NPG Integritetspolicy Eng Ver2.1

Date 2025-01-17

Author Ola Vannerberg

Document Owner ola.vannerberg@npgroup.se

Version 2.1 [EN]

Document Policy

Approved by Ronny Thell, Quality Manager

Document Name Privacy policy

(©) Copyright Nordic Polytech Group

Privacy policy.

Table of contents Objective. .................................................................................................................................... 2 What is personal data? ............................................................................................................... 2 Why do we process personal data? ............................................................................................ 2 When do we process personal data?.......................................................................................... 2 What personal data is processed? .............................................................................................. 2 Your rights................................................................................................................................... 2 How do we access your personal data?...................................................................................... 3 How long is your personal data stored? ..................................................................................... 3 We process your personal data in a secure manner. ................................................................. 3 When do we disclose your personal data? ................................................................................. 3 Data Controller. .......................................................................................................................... 3 Where do we process your personal data? ................................................................................ 3 Email policy. ................................................................................................................................ 3 Cookies. ...................................................................................................................................... 4 Camera surveillance.................................................................................................................... 4 Objective. ................................................................................................................................ 4 Responsibility. ......................................................................................................................... 4 The purpose of camera surveillance. ...................................................................................... 5 Legal basis for monitoring....................................................................................................... 5 How long is recorded material stored? .................................................................................. 5 Information. ............................................................................................................................ 5 Do you have any further questions? ........................................................................................... 5

NORDIC POLYTECH GROUP

PRIVACY POLICY, version 2.1 [EN]

Page 1 [5]

Date 2025-01-17

Author Ola Vannerberg

Document Owner ola.vannerberg@npgroup.se

Version 2.1 [EN]

Document Policy

Approved by Ronny Thell, Quality Manager

Document Name Privacy policy

(©) Copyright Nordic Polytech Group

Objective.

Nordic Polytech Group's privacy policy outlines how we manage your personal data, its uses, and your rights regarding it.

What is personal data?

Personal data is information that can be linked to you, such as your name or email address.

Why do we process personal data?

We process personal data to fulfil our commitments, such as subscribing to newsletters. We do not ask for more information than is necessary for our website to function.

When do we process personal data?

We process personal data when you have given your consent, for example if you wish to subscribe to our newsletter.

What personal data is processed?

Examples of processed personal data: 1. Name.

2. Address.

3. Email.

4. Telephone number.

Your rights.

Under the GDPR, you have rights regarding your personal data. Contact us to practice these.

1. You have the right to know what personal data we process about you.

2. Right to rectification. This allows you to request correction of your personal data if the information is inaccurate.

3. You have the right to withdraw your consent at any time. For example, you can choose to stop receiving our newsletters.

4. You may request to have your personal data deleted.

5. The right to restriction of processing allows you to request that the processing of your personal data be limited. This can be applicable when the accuracy of the data is in question, among other reasons.

6. You have the right to object to processing based on a balancing of interests, though exceptions may apply.

7. The right to object to your personal data being processed for marketing purposes.

8. Right to complain to the Swedish Data Protection Authority [datainspektionen.se].

9. Data portability allows individuals to receive their personal data in a structured, commonly used, machine-readable format for transmission to another data controller.

There may be technical limitations.

NORDIC POLYTECH GROUP

PRIVACY POLICY, version 2.1 [EN]

Page 2 [5]

Date 2025-01-17

Author Ola Vannerberg

Document Owner ola.vannerberg@npgroup.se

Version 2.1 [EN]

Document Policy

Approved by Ronny Thell, Quality Manager

Document Name Privacy policy

(©) Copyright Nordic Polytech Group

How do we access your personal data?

We access your personal data in the following ways: 1. Information you provide directly to us.

2. Information gathered during your visit to our website.

3. Information obtained when you subscribe to newsletters and other communications.

4. Information received when you contact us, apply for employment, visit our premises, or otherwise initiate communication with us.

How long is your personal data stored?

We retain your personal data only as long as needed to meet our obligations and comply with laws like the Accounting Act [“Bokföringslagen”]. Data is also kept if we have a legal basis or your explicit consent. For marketing, we keep data until you revoke your consent.

We process your personal data in a secure manner.

We handle your personal data securely. Only individuals who need your personal data to perform their duties have access to it. We have procedures and methods to ensure that our website and systems process your personal data securely. We will only transfer your personal data in accordance with this policy. We use SSL [Secure Socket Layer].

