Privacy Policy

We find a way to reach our goals, or we will make one

Viltor respects your privacy and is committed to protecting your personal data. Processing of personal data is done in accordance with the EU General Data Protection Regulation (GDPR), which took effect on 25 May 2018, and other applicable data protection laws. This Privacy Policy will inform you as to how Viltor collect and use your personal data. The information below also describes your rights and how you can enforce them.

About Viltor

Viltor is the common denomination for the group of companies comprised of Viltor AB, Viltor Industries AB, Viltor Solutions AB and Viltor Ventures AB.

Information which is collected by Viltor will be the responsibility of Viltor AB, reg.no. 559414-9451, with address P.O. Box 53230, 400 16 Göteborg, who will act as a data controller in relation to your personal data. If necessary, we will provide you with further information about the applicable data controller.

This Privacy Policy is issued by Viltor AB for and on behalf of Viltor.

 

What personal data does Viltor process?

Personal data means any information about an individual from which that person can be identified. It does not include anonymous information, namely information which does not relate to an identified person.

Viltor may collect, use, store and transfer different kinds of personal data about you, including:

  • Identity data, which can include name, gender, nationality and date of birth (for example, passport, national ID card, driver’s license);
  • Contact data, which can include address, email address, telephone numbers and copies of proof of address documentation;
  • Transaction data, which can include details about payments, transaction history, investment activity, including ownership percentage.

Sensitive personal data is afforded special protection and may not be processed by Viltor except under special circumstances. For example, sensitive personal data may be processed in order for Viltor to fulfil its obligations under employment law, to assess the working capacity of an employee, or where the data subject has given explicit consent for their sensitive personal data to be used for one or more specific purposes.

How does Viltor process personal data?

Viltor process personal data to conduct its business and maintain contacts with its business contacts, partners and suppliers. Certain personal data is processed to manage Viltor’s investments in other companies, for corporate governance, nomination and other appointment purposes, and to enable statistics, review and archiving. Personal data may also be used to distribute press releases, financial reports, invitations to events etc.

Viltor process personal data in a number of different situations in connection to its business operations, including:

  • Portfolio company management: Viltor can process personal data in its daily operations of managing portfolio companies. This can include portfolio company executives, key personnel and employees. In this regard, daily operations can include setting up management incentive programs, salary management, containing personal data on employees’ salaries, etc.
  • Target company due diligence: Viltor can process personal data when conducting due diligence on potential target companies. This includes, foremost, personal data regarding target company executives and key personnel and target company employees. Additionally, Viltor can process personal data when targeting add-on acquisitions to preexisting portfolio companies.
  • Viltor HR: Viltor processes personal data concerning relevant persons and recruitment candidates.

How does Viltor collect personal data?

Viltor uses different methods to collect personal data, including:

Personal data that is provided directly to Viltor

Viltor may collect personal data from professional contacts with prospective investors, intermediaries and other business partners for the purposes of establishing a business relationship in respect of entering into contractional relationships, and/or to otherwise satisfy our legal or regulatory obligations.

Personal data obtained from third parties

Personal data may also be obtained from other sources, such as publicly available registers, among other things, in relation to Viltor’s investments in companies or corporate governance, nomination or other appointment processes. In addition, Viltor may receive personal data in connection with legal requirements that are applicable to Viltor, or from third parties in connection with Viltor’s operations.

When visiting Viltor’s website, no personal data is collected via cookies.

Who have access to your personal data?

We have taken suitable technical and organisational security measures to protect your personal data from loss and unauthorised access, among other things. The number of persons who have access to your personal data is limited. Only persons within Viltor who need to process your personal data in accordance with this policy have access to personal data.

However, Viltor may share personal data with our third-party partners who perform services on our behalf. More information is found under Data Transfers.

On what legal basis is your personal data processed?

General Viltor may only process personal data when a specific legal ground permits such processing. Viltor only processes personal data if one of the following legal grounds applies:

  • Legal obligation
  • Performance of contract
  • Legitimate interest
  • Consent
  • Vital interest
  • Public interest

When sensitive personal data is processed for any reason, higher levels of data protection should be afforded and, in some cases, a data protection impact assessment must be conducted.

