We process your personal data to comply with the legal obligations set out in corporate laws, as well as announcements to the Danish Financial Supervisory Authority and Nasdaq Copenhagen.

In connection with ALK’s Annual General Meeting, ALK collects, stores, and processes the personal data. This occurs in different respects, as follows:

Purpose: Identification of shareholders and maintenance of the register of shareholders, including the shareholder portal.

ALK will collect and process information about each shareholder, including:

• Name, email address, home address
• Portfolio of shares, voting rights, date of acquisition/sales
• Username and password, account number with VP securities, investor ID and custodian bank

Lawfulness of Processing: ALK processes personal data in accordance with:

• Article 6(1)(c) of GDPR to comply with obligations and shareholder’s rights set out in section 50 of the Danish Companies Act
• Article 6(1)(f) of GDPR for shareholders identification to be able to answer their request and to communicate with them (legitimate interest)

Storage period:

ALK will retain your personal data for up to 5 years plus the current financial year after you no longer own shares in ALK.

Purpose: Convening and the holding of the Annual General Meetings.

ALK will process personal data to invite shareholders to the Annual General Meetings and enable them to exercise their rights at the meetings, issue proxies, and vote by post.

ALK processes personal data from shareholders' advisors so that the advisor can attend the Annual General Meeting. In addition, ALK processes this information to issue admission cards to shareholders, proxies, and advisors.

ALK will collect and process information about each shareholder, including:

• Name, email address, home address
• Attendance at the Annual General Meeting, advisor’s attendance at the meeting
• Proxies, votes cast, including vote by post and portfolio of shares

Lawfulness of Processing: ALK processes personal data in accordance with:

• Article 6(1)(c) of GDPR to comply with legal obligations in section 93 of the Danish Companies Act

Storge period:

ALK will keep your personal data for up to 5 years plus the current financial year after you no longer own shares in ALK.

The notice, including the agenda with complete proposals and certain auxiliary documents (such as, but not limited to, proxy forms and correspondence voting forms), is published as a company announcement through Nasdaq Copenhagen and on ALK’s website. It is also distributed by email to shareholders who have requested it and will remain publicly available on our website for fifteen years.

Additionally, ALK may retain the notice, agenda, and auxiliary documents for as long as necessary to protect and pursue the interests of ALK and its shareholders. Materials documenting the company’s history, decisions made, etc., are retained for as long as ALK exists.

Purpose: Screening of individuals subject to EU, UK, or US sanctions.

ALK is legally obligated to ensure that individuals subject to economic sanctions imposed by the European Union, the United Kingdom, or the United States of America do not exercise shareholder rights during the Annual General Meeting. To fulfil this obligation, ALK may process personal data of shareholders participating in the Annual General Meeting by screening their information against relevant sanctions lists.

ALK will process the following personal data of shareholders based on information registered in the shareholder register:

• Name and home address

Lawfulness of Processing: ALK processes personal data in accordance with:

• Article 6(1)(c) of GDPR to comply with applicable sanctions laws and regulations, which include preventing sanctioned individuals from exercising shareholder rights.
• Article 6(1)(f) of GDPR as ALK has a legitimate interest in ensuring compliance with international sanctions regimes, maintaining corporate integrity, and mitigating legal and financial risks.

Storage period:

Personal data collected and processed for sanctions screening will be retained only for as long as necessary to fulfil the legal obligations and purposes stated above.

Purpose: Confirmation of standing for election.

Persons standing for election at the Annual General Meeting must confirm their eligibility, along with information about other managerial responsibilities.

In this context, and for the purpose of verifying the candidate’s identity and eligibility, ALK will collect and process personal data, including the candidate’s name and managerial positions held.

Lawfulness of Processing: ALK processes personal data in accordance with:

• Article 6(1)(c) of GDPR to comply with Danish corporate law as set out in section 112 of the Danish Companies Act
• Article 6(1)(f) of GDPR for processing personal data to ensure transparency in corporate governance, facilitate the election process, and enable subsequent regulatory registrations (legitimate interest)

Storage period:

Personal data collected and processed will be retained for as long as necessary to protect and pursue the interests of ALK and its shareholders.

Purpose: Submitting questions and proposals prior to the Annual General Meeting, handling of questions and exercising the right to speak at the Annual General Meeting as well as preparation of the minutes of the Annual General Meeting.

If questions are answered in writing prior to the Annual General Meeting, ALK will process your information in order to present the questions, answers, and the name of the person who submitted the question at the Annual General Meeting.

