Privacy Policy

GDPR

How we handle your personal data

Adopted on 28 August 2026 by the Board of Directors of Axvik Group AB (publ)

1. Purpose and scope

Axvik Group AB (publ), reg. no. 559526-3582, Sveavägen 50, 111 34 Stockholm ("Axvik"), is the controller for the personal data described in this policy. The policy explains what personal data Axvik processes at group level, why we process it, on what legal basis, who receives it and what rights you have.

The policy covers the processing carried out by Axvik as the parent company. Each subsidiary is a separate controller for the personal data it processes in its own operations and provides its own information to the persons concerned.

2. Personal data we process, and why

Shareholders

Data: Name, personal identity number or reg. no., address, shareholding.

Purpose: Administration of the shareholder base, general meetings, dividends and statutory records.

Legal basis: Legal obligation (the Companies Act, the Central Securities Depositories and Financial Instruments Accounts Act).

Persons on the insider list, persons discharging managerial responsibilities (PDMRs) and persons closely associated with them

Data: Name, national identification number or date of birth, professional contact details, function and reason for inclusion, dates and times of access, notified transactions.

Purpose: Maintaining the insider list, notifying the persons concerned, and handling notifications of managers' transactions.

Legal basis: Legal obligation (the Market Abuse Regulation, Articles 18 and 19).

Board members and employees of the parent company

Data: Name, personal identity number, contact details, employment terms, salary and remuneration, bank account number, tax and pension data, absence and leave records.

Purpose: Employment and board administration, payroll, pension, tax reporting and corporate filings.

Legal basis: Performance of a contract and legal obligation.

Contact persons at suppliers, advisers, banks and other counterparties

Data: Name, title, business contact details.

Purpose: Business communication, contract management and group governance.

Legal basis: Legitimate interest in managing our business relationships.

Job applicants

Data: Application, CV and contact details.

Purpose: Assessing applications and managing recruitment.

Legal basis: Steps taken at the request of the applicant prior to entering into a contract, and our legitimate interest in evaluating candidates.

Visitors who contact us via the website

Data: Name, email address, organisation and the content of the message.

Purpose: Responding to enquiries.

Legal basis: Legitimate interest in communicating with those who contact us.

Subscribers to our press releases

Data: Email address and language preference.

Purpose: Distributing press releases and financial information to those who have signed up.

Legal basis: Consent.

Axvik does not process personal data for marketing purposes and does not use personal data for automated decision-making or profiling. As a general rule, Axvik does not process special categories of personal data at group level, except for employee health data, which is processed to the extent necessary to comply with Axvik's legal obligations as an employer, including in connection with sick leave and rehabilitation.

Where we rely on legitimate interest as the legal basis for processing, we have carried out a balancing test to confirm that our interests do not override your fundamental rights and freedoms. You may request further information about this assessment, or object to the processing, by contacting us as set out in Section 8.

Our website analytics are provided by Cloudflare Web Analytics, which does not collect personal data or set cookies.

3. Where the data comes from

We collect personal data primarily from the person concerned. Shareholder data is obtained from Euroclear Sweden AB, which maintains the share register on our behalf. Data may also be obtained from public registers such as the Swedish Companies Registration Office and the Swedish Tax Agency, and from our subsidiaries in the case of contact details for their management.

4. Who we share the data with

We do not sell personal data. If a service provider processes personal data outside the EU or the EEA, we ensure that the transfer is covered by an adequacy decision or by standard contractual clauses adopted by the European Commission, together with any supplementary measures required.

5. How long we keep the data

We keep personal data for as long as it is needed for the purpose for which it was collected, and thereafter for as long as required by law. For example, insider lists and notifications of managers' transactions are retained for five years from the date they were drawn up or last updated, as required by the Market Abuse Regulation. Accounting material is retained for seven years. Shareholder data is retained for as long as required under the Companies Act.

6. How we protect your data

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including access controls, encryption where appropriate, and contractual security requirements imposed on our service providers.

7. Your rights

You have the right to:

To exercise your rights, contact us at [email protected]. If you consider that we process your personal data incorrectly, you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se.

8. Contact and changes

Questions about this policy are answered by the Group CFO at [email protected]. We update the policy when our processing changes. The current version is always published on axvik.com.