Privacy Policy for IMND - IM Nordic Distribution AB

General Enquirer Privacy Notice

We take your privacy seriously. This notice is intended for individuals who are business partners or work for business partners, visit our premises, use one of our websites, or otherwise interact with us electronically, by phone, or in person.

This notice informs you about who we are, what information about you we collect, and what we do with it. We will only use information about you in accordance with applicable data protection laws.

For anything not covered by this notice, we may issue a supplemental notice. You should read any supplemental notices in conjunction with this notice.

In the section "What rights and options do you have?", you will also find information about your rights.

Who are we?

This privacy notice is issued by the IMND - IM Nordic Distribution AB group of companies, which consists of a number of companies or "affiliates" as listed at the end of this policy. "We" (or "us" or "our") refers to IMND - IM Nordic Distribution AB and its affiliated companies.

How do we collect information about you?

We may collect information about you in various ways.

You can provide us with information directly (e.g., when you visit our premises and identify yourself; sign a contract; register to receive our press releases or email notifications; fill out a form; correspond with us, meet one of our employees, or call us).

We may collect information automatically (e.g., when you use a company app or website; via CCTV at building entrances, exits, and loading docks; when you use company systems and company-provided software and devices such as a laptop or mobile phone).

We may obtain information from third parties (e.g., your employer, your representative, or publicly available sources, such as a company website, internet searches, business information companies, or social media platforms).

In this policy, we refer to all methods through which you are in contact with us as "touchpoints." Touchpoints include both physical (e.g., offices and events) and digital (e.g., apps and websites).

We may collect information about you automatically through the use of cookies and similar tracking technologies on digital touchpoints. The specific cookies and technologies used depend on the touchpoint in question. To learn more about the cookies and similar technologies used on a touchpoint, including how you can accept or decline cookies, please see the cookie policy available on or through that touchpoint.

We may also collect information in other contexts that are made clear to you at the time.

What information about you do we collect or create?

We may collect various types of information about you:

Information necessary to manage and administer our relationship with you, your employer, or representative, and to run our business, including to fulfill our legal and regulatory obligations.

Information necessary to purchase products and services.

Information necessary to provide you with press releases or email notifications.

Information you give us in contracts, forms, or surveys.

Information about your visits to our offices and participation in events.

Information for building access control systems.

Biometric data for identification purposes (for building access controls or access to IT devices).

Information you give us in calls you make to us, meetings you have with our employees, or electronic communication you send to us.

Information about your visits to other touchpoints.

Information about your preferences and interests.

Information necessary to verify your age, identity, and authorization to act on behalf of your employer, if applicable.

Information about your publicly known views, opinions, and decisions that may affect public policy and other issues related to us.

Information submitted to us when using information systems that we operate.

Automated records of your use of our information systems, including company-provided devices.

For what purposes do we use information about you, and on what legal basis?

In this section, we describe the purposes for which we use personal information.

Depending on the nature of our relationship with you, we may use information about you for the following purposes:

To comply with regulations, such as verifying your age and identity, performing "know your supplier" checks, and managing our contractual relationship with you or your employer.

For legal compliance, such as retaining and using your records in connection with any anticipated disputes, for the purpose of obtaining advice from our lawyers and other advisors.

To purchase products or services from you or your employer, including contacting you to manage our relationship, obtaining sales-related services, and paying you for goods, services, and expenses (where applicable).

To sell our products to you, including fulfilling your orders and processing your payments.

To provide sales-related services to you, including handling your inquiries and requests, and providing warranty services.

To inform you about updates, promotions, events, and manage related aspects of our relationship, including administering loyalty programs, product improvement, market research, developing marketing strategies, administering marketing campaigns, and customizing your experiences at events.

To support all of the above, including administering your or your employer's accounts.

To enable you to use our touchpoints, correspond with you, manage your meetings with us, customize your experiences of our touchpoints, for administration and troubleshooting, general record-keeping, fraud prevention, and managing your access to systems we have granted you access to.

For business analysis and improvements, including improving our products, offices, processes, and events, as well as the information, systems, and devices.

To enable and administer your use of our systems, company-specific software, our devices, and our information.

