the telephone operator; V. that the VEHICLE is in a country where provision of the SERVICES is not available; the SERVICES are not guaranteed to operate for which it is understood that FCA will not be liable in any way. The SUBSCRIBER acknowledges and accepts that FCA has the right to suspend the SERVICES, even temporarily, for maintenance or improvements to the network or system or in the event of network congestion or for security reasons and compliance with the law whilst driving the VEHICLE or following a report by the SUBSCRIBER of THEFT of the VEHICLE and a request for intervention by the police. It remains understood and agreed that no compensation or refund shall be due by FCA to the SUBSCRIBER in the event of the aforementioned suspensions or interruptions. The SUBSCRIBER is obliged not to tamper or interfere with, remove and/or compromise the functionality of the DEVICE and/or SIM CARD. The SUBSCRIBER acknowledges that any tampering with or removal of the DEVICE and/or SIM CARD compromises the possibility of providing the SERVICES. FCA does not, therefore, accept any liability for the inability to provide the SERVICES arising due to the tampering with or removal of the DEVICE and/or SIM CARD.

It remains understood and agreed that activation of the SERVICES is subject to the on-line acknowledgement of these GENERAL TERMS AND CONDITIONS, after the GENERAL TERMS AND CONDITIONS have been signed on paper. In the event of a discrepancy between the paper version and the on-line version, the paper version shall prevail, except for later modifications made in accordance with the Article 13.2. below. 8. Use via Smartphone The SERVICES offer the SUBSCRIBER the opportunity to use specific apps via his/her own Smartphone, as they are integrated with the VEHICLE system making it possible to, for example, establish a connection between the MOBILE APP installed on the Smartphone and the TELEMATIC PLATFORM, or to use voice services for emergency calls. The SUBSCRIBER has sole responsibility for monitoring the use of these services and the costs envisaged for such use. The SUBSCRIBER also has sole responsibility for complying with and fulfilling the agreement entered into with his/her own mobile telephone operator. The SUBSCRIBER acknowledges and expressly accepts that correct use of part of the SERVICES (as specified in articles 10 and 11) is subject to the installation of the latest version of the MOBILE APP available in the application store: it is the sole responsibility of SUBSCRIBER to install the most up-to-date version of the MOBILE APP on his/her Smartphone. The SUBSCRIBER acknowledges and expressly accepts that the SERVICES are not compatible with all the technologies of Smartphone manufacturers. Older Smartphone devices may not support the SERVICES. For further information regarding the minimum requirements for compatible Smartphones, please refer to the information available on the WEBSITE. It remains understood, therefore, that FCA (i) is not liable and does not provide any guarantee regarding the compatibility between the SUBSCRIBER’S Smartphone and the SERVICES and (ii) is equally not liable for any failure to provide the SERVICES due to an incompatibility of the Smartphone with the SERVICES. The data connection between the DEVICE and the TELEMATIC PLATFORM is included in the cost of the SERVICE and is enabled only in the countries indicated in art. 17.1 of these TERMS AND CONDITIONS. 9. SUBSCRIBER’S RESPONSIBILITIES Each SUBSCRIBER is legally responsible for his/her connection to the DEVICE. Any access made with his/her access code or email address will be deemed to have been made by the Subscriber under his/her sole liability. More generally, the SUBSCRIBER agrees to comply, without limitation, with the applicable regulations concerning: - the privacy of individuals; - intellectual and industrial property; - the protection of personal data; - the confidentiality of the correspondence and the prohibition on intercepting Internet communications. When using the SERVICES, SUBSCRIBER further undertakes: - to keep his/her personal information (and in particular mobile phone number provided) always updated, in order to ensure that the CONTROL CENTRE has always the correct information. - to keep his/her access code strictly personal and not to disclose it to third parties, (understood as any person who is external to the organisation of the company to which the SUBSCRIBER belongs); - not to commit any forms of violations, infringement or piracy against the rights of others and the safety of persons and in particular not to defame, harass, stalk or threaten anyone; - to take all necessary precautions regarding his/her own devices to prevent any transmission of viruses or any other harmful or destructive programs to third parties - not to intentionally perform operations that result in: hiding his/her true identity; using the access code of another SUBSCRIBER;

altering, modifying data or accessing information belonging to other SUBSCRIBER; interrupting or disrupting the normal operation of FCA’s network or any systems connected to the network; modifying or destroying information on any of the systems. The SUBSCRIBER expressly acknowledges that the Internet is not a secure network. The SUBSCRIBER undertakes therefore to take all appropriate measures to protect his/her own data, software and/or equipment especially from being infected with viruses circulating on the Internet or third-party intrusion in the system of his/her computer devices (laptop, touchpad, mobile, etc.) for any purpose whatsoever, and to make any backup on his/her devices as appropriate. The SUBSCRIBER acknowledges that he/she is fully informed of the lack of reliability of the Internet, and especially that there is no guarantee of security in data transmission and in network performance. The SUBSCRIBER acknowledges that he/she has been informed that the integrity, authentication and confidentiality of the information, files or data of any kind that he/she wishes to exchange on the Internet using the Device cannot be guaranteed. the SUBSCRIBER shall refrain from any fraudulent, abusive or excessive use of the SERVICES, such as voluntary and/or involuntary congestion of email servers and/or mailboxes of recipients through unsolicited commercial messages (spamming, bulk email, junk email or email bombing) or of its network, or from the sending of attractive messages that will generate a considerable number of responses (teasing or trolling) and that may disrupt the availability of the servers or FCA’s network. Furthermore, it remains understood that any use of the SERVICES by the SUBSCRIBER that does not comply with the occupational legislation in force related to the remote management of workers shall be the sole responsibility of the latter, who undertakes to adopt all the necessary measures and procedures required by the applicable laws. The SUBSCRIBER is solely responsible for any direct or indirect damage, either material or non-material, caused to third parties as a result of his/her use of WEBSITE. 10. SERVICES provided with the BASIC PACK 10.1. Dashboard This SERVICE may be accessed through the section dedicated to the management of the fleet to which the VEHICLE belongs and can be found in the private area of the WEBSITE. 10.1.1 Vehicle monitor: makes it possible to highlight one or more VEHICLES in order to allow continuous monitoring of the same. 10.1.2 Stops with the engine running: with the introduction of a maximum limit on how long VEHICLES can remain stationary with the engine running, the system will highlight in graphic form the vehicles that have exceeded this limit. 10.1.3 Distance travelled out of hours: based on the established working hours, the system will highlight in graphic form any VEHICLES that have been driven outside of the permitted periods. 10.1.4 Real Time: this module makes it possible to see the position of the VEHICLES on the map in real time. A drop-down menu for each vehicle allows the user to further extend the activities relating to the individual VEHICLE. 10.1.5 Routes: the module shows the route taken by the VEHICLE on the map highlighting the times the vehicle is stationary, transfer times, the distance travelled and the hours the VEHICLE is used. 10.2 Report This SERVICE may be accessed through the section dedicated to the management of the fleet to which the VEHICLE belongs and can be found in the private area of the WEBSITE.

