<div style="text-align: center;">PRIVACY NOTICE TO CALIFORNIA EMPLOYEES</div>
<div>Nuvision Federal Credit Union and/or any affiliated entities (collectively, &ldquo;Nuvision&rdquo; or &ldquo;we&rdquo;) provide this California Privacy Notice (&ldquo;Notice&rdquo;) to describe our privacy practices with respect to our collection of Personal Information as required under the California Consumer Privacy (&ldquo;CCPA&rdquo;). This Notice applies only to employees who are residents of the State of California (&ldquo;Consumers&rdquo;) and from whom we collect &ldquo;Personal Information&rdquo; as defined in the CCPA. We provide you this Notice because under the CCPA, California residents who are employees qualify as Consumers. For purposes of this Notice, when we refer to Consumers, we mean you only to the extent you are an employee of Nuvision who resides in California.<br>&nbsp;</div>
<div>1. Information We Collect From or About Employees</div>
<div>We may collect Personal Information from or about you in a variety of different situations and using a variety of different methods, including, but not limited to, on our website, your mobile device, through email, in physical locations, through written applications, through the mail, and/or over the telephone. Generally, we may at various times throughout your employment with Nuvision collect, receive, maintain, and use the following categories of Personal Information for any of the purposes listed below in this Notice and to the extent permitted under applicable law:</div>
<div>CATEGORY&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; EXAMPLES</div>
<div>Personal Identifiers&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Name, alias, social security number, date of birth, driver&rsquo;s license or state identification card number, passport number, employee ID number.</div>
<div>Contact Information</div>
<div>Home, postal or mailing address, email address, home phone number, cell phone number.</div>
<div>Account Information</div>
<div>Username and password for any and all accounts and systems and any required security or access code or credential that Nuvision controls that is provided to employees to perform their role.</div>
<div>Protected Classifications</div>
<div>Race, ethnicity, national origin, sex, gender, sexual orientation, gender identity, religious or philosophical beliefs, age, physical or mental disability, medical condition, veteran or military status, immigration status, familial status, or language.</div>
<div>Physical Characteristics or Description</div>
<div>Information on your driver&rsquo;s license (such as eye color, hair color, height, weight), as well as information collected to the extent relevant for workplace investigations or for enforcement of Nuvision policies on appearance and grooming (such as tattoos, piercings).</div>
<div>Biometric Information</div>
<div>Fingerprints</div>
<div>Financial Information</div>
<div>Bank account number for direct deposit, credit card number, debit card number, credit accounts, credit limits, payment history or other financial account information.</div>
<div>Pre-Hire Information</div>
<div>Information provided in your job application or resume, information gathered as part of background screening and reference checks, pre-hire drug test results, information recorded in job interview notes by persons conducting job interviews for Nuvision, information contained in candidate evaluation records</div>
<div>and assessments, information in work product samples you provided, voluntary disclosures by you, and Wage Opportunity Tax Credit (WOTC) information.</div>
<div>Employment History</div>
<div>Information regarding prior job experience, positions held, and when permitted by applicable law your salary history or expectations.</div>
<div>Education Information</div>
<div>Information contained in your resume regarding educational history and information in transcripts or records of degrees and vocational certifications obtained.</div>
<div>Professional or Employment-Related Information</div>
<div>Information contained in your personnel file and in other employment documents and records, including information in new hire or onboarding records, I-9 forms, tax forms, time and attendance records, non-medical leave of absence records, workplace injury and safety records, performance evaluations, disciplinary records, investigatory records, training records, licensing and certification records, compensation and health benefits records, pension, retirement and 401(k) records, COBRA notifications, business expense records, payroll records, legal actions.</div>
<div>Travel Information</div>
<div>Information regarding business travel, vacation and personal travel plans, and for infectious disease contact tracing purposes the locations travelled to within the applicable infectious period prior to coming to the workplace and the dates spent in those locations.</div>
<div>Family Information</div>
<div>Contact information for family members listed as emergency contacts, beneficiaries, contact information for dependents and other dependent information, medical and health information for family members related to COVID-19 symptoms, exposure, diagnosis, testing, or vaccination, as well as information related to their travel and whom they have been in close contact with during the applicable COVID-19 infectious period.</div>
<div>Information of Friends, Co-workers, and Other Associates with Whom You Have Been in Close Contact within the COVID-19 infectious period per applicable guidelines</div>
<div>Medical and health information provided to Nuvision for an employee&rsquo;s friends, co-workers, and other associates related to COVID-19 symptoms, exposure, diagnosis, testing, or vaccination, as well as information related to their travel and whom they have been in close contact with during the applicable COVID-19 infectious period.</div>
<div>Medical and Health Information</div>
<div>Medical information contained in such documents as doctor&rsquo;s notes for absences or work restrictions, for worker&rsquo;s compensation claims, fitness and wellness benefits information, medical leave of absence records, requests for accommodation, interactive process records, ergonomic assessments and accommodation records, and correspondence with you and your medical or mental health provider(s) regarding any request for accommodation or medical leave of absence, as well as information in post-hire drug test results, and information related to COVID-19 symptoms, exposure, contact tracing, diagnosis, testing, or vaccination.</div>
