Effective Date: November 2024

Hermana Holding (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, share, and protect your personal data when you visit our website, interact with us, or use our services.

Company Information:

• Company Name: Hermana Holding
• Company Address: Karenslyst Allè 6, Oslo, Norway, 0278
• Contact Email: ir@hermanaholding.com
• Data Protection Officer (DPO): [Insert DPO Contact Information]

1. What Data We Collect

We collect personal data to improve our services and communications. The types of personal data we collect include:

• Contact Information: Name, email address, phone number, job title, and company.
• Technical Data: IP address, browser type, device information, and cookies (refer to our Cookie Policy for details).
• Communication Data: Information you provide when contacting us through our website forms, email, or otherwise.
• Marketing Preferences: Your consent to receive marketing materials, newsletters, or other communications.

2. How We Collect Your Data

We collect personal data in the following ways:

• Direct Interactions: When you fill out forms on our website, subscribe to our newsletter, or otherwise communicate with us.
• Automated Technologies: We automatically collect certain technical data through the use of cookies and similar tracking technologies.
• Third-Party Sources: Occasionally, we may receive data from third-party analytics providers or public databases.

3. Why We Process Your Data

We process your personal data based on the following lawful grounds:

• Performance of a Contract: To provide our royalty financing services.
• Legitimate Interests: To maintain communication, improve our services, and promote our business offerings.
• Consent: For sending marketing materials or newsletters.
• Compliance with Legal Obligations: To comply with relevant legal obligations.

4. How We Use Your Data

We use your data for the following purposes:

• Service Provision: To engage with stakeholders, partners, and clients in providing our services.
• Communication: To respond to your inquiries or requests.
• Marketing: To provide you with information about our projects, news, and upcoming events if you have opted in to receive marketing materials.
• Website Improvement: To analyze and improve our website performance and user experience.
• Compliance: To comply with legal and regulatory requirements.

5. Who We Share Your Data With

We may share your personal data with the following parties:

• Service Providers: Trusted third-party vendors who assist us with website hosting, IT services, and data analytics.
• Business Partners: Partners who collaborate with us on various projects.
• Legal Authorities: Where we are legally required to share data with regulators or law enforcement agencies.

We ensure that all third parties with whom we share personal data comply with GDPR and implement necessary safeguards.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy. Once data is no longer required, we will securely delete or anonymize it in accordance with GDPR.

7. International Data Transfers

While we primarily store and process your data within the European Economic Area (EEA), we may occasionally transfer your data outside the EEA. When we do so, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place to protect your data.

8. Your GDPR Rights

You have the following rights under GDPR:

• Right of Access: You can request access to your personal data that we hold.
• Right to Rectification: You can request corrections to any inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your personal data where appropriate.
• Right to Restriction of Processing: You can request to limit the processing of your data under certain conditions.
• Right to Data Portability: You can request a copy of your data in a machine-readable format.
• Right to Object: You can object to the processing of your personal data in certain situations, including for marketing purposes.
• Right to Withdraw Consent: If you have given consent for data processing, you can withdraw it at any time.

To exercise these rights, please contact us at ir@hermanaholding.com.

9. Security of Your Data

We take appropriate technical and organizational measures to secure your personal data, including encryption, access control, and regular security audits to prevent unauthorized access, disclosure, or modification of your personal data.

10. Cookies and Tracking Technologies

Our website uses cookies to collect information about how visitors use the site. You can manage your cookie preferences by adjusting your browser settings. For more information, please refer to our Cookie Policy.

11. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact Information

If you have any questions or concerns about this privacy policy or our handling of your personal data, please contact us:

• Email: ir@hermanaholding.com
• Mailing Address: Hermana Holding, Karenslyst Allè 6, Oslo, Norway, 0278