Information on data protection for guests at the AGM

We are delighted that you will be our guest following the livestream of the Annual General Meeting of Volkswagen Aktiengesellschaft, Berliner Ring 2, 38440 Wolfsburg, Germany, registered in the commercial register of the Local Court of Braunschweig under the number HRB 100484 (“Volkswagen AG”). The stream can be followed in an access-restricted portal (“guest portal”) which we are making available to you via our service provider Computershare Deutschland GmbH & Co. KG („Computershare“). The access data is sent via our service provider altares GmbH & Co. KG ("altares"). In the following, we inform you about the processing of your personal data by Volkswagen AG in connection with the creation of a guest list and your visit to our guest portal for the Annual General Meeting.

Our data protection officer is available to you for any matters relating to data protection:

Volkswagen AG Data Protection Officer
Berliner Ring 2
38440 Wolfsburg
Germany
Phone +49 5361 9-0

Email: datenschutz@volkswagen.de

If you visit our guest portal, we will process the following data about you:

• an anonymous cookie ID, which does not enable your IP address to be inferred;
• the operating system you are using, the web browser you are using, and the screen resolution you have set;
• the date and time of your visit;
• the website within our internet presence that you have visited;
• the website from which you are visiting us; and
•  the IP address of your device with which you are accessing our guest portal.

The processing of this data is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in being able to properly display the guest portal to you. The data will be deleted after 90 days.

Volkswagen AG also enables guests to follow the Annual General Meeting and keeps a guest list to this end. In connection with this, Volkswagen AG processes:

• title, name, first name;
• contact details (email address);
• Role/Function

The legal basis for this processing is your consent (Art. 6 (1) a), Art. 7 GDPR). You can revoke your consent free of charge at any time with effect for the future by contacting Volkswagen AG. Further information on asserting your rights can be found in this data protection statement in the “Rights with regard to your personal data” session.

The personal data is erased after four years unless another legal basis for further storage exists.

Volkswagen AG receives personal data from its guests.

Volkswagen AG employs of the service provider Computershare to provide the guest portal. Computershare submit the access data to altares, which forwards the access data to the persons from the guest list. Altares is only given the personal data necessary for carrying out the commissioned service from Volkswagen and only processes the data in accordance with the instructions of Volkswagen AG as a processor.

Volkswagen AG uses various cookies on its websites. Cookies are small files containing configuration information that are stored on your device. Cookies can basically be divided into three categories.

• So-called functional cookies are essential for the functionality of the website.The processing of functional cookies is necessary to enable you to visit the website (cf. Art. 6 (1) (b) GDPR).
• The convenience of a website visit is increased by so-called comfort cookies, which e.g. save your language preferences. The legal basis for the convenience cookies is a legitimate interest (Art. 6 para. 1 lit. f GDPR). The legitimate interest lies in providing a certain comfort during your visits to the website. You can object to data processing at any time with effect for the future.
• In order to create a pseudonymized user profile, so-called tracking cookies are used. Tracking cookies are only set if the website visitor has given their consent (Art. 6 (1) (a) GDPR). Consent is given via the so-called cookie banner, which must be actively clicked.

Different types of cookies are used within the categories described. Below are the most common types of cookies explained for your understanding:

• While you are active on a website, a session cookie is temporarily stored in the memory of your device, in which a session identifier is stored, e.g. to prevent you from having to log in again every time you change pages. Session cookies are deleted when you log out or expire once your session has automatically expired.
• A persistent or log cookie stores a file on your device for the period specified in the expiry date. These cookies allow websites to "remember" your information and preferences the next time you visit. This leads to faster and more convenient access, as you do not have to change your language setting for our portal again, for example. Once the expiry date has passed, the cookie is automatically deleted when you visit the website that generated it.
• Third-party cookies come from providers other than the operator of the website. For example, they can be used to collect information for advertising, custom content, and web statistics.
• Flash cookies are stored on your device as data elements of websites when they are operated with Adobe Flash. Flash cookies do not have a time limit.

Following cookies are used in the guest portal:

You can enforce the following rights against Volkswagen AG free of charge at any time.

Right of access:
You have the right to receive information on the processing of your personal data (Article 15 GDPR).

Right to rectification:
You have the right to obtain the rectification of inaccurate or incomplete personal data concerning you from us (Article 16 GDPR).

Right to erasure:
You have the right to obtain the erasure of your data where the conditions set out in Article 17 GDPR are met. You can then, for example, obtain the erasure of your data if it is no longer necessary for the purposes for which it was collected. In addition, you can obtain erasure if we are processing your data on the basis of your consent and you revoke this consent.

Right to restriction of processing:
You have the right to obtain restriction of processing of your data if the conditions of Article 18 GDPR are met. This is, for example, the case if you dispute the accuracy of your data. For the duration of the verification of the accuracy of the data, you can obtain restriction of processing.

Right to object:
If the processing takes place on grounds of the legitimate interests of Volkswagen AG or a third party or is in the public interest or in the exercise of an official authority, you have the right to object to the processing of your data on grounds relating to your particular situation. In the event of objection, we ask you to inform us of your reasons for objecting to the data processing. In addition, you have the right to object to data processing for direct marketing purposes (Article 21 GDPR). This also applies to profiling to the extent that it is related to the direct marketing.

Right to data portability:
If the data processing is carried out on the basis of consent or the performance of a contract and this is also done using automated processing, you have the right to receive your data in a structured, commonly used and machine-readable format and to transmit it to another data processor (Article 20 GDPR).

Right of revocation:
If the data processing is based on consent, you have the right to revoke the consent free of charge at any time with effect for the future (Article 7 (3) GDPR).

Right to lodge a complaint:
You also have the right to lodge a complaint with a supervisory authority (e.g., with the state data protection officer for Lower Saxony, Germany) regarding our processing of your data.

The data protection supervisory authority responsible for the Company is:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstrasse 5
30159 Hanover, Germany

Phone: +49 (0511) 120 45 00
Fax: +49 (0511) 120 45 99
E-mail: poststelle@lfd.niedersachsen.de

Further information on data protection is available at Volkswagen AG’s website at https://datenschutz.volkswagen.de/?lang=en-gb.

Date: April 2025