Important Information for Individuals within the Territory of Chinese Mainland and Whose Personal Information Processed by Subsidiaries of MediaTek within the Territory of Chinese Mainland ("China Chapter")

MediaTek also complies with specific requirements stipulated by PIPL ("Personal Information Protection Law of the People's Republic of China") and other relevant Chinese rules and regulations. This China Chapter applies to MediaTek's processing of personal information of natural persons within the territory of Chinese mainland according to PIPL and personal information processing activities conducted by subsidiaries of MediaTek within the territory of Chinese mainland. MediaTek mainly explains some special matters prescribed under PIPL in this China Chapter. For matters not mentioned in this China Chapter, contents in other part of the Privacy Policy shall apply.

1. Our Legal Basis for Processing Personal Information

MediaTek will process your personal information in accordance with the principles of legality, legitimacy, necessity, and good faith. MediaTek will obtain the required consent from you before processing your personal information in accordance with the applicable laws and regulations. Especially, when MediaTek wants to process your sensitive personal information, MediaTek will obtain your separate consent or your written consent required and in accordance with the applicable laws and regulations.

If MediaTek processes your personal information beyond the content in this China Chapter, MediaTek will separately explain the purpose, method, and scope of such processing to you through page tips, interactive processes, or website announcements, etc., and obtain the required consent from you.

• Examples of Information that you may provide to us via email or this website:

MediaTek takes security concerns and vulnerabilities extremely seriously, and always seeks to respond appropriately to reports. You may send us the following information to help us to evaluate the vulnerabilities of our products and software as quickly as possible and can submit the following information directly via email to the email address of securitv@mediatek.com :

• (1) Product(s) and software version(s) affected;
• (2) Vulnerability overview (e.g. buffer overflow, integer overflow, etc.);
• (3) Issue description and impact (e.g. arbitrary code execution, information disclosure, etc.);
• (4) Instructions to how to reproduce the issue; and
• (5) A proof-of-concept (PoC).

When you choose to send us the email, you are deemed to have agreed to our processing of the information you provided to us. You can find more information at MediaTek Security Contact.

Contact MediaTek

If you have any questions or comments to us, you can complete each field with your contact information, including: department name, name, email address, subject and messages under the column of “Contact Us". By clicking "Send Message" you are deemed to have agreed to our processing of the information you provided to us.

Subscription of Newsletter

If you would like to receive any newsletters from us, you may provide us with your email address (must), first name (optional) and last name (optional). MediaTek will send you our MONTHLY NEWSLETTER to provide you with information of executive insights, latest news & events and products & technologies. MediaTek will get your consent when collecting your personal information for the purpose of sending you our MONTHLY NEWSLETTER.

Registration and Login

If you would like to register an account with MediaTek Developer Account Center ("SSO"), you may provide us with your email address, name, region, industry (optional) ("user profile"). And when you fill out the non-disclosure agreement ("NDA") form, you may provide us with your job title, working phone number and company information (incl. entity name, address, locations, website, etc.) ("NDA flag"). Your necessary user profile and NDA flag (for Genio Developer) information may be transferred from SSO to other websites (Genio Developer, Dimensity Developer, NeuroPilot Developer and Genio Forum) when you log in these websites (details as follows). MediaTek processes the above information for the purpose of the conclusion or performance of the contract (i.e., the Term of Use) with you.

MediaTek collects personal information of its employees for the purpose of personnel management. Personal information of employees collected by MediaTek may include, name, identical number ("ID"), mailing address, telephone, non-working email, address, phone number, bank account, gender, date of birth, emergency contacts, passports, work permits, school records, academic qualifications, professional skills, special licenses and other information. For details on how MediaTek processes personal information of employees in Chinese mainland, please refer to MediaTek's employee privacy notice.

MediaTek collects personal information of labor dispatch and on-site personnel of outsourcing manpower, on-site personnel of vendors/suppliers and visitors for the purpose of company administrative management. Personal information collected by MediaTek in this scenario includes name, nationality, ID, birthday, mailing address, telephone number and other information. For details on how MediaTek processes personal information of labor dispatch and on-site personnel of outsourcing manpower, on-site personnel of vendors/suppliers and visitors in Chinese mainland, please refer to the corresponding privacy notice.

MediaTek will process personal information of prospective employees for employment when prospective employees submit personal information and other information to MediaTek via any of MediaTek's application portals, websites or other recruitment mediums, whether online or off-line. Detailed information of how MediaTek processes personal information of prospective employees is provided in "5. Additional information of Processing Personal Information of Prospective Employees" below.