3



10.2.1 Location Report: extraction and consultation of the report on the location of the fleet VEHICLES: date and time, address, engine status, speed, odometer, points of interest. 10.2.2 Maintenance: the platform provides functions that are useful for scheduled and unscheduled maintenance of the VEHICLES so as to always keep track of maintenance deadlines and any diagnostic alerts related to the same. The module makes it possible to create maintenance plans, entering the preferred limits from those available (kilometres, engine hours, storm alert). The SUBSCRIBER can therefore combine maintenance profiles and assign them to one or more VEHICLES on which it is possible to configure deadlines and urgencies with email alerts. 10.3 Administration This SERVICE may be accessed through the section dedicated to the management of the fleet to which the VEHICLE belongs and can be found in the private area of the WEBSITE. 10.3.1 User management: in the administration panel the user can create new visualization profiles and assign them to new users to whom specific access can be granted. 10.4 Lock doors This SERVICE is available through the MOBILE APP and the WEBSITE. This SERVICE offers the SUBSCRIBER the possibility of using the MOBILE APP or the WEBSITE to remotely lock/unlock the doors. The doors must have been shut correctly for this command to work correctly. It remains understood that the SERVICE referred to in this article 10.4. is available only for the VEHICLE models expressly indicated on the WEBSITE. 10.5. Find car This SERVICE is available through the MOBILE APP and the WEBSITE. This SERVICE offers the SUBSCRIBER the possibility of using the MOBILE APP or the WEBSITE to remotely visualize the VEHICLE location, both when it is stationary and moving. The SUBSCRIBER acknowledges and expressly accepts that the VEHICLE LOCATION can be disabled for security reasons in the event of confirmed VEHICLE THEFT or in the event of an explicit request by the user of the VEHICLE to enable the Privacy mode (art. 12). 10.6. Area Alert and Speed Alert These SERVICES are available through the MOBILE APP and the WEBSITE. These SERVICES offer the SUBSCRIBER the possibility to receive information each time the VEHICLE completes an action which breaches one of the rules, which can be set by the SUBSCRIBER himself via the MOBILE APP or the WEB ITE, such as: Definition of a geographic area, outside which he/she does not wish the VEHICLE to go. As soon as the VEHICLE crosses the boundaries of the pre-set geographical area, the SUBSCRIBER will receive an information alert. Maximum speed threshold. As soon as the VEHICLE exceeds the preset speed threshold, the SUBSCRIBER will receive an information alert. The SUBSCRIBER acknowledges and expressly accepts that the VEHICLE LOCATION as regards the SERVICES Area alert and Speed alert can be disabled in the event of an explicit request by the user of the VEHICLE to enable the Privacy mode (Article 12). 10.7 Reminder This SERVICE may be accessed through the MOBILE APP.

This SERVICE offers the SUBSCRIBER the possibility of setting a reminder, so that at the end of a journey, the SERVICE sends an alert to the MOBILE APP and, at his/her request, an email alert to the pre-set addresses which reminds the user to check that nothing is left behind in the VEHICLE before leaving it. The SUBSCRIBER can enable or disable the SERVICE via the MOBILE APP. When the VEHICLE is switched off and the doors are shut, the SUBSCRIBER will receive the notification on the MOBILE APP and, at his/her request, an email notification to the pre-set addresses. 10.8 my:Car This SERVICE is available through the MOBILE APP and the WEBSITE. This SERVICE offers the SUBSCRIBER the possibility to remotely monitor some VEHICLE parameters including, but not limited to, its residual autonomy (except for bi-fuel vehicles) and tyre pressure and to receive notifications if any faults are recorded. The SUBSCRIBER acknowledges that the parameters and faults which can be monitored may vary according to the VEHICLE on which the DEVICE is installed. 10.9 My journeys This SERVICE, where available, may accessed through the MOBILE APP and offers the SUBSCRIBER the possibility of obtaining a detailed report regarding the VEHICLE travel data including but not limited to, the starting date/time and duration, travelled kilometres, and fuel consumption. The SUBSCRIBER acknowledges and expressly accepts that, as regards the “My journeys” SERVICE, the VEHICLE LOCATION can be disabled if there is an explicit request by the user of the VEHICLE to enable the Privacy mode (art. 12). 10.10 Vehicle Health Report (VHR) The VHR, where available, provides information on the status and condition of the VEHICLE and notifies the customer of potential maintenance requirements via monthly emails and/or alerts sent via the MOBILE APP based on data recorded and reported by the instrumentation on board the VEHICLE. 11. SERVICES provided with the HIGH PACK In addition to the services outlined below, the HIGH PACK also includes the SERVICES of the BASIC PACK described in art. 10) 11.1. Dashboard This SERVICE may be accessed through the section dedicated to the management of the fleet to which the VEHICLE belongs and can be found in the private area of the WEBSITE. 11.1.1 Task in progress: it is possible to plan interventions by assigning a task to each VEHICLE with an expected date/time of arrival. A pie chart is used to highlight the status of the tasks (on time / risk of delay / late) and the details of the task. 11.1.2 Vehicle proximity search: it is possible to search for the VEHICLES that are in proximity to a specific location. 11.1.3 Distance travelled: by setting the maximum number of kilometres permitted the system will show in a chart the VEHICLES that exceed said limit. 11.2 Tasks This SERVICE may be accessed through the section dedicated to the management of the fleet to which the VEHICLE belongs and can be found in the private area of the WEBSITE. The Tasks module has been designed to organise the movement of the fleet VEHICLES, assigning them the goal of reaching a specific destination within a given time. The system monitors their movements in respect of the goal and provides advance notification in the event of any delay. The module

allows for the creation of one or more destinations and an expected date/time of arrival to be assigned to the various VEHICLES in order to know if the VEHICLE will manage to complete the task in the times indicated. 11.3 Report This SERVICE may be accessed through the section dedicated to the management of the fleet to which the VEHICLE belongs and can be found in the private area of the WEBSITE. 11.3.1 Managing fines: extraction and consultation of a report on the activity of the VEHICLE in a specific time period. The report will show details relating to the engine status, speed recorded and location. 11.3.2 Activity: extraction and consultation of a report on the activity of the VEHICLE in a specific time period. The report will show details relating to: the hours the engine is switched off and on, the hours the vehicle is stationary with the engine running, and the driving hours. 11.3.4 Refuelling: extraction and consultation of a report on refuel activities of the VEHICLE in a specific time period. The report will show details relating to: the date and time of refuelling, address where the vehicle was refuelled, the number of km travelled since the vehicle was last refuelled, the fuel level, the refuelling performed expressed in litres and average consumption. 11.3.5 Entry to and exit from areas (Geofencing): The report can be viewed on the WEBSITE or a digital copy can be downloaded. It is also possible to program the automatic sending of report directly to a specified email address. 11.3.6 Accidents: The accident report allows the SUBSCRIBER to extract the important data relating to events that can be traced back to VEHICLE impacts or particularly abrupt manoeuvres, and to obtain details of the accident and of the acceleration/speed in a specific chart. 11.4 Maintenance: This SERVICE may be accessed through the section dedicated to the management of the fleet to which the VEHICLE belongs and can be found in the private area of the WEBSITE. 11.4.1 Diagnostics: Integration in the section of signals transmitted in real time from the VEHICLE. 11.5 Administration This SERVICE may be accessed through the section dedicated to the management of the fleet to which the VEHICLE belongs and can be found in the private area of the WEBSITE. 11.5.1 Area management: It is possible to define sensitive geographical areas in the administration panel in order to receive automatic notifications of the behaviour of the fleet VEHICLES in these areas, selecting which behaviour to monitor, the characteristics of the area identified and the validity period for the e-mail alerts. 11.6. Accident Assistance This SERVICE offers to the SUBSCRIBER assistance in the event of an accident This SERVICE is available for the countries listed at article 17.1, and it is provided by a service company appointed periodically by FCA. As an essential condition for the provision of the SERVICE, in the event of an accident alert with impact equal to or over 8g and subsequent VEHICLE halt, of considerable gravity regarding the safety of the VEHICLE, the CONTROL CENTRE is henceforth authorized to try contacting the SUBSCRIBER to check the need for assistance and to alert the emergency