When do we disclose your personal data?

To deliver our services effectively, we may be required to share your personal data with other companies. We have established agreements ensuring that these companies process the data in compliance with our instructions. Examples of such companies include payment solution providers, IT service suppliers, and marketing firms.

Data Controller.

Nordic Polytech Group [Org. no. 556219-0818], located at Omvägen 17-21, 231 62 Trelleborg, Sweden, processes your personal data and protects your rights.

Where do we process your personal data?

We strive to process your personal data within the EU/EEA whenever possible.

Email policy.

We adhere to GDPR requirements for unstructured data in emails. This compliance applies to both internal and external emails.

1. Upon receiving and reading the e-mail, we evaluate whether the data needs to be stored and, if so, determine the appropriate location to comply.

2. Sensitive personal data is never sent via unsecured email.

3. We never process or store personal data that is sensitive or confidential in our e-mails.

4. We regularly inform all members of our organization about the rules and procedures for processing personal data.

NORDIC POLYTECH GROUP

PRIVACY POLICY, version 2.1 [EN]

Page 3 [5]

Date 2025-01-17

Author Ola Vannerberg

Document Owner ola.vannerberg@npgroup.se

Version 2.1 [EN]

Document Policy

Approved by Ronny Thell, Quality Manager

Document Name Privacy policy

(©) Copyright Nordic Polytech Group

Cookies.

We use cookies and device identifiers to personalize content, offer social media features, and analyse traffic. By using our website, you consent to these cookies.

Cookies are stored in your browser to enhance the user experience, such as retaining language preferences. They also collect data for website improvement. Additionally, we use third-party cookies from external sources.

You can easily choose to accept or block cookies in your browser. Set your browser to automatically decline cookies or be informed each time a website wants to store a cookie.

You can also delete cookies at any time.

By using our website, you consent to our use of cookies. You can change or withdraw your consent in your browser settings. This applies to npgroup.se.

Camera surveillance.

Objective.

The main purpose of the camera system is to increase the security of customers, employees and Nordic Polytech Group's property. The monitoring shall prevent or control the following events: 1. Unauthorised persons on the factory premises.

2. Theft.

3. Vandalism.

4. Fire.

5. Monitoring of compressors [two cameras] regarding function control and fire risks.

Responsibility.

1. As a private company, Nordic Polytech Group does not need a permit for camera surveillance with audio recording.

2. Our starting point is to save surveillance material for up to seven days. If the material needs to be stored for longer than that, Nordic Polytech Group has a responsibility to justify why.

3. We have continuous camera surveillance.

4. Nordic Polytech Group has negotiated the use of surveillance cameras in accordance with the Co-determination Act [“Medbestämmandelagen” 1976:580].

NORDIC POLYTECH GROUP

PRIVACY POLICY, version 2.1 [EN]

Page 4 [5]

Date 2025-01-17

Author Ola Vannerberg

Document Owner ola.vannerberg@npgroup.se

Version 2.1 [EN]

Document Policy

Approved by Ronny Thell, Quality Manager

Document Name Privacy policy

(©) Copyright Nordic Polytech Group

The purpose of camera surveillance.

The need comes from the following points: 1. Fire risks that exist around the property.

2. Unwanted use of fire doors that should not normally be opened but only used in emergencies.

3. Increased personnel safety and area surveillance in the area around the factory for the detection of unauthorized persons.

4. Improved safety for both personnel and equipment in areas where both trucks and personnel are often at the same time.

Legal basis for monitoring.

It is important for companies, property owners and insurance companies to reduce the risks of damage, fire and unauthorised entry into the factory area. The Data Protection Officer, together with the IT Department, can deny the use of recorded material if there is a risk of incorrect use.

How long is recorded material stored?

Nordic Polytech Group stores the recorded material for a maximum of seven days unless special needs arise.

Information.

If a crime has taken place, it is permitted to use the surveillance material to prepare a police report. It is permitted to share the surveillance material with the police or other law enforcement authorities if it is necessary to investigate, prevent or detect criminal activity.

Disclosure of materials to a municipality or other authorities responsible for rescue services is permitted if the material is needed to prevent an imminent accident or to reduce the effects of an accident that has already occurred.

Do you have any further questions?

Contacting us is easy. For more information about our privacy policy or to exercise your rights regarding personal data, please contact us by email at info@npgroup.se

NORDIC POLYTECH GROUP

PRIVACY POLICY, version 2.1 [EN]

Page 5 [5]