You are fully aware that MediaTek may process your personal information without the need to obtain the authorization or consent from you, under any of the following circumstances:

• where it is necessary for the conclusion or performance of a contract to which you are a party, or for the implementation of human resources management in accordance with the labor rules and regulations formulated in accordance with the law and the collective contract concluded in accordance with the law;
• where it is necessary for the performance of statutory duties or statutory obligations;
• where it is necessary for the response to a public health emergency or for the protection of the life, health and property safety of a natural person;
• where such acts as news reporting and supervision by public opinions are carried out for the public interest, and the processing of personal information is within a reasonable scope;
• where it is necessary to process the personal information disclosed by you or other personal information that has been legally disclosed within a reasonable scope in accordance with the provisions of PIPL; and
• other circumstances prescribed by laws and administrative regulations.

2. How We Share Your Information

MediaTek will not share your personal information with a third party unless MediaTek obtains your separate consent or in circumstances where your consent is not required according to laws and regulations. When MediaTek provides your personal information which MediaTek processes to other personal information processors, MediaTek will inform you of relevant information as required by laws and regulations.

3. International Transfers of Information

As a global company, content involving personal information may be provided to MediaTek and subsidiaries of MediaTek outside the territory of the People's Republic of China, to achieve global management of MediaTek. MediaTek may also transfer your personal information to service providers located outside the territory of the People's Republic of China.

To complete your login process, necessary user profile and NDA flag (for Genio Developer) information may be transferred from SSO to other websites (Genio Developer, NeuroPilot Developer and Genio Forum, operated by MediaTek) located outside the territory of the People's Republic of China (details as follows).

MediaTek will take necessary measures required by laws, and will ask that the foreign receiving party provides adequate protection for the personal information under applicable laws.

4. Your Additional Privacy Rights

In addition to the rights provided in "Rights in Respect of Your Personal Information" above, you also have the following rights. You can request to exercise your rights by contacting MediaTek through the ways explained in the following section of "Contact Us".

• Right to be informed
  You have the right to know the processing of your personal information.
• Right to access and copy
  You can request access to your personal information or obtain a copy of your personal information.
• Right to delete
  You can request the deletion of your personal information in certain circumstances (for example while you withdraw your consent, or the purpose of personal information processing has been achieved, it is impossible to achieve such purpose, or it is no longer necessary to achieve such purpose).
• Right to transfer
  You can transfer your personal information to a personal information processor designated by you when it meets the conditions stipulated by the authorities.
• Right to make decisions, restrict and refuse
  You can make decisions on the processing of your personal information, and restrict or refuse MediaTek to process your personal information.
• Right to withdraw your consent
  You can withdraw your consent. Please understand that each service needs some basic personal information to be completed. After withdrawing your consent, MediaTek will not process the relevant personal information, and cannot provide you with the corresponding services as a result. However, withdrawal of consent by you will not affect the previous personal information processing based on your authorization. For security, MediaTek may verify your identity before handling your request. After verifying your identity, MediaTek will respond to your request in time, and give a reply and reasonable explanation within the time limit specified by laws and regulations or inform you of the external ways to solve the dispute.

MediaTek will not be able to respond to your request under the following circumstances:

• Related to MediaTek's compliance with the obligations under the laws and regulations;
• Directly related to national security or defense security;
• Directly related to public security, public health or major public interests;
• Directly related to criminal investigations, prosecutions, trials and enforcement of court decisions, etc.;
• MediaTek has sufficient proof that you have subjective malice or abuse of rights;
• For the purpose of safeguarding your life, property and other important legal rights and interests or those of other individuals but it is difficult to obtain consent;
• Responding to your request will cause serious harm to your legitimate rights and interests, or those of other individuals or organizations;
• Involving trade secrets.

5. Additional Information of Processing Personal Information of Prospective Employees

MediaTek will process personal information of prospective employees ("you" and "your") for employment when you submit personal information and other information to MediaTek via any of MediaTek's application portals, websites or other recruitment mediums, whether online or off-Line. MediaTek appreciates your interest in MediaTek and takes care to process and use your information responsibly.

5.1. What Information We Collect & How We Use It

To process and evaluate your application and make hiring decisions, MediaTek will process your personal information submitted to MediaTek through MediaTek's application portals, websites or other recruitment mediums, whether online or off-Line, including name, birthday, ID, telephone number, email address, address, educational background, working experiences or other information.