4



service (ambulance) if the CONTROL CENTRE operator receives no answer when calling the SUBSCRIBER or if the individual answering the call is not able to confirm the need for assistance. The SUBSCRIBER acknowledges that the DEVICE is able to record the impact only if it is in operation at the time. Furthermore, in order to send a message to the CONTROL CENTRE, the VEHICLE must be located in a place covered by the GSM-GPRS signal and by the GPS satellite and these networks must be working correctly. 11.7 Request for emergency services through the MOBILE APP This SERVICE is available for the countries listed at art. 17.1 and is provided by a service company appointed periodically by FCA. In case of an event, even if not recorded by the DEVICE, the SUBSCRIBER may request emergency service (ambulance) activation to the CONTROL CENTRE calling from the MOBILE APP by pushing the dedicated Accident Assistance call button. 11.8 Roadside Assistance In the event of a breakdown, accident or other inconveniences regarding the VEHICLE, as covered by the Road Assistance services, for which SUBSCRIBER may benefit from FCA based on separate agreements, the SUBSCRIBER will benefit, without further costs, from the breakdown assistance included in those GENERAL TERMS AND CONDITIONS. This SERVICE is valid in the countries indicated in Article 17.1 and will be provided by the service company appointed by FCA. This SERVICE will be provided using information coming from the VEHICLE to discover its exact location and the diagnostic condition of the VEHICLE. 11.9. THEFT Assistance The SERVICE is provided via the multilingual CONTROL CENTRE, authorised to recover the VEHICLES in the event of THEFT. The CONTROL CENTRE intervenes following a manual call from the SUBSCRIBER either in automatic mode (via a call to the SUBSCRIBER by the CONTROL CENTRE) in the event of a potential THEFT of the VEHICLE, based on the detection of conditions such as unauthorised towing of the VEHICLE In the event of an ascertained THEFT, the CONTROL CENTRE contacts the relevant local police authority. The VEHICLE will be continuously monitored until the end of the emergency. In the event of THEFT of the VEHICLE, the SUBSCRIBER must immediately contact the CONTROL CENTRE via the MOBILE APP, or by calling directly the numbers given on the WEBSITE, confirming his/her identity and indicating the VEHICLE license plate number. The SUBSCRIBER must also report the THEFT to the police. Having verified the SUBSCRIBER's identity, the CONTROL CENTRE, will locate the VEHICLE and notify the police. The SUBSCRIBER is obliged to send the CONTROL CENTRE a copy of the police report as soon as possible. When the VEHICLE has been found, the CONTROL CENTRE will notify the SUBSCRIBER. In the event of theft: The SUBSCRIBER shall promptly report the theft of the VEHICLE to the competent police force. Subsequently, he shall notify the CONTROL CENTRE by sending a copy of the report and request the VEHICLE ignition to be blocked. The CONTROL CENTRE shall contact the police and coordinate management of the VEHICLE recovery operations. 12. Privacy Mode This SERVICE is available both to those subscribing to the HIGH and BASIC contract. For data protection reasons, the user of the VEHICLE has the option to disable the VEHICLE LOCATION (“Privacy Mode ON”) function in relation to the Find Car, Area Alert, Speed Alert, My

Journeys, Dashboard, Report, Administration and Tasks SERVICES, by sending an SMS to the number specified in the VEHICLE user manual. The VEHICLE user and the SUBSCRIBER will receive confirmation of the disablement via SMS. The VEHICLE LOCATION function in relation to the Find Car, Area Alert, Speed Alert, My Journeys, Dashboard, Report, Administration, and Tasks SERVICES will remain disabled for a period of 4 hours (default value) and may not be reactivated by either the SUBSCRIBER or the user of the VEHICLE. At the end of the above period, the VEHICLE LOCATION function in relation to the Find Car, Area Alert, Speed Alert, My Journeys, Dashboard, Report, Administration, and Tasks SERVICES will be reactivated as previously configured (“Privacy Mode OFF”). For permanent Privacy Mode ON, the SUBSCRIBER must unsubscribe from the SERVICES (pursuant to article 14). For further information and details on the features and functions of the offered SERVICES, please visit the WEBSITE and read the VEHICLE user manual. 13. PROCEDURE TO REGISTER FOR THE SERVICES 13.1. Activation of the SERVICES When activating the MOPAR® CONNECT FLEET SERVICES, the VEHICLE is linked to the SUBSCRIBER’s account and to the fleet that uniquely corresponds to said account. In order to activate the SERVICES, the SUBSCRIBER must provide his/her personal data, as described in better detail in article 16 (including a valid email address and a valid mobile telephone number to allow the SERVICES to be provided), and complete the registration process for his/her personal account and the association of the VEHICLE with the account and the fleet via the web pages, which can be accessed from the link contained in the welcome email sent by the TELEMATIC PLATFORM. Having completed registration of (i) the account and (ii) the fleet and consequently linking them to the VEHICLE, the SERVICES are understood as successfully activated when the SUBSCRIBER receives notification (via email and/or via MOBILE APP) of the activation. Having received this notification, the SUBSCRIBER may use his/her own credentials (i.e. email and password) to access the MOBILE APP and personal area on the WEBSITE where he/she can see data regarding his/her own VEHICLE and use the available functions. The SUBSCRIBER acknowledges and expressly accepts that it is the SUBSCRIBER’S sole responsibility to inform the BENEFICIARIES and users of the VEHICLE of the TERMS AND CONDITIONS contained herein, including aspects pertaining to the management and processing of personal data. 13.2. Amendments to the GENERAL TERMS AND CONDITIONS FCA has the right to amend these GENERAL TERMS AND CONDITIONS at any time and periodically at its own discretion. Any changes that do not significantly affect these GENERAL TERMS AND CONDITIONS will be published on the WEBSITE and will be valid from their publication date. Should a change significantly affect the SUBSCRIBER’S rights and/or use of their personal data pursuant to these GENERAL TERMS AND CONDITIONS, FCA shall notify the SUBSCRIBER of said change via email. The provisions of these GENERAL TERMS AND CONDITIONS currently in effect are available on-line at any time on the WEBSITE. THE SUBSCRIBER HAS THE RIGHT TO TERMINATE THE AGREEMENT OR ACCEPT THE AMENDMENT. An updated copy of these GENERAL TERMS AND CONDITIONS can be obtained on-line on the WEBSITE. 14. DURATION, RENEWAL AND TERMINATION OF THE SERVICES 14.1. Duration These GENERAL TERMS AND CONDITIONS have a duration of 12 months from the date of receipt by the SUBSCRIBER of the

