ENERA INTERNATIONAL PRIVACY NOTICE

Enera International AB (“Enera”, “us”, “our” or “we”) is committed to protecting your privacy. This Privacy Notice describes how we collect and process your personal information when you visit our website or use any of our products, apps or services (collectively called the “Services”). Additional terms regarding use of our Services RapidReach and Call&Report are established in the applicable agreement between Enera and the customer.

Keeping your personal information private and secure is our priority. We do not sell or share any of your personal information to any third parties without your consent other than as stated in this Privacy Notice.

*WHY WE COLLECT DATA*
We may use the collected information for a range of reasons, including: to help us in our marketing and promotional efforts, to analyse user behaviour, to handle customer enquiries and support requests, to send release notes, maintenance information or security notifications related to our Services, and to provide, operate, optimize and maintain our Services.

**INFORMATION WE COLLECT**
Which data we collect depends on the context, for example whether you fill in a website contact form, use our online Services (including RapidReach and Call&Report), contact our customer support, or visit our website.

***INFORMATION WE COLLECT FROM YOU:***
We may request data from you, for example when you fill in an online contact form, or when you contact our sales department or customer support. Such data includes basic information, e.g. name, company name, physical address, email address, occupation, location and phone number. Enera will also keep a record of customer’s billing information, purchases, transactional information, Services history and usage, and any communications and responses.

***INFORMATION WE COLLECT AUTOMATICALLY:***
If you visit our websites without filling in any forms, we will collect data about your activities on the website, such as date and time for your visit, viewed pages, duration on a particular page, and location information based on your IP address. We will not collect data that will identify you personally. We do not track customers over time and across third-party websites.

When using our Services RapidReach and Call&Report, certain information is collected automatically, such as information about which device and web browser you use to access the Services, and your use of the Services. This collected data include IP addresses, device type, browser types, log files, and other information regarding your system and connection, and how you use the Services.

***INFORMATION WE COLLECT AND PROCESS ON BEHALF OF OUR CUSTOMERS:***
RapidReach and Call&Report customers may input and store certain personal information in our systems (e.g., communications metadata and communications content). Enera will act as a data processor and will only process such information on behalf of our customers and in accordance with the customer’s instructions, and as defined in our Customer agreements. Enera does not own or control the personal information that is processed. Enera does not have a direct relationship with those individuals whose information may be processed in connection with using RapidReach and Call&Report. It is the customer’s responsibility to obtain consent, provide appropriate notice to relevant individuals, and to comply with applicable data privacy laws.

**INFORMATION WE MAY SHARE**
Information may be shared with our partners and service providers for business purposes which include delivery of our Services, account administration, customer service and support, transaction processing, research and analysis. We require our partners and service providers to maintain the same level of privacy protection as set forth in our own practices.

Statistics of user behaviour (e.g., customers, traffic patterns, etc.) may be shared with our partners. The collected information will not identify any individuals personally or contain any personally identifiable information.

**SECURITY MEASURES AND DATA INTEGRITY**
We will take all reasonable steps to protect your personal information from loss, misuse and unauthorized access, alteration and destruction.
We protect your information using secure technology and our security levels are continuously checked and tested by independent security experts and adapted to new security standards.

All our websites are encrypted, using HTTPS and current encryption protocols to safeguard your information.
When processing personal information obtained via our websites, we will take reasonable steps to ensure that such data is relevant for the purposes for which it was collected, and accurate, complete and current. You may request that we delete, correct or delete such personal information by contacting us (see “Contacting Us” below).
With regards to personal information that we maintain, store or process on behalf of a Customer who uses our online Services RapidReach and Call&Report, anyone who wants access to or wants to correct or delete such data should contact the applicable customer directly.
We may limit or deny access to personal information as permitted by applicable law.

**USE OF COOKIES**
We use cookies and other technologies on our websites, and in marketing emails and maintenance and security notifications (sent via email), to compile information about website traffic and your interaction with emails from us.
Our Services RapidReach and Call&Report use cookies to enhance security and to support functionality.

**CROSS-BORDER TRANSFER AND ONWARD TRANSFER TO THIRD PARTY**
Enera operates world-wide and has a global network of resellers, partners and service providers. Your personal information may be collected, stored and processed by us in any country where we operate or have service providers. In these countries, data protection rules may be different than those in your country. In all cases, our collection, storage and processing of your personal information will be in accordance with the purposes set out in this Privacy Notice.
In cases of onward transfer to third parties in the US, we will not transfer any personal information without first making sure that the third party adheres to the principles set forth in the Privacy Shield.

In the event Enera sells or transfers all or a portion of its business or assets, or in the event of a reorganization, dissolution or liquidation, we reserve the right to transfer also personal information.

Enera may transfer personal information to third party as permitted or required by applicable law.

**YOUR RIGHTS**
Depending on applicable data protection laws and, in particular, if you are located in the EU, you have certain rights relating to your personal information. These rights may include to:

• be informed about the processing of your personal information;
• access your personal information held by us;
• correct incorrect, inaccurate or incomplete personal information;
• to request that your personal information is deleted when it is no longer needed
• object to the processing of your personal information for marketing purposes;
• restrict our processing of your personal information in specific cases;
• transfer your personal information to another controller, to the extent possible;
• request that decisions based on automated processing of your personal information, that concern you or significantly affect you, should be made by natural persons (note: no such automated processing takes place on Enera’s websites);
• to withdraw your consent at any time where we collect, process or share your personal information based on your consent.

To exercise the above rights, please contact us using the contact details detailed under “Contacting Us” below.

You can opt out of receiving marketing emails, release notes, and security and maintenance notifications from us at any time, by clicking the ‘unsubscribe’ link at the bottom of our messages. You can also send an opt out requests to: support@enera.com. Note that it may take up to three working days for your contact information to be removed from our lists. Communication such as account notifications and billing information related to our Services RapidReach and Call&Report are considered necessary for account management; it is not possible to opt out of these messages without terminating your Service account.

If an Enera customer has submitted your data to us and you wish to exercise any rights you may have under applicable data protection laws, please contact that customer directly.

**CHANGES TO PRIVACY NOTICE**
We will periodically review this Privacy Notice and we reserve the right to change or update this Privacy Notice.

**CONTACTING US**
If you have any questions or comments regarding this Privacy Notice, please contact Enera:

Enera International
Nämndemansgatan 3
431 33 Mölndal
Sweden

Tel: +46 31 680780
Data Protection Officer: dpo@enera.com