Privacy Statement

Introduction Safedo recognises that the personal information it receives is held in a position of trust. Safedo seeks to fulfill that trust by adhering to general principles regarding the protection of personal information. This Privacy Statement explains how we collect, use, share and protect information in the course of operating our business. Scope This Privacy Statement (“Statement”) applies to the personal information of consumers that is collected or used by Safedo, its affiliates or subsidiaries (collectively, “Safedo”, “we”, “our”, “us”). This Statement applies to all the personal information that Safedo collects when consumers interact with us, such as when visiting our websites, using or purchasing our products or services, contacting customer service and when interacting with us as a business customer, supplier or business partner (collectively, the “Services”).  This includes, without limitation, all online and offline collections of all types of personal information. However, some Safedo collections involve types of data with special requirements (for example, health information) which require a different privacy notice. Whenever that is the case, Safedo will make it clear that the privacy notice concerned is different from this Statement. Information collection Safedo may ask you to provide personal information for purposes including, but not limited to, the following: Buying Safedo products and services; Activating or registering certain products and services or enhancing functionality; Receiving information about Safedo products and services; Participating in Safedo online communities, including our social media channels/pages; Storing your preferences for future interactions and communications from Safedo; Helping us to develop products and services and create campaigns that are designed around you, optimise customer services and continuously improve our websites; Helping us to improve products and services, and allowing Safedo to keep you informed of, or involve you in the testing of, new products and services; Resolving consumer and/or product and services issues; Receiving personalised messages, special offers and advertisements that are relevant to your personal interests, based on the information you have shared with us and on the information we have collected through cookies or similar techniques regarding your use of the Safedo websites/social media/blogs.  Safedo maintains physical, technical, and administrative safeguards to protect your personal information and only allows disclosures as permitted by law to assist in providing products or services. We may also collect product and service information and provide these statistics to others in an aggregate form where the information has been de-identified.   Personal information collected may include: Contact information, such as name, address, email, telephone number, fax number, organisation name, and/or job title; Unique identifiers and preference information such as username, password, marketing preferences, internet protocol (IP) address, browser type, operating system, computer or mobile device, or navigation and clickstream behaviour for online interactions; Creditworthiness, VAT number, product, purchase information history, request documentation; Pictures, video and audio recordings where you have provided your permission; FOR ADDITIONAL INFORMATION ABOUT OUR USE OF COOKIES AND OTHER TRACKING TECHNOLOGIES, PLEASE SEE OUR COOKIE DISCLAIMER. Safedo will retain and use the personal information collected for above mentioned processes and processing purposes in accordance with legal obligations.  Legal Bases The legal basis Safedo uses to process personal information will be dependent on the processing purposes and the jurisdictional legal requirements. Where the personal information collected involved is of EU citizens, in general, we use the following basis: Consent to use the personal information, e.g. where this involves (digital) direct marketing activities and where we would like to use a photo, video or audio recording with identifiable individuals for external publishing; Establishment or performance of a contract, e.g. where we enter into a contract with a party and we collect contact information and signatures, as well as potential bank account details that may be linked to a representative of a company we do business with; Compliance with a legal obligation, e.g. where we need to disclose consumer details for compliance with (local or industry) laws or for compliance with the Medical Device Regulation; Legitimate interest of Safedo, e.g. where Safedo collects contact information and preferences, details for lodging and travel for attendees of Safedo organised events & trainings or third party hosted events & trainings in collaboration with Safedo; Public interest or for the exercise of public authority in strictly limited cases, e.g.. where we would be required to cooperate with the police or other government bodies in case of illegal conduct; For the establishment, exercise or defence of legal claims, e.g. for court cases; For public interest in the public health to ensure high standards of quality and safety of healthcare and products; and Where the individual chooses to disclose the personal information publicly by its own initiative. If you choose not to provide the personal information we reasonably require, it may hinder Safedo’s ability to provide the information or services you have requested.

Cross-Border Transfers To the extent personal information is transferred out of the country where the owner of that personal information lives, such as to Safedo affiliates or business partners in other countries, including in the EU and United States, different standards may apply to how your data is used and protected in those countries. Safedo has appropriate safeguards in place in accordance with applicable legal requirements to ensure that data is adequately protected irrespective of the country. This includes obtaining written assurances from any third party given access to your data so as to require them to adopt standards that ensure an equivalent level of protection for data as that adopted by Safedo and standardized corporate safeguards and contractual measures (based on the European Commission Model Clauses) for internal data transfers to Safedo affiliates in third countries which are deemed to provide an inadequate level of data protection. Privacy Statement for Children Safedo will not collect personal information from anyone we know to be under the age of 16 without the prior, verifiable consent from his or her legal representative. Such legal representative has the right, upon request, to view the information provided by the child and/or to require that it be deleted. Retention of Information Safedo will retain your personal information for as long as reasonably necessary to comply with legal obligations or for no longer as required for legitimate business purposes. Disclosure of Information Safedo may share personal information we have collected with companies or agents doing technological maintenance or working on our behalf to help fulfil business needs, including providing customer services and distributing marketing communications. Safedo may also share personal information with our subsidiaries and affiliates. Other service providers that may be used to perform certain functions on our behalf and to whom personal information may be disclosed in order to perform their intended function include call-centre support, sending or processing postal or electronic mail or analysing or hosting information on cloud-based servers. Safedo does not share your personal information with unaffiliated third parties for their own direct marketing purposes. Security The security and confidentiality of your personal information matters to us. For this reason, Safedo has physical, technical and administrative controls in place to protect your personal information from unauthorised access, use and disclosure. Safedo evaluates these safeguards on an ongoing basis to help minimise risks from new security threats as they become known. Rights You may request details of personal information which we hold about you. If you believe that any personal information we are holding about you is incorrect or incomplete, please contact us as soon as possible, at the address below. We will promptly correct any personal information found to be incorrect. You may always choose to object to the collection or use of your personal information or to have your information erased. If you would like a copy of the information held about you for your own use or to transfer to another party, or if you wish to exercise any other right, please contact us at info@safedo.fi. Updates to Privacy Statement This Statement may be amended at any time. If material changes are made in how personal information is collected, used, disclosed or otherwise processed, this Statement will be updated and notices will be provided when/where appropriate. Any material changes to this Statement will be effective at the time of our posting of the notice of the update. Where required to do so by law, Safedo may seek your prior consent to any material changes we make to this Privacy Statement. The Statement was last updated on 1st July 2021. Contact If you have any questions, concerns or comments about this Statement, please contact us. Safedo will use reasonable efforts to respond to you as soon as possible. Send mail to: Safedo Plc Leväsentie 2 FI-70700 KUOPIO FINLAND Send email to: info@safedo.fi EU Data Protection Officer: info@safedo.fi If we fail to respond to you within a reasonable period of receiving it in writing, or if you are dissatisfied with the response that you receive from us, you may lodge a complaint with the data protection authorities in your home country.