ABOUT ANNUAL REPORTS INVESTMENTS CONTACT Privacy Notice for William Demant Invest A/S 1. INTRODUCTION William Demant Invest A/S (‘we’, ‘us’ and ‘our’) respects and protect data privacy, and we are dedicated to being as transparent as possible regarding the use of your personal data. The purpose of this privacy notice is to describe how and why we process your personal data when you interact with us. 2. WHO WE ARE As we process your personal data and determine the purposes and means of the processing, we act as a data controller pursuant to GDPR article 4(7). You can contact us by using the following contact information: William Demant Invest A/S Kongebakken 9 DK-2765 Smørum Tel: (+45) 3917 7300 Email: privacy@demant.com (please mark your email with ‘William Demant Invest’) 3. SOURCES, TYPES OF PERSONAL DATA, PURPOSE AND LEGAL BASIS The personal data is either collected from your employer or directly from you, e.g. as part of your e-mail signature, business card etc. We usually collect personal data such as your contact details (name, address, e-mail address, tel. no., fax no.), your job position and the name of your employer. The personal data is collected for the following purposes: • To respond to requests and enquiries received from you. Our legal basis for processing your personal data is based on our legitimate interest in accordance with GDPR article 6(1)(f). 4. HOW WE SHARE YOUR PERSONAL DATA We will not pass, sell or otherwise share or disclose your personal data to third parties, except as described herein or otherwise stated at the time the personal data is collected. We may share your personal data with third parties (e.g. vendors, service providers and/or partners), if it is deemed necessary or we are legally obligated to do so. We may also share your personal data with affiliated companies within the Demant Group in accordance with our legitimate purposes for collecting your personal data. Please refer to the organisational chart in the latest annual report to see which companies are part of the Demant Group. You can find the latest annual report at www.demant.com. 5. TRANSFER OF DATA TO THIRD COUNTRIES In order to fulfill the purpose(s) for processing your personal data, we may share personal data with affiliated companies in the Demant Group located outside the EU/EEA and non-affiliated companies, such as service providers or business partners, located outside the EU/EEA provided this is considered necessary in relation to the particular data processing activity. If your personal data are transferred outside the EU/EEA, we will implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of the relevant data protection laws including ensuring the protection of the rights of the data subject. Where necessary, we have entered into the EU Commission’s standard contractual clauses with the recipient of the personal data. The EU Commission finds these clauses to provide adequate guarantees for the protection of privacy, basic rights and liberties, as well as for exercising the associated rights. 6. HOW LONG DO WE KEEP YOUR PERSONAL DATA We will retain your personal data as long as necessary in order to fulfill the purpose(s) for processing your data. We will delete your personal data, when they are no longer required in relation to the purpose of our collection of your personal data, e.g. when we no longer need you as a contact as we have been notified that you have left your job position at your employer. If you would like to receive more detailed information on our retention policy, please contact us by using the contact information in section 2 above. 7. YOUR PRIVACY RIGHTS Pursuant to the GDPR, as a result of our processing of your personal data, you may exercise a number of rights. They are: • The right to access your personal data • The right to have us rectify (correct) your personal data • The right to have us delete your personal data • The right to restrict our processing of your personal data • The right to data portability • The right to object to our processing These rights may, however, be subject to conditions and/or exemptions, e.g. to ensure other people’s privacy, trade secrets, intellectual property rights or to comply with a legal obligation. If you would like to exercise one or more of your rights, please contact us by using the contact information in section 2 above. 8. RIGHT TO LODGE A COMPLAINT If you have any questions, comments or requests in relation to how we use your personal data, please let us know by contacting us using the contact information described in section 2 above. If you, however, are still not satisfied with the way we use your personal data, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet). You can contact the agency by using the following contact information: Datatilsynet Borgergade 28, 5 DK-1300 Copenhagen K Tel: (+45) 3319 3200 Email: dt@datatilsynet.dk 9. CHANGES TO THE PRIVACY NOTICE We may update this notice from time to time by publishing a new version at www.demantinvest.com. This privacy notice was updated on 25 November 2019.