North America Privacy Notice Supplement

This supplement applies to users located in the United States and Canada and is intended to complement the global privacy notice for the NAS application. In the event of a conflict between this supplement and the global notice, this supplement prevails for users in North America.

1. Categories of Personal Data Collected

In addition to the categories listed in the global notice, we may collect:

• Geolocation data (e.g., GPS coordinates for geofencing purposes)
• Device identifiers (e.g., IP address, device ID)
• Usage data (e.g., timestamps of app access, feature usage)

2. Purpose of Processing

We process this data to:

• Verify site access and service authenticity through geofencing
• Ensure compliance with health and safety protocols
• Improve operational visibility and cost tracking
• Comply with applicable U.S. and Canadian legal obligations

3. Legal Basis for Processing

Processing is based on:

• Legitimate interests (e.g., operational efficiency, safety compliance)
• Consent, where required by state or provincial law (e.g., California, Québec)

4. Data Retention

• Geolocation data is retained for 30 days unless otherwise required by law or contractual obligations.
• Other personal data is retained only as long as necessary to fulfill the purposes outlined above.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Opt out of the sale or sharing of personal data (e.g., under CCPA)
• File a complaint with your local data protection authority

To exercise your rights, please contact: Privacy | Nokia

6. Contact Information

For privacy-related inquiries in North America, contact:
Nokia Legal & Compliance – North America Customer Experience Team
Email: nam.compliance@nokia.com