INFORM | THIRD QUARTER OF 2021

Data protection information: quarterly information and annual report of the HARTMANN GROUP 1) Purposes of data processing and legal bases We automatically send you, the shareholders of the PAUL HARTMANN AG, various information to inform you about the performance of the HARTMANN GROUP and current market developments. This information includes, in particular, financial information, for example, the sending of quarterly information (particularly our shareholder magazine "Inform") and, where you have asked for this to be sent by post, the HARTMANN GROUP's Annual Report. At the same time, an online version of the quarterly information is available to you on our website https://hartmann.info/en-corp/ investor-relations/l/corp/investor-relations under the "Down- loads" menu option and in the shareholder portal. Should you no longer wish to receive the quarterly information and/or the annual report, or if you wish to receive it exclusively electronically, in future, please contact PAUL HARTMANN AG, Investor Relations, P.O. Box 1420, 89504 Heidenheim or via e-mail ir@hartmann.info . To send you the information and if applicable the annual report, PAUL HARTMANN AG processes your personal data (surname and first name, address, where relevant, shareholder number), in each case based on legitimate interests (Art. 6(1) sentence 1 letter f) GDPR). 2) Recipients of personal data Where you do not provide us with your personal data yourself, we normally receive this via your custodian bank. The service providers engaged by us for these purposes process your personal data exclusively according to our instructions and only to the extent this is necessary for the performance of the request- ed service. All PAUL HARTMANN AG employees and those of our contracted service providers who have access to your per - sonal data and/or process this, are obliged to treat that data as confidential. 3) Deletion of personal data We delete your personal data in accordance with the statutory regulations. We process your personal data as long as there is a corresponding legal basis for doing so. The aforementioned in- formation on deletion does not apply if, among other things, le- gally required retention periods prevent immediate deletion. 4) Your data protection rights Among the legal requirements, you have the right to receive information about your processed data, to request their recti­ fication or deletion or the restriction of processing. In addition, you have a right of objection and a right of appeal to the super- visory authority. Among the legal requirements, you may object to the processing of your personal data for the aforementioned purposes at any time without stating reasons. 5) Responsible party and contact information To do so, please contact PAUL HARTMANN AG, Investor Relations, P.O. Box 1420, 89504 Heidenheim or via e-mail ir@hartmann.info . For comments and queries about the processing of personal data, our data protection officer can be reached at: PAUL HARTMANN AG, Data Protection Officer, Paul-Hartmann-Strasse 12, 89522 Heidenheim, datenschutz@hartmann.info . For further data protection information, please see our website at https://www.hartmann.info/en-corp/ data-protection 11 Inform third quarter 2021 | Data protection information