Ford Community Challenge Application Privacy Policy

General Statement

Ford Motor Company ("Ford", "we", "our") respects your privacy and is committed to protecting it. It is our sincere hope that by explaining our data handling practices, we will develop a trusting and long-lasting relationship with you.

This privacy policy (the "Community Challenge Privacy Policy") sets out how we use the personal data you provide through the Ford Community Challenge (the "Community Challenge Program" or “Community Challenge”), and explains how you can contact us if you have any questions or concerns or would like to access or correct the information we hold about you.

The Community Challenge Program is provided and operated by Ford Motor Company Fund in conjunction with Ford Motor Company, whose registered address is One American Road, Dearborn, MI 48126, U.S. The Ford Community Challenge program is administered in the U.S.

What personal information we will use

This Community Challenge Privacy Policy applies to the personal data you provide by downloading, completing and submitting the downloadable Request for Proposal and Budget, and any additional personal date you may provide later in the process (your "Community Challenge Personal Data"). It does not cover data we collect about the way you interact with the Community Challenge Page, for example through cookies and third-party analytics tools. Please refer to the www.ford.es Cooke Guide for further information about these tools and how they are used (available here).You are able to provide the following categories of personal data to the Community Challenge Program:

• Name
• Contact information
• Any other personal data you provide in your Request for Proposal and Budget, later in the Program process.

If you enter a Community Challenge, other project members may also provide your personal information. If you submit personal information relating to your project members, please ensure that you inform them and provide them with this Privacy Policy.

In addition, we will collect your personal information if you contact us. The categories of information that we collect about you if you contact us include your name and/or a user name that you choose; contact information (such as your address, telephone number(s) and email address); and any comments you provide in the message.

We may be required by law to collect certain personal information about you, or as a consequence of any contractual relationship we have with you (for example, the terms which govern your participation in a Community Challenge). Failure to provide this information may prevent or delay the fulfilment of these obligations. We will inform you at the time your information is collected whether certain data is compulsory (for example, by marking mandatory fields in application forms for a Community Challenge) and the consequences of the failure to provide it. If you do not provide the information that we indicate is mandatory in a Community Challenge entry form, you will not be able to enter the Community Challenge.

How personal information is used

We may use your Community Challenge Personal Data:

• To consider your application in conjunction with Apadrina la Ciencia, the Ford Motor Company Fund and Ford Motor Company;
• To contact you regarding the status of your submission;
• Fulfill a Community Challenge-related request (e.g., process your entry);
• Respond to comments or requests for information regarding the Community Challenge;
• Allow you to participate in Community Challenge related events and activities;
• Send you Community Challenge updates and communicate with you about your entry;
• Make your Community Challenge experience more customer friendly;
• Award grants;
• Manage and improve our business and our relationship with you; and
• Comply with our legal and regulatory responsibilities, respond to legal process or requests for information issued by government authorities or other third parties, prevent and detect crime and fraud, or protect your, our or others’ rights

Which are the legal grounds for the processing of Personal Data

European and Spanish data protection law requires us to have a lawful ground to collect and use your personal information. Where European data protection law applies to our use of your personal information, there are different lawful grounds that we rely on to use your personal information, and we will collect and use your personal information in the following circumstances:

• To fulfil our contractual obligations to you, for example, as contained in the conditions under which you enter a Community Challenge
• To comply with our legal obligations
• To meet our legitimate interests, for example to communicate with you about your entry, to publicise entries reaching the semi-final stages, and winning entries, and to manage and improve our business and our relationship with you. When we process personal information to meet our legitimate interests, we put in place robust safeguards to ensure that your privacy is protected and to ensure that our legitimate interests are not overridden by your interests or fundamental rights and freedoms. For more information about the balancing test that we carry out when we process your personal information to meet our legitimate interests, please contact us using the details below

We may obtain your consent to collect and use certain types of personal information when we are required to do so by law (for example, in relation to our direct marketing activities). If we ask for your consent to process your personal information, you may withdraw your consent at any time by contacting us using the details at the end of this Privacy Policy.

Your rights in relation to personal information

European and Spanish data protection law grants individuals certain rights in relation to their personal information. If our use of your personal information is governed by European and Spanish data protection law, you have certain rights regarding your personal information, subject to local law. These include the rights to:

• Access your personal information and certain information about how we process it
• Rectify the personal information we hold about you
• Erase your personal information
• Restrict our use of your personal information
• Object to our use of your personal information
• Receive your personal information in a usable electronic format and transmit it to a third party (often known as the 'right to data portability')

If you have questions or concerns regarding our use of your personal information, or would like to exercise any of the rights you have in relation to your personal information, please contact us using the details below.