email sent by FCA with the link and/or login details and instructions for activating the SERVICES referred to in paragraph 13.1. Activation of the SERVICES. Upon expiry of the aforementioned period, these GENERAL TERMS AND CONDITIONS shall be understood as automatically terminated without the need for any notification to this effect by the SUBSCRIBER or FCA. Without prejudice to the above, the SUBSCRIBER shall have the opportunity to renew the SERVICES by payment of a fee to a dealer belonging to the FCA authorised network or according to alternative procedures which may be published from time to time on the WEBSITE. It remains understood that the renewal must refer to the same type of SERVICES selected upon initial activation of the fleet to which the VEHICLE is to be added (BASIC Pack or HIGH Pack). If the SERVICES are renewed by the SUBSCRIBER prior to expiry of the initial period of validity of the SERVICES, the renewal will in any case be effective as of the day after the expiry of the initial period of validity of the SERVICES. If, instead, the SERVICES are renewed by the SUBSCRIBER after expiry of the initial period of validity of the SERVICES, the renewal shall be effective as of the day on which the renewal of the SERVICES is formalised. The renewal of these GENERAL TERMS AND CONDITIONS will be effective for a period selected by the SUBSCRIBER from the available options and based on the tariffs published on the WEBSITE at the time the procedure is activated. Renewal must take place within two years of the expiration date of these GENERAL TERMS AND CONDITIONS, which is the maximum period of time that the TELEMATIC PLATFORM can retain the data, including personal data, necessary for the SUBSCRIBER to extend the SERVICES. After such deadline, the SERVICES can no longer be renewed. 14.2. FCA’s right of termination FCA has the right to immediately terminate the SERVICES should the SUBSCRIBER breach any part of these GENERAL TERMS AND CONDITIONS or use the SERVICES for unlawful or improper purposes. Improper use includes, but is not limited to, tampering with the DEVICE and/or removing it from the VEHICLE when not authorised by FCA. No compensation or repayment shall be due by FCA to the SUBSCRIBER in the aforementioned cases of termination. 14.3. Sale of the VEHICLE or loss of possession (THEFT or destruction) of the VEHICLE - Notification to FCA Should the SUBSCRIBER decide to sell, or to terminate the hire/lease of the VEHICLE or in the event of scrapping or destruction of the same, the SUBSCRIBER shall notify FCA as soon as possible of such circumstances, by contacting the FCA Customer Service and directly removing the VEHICLE from his/her account on the WEB SITE. Should the SUBSCRIBER sell the VEHICLE without having given FCA and/or FCA ITALY prior notification, FCA shall in no way be responsible for any further data collection, in good faith, as the same belong to the SUBSCRIBER. Furthermore, the SUBSCRIBER shall remain liable for the proper or improper use of the SERVICES pursuant to these GENERAL TERMS AND CONDITIONS. It also remains understood that FCA and/or FCA ITALY is not liable for any damages arising from breaches connected with the processing of personal data in the event of a lack of notification of the aforementioned circumstances. Whether or not notification is made of the aforementioned circumstances, the SUBSCRIBER declares he will not access or

5



attempt to access the SERVICES or any other data concerning the VEHICLE following the sale and/or end of the VEHICLE hire. The SUBSCRIBER expressly acknowledges and accepts that, in the event no notification is made and the next owner of the VEHICLE signs up to and activates the SERVICES related to the VEHICLE, as specified in Article 13.1. of these GENERAL TERMS AND CONDITIONS, the profile of the new owner shall replace the SUBSCRIBER’S profile and provision of the SERVICES for the SUBSCRIBER’s benefit shall automatically cease, as the SERVICES are directly connected to the VEHICLE, as specified in Article 13.1. of these GENERAL TERMS AND CONDITIONS. 15. ECONOMIC ASPECTS 15.1 The SUBSCRIBER acknowledges and expressly accepts that access to the SERVICES by the SUBSCRIBER and/or the BENEFICIARIES and by the users of the VEHICLE may require the use of their own Smartphone and that these services could require the use of subscriptions and Internet packages for mobile telephones with their own mobile telephone operator. Therefore, it could generate additional costs, as explained in article 8 of these GENERAL TERMS AND CONDITIONS. The SUBSCRIBER acknowledges and expressly accepts that FCA does not guarantee the compatibility of the SUBSCRIBER’S Smartphone with the SERVICES and is not liable for any lack of support or loss of the SERVICES. 16. PERSONAL DATA, DATA PROTECTION 16.1. The Data Controller for the assistance services (Accident Assistance, Roadside Assistance and THEFT assistance) and for model optimisation and product improvement is FCA Italy S.p.A. with registered office in Corso Agnelli 200, Turin – 10135. For further information on the methods and purposes of the data processing performed by FCA Italy S.p.A., please see Annex 1 - “Privacy Notice”. 16.2. The Data Controller for the remaining SERVICES is the SUBSCRIBER. The Data Controller undertakes to set the parameters required for the provision of the service based on the objectives pursued (e.g. time intervals for recording location, period of time that data is to be retained). The SUBSCRIBER undertakes to comply with the applicable data protection legislation and in particular with the provisions set out in Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection for natural persons with regard to the processing of personal data and on the free movement of such data. The Data Processor for these services is FCA Italy S.p.A. with registered office in Corso Agnelli 200, Turin – 10135. The Data Processor will operate in accordance with the instructions given by the Data Controller and set out in Annex 2 “Data Processing Agreement”. 17. SPECIAL INFORMATION ON SERVICE AND SYSTEM RESTRICTIONS 17.1. Territorial availability The SUBSCRIBER acknowledges as of now that the SERVICES are made available in United Kingdom and in the countries listed on the WEBSITE, except for the measures stated in the subsequent article 20. FCA shall not deliver SERVICES outside these countries and therefore in such a case it shall not assume any liability whatsoever against the SUBSCRIBER. 17.2. Ownership of the technology FCA and its SERVICE PROVIDERS are and shall remain at all times the owners of every right, title and interest for (i) any hardware, software and relevant technology, used together with or as regards the SERVICES, and (ii) any intellectual property right or other property right including, without any restrictions, all the patents, copyrights, rights to commercial trademarks and commercial secrets contained therein. The

