Processing of personal data in connection with investor presentations

Data controller

Coor Service Management Holding AB (“Coor”) is the data controller for the processing of your personal data in connection with registration for and participation in investor presentations.

Purpose of the processing

Personal data is processed for the purpose of:

• administering your registration for investor presentations and webcasts
• enabling participation in live or recorded presentations
• handling practical communication related to the event

Categories of personal data

The personal data processed may include:

• name
• email address
• organisation/company
• technical information related to your connection to webcasts

Recipients and data processors

To deliver investor presentations, Coor uses external service providers. The primary provider is Inderes AB, which supplies technical services for registration, broadcasting and administration of webcasts.

Inderes may in turn engage sub‑processors for parts of the service.

Transfers to third countries (outside the EU/EEA)

In connection with the use of these services, personal data may be transferred to countries outside the EU/EEA, including the United States, through certain technical sub‑processors.

Such transfers mean that the level of protection for personal data may be lower than within the EU/EEA. The European Commission has not decided that these countries ensure an adequate level of protection, and there are risks associated with, for example, access to data by public authorities.

Legal basis

The transfer of personal data to third countries is based on your explicit consent, which is given in connection with your registration for the investor presentation.

You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

Retention

Personal data is stored only for as long as necessary for the purposes of the processing, or as required by applicable legislation.

Your rights

You have the right to request information about which personal data we process about you, and to request rectification or erasure. You also have the right to object to or request restriction of certain processing.

You may withdraw your consent or exercise your data protection rights at any time by contacting Coor at GDPR@coor.com. Coor will then instruct its service providers to cease further processing and delete your data in accordance with applicable regulations.

More information about how Coor processes personal data and how you can exercise your rights is available in our privacy policy.