Privacy Description of file required by Personal Data Act (523/1999) 10§ Controller: Abloy Oy (hereinafter “Abloy”) Business ID: 0774324-5 Wahlforssinkatu 20 FI-80100 JOENSUU Tel. +358 20 599 2501 Fax +358 20 599 2209 Contact information of a person responsible for the file: marketing(at)abloy.com Tel. +358 20 599 2501 (Abloy’s switchboard) Name of register: Abloy’s marketing register Purpose of use of the register: The personal data is used for direct marketing, sales and other similar deliveries requiring an address (e.g. marketing surveys) from Abloy and other companies within the same group. Information included in the register: First name, surname, contact information, title and operative responsibilities as well as responsibilities related to acquisitions, language, information about the marketing permissions and prohibitions specified by the person, company name, company contact information, the company’s industry, information about participation in direct marketing campaigns. Statutory sources of information: Generally, personal data is collected from people who have voluntarily registered. Personal data can also be collected and updated from the registers of Abloy and other companies within the same group, as well as from public or commercial registers. Disclosure of data: Data can be disclosed for direct marketing purposes if the registered person has not prohibited it separately. Personal data will not be disclosed to parties outside the EU or EEA. Protection of the register: The file has been protected against unauthorized use. Only persons whose tasks require processing the data in the register have access to the register. The register has been protected with personal user IDs and passwords.