Viltor must not process any criminal offence data except when permitted or required by applicable laws and regulations. Even if there is a valid legal ground to process personal data, Viltor must first conduct a data protection impact assessment if it is about to engage in data processing activities that are likely to result in a high risk to the rights of freedoms of individuals.

Legal basis for Viltor’s processing

Typically, Viltor will use your personal data in the following circumstances, for the following purposes and pursuant to the following legal bases:

where it is necessary for the performance of a contract to which you are party, or to comply with a request you have made prior to entering into a contract, and for compliance with legal obligations

  • to facilitate hiring processes, manage employment, and ensure compliance with legal obligations;
  • to manage and administer investor’s commitments and/or interests and any related accounts, and ensure compliance with legal obligations;
  • in daily operations of managing portfolio companies.

where it is necessary for the performance of a contract to which you are party, or comply with a request you have made prior to entering into a contract, and for Viltor’s legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests:

  • to conduct due diligence on potential target companies;
  • to engage and manage external consultants and advisors.

If Viltor requires your personal data due to a legal requirement or obligation, or in order to perform a contract with you, then failure to provide this information might mean that Viltor cannot provide its services to you. In this case, Viltor may have to cancel a service you have with us but we will notify you if this is the case at the time.

Data transfers

Viltor do not sell any personal data to third parties. Viltor may exchange or transfer personal data to a third party that will have the role of a processor. Processors include Viltor’s third-party service providers as well as portfolio companies. Whenever Viltor exchanges or transfers personal data to such third party, this must be subject to a data processing agreement containing necessary terms and conditions. The processor may only process personal data on behalf of Viltor according to the instructions laid out in the data processing agreement.

In addition, Viltor may exchange or transfer personal data to a country outside the EU/EEA. Viltor uses safeguards to ensure that personal data is treated appropriately where it is transferred to countries outside the EU/EEA. Such safeguards may include the use of standard contractual clauses approved by the European Commission.

For information on the safeguards applied to such transfers, please contact us.

Data security

Viltor have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. Viltor has established internal guidelines for IT security, data protection and information security, as well as non-disclosure agreements when necessary.

How long do Viltor save your data

Viltor save and process your personal data as long as it is necessary to initiate, maintain or manage a professional relationship with you, the company or organization that you represent. Viltor save personal data in accordance with our regulatory obligations or as long as it is necessary to fulfil the purpose of the processing.

Viltor may also store that data for as long as necessary in order to comply with our legal compliance, contractual or other regulatory obligations or in connection with the establishment, enforcement or defense of any legal claims.

Your rights

The right you have, as a data subject, are described below.

  • You have the right to request information about what personal data we process or have access to (right to access). In order to ensure we provide the data to the correct person you must identify yourself when requesting an extract from our register.
  • Viltor is obliged to have correct and updated personal data about you. If your personal data is incorrect, you can request rectification or supplementation thereof (right to rectification). You also have the right to request that we limit the processing of your personal data e.g., if you contest the accuracy or legitimate interest of the processing of certain personal data (right to restriction).
  • Under certain conditions, you may request that data about you is erased when it is no longer necessary for the purpose for which it was collected (right to erasure). Viltor removes information about you when it is no longer needed but you may be required by other legislation to store data about you in order to comply with statutory requirements.
  • You have the right to object to the processing of personal data based on legitimate interest. You also have the right to object to direct marketing (right to object).
  • If you have given your consent or if we base the processing on performance of a contract with you, you have the right, under certain circumstances, to obtain the personal data that you have provided us. This will be provided to you in a structured, widely used, and machine-readable format and you have the right to transfer it to another controller or to have our help to transfer the data to another controller when technically possible (right to data portability).

You may exercise your rights by contacting us.

Complaints

You have the right to make a complaint at any time to the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten), which is the competent authority in Sweden, further instructions for this can be found on their website.

Contact details

Our contact details can be found here.

This policy is subject to regular review and Viltor reserves the right to amend the notice from time to time. Should any part of the notice prove to be in violation of applicable regulations, non-applicable or impossible to implement for any other reason, the remaining parts should not be affected thereby.

Viltor AB, May 2024

Address

JCE Group Aktiebolag,
C/O Viltor AB, P.O.Box 53230, 400 16 Gothenburg
Sweden

Visiting Address

Viltor AB
Högåsplatsen 3
412 56 Gothenburg
Sweden

©2024 VILTOR AB