SUBSCRIBER accepts that it is forbidden to copy, decompile, break down, reverse engineer, reduce to derivative works, or manipulate any technology, datum or content filed or integrated into the equipment used for the reception and operation of the SERVICES (collectively the “Equipment Technology”) or to otherwise modify or tamper with said equipment. The SUBSCRIBER also agrees not to upload, publish, transmit or otherwise make available any material containing a virus for software or other codes, files or computer programmes designed to interrupt, disable or restrict the functions of the SERVICES. Any software contained in the VEHICLE is only granted under licence for use together with the SERVICES. Furthermore, any data or other contents of the SERVICES is protected by the laws on copyrights and by other legislation on intellectual property and all the rights of property are attributed to FCA and to the SERVICE PROVIDERS. The SUBSCRIBER has the right to use the technology of the equipment only for personal, not commercial use and only in relation to the SERVICES. 18. RESPONSIBILITIES OF THE SUBSCRIBER 18.1. General principles The SUBSCRIBER may use the DEVICE solely under the conditions defined in the present GENERAL TERMS AND CONDITIONS and: - must not divert the use of the DEVICE for personal or advertising purposes, or to sell products and SERVICES; - must not use the DEVICE to harm others or for a purpose that is contrary to public order or morality, or that infringes any third party’s rights; - must not commit any infringing act, or reproduce, download, represent, modify all or part of the DEVICE, or use a “robot” or a website “copier”; - must not access and/or tamper with the DEVICE, since it is an automated data processing system. Fraudulently accessing or tampering with such a system is forbidden and subject to criminal prosecution. This is also the case for the obstruction or alteration of the functionality of the system, or the suppression or modification of data contained therein; - must not disrupt the normal operation of the DEVICE, nor introduce any virus or any other technology that is harmful to the application or related SERVICES. The SUBSCRIBER must be an adult and have full legal capacity to agree to the present GENERAL TERMS AND CONDITIONS. He/she confirms that he/she is legally competent and has the necessary means to access and use the SERVICES, and in particular, to have verified that the devices (computer, Smartphone, etc.) being used do not contain any viruses and are in perfect working order. The SUBSCRIBER certifies that all the information he/she provided to FCA is accurate and complete. He/she must update his/her personal information. The SUBSCRIBER is fully liable for his/her use of the DEVICE, its related SERVICES and the information he/she provided. The SUBSCRIBER must use the DEVICE in good faith, and comply with the present GENERAL TERMS AND CONDITIONS and applicable laws and regulations, notably the laws relating to intellectual and industrial property, IT, file management and privacy. The SUBSCRIBER must not commit any act that could jeopardize the IT security of FCA or of the SUBSCRIBER, nor interfere or interrupt the normal functioning of the WEBSITE. FCA reserves the right to terminate the use of its DEVICE by any SUBSCRIBER who breaches these GENERAL TERMS AND CONDITIONS and to communicate all the necessary information to the competent authorities. 18.2. Update personal account The SUBSCRIBER acknowledges and accepts that the correct provision of the SERVICES is subordinate to registering a personal account on the WEBSITE and to what is specified herein.

18.3. Password/User name/Telephone details The SUBSCRIBER undertakes to be fully responsible for safeguarding his/her own password and user name. Anyone who becomes aware of the SUBSCRIBER’S password and user name could access the SERVICES. Neither FCA nor the SERVICE PROVIDERS are liable as regards the use the SUBSCRIBER makes of his/her own password and user name or other information, which could be used to identify the account in order to request SERVICES for the VEHICLE. The SUBSCRIBER must provide a telephone contact number, (which shall be mandatorily the number of the SUBSCRIBER) under his/her own responsibility and, nevertheless, in compliance with the applicable privacy legislation in order to enable the SERVICES to be provided. The CONTROL CENTRE - should the SUBSCRIBER request it, or if it receives no answer in calling the contact number of the SUBSCRIBER or if the person answering the call is not in the condition to confirm the need of assistance - shall contact the local emergency service (ambulance) according to Article 11.6 in compliance with the legislation in force communicating when necessary the SUBSCRIBER’S personal data. The SUBSCRIBER undertakes to promptly notify FCA of any change in his/her contact telephone numbers, holding FCA harmless of any consequent damages which FCA may incur as a result of any failure to comply with the obligations stated in this article 18. 18.4. Correct use of the SERVICES The SUBSCRIBER undertakes not to use any of the SERVICES for fraudulent, unlawful or abusive purposes, or for purposes that interfere in any way with the provision of the SERVICES to other customers and, in any event, that are not in line with that envisaged by these GENERAL TERMS AND CONDITIONS. The SUBSCRIBER undertakes not to use the SERVICES improperly or act in any that could harm the commercial operations, services, reputation, employees, and structures of FCA or of the SERVICE PROVIDERS. The SUBSCRIBER acknowledges, therefore, and expressly accepts that he/she is liable for any sum claimed by others against FCA, along with any expenses, arising in part or in whole from such use or from his/her own actions. The SUBSCRIBER acknowledges, therefore, and expressly accepts he/she cannot resell, copy, archive, reproduce, distribute, modify, exhibit, publish, implement, transmit, disseminate or create works derived from the content received via the SERVICES nor use it for commercial purposes. Some information received via the SERVICES belongs to FCA, the SERVICE PROVIDERS or to other third parties which provide it through FCA. Such information could be covered by one or more copyrights, commercial trademarks, service trademarks, patents or other legal protection. The SUBSCRIBER undertakes not to use and/or copy any of the content received via the SERVICES, unless explicitly authorised by FCA or by the SERVICE PROVIDER. 18.5. Other users or occupants of the VEHICLE THE SUBSCRIBER IS THE SOLE PERSON RESPONSIBLE FOR ANY USE WHATSOEVER OF THE SERVICES FOR THE VEHICLE, EVEN IF USED BY OTHERS AND EVEN IF THE USE IS UNAUTHORISED. THE SUBSCRIBER IS THE SOLE PERSON RESPONSIBLE FOR THE SERVICES REQUESTED BY SAME OR BY WHOEVER USES HIS/HER VEHICLE, VIA THE SERVICES. The SUBSCRIBER undertakes, therefore, to inform all the users and occupants of his/her own VEHICLE as regards the SERVICES and the functions and limits of the system, as well as the provisions of these GENERAL TERMS AND CONDITIONS. No liability can be ascribed to the SERVICE PROVIDER or to FCA as regards the way in which the VEHICLE is used by the SUBSCRIBER and/or the driver. If the SUBSCRIBER and/or driver of his/her VEHICLE uses the SERVICES to commit an offence or for other improper purposes, the SUBSCRIBER shall be liable for any damages attributed to FCA as a result of such use.

6



18.6 Compliance with road safety regulations is paramount and FCA is not liable for any breaches committed with the VEHICLE, including breaches committed of every applicable Highway Code. 18.7 Installation, use and maintenance of the device The SUBSCRIBER acknowledges that the correct installation and activation of the DEVICE is essential for the provision of the SERVICES. Therefore, the SUBSCRIBER agrees to the installation and activation of the DEVICE, which shall be carried out under the care and responsibility of the centres authorised by FCA. The SUBSCRIBER acknowledges that the DEVICE entails no risk to health or to the safety of the VEHICLE and does not alter the latter in any way. Each installation, removal, replacement, repair, maintenance or other intervention on the DEVICE must be carried out by a technician authorised by FCA, which the SUBSCRIBER may contact via FCA’s Customer Care. If the DEVICE breaks down or malfunctions, the SUBSCRIBER must take the VEHICLE to the delivery centre from where he/she collected the VEHICLE (or from where he/she purchased the DEVICE aftermarket) or to another centre authorised by FCA. 19. INTERNET SECURITY FCA undertakes to do everything in its power to ensure the security of the SERVICES, taking into account the complexity of the internet. FCA cannot, in any case, ensure absolute security. The SUBSCRIBER accepts the characteristics and limitations of the internet. The SUBSCRIBER confirms his/her awareness of the intrinsic nature of the Internet, and in particular of its technical characteristics and response times necessary to consult, examine or transfer data. The SUBSCRIBER must inform FCA of any service shortcomings. The SUBSCRIBER is aware that the data flowing on the internet is not necessarily protected, especially against potential misappropriations. The SUBSCRIBER agrees to take any appropriate measure in order to protect his/her own content, data and/or software from any contamination by possible viruses circulating on the internet. 20. SPECIAL COMMUNICATIONS 20.1. Updates to software, hardware and equipment The SERVICES include the software (including the software of the VEHICLE and/or of the DEVICE), which remains modifiable at the discretion of FCA. Such modifications could affect the data archived on the SERVICES of the VEHICLE or delete them. The SUBSCRIBER acknowledges and expressly accepts that FCA is not liable for the loss of data. The SUBSCRIBER is not the proprietor of the SERVICE software nor does he/she acquire the rights to use or modify that software autonomously. The SUBSCRIBER accepts that FCA has the right to operate remotely to update the SERVICE software. 21. GUARANTEES AND RESPONSIBILITIES 21.1. No guarantee The limited guarantee of the VEHICLE and/or the limited guarantee of the manufacturer of the hardware (where applicable) includes the DEVICE installed in the Vehicle either in the original equipment manufacturing phase or aftermarket but does not cover the SERVICES. Furthermore, FCA does not guarantee it is able to provide uninterrupted SERVICES or