If a proposal regarding a specific issue is included on the agenda for the Annual General Meeting, ALK will process the name of the person and the proposal.

If you exercise your right to speak, your personal information will be recorded in the minutes.

Lawfulness of Processing: ALK processes personal data in accordance with

• Article 6(1)(c) of GDPR to comply with legal obligations on section 78, 90, and 101 of the Danish Companies Act
• Article 6(1)(f) of GDPR (legitimate interest) to be able to identify shareholders and proxies in order for them to present proposals and questions prior to and during the Annual General Meeting and to exercise their right to speak

Storage period

• ALK will store minutes of the Annual General Meeting until it is no longer necessary for ALK to protect ALK and shareholder’s interest, including for the purpose of documenting the deliberations and resolutions passed at Annual General Meeting.

Purpose: Audio and/or visual recording.

General Annual Meetings are audio and/or visually recorded, and ALK may webcast the Annual General Meeting and maintain a recording on ALK’s webpage.

ALK will process your personal data, such as your voice and image, if you exercise your right to speak during the Annual General Meeting.

The recording will include the agenda (including proposals from shareholders) and may also capture questions or statements submitted in writing during the meeting.

Lawfulness of processing: ALK processes your personal data in accordance with

• Article 6(1)(f) of GDPR (legitimate interest) in processing the recordings to use them to prepare the minutes and in documenting the proceedings at the Annual General Meeting and making it available to shareholders and media who are unable to attend or view the live webcast of the Annual General Meeting.

Storge period

• ALK will keep a recording publicly available on demand on its website for a period of up to 5 years after the Annual General Meeting

a) Right to access

     You have the right to request access to your personal data held by ALK, as well as additional details.

b) Right to rectification

      You have the right to request correction of inaccurate or incomplete personal data.

c) Right to erasure

     You have the right to request the deletion of your personal data, except when retention is required by       law.

d) Right to restrict processing

      You have the right to object to restriction of your personal data.

e) Right to object

      You have the right to object to the processing of your personal data.

f) Right to data portability

      In specific situations, you are entitled to receive your personal data in a structured, widely used, and        machine-readable format.

If you would like to exercise any of these rights, please contact us using the contact details provided in section 1.

The purposes for collecting this information on you are:

a) to enable us to proactively communicate and provide information to health care professionals which we believe may have an interest in our products and services

b) to enable us to reactively respond to queries and requests from you or other communications on your initiative

c) to target our communication and invitations to seminars, training and events to you to fit what we believe is of most relevance and interest to you

d) to be able to provide public authorities documentation for our communications and activities targeted at health care professionals.

Some information we may receive from you when we meet in person at conferences or other events, when you interact with us at our website, or when we communicate with each other.

We may also collect data from publicly available sources such as websites, publications, media coverage, or from third party providers, e.g., reference databases like OneKey.

i.       ALK EMPLOYEES & EXTERNAL PROCESSORS

The recipients of your personal data will be employees of entities belonging to the ALK Group and external processors providing specific services and processing personal data on our behalf. They will receive your personal data only on a ‘need-to-know’ basis, subject to confidentiality obligations and after signing appropriate legal agreements.

ii.       INDEPENDENT THIRD PARTIES

When needed, we may disclose your personal data to independent third parties, such as attorneys, public authorities, or third-party auditors. In other situations, such as when using external shipment or payment providers, you will be involved in the process and, where relevant, offered choices regarding the transaction or payment method.

iii.       TRANSFERS OF DATA FROM EU/EEA TO THIRD COUNTRIES

If we share data from the EU/EEA with a company or ALK affiliate in a third country, we will apply contractual clauses that meet EU standards to ensure the receiving company handles personal data appropriately, unless the country where the company operates is already deemed by the EU to offer an adequate level of data protection. More information about such clauses is available here. If data transfers are required in other situations, we will inform you about the specific compliance measures in place to enforce EU law.

If you require further information about on our current data processors established outside the EEA and the safety measures in place to allow for the transfer of personal data, you can request it from us – please send your request to us/our Data Protection Officer.

The General Data Protection Regulation give you rights in relation to our processing of your personal data.

