BMO China Website Privacy Notice

1 Scope of this Privacy Notice

This Privacy Notice explains how Bauer Media Outdoor Guangzhou Company Limited processes personal information when you visit and use the BMO China website. The website provides information about Bauer Media Outdoor in English and Chinese. It does not provide accounts, forms, payments or other functions through which you can submit personal information directly.

This notice covers the technical information collected automatically when the website is accessed. Different Bauer Media Outdoor privacy notices may apply if you interact with us in another way.

2 About Bauer Media Outdoor and how you can contact us

Bauer Media Outdoor Guangzhou Company Limited is responsible for the BMO China website and for the personal information processed as described in this Privacy Notice. It is part of the Bauer Media Outdoor group.

Registered office: Unit 411, Building No.4, No. 310 Yuangang Road, Tianhe District, Guangzhou City

Email: inquiries-cn@bauermediaoutdoor.com

3 What personal information do we process and where does it come from?

When you visit the website, our web server may automatically record the following technical information in Nginx server logs:

• your Internet Protocol (IP) address;

• the date and time of your visit;

• the pages and files requested;

• browser information and the referring page or website; and

• the response status and error information associated with the request.

This information comes from your browser and the network connection used to access the website. We do not use website forms, user accounts, analytics, advertising technologies, cookies or similar technologies to collect information about visitors.

4 How and why do we process personal information?

The technical information described above is recorded automatically when your browser requests a page or file from the website. We use it only as necessary to:

• deliver and operate the website;

• monitor its availability and technical performance;

• identify and resolve errors or other technical problems;

• protect the website, our systems and visitors against security threats, misuse and unauthorised access; and

• comply with applicable cybersecurity, record-keeping and other legal obligations.

We do not use this information for advertising, marketing, profiling or automated decision-making about individuals.

5 What permits us to process personal information?

We process server-log information where this is necessary to comply with applicable cybersecurity and other legal obligations. Any other processing of personal information in connection with the operation and security of the website will be carried out only where permitted under applicable law.

The website does not use consent-based analytics, advertising technologies or cookies. If the way the website collects or uses personal information changes, we will review the appropriate processing basis and provide any additional information or choices required by law.

6 Who has access to personal information and why?

Access to server-log information is restricted to authorised personnel and service providers in mainland China who need it to host, operate, maintain or secure the website. This includes AliCloud, which hosts the website in mainland China, and may include China-based technical support providers acting on our instructions.

We may also disclose information to public authorities or other organisations where this is required or permitted by law. We require service providers that process personal information for us to protect it and use it only for the agreed purposes.

7 Where is personal information stored?

The website files and server logs are stored in mainland China. Based on the current technical arrangements, server-log information cannot be accessed from outside mainland China and is not transferred overseas.

8 How long do we keep personal information?

We retain server logs for six months to meet applicable network-security requirements, after which they are deleted. Logs may be retained for longer where required by law or necessary to investigate and respond to a security incident, legal claim or regulatory request. Any logs retained for these purposes will be securely deleted or anonymised when no longer required.

9 Your rights in relation to personal information

Subject to the conditions and exceptions in applicable law, you may have rights to:

• be informed about and make decisions on the processing of your personal information, and restrict or refuse processing;

• access or obtain a copy of your personal information;

• ask us to correct or complete inaccurate or incomplete information;

• ask us to delete personal information in the circumstances provided by law;

• ask us to explain our personal information processing rules; and

• exercise any other rights provided by applicable law.

Because the website only records limited technical server-log information, we may need information from you to help locate the relevant record and verify that it relates to you. We will respond in accordance with applicable law and will explain the reason if we cannot fulfil a request.

To exercise your rights or ask a question about your personal information, please contact us using the email address in section 2.

10 How do we keep personal information secure?

Bauer Media Outdoor uses appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure. Our information security framework is aligned with internationally recognised standards and ISO 27001 principles.

11 Questions and complaints

If you have a question or concern about how we process your personal information, please contact us first using the email address in section 2 so that we can investigate and seek to resolve the matter.

You may also make a complaint or report to a relevant department in China with responsibility for personal information protection, or pursue any other remedy available under applicable law.

12 Changes to this Privacy Notice

We may update this Privacy Notice from time to time. The current version will be available on the website. If a material change affects how we process personal information, we will provide any further notice or obtain any consent required by law.

Last updated – October 2026.