MediaTek may automatically collect certain information from you about your visit to MediaTek's application portals and websites using "cookies" and other similar tracking technologies. For further information, please consult the Cookie Statement of MediaTek.

To communicate with you and inform you of current and future career or opportunities, MediaTek may process your telephone number, email and your personal information you have submitted to MediaTek.

To conduct reference and background checks where required and/or permitted by applicable local law, MediaTek may process your personal information from other third party sources, who are lawfully entitled to share your information with MediaTek, such as employment research firms, identity verification services, and other websites on the Internet (subject to such third party's privacy policies) to the extent permitted by applicable law. By authorizing MediaTek to have access to this information, you agree that MediaTek may collect, store and use this information in accordance with this privacy statement.

You may also choose to provide MediaTek with additional information, such as your CV, resume, or transcripts; employment references and related information; and compensation requests.

In addition, if the personal information disclosed to MediaTek involves any third-party persons (such as family members, relatives, emergency contacts and other contacts), you shall make sure that the third-party persons have been informed that their personal information will be disclosed to MediaTek and you have obtained their consent.

5.2. How We Share Your Information

MediaTek takes care to allow your personal information to be accessed only by those who really need access in order to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it. MediaTek may share personal information about you with third parties in the following circumstances:

• Vendors, consultants and other service providers: MediaTek may share your personal information internally and with service providers, agents and other third parties (for example, recruiters, consultants, attorneys and background checking services as necessary in connection with recruiting, employment, corporate governance, acquisitions and legal or regulatory requirements).
• MediaTek subsidiaries: MediaTek may share your information with its subsidiaries located in Beijing, Shanghai, Shenzhen, Chengdu, Hefei, Wuhan, Hangzhou etc. for the following purposes of recruitment and personnel management: a) To temporarily store your personal information in MediaTek's talent database to evaluate your suitability for the job vacancies, check your qualifications, and determine whether you meet the employment conditions and the credibility of your qualifications, such as checking your educational background, major and past working experiences; or b) To contact you regarding the current recruitment and future career opportunities. This information will only be shared to the extent necessary in connection with your recruitment and employment as described in this privacy statement. MediaTek may also obtain information about you from its subsidiaries.
• Vital interests: MediaTek may disclose information where MediaTek believes it necessary in order to protect the vital interests of any person.
• Compliance with laws or any competent law enforcement body, regulatory body, government agency, court or third party: MediaTek may disclose information where MediaTek believes disclosure is necessary or required (i) by law or regulation, in order to comply with legal process or government requests (including in response to public authorities to meet equal opportunity laws, national security or law enforcement requirements); or (ii) to exercise, establish or defend MediaTek's legal rights.
• Business transfers: MediaTek may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, dissolution, corporate reorganization or similar event. MediaTek will inform any buyer that your information shall only be used in accordance with this privacy statement.
• With your consent: MediaTek may disclose your personal information for any purpose with your consent.

5.3. International Transfers of Information

MediaTek may transfer your name, birthday, ID, telephone number, email address, address, educational background, working experiences and other relevant information you provide via any of MediaTek's application portals, websites or other recruitment mediums, whether online or off-Line to MediaTek Inc. located in Taiwan for the following purposes:

• a) To temporarily store your personal information in MediaTek's talent database to evaluate your suitability for the job vacancies, check your qualifications, and determine whether you meet the employment conditions and the credibility of your qualifications, such as checking your educational background, major and past working experiences; or
• b) To contact you regarding the current recruitment and future career opportunities; or
• c) To collect, disclose, process and use your personal information for purpose of complying with any applicable laws, rules, regulations, regulatory policies, criterions, industry codes or judgments, orders, requests, notices or directions issued by any court, or any administrative organizations, or governments or competent authorities, wherever in the world, including but not limited to laws and regulations relating to export control, anti- money laundering and countering the financing of terrorism (as a part of the qualification examination for potential employees).

You may contact MediaTek Inc. by sending email to GCN.HR@Mediatek.com to request to exercise your rights.

5.4. How Long We Retain Your Information

MediaTek may retain your information in accordance with your authorization and applicable laws and regulations to consider you for other job opportunities, unless you have told MediaTek that you do not wish MediaTek to retain your details for such purposes. To the extent permitted or required by law, MediaTek may delete data at any time. Therefore, you should retain your own copy of any information you submit to MediaTek. You can request deletion of your personal information at any time and MediaTek will consider your request in accordance with applicable laws.