Collection, Processing, and Saving of Personal Data

Personal data refers to information that can identify you.

We may collect personal data to execute and administer services on behalf of your employer. Your employer can provide us with this information through email, an order form, or our digital service platform.

We may also collect personal data from our business partners, which includes contact details necessary for performing services within the scope of our commercial relationships.

We maintain a registry for personal data processing, both as a Collector and as a Processor. The personal data that may be processed includes, but is not limited to:

• Personal Contact details: name, address, email address, telephone number, demographic information, and, when necessary for the purpose of processing or secure identification, personal identity (ID) number.

• Sensitive personal data, including information about children and documents in their original form (e.g., passport or ID-document).

• Technical data about your device or Internet connection (IP address, cookies, electronic images, and similar tracking technologies on websites and in email communication, as well as your geographic location and login details). See "Use of Cookies" below for more information about how we use cookies.

• User-generated information (content that you voluntarily register or publish).

Purpose of Processing Personal Data

We process your personal data according to the purpose you have or wish to have in your relationship with us, depending on whether you are a customer, supplier, job seeker, partner, or represent a state/authority/institution. We prioritize the security and confidentiality of your personal data based on the associated risks and data sensitivity.

Examples of the purposes for which we process your personal data and the legal basis for processing include:

Service Delivery

One of our primary purposes for processing personal data is to perform and administer our relocation services, specifically to fulfill our contractual obligations to our customers. This involves providing services related to relocation and global mobility services. Contact information for key persons within our customers' organizations is also used for reporting and invoicing purposes. In certain situations, we may request you to submit original documents, such as a passport or identification document, with your consent.

Marketing Purposes

We may use your data to provide news information and marketing related to our services, both general and customer-specific, and to inform you about our activities or services. We may use your data for direct marketing unless you or your organization have instructed us not to do so. If you do not have an active customer relationship with us and are a consumer, we will only use your data for electronic direct marketing with your consent.

You have the opportunity to object to the use of your personal data for marketing purposes at any time by contacting us as described below. Our legitimate interest in processing personal data for marketing purposes is to offer better services, develop and analyze our activities, communicate with our contacts, and provide relevant information to you or your organization.

Purpose and Legal Basis

Human Entrance AB's processing of your personal data is based on the following legal grounds:

Consent

Our processing of your personal data is based on your consent when you provide your personal data by registering an account with us or signing up for our newsletters on our websites. You will be given the option to agree or disagree with the collection and use of your personal information. You can withdraw your consent to such processing at any time by clicking the unsubscribe link in our newsletter or by contacting us.

Fulfillment of Contract

Processing of personal data is necessary for the performance of a contract to which you are a party or a service receiver or for taking pre-contractual steps at the request of the Client (Data Controller) or the individual.

Legitimate Interests

The legal basis for processing personal data, such as technical data when you browse our website, is that the processing is necessary for the legitimate interests of Human Entrance AB. Legitimate interests may also constitute the legal basis for processing when you provide us with your contact information by contacting us or expressing an interest in our products or services.

Storage

Personal data is not retained longer than necessary for the purpose for which it was collected or as required by law or contract. We will destroy or de-identify personal data when it is no longer needed to fulfill the purpose of collection and further processing. The specific timeframe or criteria for determining this period will depend on the type of service we provide. You can find more detailed information in the consent statement applicable to each service.

Please note that we may be required to retain necessary personal data in conjunction with erasure, consent withdrawal, or porting to fulfill our legal or contractual obligations. It may also be permitted by law to retain certain personal data to meet our business needs.

Your Rights

Human Entrance adheres to your rights as stipulated by the GDPR, and you may contact us to invoke any of these rights:

• Right of Information: You may contact us to request information about the data related to you that we have stored.

• Right of Access: You have the right to request a copy of your personal data that we are processing.

• Right to Rectification: You may request that we update or correct your personal data.

• Right to Erasure: You have the right to request the deletion of any data you have shared with us and may withdraw your consent for continued processing of your personal data.

• Right to Restrict Processing: You have the right to ask us to restrict how we process your data.

• Right to Data Portability: You may request to receive your personal data in a structured, commonly used machine-readable format and, if technically possible, transfer your personal data to another data processor.

• Right to Object: You can object to processing of your personal data that we perform based on a balance of interests. This includes objecting to automated decision-making. We must then demonstrate, after you specify the processing you object to, that there are overriding interests. You are also entitled to object at any time to the processing of your personal data for direct marketing.

Complaints

Please inform us as soon as possible if you believe the processing of your personal data has been handled incorrectly. You also have the option to file a complaint with the Swedish Data Protection Authority regarding our personal data processing.

Sharing Data with Affiliates and Third Parties

Human Entrance AB will not sell, trade, or lease your Personal Data to third parties. We may transfer your personal data to trusted partners and subcontractors if it is necessary to execute services ordered by you, your employer, fulfill your request for information, or attend a webinar/training.