<div>This includes medical information and health benefits information for dependents and beneficiaries.</div>
<div>Internet, Network, and Computer Activity</div>
<div>Internet or other electronic network activity information related to usage of Nuvision networks, servers, intranet, shared drives, or Nuvision-issued computers and electronic devices, including system and file access logs, security clearance level, browsing history, search history, and usage history.</div>
<div>Mobile Device Security Information</div>
<div>Data identifying employee devices accessing Nuvision networks and systems, including cell phone make, model, and serial number, cell phone number, and cell phone provider.</div>
<div>Online Portal and Mobile App Access and Usage Information</div>
<div>Username and password, account history, usage history, file access logs, and security clearance level.</div>
<div>Geolocation Data</div>
<div>IP address and/or GPS location (latitude &amp; longitude) recorded on Nuvision-issued computers, electronic devices, and vehicles, as well as in timekeeping applications on cell phones that employees use to clock in and out and that log the geographic location at which each time entry was made.</div>
<div>Visual, Audio or Video Recordings in the Workplace</div>
<div>Your image when recorded or captured in surveillance camera footage or pictures of employees taken in the workplace or at a Nuvision function or event, or in pictures or video of employees posted on social media to which Nuvision or its managers have access or that are submitted to Nuvision by another employee or third party.</div>
<div>Facility &amp; Systems Access Information</div>
<div>Information identifying which employees accessed secure Nuvision facilities, systems, networks, computers, and equipment and at what times using their keys, badges, fobs, login credentials, or other security access method.</div>
<div>Inferences</div>
<div>Based on analysis of the personal information collected, we may develop inferences regarding employees&rsquo; preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes for purposes of employment and management decisions related to staffing, assignments, responsibilities, team composition, hiring, promotion, demotion, and termination, among other things.</div>
<div>Contents of Personal Communications where Nuvision is not the intended recipient</div>
<div>If you use Nuvision email, phones, computers, online chat applications (Slack, Teams, Zoom, etc.) or other Nuvision systems for personal communications where Nuvision is not the intended recipient of the communication, Nuvision retains these communications in the ordinary course of managing its communication and computer systems and pursuant to Nuvision&rsquo;s data retention policy. Employees have no expectation of privacy with respect to any communications or data they send, receive, access or store on any Nuvision computer or system, including any personal communications. Nuvision may monitor, access, review and use all such communications and data for lawful business purposes detailed below, including to manage and evaluate employee performance and make employment decisions.</div>
<div>Of the above categories of Personal Information, the following are categories of Sensitive Personal Information Nuvision may collect:</div>
<div>1. Personal Identifiers (social security number, driver&rsquo;s license or state identification card number, passport number)</div>
<div>2. Account Information (your Nuvision account log-in, in combination with any required security or access code, password, or credentials allowing access to the account)</div>
<div>3. Protected Classifications (racial or ethnic origin, religious or philosophical beliefs, or sexual orientation)</div>
<div>4. Biometric Information (used for the purpose of uniquely identifying you)</div>
<div>5. Medical and Health Information</div>
<div>6. Geolocation Data (IP address and/or GPS location, latitude &amp; longitude)</div>
<div>7. Contents of Personal Communications (contents of mail, email, and text messages where Nuvision is not the intended recipient).</div>
<div>Personal information does not include:</div>
<div>&bull; Publicly available information from government records.</div>
<div>&bull; Information that a business has a reasonable basis to believe is lawfully made available to the general public by the employee or from widely distributed media.</div>
<div>&bull; Information made available by a person to whom the employee has disclosed the information if the employee has not restricted the information to a specific audience.</div>
<div>&bull; De-identified or aggregated information.</div>
<div>2. How We Use Personal Information and Sensitive Personal Information</div>
<div>The Personal Information and Sensitive Personal Information we collect, and our use of Personal Information and Sensitive Personal Information, may vary depending on the circumstances. This Notice is intended to provide an overall description of our collection and use of Personal Information and Sensitive Personal Information. Generally, we may use or disclose Personal Information and Sensitive Personal Information we collect from you or about you for one or more of the following purposes:</div>
<div>1. To fulfill or meet the purpose for which you provided the information. For example, if you share your name and contact information to become an employee, we will use that Personal Information in connection with your employment.</div>
<div>2. To comply with local, state, and federal law and regulations requiring employers to maintain certain records (such as immigration compliance records, travel records, personnel files, wage and hour records, payroll records, accident or safety records, and tax records), as well as local, state, and federal law, regulations, ordinances, guidelines, and orders relating to COVID-19.</div>
<div>3. To manage and process payroll and/or business travel and expenses.</div>