If you wish to make use of your rights, please contact us by using the information stated in section 1.

a) Right to access

    You can request access to the personal data that we have registered about your, as well as a range of additional information.

b) Right to rectification

    You have the right to have inaccurate personal information about you corrected.

c) Right to erasure

    Above you can read about our retention period. In particular cases, you may have the right to have personal data about you erased before our general deletion deadline occurs.

d) Right to restriction of processing

    In certain cases, you may have the right to restrict the processing of your personal data. If you are entitled to restriction, we may only process the information – apart from storage – with your consent, or for the establishment, exercise, or defence of legal claims, or to protect a person or important public interests.

e) Right to object

    You have the right to object about our processing of your personal data. If you aobject to ALK's processing of your personal data for specific reasons to your particular situation. ALK must not further process the personal data unless ALK demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise, or defence of legal claims.

f) Right to data portability

    In certain cases, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to have these personal data transferred from one data controller to another without hindrance.

As part of the recruitment process, ALK collects your personal data. The purpose of processing your personal data is to conduct an effective assessment of your skills, qualifications, and suitability for the advertised position. Furthermore, your personal data is processed to communicate with you throughout the recruitment process. Additionally, the purpose of processing your personal data is to facilitate the handling, selection, and initiation of employment applications for the vacant position.

The processing of your personal data aims to facilitate an effective recruitment process and to evaluate your suitability for the vacant position.

ALK collects personal data that you submit as part of the recruitment process. Personal data includes any information that you provide.

Generally, your personal data will only be disclosed under limited circumstances. The personal data will be disclosed to the extent necessary for the purpose stated in section 2, to ALK entities globally, including subsidiaries in countries other than your country of residence. These locations may have different data protection laws than your country of residence.

Your personal data will be processed by our external provider for our recruitment tool, EasyCruit. EasyCruit acts as a data processor, and a data processing agreement has been entered into to protect your personal data. In addition, your personal data will be disclosed to public authorities and law enforcement agencies as required by applicable law.

Your personal data will not be transferred to third countries outside the EU or EEA. We will ensure that any third parties with whom we may share your personal data are required to protect your privacy and comply with applicable data protection laws.

Under the General Data Protection Regulation, you have certain data protection rights:

a) Right to access

    You have the right to request access to your personal data held by ALK, as well as additional details.

b) Right to rectification

    You have the right to request correction of inaccurate or incomplete personal data.

c) Right to erasure

    You have the right to request the deletion of your personal data, except when retention is required by law.

d) Right to restrict processing

    You have the right to request the restriction of your personal data.

e) Right to object

    You have the right to object to the processing of your personal data.

f) Right to data portability

    In specific situations, you are entitled to receive your personal data in a structured, widely used, and machine-readable format.

If you would like to exercise any of these rights, please contact us using the contact details provided in section 1.

We collect information about you to enable you to share information and receive updates.

The personal data is obtained directly from you.

i.       ALK EMPLOYEES & EXTERNAL PROCESSORS

The recipients of your personal data will be employees of entities belonging to the ALK Group and external processors providing specific services and processing personal data on our behalf. They will receive your personal data only on a ‘need-to-know’ basis, subject to confidentiality obligations and after signing appropriate legal agreements.

ii.       INDEPENDENT THIRD PARTIES

When needed, we may disclose your personal data to independent third parties, such as attorneys, public authorities, or third-party auditors. In other situations, such as when using external shipment or payment providers, you will be involved in the process and, where relevant, offered choices regarding the transaction or payment method.

iii.       TRANSFERS OF DATA FROM EU/EEA TO THIRD COUNTRIES

If we share data from the EU/EEA with a company or ALK affiliate in a third country, we will apply contractual clauses that meet EU standards to ensure the receiving company handles personal data appropriately, unless the country where the company operates is already deemed by the EU to offer an adequate level of data protection. More information about such clauses is available here. If data transfers are required in other situations, we will inform you about the specific compliance measures in place to enforce EU law.

Under the General Data Protection Regulation (GDPR), you have certain data protection rights:

a) Right to access

    You have the right to request access to your personal data held by ALK, as well as additional details.

b) Right to rectification

    You have the right to request correction of inaccurate or incomplete personal data.

c) Right to erasure

    You have the right to request the deletion of your personal data, except when retention is required by law.

d) Right to restrict processing

    You have the right to request the restriction of your personal data.

e) Right to object

    You have the right to object to the processing of your personal data.

f) Right to data portability

    In specific situations, you are entitled to receive your personal data in a structured, widely used, and machine-readable format.

If you would like to exercise any of these rights, please contact us using the contact details provided in section 1.