As a shareholder in Kinnevik AB (publ) (”Kinnevik”), Kinnevik will process personal data which relates to you. Therefore, we would like to inform you of our processing of your personal data and your rights under applicable data protection legislation1.
Euroclear Sweden AB (”Euroclear”) is responsible for keeping the share register of Kinnevik and is the controller of the processing of personal data that occur in connection with such assignment. If you would like to know more about how Euroclear processes your personal data, we kindly ask you to contact Euroclear.
What personal data is processed and for what purposes?
The personal data relating to you as a shareholder is sourced from Kinnevik’s share register kept by Euroclear, and from other registers of shareholdings in Kinnevik. The personal data that are processed by Kinnevik are:
•Your name, personal identity number and contact details.
•Information regarding your shareholding (number of shares and any notes/information to be linked to that shareholding according to law, e.g. class of shares).
•Data from any communication between you and Kinnevik, including data in minutes of board meetings and general meetings.
The personal data is processed for registration, drawing up of voting lists and, where applicable, minutes in connection with general meetings and administration of other matters relating to the shareholders of the company.
On what legal basis do we process your personal data?
The collected personal data is processed to fulfil Kinnevik’s obligations under law, including company, securities and tax legislation and Kinnevik’s legitimate interest of convening general meetings and administrating other matters relating to the shareholders of the company.
We only process your personal data for the purpose for which we collected such data, and which are described above. Should we need to process your personal data for any other purpose or a purpose which requires your consent under data protection legislation, we will inform you of such purpose respectively obtain your consent in advance.
For how long do we store your personal data?
The personal data relating to you as a shareholder are only stored for as long as you are a shareholder in Kinnevik or as long as Kinnevik is required to store such data by law including Swedish corporate law.
To whom do we disclose your personal data?
Your personal data will be disclosed to other companies within the Kinnevik group and may be disclosed to a third party if required by law, regulations or an official decision by a relevant authority. That said, certain personal data, such as names and other information included in minutes of board meetings and general meetings, may be published on Kinnevik’s website.
Kinnevik is the controller for the processing of your personal data. You have the following rights in relation to us:
•Right of access (register transcript) – a right to obtain confirmation of and information about the processing of your personal data.
•Right to rectification – a right to have erroneous personal data rectified.
•Right to erasure – a right to have personal data removed. This right is limited to data which, by law, may only be processed with your consent, if you withdraw consent and oppose the processing.
•Right to restricted processing – a right to request that personal data processing is restricted, for example, if you oppose the accuracy of the data. Kinnevik’s access to the data is restricted while the accuracy of the data is investigated.
•Right to data portability – a right to request that personal data are moved from one data controller to another. This right is restricted to data you have supplied to us yourself.
If you consider that our processing of your personal data does not comply with the Data Protection legislation, you are also entitled to lodge a complaint with the Swedish Data Protection Board (Sw. Datainspektionen), the competent Swedish supervisory authority.
If you would like further information about how your personal data is processed, or wish to exercise any of the rights listed above, please contact us:
Data controller Kinnevik
P.O. Box 2094
SE-103 13 Stockholm, Sweden
1 As of 25 May 2018 the regulation, (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC is in force as well as national legislation which is introduced on the basis of the regulation.