Privacy and Cookie Notice

Dated February 9th 2023

Loomis AB (“Loomis”, “we” or “our”) safeguards your privacy and the protection of your personal data. This Privacy and Cookie Notice aims to provide you information about how Loomis may process your personal data in accordance with EU Regulation 2016/679 (the “GDPR”).

In case you have engaged with one of Loomis subsidiaries, the subsidiary is responsible for how it processes your personal data. If you have questions or want to exercise your rights regarding the personal data processed by one of our subsidiaries, we kindly ask you to contact these entities directly.

Use of Personal Data

Information how Loomis manages personal information on its website is described below. Loomis is the Controller for the personal information collected by the web site.

Processing Activities

Loomis is the Controller for the personal data collected on this web site. Information concerning how Loomis processes personal data on its website is described below.

Activity	Category of personal data	Purpose & Legal Basis	Retention Period
Cookies	See chart below	Loomis only uses necessary cookies in order to run the website. Loomis has a legitimate interest to use cookies on Loomis website in order to ensure functionality. More information about the cookies used, purposes etc. can be found in the chart “Cookies” below.	See chart below
Distribution service	Contact information (name, surname, email address etc.)	Loomis will process personal data about visitors who provide their consent to receive information about press releases, interim reports, Annual reports or News. This is carried out in order to provide the requested information. Loomis also uses the user’s e-mail address to send a PIN code used to activate their personal profile. This is done to protect the visitor’s identity and to prevent third parties from creating personal profiles. Otherwise, the users e-mail address is not used to send other unsolicited information. You can at any time revoke your consent by clicking “unsubscribe” on the bottom of the email.	Until unsubscribed
CCTV at Loomis AB premises	Camera footage (no audio on) exists.	Loomis has a legitimate interest to monitor its premises in order to prevent and investigate crime. Loomis has setup 5 cameras, pointing towards the entrances (Drottinggatan 82 and Olof Palmes gata 13) of Loomis premises (not the stairway). The monitoring is hosted and disclosed with only Loomis Sverige AB (org. nr 556191-0679).	14 days after recording in order to be able to have traceability.

Information about First Party Cookies

First Party Cookies

Cookie	Placed by	Purpose	Storage time
AWSALB	Loomis.com	AWS ELB application load balancer	6 days
OptanonAlert	Loomis.com	This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and, in some cases, only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one-year lifespan and contains no personal information.	364 days
AWSALBCORS	Loomis.com	This cookie is managed by AWS and is used for load balancing.	6 days
AWSALB	Loomis.com	AWS ELB application load balancer	7 days
OptanonConsent	Loomis.com	This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users’ browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor.	Session

Information about Third Party Cookies

Third Party Cookies

Cookie	Placed by	Purpose	Storage time
AWSALBCORS	otp.investis.com	This domain is owned by Investis, a UK based business. It is used for embedding investor information into a client website.	7 days
ASP.NET_SessionId	otp.investis.com	This domain is owned by Investis, a UK based business. It is used for embedding investor information into a client website.	Session
AWSALB	irs.tools.investis.com	This cookie is managed by AWS and is a classic load balancer cookie used to map the session to the instance.	6 days
AWSALB	otp.investis.com	This domain is owned by Investis, a UK based business. It is used for embedding investor information into a client website.	7 days
OptanonConsent	cdn.cookielaw.org	This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users’ browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor.	364 days
AWSALBCORS	irs.tools.investis.com	This cookie is managed by AWS and is a classic load balancer cookie used to map the session to the instance.	6 days
AWSALBTGCORS	otp.investis.com	This domain is owned by Investis, a UK based business. It is used for embedding investor information into a client website.	7 days
AWSALBTG	otp.investis.com	This domain is owned by Investis, a UK based business. It is used for embedding investor information into a client website.	7 days
OptanonAlertBoxClosed	cdn.cookielaw.org	This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust. It is set after visitors have seen a cookie information notice and, in some cases, only when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one-year lifespan and contains no personal information.	364 days

Sharing personal data

To the extent necessary, Loomis may use suppliers for services that we cannot deliver on our own. Such suppliers can for example be solutions for administration, storage and hosting services, marketing systems or support services relating to the website. Furthermore, we might be obligated by law to share your personal data with authorities such as the police authority, the tax authority or the data protection authority.

In cases where we share information about you with others, we have confirmed that these companies comply with our data protection requirements, and they are not allowed to use the personal data they receive for any other purpose.

Location of personal data

Loomis primary processes your personal data within the EU/EEA. Although, in certain cases, when deemed necessary, we may transfer your personal data outside the EU/EEA. When Loomis, or one of our vendors, transfer your personal data to a third country, we ensure that it is carried out in accordance with chapter 5 in the GDPR. Loomis mainly relies on adequacy decisions as an applicable transfer mechanism. In the event that the European Commission has not deemed the level of protection in a third country adequate, we enter into the European Commission’s Standard Contractual Clauses (SCC) and adopt supplementary measures if necessary to ensure the protection of personal data.

If you have further questions regarding the transfer of your personal data outside the EU/EEA, please contact us by sending an email to dpo@loomis.com.

Security of personal data

Loomis is committed to implement leading data protection standards and has applied organizational and special security techniques and methods to protect your personal data from unauthorized access, unwanted changes and data loss.

Data subject rights

As a data subject, you have several rights. If we process your personal data, and you want to exercise your rights, or have questions about the processing, please contact Loomis Data Protection Officer at: dpo@loomis.com.

Applicable data protection regulations include the following rights:

You are free to request a registry extract and access to a copy of your personal data, request a correction and, in certain circumstances, deletion of your personal data.
You are entitled to request limiting and to oppose the processing of your personal information that we collect for our legitimate interest.
You have the right to file complaints with a data protection authority. Integritetsskyddsmyndigheten is the authority in Sweden that oversees how we as a company comply with the legislation.
If the processing of personal data is based on your consent, you are entitled to withdraw your consent for future processing of your personal information at any time.
You are entitled to transfer or receive a copy of your personal data in a machine-readable format when the legal basis for our processing is based on your consent or to fulfill an agreement with you

Other Information

Loomis is entitled to revise this web instruction at any time and at its own discretion. Loomis also retains the right to change the content of this web site at any time. Changes of this instruction are communicated through dating of this instruction on the front page of www.loomis.com. Upon request Loomis will explain the changes made.

If you have any questions regarding the content of this notice or our use of your personal information, please contact us at:

Loomis AB
Drottninggatan 82, PO Box 702
SE-101 33 Stockholm
Sweden

dpo@loomis.com

About Us

Our Services

Sustainability

Investors

Careers

Newsroom