We encourage you to contact us to update or correct your information if it changes or if the personal information we hold about you is inaccurate.

If you have a complaint about the way in which we use your personal information, we hope that in the first instance you will contact us. Where our use of your personal information is subject to European and Spanish data protection law, you may, however, also make a complaint to your local data protection authority.

Sharing personal information

Your personal information may be disclosed to:

• Organizations which will judge the Community Challenge entries
• Companies or other organizations that we have engaged to provide services on our behalf such as web-hosting companies, mailing vendors, analytics providers, event hosting services, and information technology providers
• Companies or other organizations where you have asked us to, or agreed that we may share your personal information
• Any law enforcement agency, court, regulator, government authority or other third party where we believe this is necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights, the rights of any third party or individuals' personal safety, or to detect, prevent, or otherwise address fraud, security or safety issues
• Any third party that purchases, or to which we transfer, all or substantially all of our assets and business. Should such a sale or transfer occur, we will use reasonable efforts to try to ensure that the entity to which we transfer your personal information uses it in a manner that is consistent with this Privacy Policy

We may also share personal information with other companies within the Ford Motor Company family of companies or subsidiaries. Our "family of companies" is the group of companies related to us by common control or ownership. We share information within this "family" as a normal part of conducting business. When we share your personal information in this context, we will make sure that it is used for purposes which are compatible with those described with this Privacy Policy. A list of the companies within Ford Motor Company family of companies is available at available at https://shareholder.ford.com/investors/financials/annual-reports/default.aspx in the table titled Subsidiaries of Ford Motor Company.

If you are providing personal information in connection with a Community Challenge, and if you are selected as a semi-finalist or a winner, we will include your name and details of your entry to the Community Challenge in a publicly available list. Please see the applicable Community Challenge rules for more information.

Security of personal information

We use technical and organizational systems, policies, and procedures to ensure a level of security appropriate to the risks arising from our collection and use of personal information and to protect it from unauthorized or unlawful processing and against accidental loss, destruction or damage. We evaluate these measures on a regular basis to ensure the security of our processing.

Retention of personal information

We keep your personal information in identifiable form for as long as is reasonably necessary to fulfil the purposes for which we collected it and to comply with applicable legal and regulatory obligations. This generally means holding your personal information for as long as one of the following apply:

• Your personal information is reasonably required in order to administer the Community Challenge
• Your personal information is reasonably required in order to protect and defend our rights or property (this will generally be the length of the relevant legal limitation period)
• We are otherwise required to keep your personal information by applicable laws or regulations.

Transferring personal information internationally

The Community Challenge Program is operated by Ford Motor Company Fund with Ford Motor Company, entities located in the United States and we may use global service providers to process personal information. As a result, your personal information will be transferred to destinations outside the European Economic Area ("EEA"), and these destinations may not be regarded by the European Commission as ensuring an adequate level of protection for personal information.

When we transfer your personal information outside the EEA and that information is subject to European data protection law, we will do so in accordance with European data protection law. You can contact us if you would like further information about our international transfers of your personal information.

Other websites and social networking

The Website may contain links to other websites which are outside our control and are not covered by either this Privacy Policy. If you access other websites using the links provided, the operators of those websites may collect information from you which will be used by them in accordance with their privacy policies, which may differ from ours

The Website may also offer you the opportunity to share information or follow us or third parties using third party social networking functionality (such as through “share this”, “like” or “follow” buttons). This functionality is offered in order to generate interest in the Website among the members of your social networks, and to enable you to share and follow opinions, news and recommendations about the Website. However, you should be aware that sharing personal information with a social network may result in that information being collected by the social network provider and being made publicly-available, including through internet search engines.

You should always read the privacy policy of any website you access [or social network through which you share information] carefully in order to understand their privacy practices.

Contacting us

If you would like to contact us about any of the issues raised in this Privacy Policy, please contact the Ford affiliate in Spain, Ford España, S.L, through the following channels:

Ford España, S.L.
Apdo. de Correos nº 3, 46700 Gandia – Valencia
Phone number 900 807 090
E-mail "bajacrm@infoford.es"

For any question in relation to this privacy policy, you can contact our data protection coordinator in the following e-mail address dpospain@ford.com

Privacy Policy effective date and revision days

You may request a copy of this Privacy Policy from us using the contact details set out above. Occasionally we may update this Privacy Policy in order to reflect any changes to our privacy practices. If we update this Privacy Policy, the new policy will be posted ten (10) days prior to the changes taking effect and we will notify you of the changes. Where changes to this Privacy Policy will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise your rights (e.g. to object to the processing).

The effective date of this Privacy Policy is January 1, 2019.