without breakdowns and does not guarantee the data or information provided are without any errors. All DATA AND INFORMATION ARE PROVIDED BY FCA TO THE SUBSCRIBER AS IS. NEITHER FCA NOR OTHER THIRD BENEFICIARIES PROVIDE ANY GUARANTEE, EXPLICIT OR IMPLICIT, IN RELATION TO THE SERVICES OR THE DATA AND INFORMATION PROVIDED. NO GUARANTEE IS PROVIDED IN RELATION TO CONTENT, QUALITY, ACCURACY, PRECISION, COMPLETENESS, RELIABILITY, COMPLIANCE, MARKETABILITY OR SUITABILITY FOR ANY GIVEN PURPOSE. TO THE EXTENT PERMITTED BY LAW, ALL THE AFOREMENTIONED GUARANTEES ARE EXPLICITLY EXCLUDED FROM THESE GENERAL TERMS AND CONDITIONS. 21.2. Liability Nothing in these GENERAL TERMS AND CONDITIONS shall limit or exclude the liability of FCA in the event of personal injury or death arising as a result of its negligence or for fraud or fraudulent statements. Without prejudice to the above, FCA is in no way liable and under no circumstance shall it be held liable for any type of loss, damages including those to the SUBSCRIBER in the event of THEFT, ROBBERY and/or damage to the VEHICLE and/or persons and/or material present on board the VEHICLE, responsibilities, claims and expenses (including but not limited to legal costs, defence costs and termination), direct, indirect or consequential, arising from or relating to the provision or the use of the SERVICES, regardless of the cause, arising from the contract, tort (including negligence), law or other. FCA shall not be liable for any loss or damage whatsoever (even where predictable) arising from or relating to the use (including, but not limited to those arising from any breach of the Highway Code), or the inability to use the SERVICES, or the use or dependency on said SERVICES. FCA is not liable for: - the quality of the SERVICES, as the SERVICES are offered “as is”; - any disruption in the use of the WEBSITE; - temporary or permanent and complete or partial unavailability of the WEBSITE; - any difficulty with response time, and, generally speaking, any failure to perform; - any impossibility to use the WEBSITE; - computer security breaches, which may damage SUBSCRIBER’s equipment/devices and data unless otherwise specified by law; - any infringement of the SUBSCRIBERS’ rights in general. Under no circumstance shall FCA be held liable for any interruptions or restrictions to the SERVICES for the following reasons: - legal provisions or administrative measures and/or forthcoming regulations; - regulatory provisions issued by the competent authorities. 22. GENERAL PROVISIONS 22.1. Force majeure In case of a force majeure event, the services referred to in these GENERAL TERMS AND CONDITIONS will initially be suspended. If a force majeure event lasts for more than thirty (30) days, these terms and conditions shall be automatically terminated, unless otherwise agreed by the Parties. It is expressly agreed between the Parties that force majeure or fortuitous events, in addition to those usually deriving from court decisions, are understood as including but are not limited to: general strikes, lock-outs, epidemics, telecommunications network failures, earthquakes, fires, storms, floods, water damage, governmental restrictions, legal or statutory modifications preventing the performance of the SERVICES. If

either Party is prevented from, or delayed in performing any of its obligations under these GENERAL TERMS AND CONDITIONS by a force majeure event, said party will promptly notify the other Party. 22.2. Non waiver The failure of a Party to exercise or enforce any right under these GENERAL TERMS AND CONDITIONS shall not be deemed to be a waiver of that right nor can it serve to impede the exercise or enforcement of it at any time thereafter. The Parties acknowledge that each Party acts on its own behalf as independent contractors and shall not be considered as the agent of the other Party. Nothing in these GENERAL TERMS AND CONDITIONS is intended to constitute a partnership, franchise, joint venture, or agency relationship. Neither Party may contract for and on behalf of the other. Furthermore, each of the Parties remains solely responsible for its actions, statements, commitments, SERVICES, products and personnel. 22.3 Independence of the Parties Neither Party has the authority to assume or create an obligation in the name and/or on behalf of the other Party. Furthermore, each Party remains solely responsible for its acts, allegations, commitments, SERVICES, products and personnel. 22.4. Severability If one or more provisions of these GENERAL TERMS AND CONDITIONS is deemed invalid or so declared by a law, a regulation or a final decision having res judicata effect rendered by a court having proper jurisdiction, the other provisions shall remain in full force and effect. The Parties agree to substitute for any such invalid, illegal, or unenforceable provision a new provision which serves the purpose of the invalid provision to the furthest possible extent. 22.5. Good faith The Parties declare that the undertakings referred to in these GENERAL TERMS AND CONDITIONS are made fully in good faith. 22.6. Entire agreement These GENERAL TERMS AND CONDITIONS supersede all prior agreements, arrangements and undertakings between the Parties and constitute the entire agreement between the Parties relating to the subject matter of these GENERAL TERMS AND CONDITIONS. However, the obligations of the Parties under any pre-existing non-disclosure agreement shall remain in full force and effect in so far as there is no conflict between the same. The Parties confirm that they have not entered into these GENERAL TERMS AND CONDITIONS on the basis of any representation that is not expressly incorporated into these GENERAL TERMS AND CONDITIONS. 22.7. Applicable legislation and competent court These GENERAL TERMS AND CONDITIONS and any controversy arising or resulting therefrom will be governed by the laws of England and Wales. The SUBSCRIBER and FCA accept that any controversies arising or resulting from these GENERAL TERMS AND CONDITIONS of from the use of the SERVICES by the SUBSCRIBER will be subject to the exclusive jurisdiction of the Courts of England and Wales, except for the cases of exclusive competency of the court of residence of the SUBSCRIBER envisaged by law on the subject of the identification of the competent court in controversies between a professional and consumer.

Date Signature of the SUBSCRIBER

______________________________________________________________

7



ANNEX 1 - PRIVACY NOTICE

PURPOSES AND METHODS OF PERSONAL DATA PROCESSING The data collected by the vehicle (“Data”) will be processed for the following purposes:

a) to provide accident assistance, roadside assistance and assistance in the event of THEFT (“Services”), in application of the “GENERAL TERMS AND CONDITIONS FOR PROVISION OF Alfa Connect / Mopar® Connect FLEET SERVICES” between the SUBSCRIBER and FCA Italy S.p.A. (“Company”);

b) to allow the Company to perform analyses with a view to model optimisation and product improvement, by virtue of the legitimate interest of the Company (“Product Improvement”).

The data will be processed for the above purposes and may carried out using paper, automated or electronic means.