<div>4. To validate an employee&rsquo;s identity for payroll and timekeeping purposes.</div>
<div>5. To maintain commercial insurance policies and coverages, including for workers&rsquo; compensation and other liability insurance.</div>
<div>6. To manage workers&rsquo; compensation claims.</div>
<div>7. To administer, manage, and maintain group health insurance benefits, 401K and/or retirement plans, and other Nuvision benefits and perks.</div>
<div>8. To manage employee performance of their job duties and/or employee conduct, including by engaging in lawful monitoring of employee activities and communications when they are on duty, on Nuvision premises, or utilizing Nuvision internet and WiFi connections, computers, networks, devices, software applications or systems.</div>
<div>9. To conduct workplace investigations (such as investigations of workplace accidents or injuries, harassment, or other misconduct).</div>
<div>10. To evaluate job applicants and candidates for employment or promotions.</div>
<div>11. To obtain and verify background checks on job applicants and employees and to verify employment references.</div>
<div>12. To evaluate, make, and communicate decisions regarding an employee&rsquo;s employment, including decisions to hire, terminate, promote, demote, transfer, suspend or discipline.</div>
<div>13. To communicate with employees regarding employment-related matters such as upcoming benefits enrollment deadlines, action items, availability of W2s, and other alerts and notifications.</div>
<div>14. To grant employees access to secure Nuvision facilities and maintain information on who accessed the facility.</div>
<div>15. To track employee movement and activity throughout Nuvision facilities and keep the facilities secure.</div>
<div>16. To implement, monitor, and manage electronic security measures on Nuvision internet and WiFi connections, computers, networks, devices, software applications or systems, as well as on employee devices that are used to access Nuvision internet and WiFi connections, computers, networks, devices, software applications or systems.</div>
<div>17. To engage in corporate transactions requiring review or disclosure of employee records subject to non-disclosure agreements, such as for evaluating potential mergers and acquisitions of Nuvision.</div>
<div>18. To communicate with an employee&rsquo;s family or other contacts in case of emergency or other necessary circumstance.</div>
<div>19. To manage employee recognition programs.</div>
<div>20. To promote and foster diversity, equity, and inclusion in the workplace.</div>
<div>21. COVID-19 RELATED PURPOSES</div>
<div>a. To reduce the risk of spreading the disease in or through the workplace.</div>
<div>b. To protect employees and other consumers from exposure to COVID-19.</div>
<div>c. To comply with local, state, and federal law, regulations, ordinances, guidelines, and orders relating to COVID-19, including applicable reporting requirements.</div>
<div>d. To facilitate and coordinate pandemic-related initiatives and activities (whether Nuvision-sponsored or through the U.S. Center for Disease Control and Prevention, other federal, state and local governmental authorities, and/or public and private entities or establishments, including vaccination initiatives).</div>
<div>e. To identify potential symptoms linked to COVID-19 (including through temperature checks, antibody testing, or COVID-19 questionnaire).</div>
<div>f. To permit contact tracing relating to any potential exposure.</div>
<div>g. To communicate with employees and other consumers regarding potential exposure to COVID-19 and properly warn others who have had close contact with an infected or symptomatic individual so that they may take precautionary measures, help prevent further spread of the virus, and obtain treatment, if necessary.</div>
<div>22. To evaluate, assess, and manage Nuvision&rsquo;s business relationship with vendors, service providers, and contractors that provide services to Nuvision.</div>
<div>23. To improve user experience on Nuvision computers, networks, devices, software applications or systems, and to debug, identify, and repair errors that impair existing intended functionality of our systems.</div>
<div>24. To detect security incidents involving potentially unauthorized access to and/or disclosure of Personal Information or other confidential information, including proprietary or trade secret information and third-party information that Nuvision receives under conditions of confidentiality or subject to privacy rights.</div>
<div>25. To protect against malicious or illegal activity and prosecute those responsible.</div>
<div>26. To prevent identity theft.</div>
<div>27. To verify and respond to consumer requests under applicable consumer privacy laws.</div>
<div>3. Retention of Personal Information</div>
<div>Nuvision will retain each category of Personal Information in accordance with our data retention schedule, which can be found in Nuvision&rsquo;s Employee Privacy Standard. In deciding how long to retain each category of Personal Information that we collect, we consider many criteria, including, but not limited to: the business purposes for which the Personal Information was collected; relevant federal, state and local recordkeeping laws; applicable statute of limitations for claims to which the information may be relevant; and legal preservation of evidence obligations.</div>
<div>We apply our data retention procedures on an annual basis to determine if the business purposes for collecting the personal information, and legal reasons for retaining the personal information, have both expired. If so, we will purge the information in a secure manner.</div>
<div>4. Sale/Sharing of Information to Third Parties</div>
<div>Nuvision does not and will not sell your Personal Information or Sensitive Personal Information for any monetary or other valuable consideration. Nuvision does not and will not share your Personal Information or Sensitive Personal Information for cross-context behavioral advertising.</div>
<div>5. Access to Privacy Policy</div>
<div>For more information, please review Nuvision&rsquo;s Employee Privacy Standard in Infocenter at http://hq-web01/infocenter/index.html.</div>