To monitor your use of our systems and devices to ensure proper use.

To maintain the security of our systems, devices, information, and buildings.

To understand your views, opinions, and decisions and how they may affect public policy and other issues related to the company.

To provide you with, and customize your experiences of, press releases and email notifications that you have subscribed to.

For other purposes that we notify you of, or that are clear from the context, at the time the information about you is first collected.

The legal basis for our use of information about you is one of the following (which we explain in more detail in the table below):

compliance with a legal obligation to which we are subject;

the fulfillment of a contract to which you are a party;

a legitimate business interest that is not overridden by your interests to protect the information;

where none of the above applies, or where the law requires it, your consent (which we will ask for before we process the information).

The purposes for which we use information about you and the legal basis for use are:

Purpose

Legal Basis for Processing

Compliance with Regulations verify your age, identity, and business partner status tax and business accounting obligations checks related to "know your supplier," trade sanctions, and background checks health and safety management requests for legal and regulatory information conflicts of interest recording of timesheets and invoices, to the extent that you act as an external advisor preservation of agreements and associated documents in which you may be mentioned investigation of reported allegations of misconduct

We use it because it is necessary for us to comply with a legal obligation to run our business in a compliant manner or, in countries where there is no such legal obligation, because we have a legitimate business interest in running our business in accordance with good practices, which is not overridden by your interests, rights, and freedoms to protect information about you.

Purchase of Products and Services contact you in connection with you or your employer providing us with products or services administration of the account we have with you or your employer process payments relationship management monitoring your compliance with our agreement, our policies, and internal programs investigation of non-compliance with our agreement, policies, and internal programs, issues, and incidents

We use it in relation to the fulfillment of our contract with you or your employer as a buyer of your or your employer's products or services or, where there is no such obligation, we use it because we have a legitimate business interest in running our business, contacting you in relation to the products or services we receive from you or your employer, to process payments, manage our relationship with you or your employer, and monitor compliance with our agreement, policies, and programs, which is not overridden by your interests, rights, and freedoms to protect information about you.

Sale of Our Products fulfill your orders (including sending receipts) process your payments provide warranty services

We use it to fulfill our contractual obligations to you or your employer as a buyer of our products.

Provision of Sales-Related Services, Business Development, and Relationships handle your inquiries and requests correspond with you general administration and troubleshooting relationship management inform you about relevant updates, promotions, and events understand your preferences (such as what products or events may interest you or may be better tailored to your needs) invite you to participate in, and administer, surveys or market research campaigns for market research administer marketing campaigns customize your experience of touchpoints provide you with information about our campaigns, products, and services, events provide you with, and customize your experiences of, press releases and email notifications that you have subscribed to

We use it because we have a legitimate business interest in providing sales-related services to you or your employer, managing our relationship, and informing you about our business, products, and events, running our touchpoints, and customizing your experiences, which is not overridden by your interests, rights, and freedoms to protect information about you.

Business Administration general organizational management and business record-keeping handling of contractor lifecycle administration and registration of visitors administering and running events, training, and compliance programs correspondence in relation to our relationship with you or your employer, including handling your inquiries and requests development, implementation, operation, and maintenance of IT systems maintaining the security of systems, devices, information, and buildings operation of contact databases and collaboration tools international assignments and travel maintaining a safe work environment maintaining the security and safety of our staff, customers, suppliers, visitors, and their property

We use it because we have a legitimate business interest in running our business, managing our relationship with you, and maintaining the security and integrity of our physical and digital infrastructure, information, and premises, which is not overridden by your interests, rights, and freedoms to restrict the use of information about you.

Security and System Monitoring authentication and access controls and logs, where applicable monitoring of systems, devices, internet, and email that you have been granted access to monitoring of access to our premises, deliveries to our affiliated companies, and security-related processes at our premises enabling and administering your use of our systems, company-provided software, company devices, and company information; monitoring your use of these, including to ensure appropriate use and proper handling of company information maintaining the security of systems, devices, and buildings 1 video (CCTV) and audio monitoring2

We use it because we have a legitimate business interest in ensuring the confidentiality, integrity, and security of 3our physical and digital infrastructure, information, and premises, which is not overridden by your interests, rights, and freedoms to protect information about you.