OTHER PERSONS WHO MAY PROCESS THE DATA The Data may be processed by persons working on behalf of the Company and in accordance with specific contractual obligations, within or outside of the EU. The Data may be communicated to third parties to fulfil legal obligations, or to comply with orders from public authorities, or to exercise a right of the Company in legal proceedings. TRANSFER OF DATA OUTSIDE OF THE EUROPEAN ECONOMIC AREA (EEA) In the context of the Company's contractual relationships, the Data may be transferred outside of the European Economic Area (EEA), including through entering the same into databases managed by third companies, operating on behalf of the Company. Database management and Data processing are restricted to the purposes for which the Data are collected and take place in strict compliance with the applicable law on the protection of personal data. Whenever the Data is transferred outside of the EEA, the Company will take every appropriate and necessary contractual measure in order to guarantee an adequate level of data protection, including - amongst other things - agreements based on standard contractual clauses for the transfer of data outside of the EEA approved by the European Commission. DATA CONTROLLER The Data Controller is FCA Italy S.p.A., with registered office in Corso Giovanni Agnelli 200 – 10135 Turin. DATA RETENTION The Data processed in order to provide the Services will be kept by the Company for the time deemed strictly necessary to achieve said purposes. Furthermore, said Data may be kept for a longer period of time in the event of having to deal with any disputes related to the provision of the Services. The Data processed for the purposes of Product Improvement will be kept for a period of three (3) years. RIGHTS OF THE INTERESTED PARTY The interested party may exercise the following rights:

1. the right to access the Data, or rather to obtain from the Company confirmation of whether their Data are being processed and, if so, to have access thereto;

2. the right to rectification and right to erasure, in other words the right to obtain the rectification of inaccurate and/or incomplete Data, as well as the erasure of Data when the request is legitimate;

3. the right to restriction of processing, in other words the right to request suspension of the processing when the request is legitimate;

4. the right to data portability, if technically feasible, in other words the right to obtain Data in a structured, commonly used and readable format, as well as the right to transfer Data to other controllers;

5. the right to object to the processing of Data when the request is legitimate, including when the Data are processed for marketing or profiling, if applicable;

6. the right to lodge a complaint with a supervisory authority in the event of unlawful processing of the Data.

The interested party may exercise the above rights by writing to FCA Italy S.p.A., Corso Giovanni Agnelli 200 – 10135 Turin, or to the email address [email protected] .

mailto:[email protected]

8



ANNEX 2 – Data Processing Agreement

This appointment as External Data Processor (the “Data Processing Agreement”) is signed by

The SUBSCRIBER (“Company”), with registered office in _______________________________________

and

FCA Italy S.p.A., with registered office in Corso Giovanni Agnelli 200 – 10135 Turin (“Provider”)

(Hereinafter the “Parties”)

Whereas:

the company is the Data Controller for the data processing carried out within its organisation in accordance with Legislative Decree no. 196 of 30 June, as amended, Regulation (EU) 679/2016 and any other applicable legal provision on privacy (“Privacy Law”);

the Provider will provide the services (“Services”) in accordance with the “GENERAL TERMS AND CONDITIONS FOR THE PROVISION OF Alfa Connect / Mopar® Connect FLEET SERVICES for Fiat, Lancia, Alfa Romeo, Jeep, Fiat Professional, Abarth branded vehicles” (“Service Contract”);

the Provider, in carrying out its duties for the Company, will process the personal data (the “Data”) in compliance with the Law on Privacy, and within the limitations specified into below par. 1. Scope and use of the Data

1. Scope and use of the Data

With this Data Processing Agreement, the Company, in its capacity as Data Controller, appoints the Provider, who accepts the appointment, in its capacity as the Data Processor. The Company appoints the Provider to process the Company Data in relation to the obligations of the Provider established in the Service Contract. The Provider shall process the data in accordance with the Law on Privacy and will take appropriate technical and organisational measures to reduce to a minimum the risk of the accidental or otherwise destruction or loss of the Data, unauthorised access to the Data, or any Data processing that is unlawful or performed for purposes other than those for which the Data were collected. The Data shall be used exclusively to provide the Services to the Company. The Provider shall neither use the Data, nor derive information therefrom for advertising or other similar commercial purposes. The Company retains all rights, title and interests in relation to the Data. The Provider does not acquire any rights over the Data other than the rights that the Company grants to the Provider in order to provide the Company with the Services.

2. Interested parties

The Interested parties as regards the Data processing are the following:

• Company employees

• Company contractors

• Customers of the Company

3. Data categories

The Data that will be processed are the following:

• Name and surname

• Employer

• Address of the company, office, etc.

• Business email address

• Business telephone/fax/mobile

• User ID

• Location data (e.g. GPS)

• Vehicle identification number (VIN)

• Vehicle data

• Driving habits

3.1. Specific Data categories

None of the following specific categories is subject to data processing in accordance with the provisions of this Data Processing Agreement:

9



• Racial or ethnic origin

• Political opinions, religious or philosophical beliefs

• Sexual orientation

• Health information (including health conditions, disabilities, illnesses, or medical treatments)

• Trade union membership

• Criminal records (including convictions, fines, amercements, and any other information obtained during criminal proceedings)

• Biometric and/or genetic data

4. Persons authorised to process the Data

The Provider will give instructions to natural persons within its own organisation who are authorised to process the Data.

5. Sub-data processors

The Provider will appoint sub-data processors under its own responsibility. The sub-data processors must have the experience, skills and reliability necessary to ensure strict compliance with the Law on Privacy. The Provider will ensure that the appointed sub-data processors perform their duties in accordance with the provisions of this Data Processing Agreement.

6. Security measures

The Provider undertakes to abide by (and to ensure that any subcontractors, affiliates or agents, where applicable, abide by) Annex A of the Data Processing

Agreement.

7. Notification of security breaches

If the Provider becomes aware of (a) any unlawful access to any Company Data recorded in the Provider's systems or relative structures; or (b) any unauthorised

access to said systems or structures, and if in both cases said access results in the loss, disclosure or alteration of the Company Data (each one a “security Incident”),

the Provider must promptly: (a) notify the Company of the Security Incident; (b) investigate the Security Incident and provide the Company with all the details of the

same and (c) adopt suitable measures to mitigate the effects and reduce to a minimum any damages resulting from the Security Incident.

Communications regarding the Security Incident are to be sent to the Company in any written form, including via email.

8. Rights of the Interested Parties

At the request of the Company, the Provider shall promptly and proactively cooperate with the Company to allow the interested parties to exercise their rights in

accordance with the applicable Privacy Law.

9. Auditing rights

At the request of the Company, the Provider agrees and guarantees that it will make available to the former a list of the Data processing activities performed in

accordance with this Data Processing Agreement for inspection and auditing purposes.

10. Duration and termination

This Data Processing Agreement will take effect from the date of signing the same and will cease to be effective upon expiry or upon termination for any reason of

the Service Contract. On the date of expiry or termination, the Provider will cease processing the Data and will delete all the Data in its possession or, upon the request

of the Company, return the Data to the Company.

11. Relations with the Authorities

The Provider will promptly inform the Company of any information requests, actions, investigations, or inspections by the relative data protection or judicial authorities

in accordance with the provisions of the Law on Privacy.

The Provider will comply with the orders of the data protection or judicial authorities unless the Company has promptly informed the Provider of its intention to

formally object to said orders.

12. Communications

Any request, notification, or other communication sent in accordance with this Data Processing Agreement must be in writing and addressed to the other party. The

communication will be deemed to have been made upon confirmation of receipt via a written or automated return receipt or through electronic registration (if

applicable).

