Baettr Group is data responsible for any information that is processed about you as an individual.

This privacy policy applies to the following companies within Baettr Group:

*Subsidiaries outside EU are additionally under any national and compliance requirement within given countries of operation.

Baettr Group is responsible for all privacy information that are collected, processed and managed as part of business operations. This privacy policy defines how we are processing and protecting your privacy information as well as your data subject rights.

Contact information

If you have any requests regarding our data processing, feel free to contact: privacy@baettr.com

Processing of privacy information

For us to fulfill any agreements entered with you, it is necessary for us to process information that can be attributed to you.

Customers

When you are a customer with us, we process your contact information for the purpose of being able to deliver the purchased service and manage your relationship with us, including billing. We use the basis in the Data Protection Regulation's art. 6, para. 1, litra b. Your information is deleted when we no longer have a purpose for having them, including when your relationship with us is inactive and we no longer have an obligation to keep them to be able to document the correctness of our accounts.

In some cases where we must comply with various EU legislation, we obtain reports showing information on the real owners of our customers' companies. We use the basis in the Data Protection Regulation's art. 6, para. 1, litra c. The reports are deleted on an ongoing basis when we have carried out the review that is necessary.

To nurture our customer relationships, we continuously assess our customer relationships, including relationships with contact persons. We use the basis in the Data Protection Regulation's art. 6, para. 1, litra f, as we have a legitimate interest in nurturing our customer relationships.

Participants in Teams meetings

If you participate in an online meeting with us held via Teams, meetings can be recorded for the purpose of documenting what was discussed at the meeting. You will be notified in the Teams app if the meeting is being recorded. Meeting recordings are deleted after 30 days. We use the basis in the Data Protection Regulation's art. 6, para. 1, litra f, as we have a legitimate interest in being able to document what was discussed at meetings.

Whistleblower scheme

It is possible that personal data about you is processed via our whistleblower scheme. You can read more about this process here.

General inquiries

If you contact us via email, contact form, social media, etc., we process your contact information and any other information you may provide in the inquiry, for the purpose of responding to your inquiry. We use the basis in the Data Protection Regulation's art. 6, para. 1, litra f, as we have a legitimate interest in responding to your inquiry. Inquiries are deleted on an ongoing basis when they have been processed.

Contact persons at suppliers and partners

When you are a supplier or partner with us, we process your contact information for the purpose of being able to process our purchases and manage your relationship with us, including billing. We use the basis in the Data Protection Regulation's art. 6, para. 1, litra b. Your information is deleted when we no longer have a purpose for having them, including when your relationship with us is inactive and we no longer have an obligation to keep them to be able to document the correctness of our accounts.

Job applicants

When you send us a job application, we process the information you provide, including, for example, contact information, other information in your CV and application, diplomas, and anything else you provide. You are informed that we may seek information from references, as well as your social media. We process the information for the purpose of being able to respond to your application and assess your profile in relation to being able to offer you a job with us. We use the basis in the Data Protection Regulation's art. 6, para. 1, litra f, as we have a legitimate interest in processing your application and giving you a response. Solicited applications are kept until the right candidate is found. Unsolicited applications are kept for up to 6 months. If we want to keep applications further, we ask for your consent to do so.

Your consent is voluntary, and you can withdraw it at any time by contacting us at the contact information provided under 'Contact information'.

Pictures and videos of external

If we want to publish pictures of you for marketing purposes, we collect your consent for it (Data Protection Regulation's art. 6, para. 1, litra a). You can withdraw your consent at any time by contacting us at the contact information provided under 'Contact information'. We use the material until you withdraw your consent or until we assess that it is no longer relevant to use. If you see that we have published pictures of you without your consent, it is because we assess that you cannot reasonably feel exposed, exploited, or violated, for example in connection with marketing or other commercial purposes. Thus, we can publish pictures of you based on legitimate interest (Data Protection Regulation's art. 6, para. 1, litra f), for example to show mood pictures from an event, arrangement, etc. You can contact us at the contact information provided under 'Contact information' if you want to have pictures or video where you appear removed.

Visitors to the website

When you visit our website, we may process some information about you if you give your consent to it according to the Data Protection Regulation's art. 6, para. 1, litra a. For further information, we refer to the cookie banner you are presented with the first time you visit our site, as well as our cookie policy.

Video surveillance

When you are at one of our locations, you may be filmed by our surveillance cameras on the site and in production. There will always be signage in areas with video surveillance and recordings are kept in accordance with the legislation on TV surveillance, unless they are to be used as part of a police case. We use the processing basis in the Data Protection Regulation's art. 6, para. 1, litra f, as we have a legitimate interest in being able to deter criminals, investigate incidents and quality assure our production.

Disclosure of information

We use several third parties for storage and processing of data, including suppliers of IT solutions. In relevant cases, data is disclosed to banks, lawyers, shipping companies, auditors, police, etc.

We only use data processors in the EU or secure third countries, as well as companies in countries that can provide your information with adequate protection. As data processors in countries outside the EU, the following are used:

Microsoft Inc. in USA:

• Microsoft Office 365: Supplier of the office package. Terms of agreement can be found here.
• LinkedIn: Company profile on Linkedin and marketing via cookies. Terms of agreement can be found here.

Google Inc. in USA:

• Google Analytics: Statistics and marketing via cookies. Terms of agreement can be found here.

Meta Platforms Inc. in USA:

• Facebook: Marketing of our products via cookies. Terms of agreement can be found here.

Valkre in USA:

• Valkre, supplier of Key Account Management system. Terms of agreement can be provided upon request.

When we cooperate with suppliers in countries outside the EU, we use the EU Commission's standard contracts (SCC) as the transfer basis, with supplementary measures. This ensures the necessary guarantees for the protection of your information. All of the above parties are certified according to the Data Privacy Framework.

Social media

We have company profiles on a number of social media, which is why we have a joint data responsibility. These are:

• LinkedIn - Terms of agreement can be found here.
• YouTube - Terms of agreement can be found here.
• Facebook - Terms of agreement can be found here.

Your rights

You have several rights under the Data Protection Regulation in relation to our processing of information about you. You can exercise your rights by contacting us at the contact information above under 'Contact information'.

Right to withdraw consent

You have the right to withdraw your consent at any time. You can do this by contacting us at the contact information provided above under 'Contact information'.

If you choose to withdraw your consent, it does not affect the legality of our processing of your personal data based on your previously given consent and up to the time of withdrawal. If you withdraw your consent, it therefore only takes effect from this point in time. We keep documentation of given consents for 2 years after it has been withdrawn.

Right to see information (right of access)

You have the right to access the information we process about you, as well as additional information.

Right to rectification (correction)

You have the right to have incorrect information about yourself corrected.

Right to erasure

In special cases, you have the right to have information about you deleted before the time of our regular general deletion occurs.

Right to restriction of processing

In certain cases, you have the right to have the processing of your personal data restricted. If you have the right to have the processing restricted, we may only process the information - except for storage - with your consent, or for the purpose of establishing, enforcing, or defending legal claims, or to protect a person or important public interests.

Right to object

In certain cases, you have the right to object to our lawful processing of your personal data. You can also object to the processing of your information for direct marketing.

Right to transmit information (data portability)

In certain cases, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to have these personal data transferred from one data controller to another without hindrance.

Complaint to national supervisory authority

You have the right to complain to the authorities if you are dissatisfied with the way we process your personal data. Contact information for your national authority can be found on their websites listed below.