Support for all the above purposes administering your accounts enabling you to use our PMI touchpoints corresponding with you enhancing your experiences administration and troubleshooting

We use it on the grounds that correspond to the purpose for using the information we are supporting. For example, when we administer your account to support a purchase, we use the information to fulfill our contractual obligations to you as a buyer of our products; when we administer your account to update you on our products, we are supporting business development and therefore use it on the grounds that we have a legitimate business interest in marketing our products, which is not overridden by your interests, rights, and freedoms to protect information about you.

Business Analysis and Improvements for business analysis and improvements (including for our products, systems, processes, offices, events, digital touchpoints, and the devices and information we provide to you or your employer)

We use it on the grounds that we have a legitimate business interest in analyzing and improving our business development, our products, systems, processes, offices, training, events, touchpoints, and the devices and information we provide, which is not overridden by interests, rights, and freedoms to protect your information about you.

Understanding your views, opinions, and decisions

We use it on the grounds that we have a legitimate business interest in monitoring and assessing stakeholders' views and decisions and mapping out how their views and decisions may affect us and our industry, which is not overridden by interests, rights, and freedoms to protect information about you.

Where we do not base our use of information about you on one of the above legal bases, or where the law requires it, we will ask for your consent before we process the information (these cases will be clear from the context). We may ask for your explicit consent to process special categories of information about you.

In some cases, we may use information about you in ways that are not described above. In such cases, we will provide a supplemental privacy notice that explains such use. You should read all supplemental notices in conjunction with this one.

Do we make any automated decisions?

We may make automated decisions on any of the matters set out in this policy (e.g., screening and who to include on a shortlist for purchasing services or products). If we do this, we will draw your attention to it at the time, along with information about the logic involved in the decision, as well as the significance and the expected consequences for you of such use of information about you.

Who do we share your information with, and for what purposes?

We may share information about you with:

Companies in the IMND - IM Nordic Distribution AB group; its owner, and its affiliated companies;

third parties who provide the company or you with products or services;

other third parties, where the law requires or permits it (such as regulatory authorities; government agencies and professional advisors).

We only share information about you with others in accordance with applicable laws. Thus, where the law requires your consent, we will first ask for it.

Where can information about you be sent?

When information is used as described in this policy, information about you may be transferred either within or outside the country or territory where it was collected, including to a country or ter5ritory that may not have equivalent data protection standards. For example, if you are within the European Economic Area ("EEA"), your information may be transferred outside the EEA.

Wherever we transfer personal data to other countries, we will take legally required measures to ensure that appropriate safeguards are in place to protect it. You can contact us for an explanation of the basis on which we have transferred your personal data and, where relevant, to request a copy of the legal safeguards we have put in place.

How do we protect information about you?

We implement appropriate technical and organizational measures to protect personal information we hold from unauthorized disclosure, use, alteration, or destruction. When appropriate, we use encryption and other technologies that can help secure the information you provide. We also require our service providers to comply with equivalent data privacy and security requirements.

How long will information about you be stored?

We will retain information about you for the period necessary to fulfill the purposes for which the information was collected in accordance with our internal data retention standards. After that, we will delete it. The period will vary depending on the purposes for which the information was collected. Note that in some cases, you have the right to request that we delete the information. We are also sometimes legally obligated to retain the information, for example, for tax and accounting purposes.

We offer you easy ways to exercise these rights, such as "unsubscribe" links or by using 8the contacts in the paragraph "Who should you contact with questions?" at the end of this policy.

Who should you contact with questions?

If you have any questions or wish to exercise any of your rights, you can contact us at:

info@imnd.se

If your country has a data protection authority, you have the right to contact it with any questions or concerns. If the company cannot resolve your questions or concerns, you also have the right to seek legal remedy before a national court.

IMND - IM Nordic Distribution AB

Changes to this policy

We may update this policy (and any supplementary privacy policies) from time to time. Where the law requires it, we will notify you of the changes; furthermore, where the law requires it, we will also obtain your consent to the changes.

Last modified: [Insert date here].