13. Invalidity

If any provision of this Data Processing Agreement becomes or is deemed invalid, unlawful or inapplicable by any competent court, the remaining provisions shall

remain in effect for intents and purposes.

14. Applicable law and jurisdiction

10



The Data Processing Agreement will be governed and interpreted in accordance with United Kingdom and Wales law and any other applicable privacy laws. Any

dispute relating to or arising from this Data Processing Agreement shall be subject to the sole jurisdiction of the court of the city where the Company's registered

office is located.

15. Non-disclosure

The Provider accepts that the details of this Data Processing Agreement are confidential for each party. Without prejudice to the above, this Clause 15 shall not

prevent the Provider from disclosing this Data Processing Agreement to the data protection authorities if it is necessary to do so in order to comply with the applicable

law.

16. Methods of execution

In order to finalize the present Appointment, the Company shall, in the first instance, complete the information at the end of the Appointment.

Subsequently, the Appointment must be duly signed by the Company that has entered into the Services Contract.

Finally, the Company undertakes to promptly send the Appointment as completed and signed to the e-mail address [email protected], also indicating

the identification details of the data controller's delegate.

Upon receipt by the Supplier of the Appointment validly completed by the Company, the Supplier undertakes to return a signed copy of the Appointment to the

Company.

THE SUBSCRIBER FCA Italy S.p.A.

__________________________________________

Stamp and Signature

Name (handwritten or typed): __________________________________________

Name: Mr Gilberto CERESA

Date: _________________________

11



ANNEX A

Security measures

Taking Into account the available technology and the cost of implementing the aforementioned measures, the Provider will adopt appropriate organisational and

technical measures to prevent the improper use, unauthorised or unlawful processing, loss, or destruction of the Data or accidental damage thereto.

In the event that the Provider wishes to modify the existing security measures, it will advise the Company in writing of its intention without any undue delay.

1. Material security measures

The Provider will take steps to:

a. render the structure containing the IT infrastructure used to process and transfer the Data secure;

b. restrict the number of persons authorised to access the Data as well as those authorised to access the IT infrastructure used to process and transfer the Data;

c. ensure the continuous supply of electricity to the IT infrastructure used for the Data processing and transfer, in particular by putting in place emergency supply

systems.

2. Security measures incorporated into the software

The Provider will guarantee the following electronic security measures:

a. a system for controlling access to the Data so as to ensure that only authorised and identified persons have access to the Company Data;

b. a system to protect the Data against accidental loss or destruction;

c. the Data collected for different purposes are processed separately;

d. an integrated mechanism that requires each person that has access to the Data to renew their password;

e. a unique user ID and password (“credentials”) for each person involved in the Data processing;

f. the password, which must be known only to the person to whom it is assigned (the “User”), must have the following characteristics:

i. it must contain at least 8 characters;

ii. it must contain upper and lower case letters combined with numbers or special characters;

iii. it must not contain the User ID;

iv. it must be changed independently by the User upon first access;

v. it must be changed at least every 60 days;

g. the User ID assigned to a User may not be reassigned to another person authorised to process the Data, even at a later date;

h. the credentials must be deactivated if they have not been used for at least 6 months (with the exception of those that have been authorised for technical

management purposes);

i. the credentials must also be immediately deactivated in the event that the person tasked with processing the Data is prohibited from accessing the Data;

j. persons authorised to process the Data must be advised to not leave their electronic devices unattended and accessible during the Data processing sessions;

k. an authorisation system:

i. if authorisation profiles in different contexts for persons tasked with Data processing have been defined, an authorisation system must be used;

ii. the authorisation profiles for each person or uniform group of people tasked with Data processing must be defined and configured prior to

beginning the Data processing so as to permit only access to the Data that are necessary to perform the processing operations;

iii. a check must be performed, at least annually, to verify that the requirements for maintaining the relative authorisation profiles are still satisfied;

l. the application of effective solutions (logical and physical), maintaining the company standards of the sector in line with the times, protecting the Data from

the effects of malware and from remote access by unauthorised subjects or automated systems;

i. programs to protect against viruses and malware must be updated on a daily basis;

ii. security patches and actions taken to address known system vulnerabilities must be promptly implemented and updated;

m. the Data must be managed through software (including operating systems, middleware and applications) with security characteristics that take account of the

most recent technological developments;

n. backups must be made at least on a daily basis;

o. appropriate measures must be adopted to ensure that access to the Data can be restored within a specific timeframe (not more than seven days);

p. the Data used for authentication must be protected with effective cryptographic security measures;

q. all communications of the Data in transit must be encrypted using the most up-to-date cryptographic procedures;

r. special Data categories must be encrypted when not in use by using the most up-to-date cryptographic procedures;

s. ensure that it is possible to control access to systems and applications. The access logs must be available for at least one year;

t. the vulnerability assessment and penetration tests must be regularly performed by independent third parties and the relative reports must be delivered to

the Company;

u. if any Data breach or security weakness is detected in the Data processing or in any system used to provide the services, the Company must be immediately

informed of the incident and of all the remedies implemented.

12



3. Organisational measures

The Provider guarantees that:

a. access to the Data will be assigned based on the “need to know” principle;

b. it will limit the number of people authorised to perform activities related to the Data processing;

c. it will provide the authorised persons with training on data protection legislation, the security measures adopted by the Provider and the security policies to

be implemented in the event of a security emergency;

d. the persons authorised to use a system for processing Data have access only to the Data for which they have received the right of access and the Data may

not be read, copied, modified, removed, or used without authorisation during processing or subsequently when archiving the Data;

e. it will keep an up-to-date list of the persons authorised to access the Data and will make said list available to the Company upon a reasoned request from the

same;

f. it will keep a copy of the daily backup of the Data and software used by the Provider to process the Data;

g. the Data will be stored applying measures to protect them from unauthorised access, alteration, damage or destruction;

h. the Data will be irreversibly deleted in the event of the replacement or reuse of hardware;

i. it forbids or restricts the production of copies of the Data including printouts which it ensures are destroyed after use;

4. System administrators

The Company assigns the Provider the task of selecting professional “System Administrators”. The Provider will adopt, according to the extent of its competence,

measures that include but are not limited to the following:

a. it will prevent access of the System Administrators to the Data and, ensuring that the Company is made aware if this is not possible;

b. it will carefully assess the qualifications of the person/s who are allocated the role of System Administrator;

c. it will appoint individually the System Administrator and provide a detailed list of the activities that the System Administrator will perform, providing the

relevant authorisation profile;

d. it will prepare an internal document updated with the personal details of the System Administrator;

e. it will make available to the Company the document referred to in Clause (d) in the event of an audit by the Data Protection Authority and/or upon the request

of the Company;

f. it will check, at least once a year, the activities of the System Administrator in order to verify that they comply with the organisational, technical and security

measures envisaged by the Law on Privacy;

g. it will record the the logical access controls regarding access by the System Administrator to the processing system and the electronic databases. The access

logs must be complete and unalterable. It must be possible to verify their integrity in accordance with the verification purposes pursued;

h. it will keep the access logs referred to in Cause (g) for an appropriate period of time and for not less than one year. The access logs must include the timestamps.

Date post:	20-Aug-2020
Category:	Documents
Upload:	others
View:	0 times
Download:	0 times

GENERAL TERMS AND CONDITIONS FOR THE PROVISION OF Alfa ... · GENERAL TERMS AND CONDITIONS FOR THE...

Documents