Code of Conduct - English 1
2. 3 Protecting Assets & Information Protection o
f Employee Personal Data We take great care to protect the personal data of our employees from unauthorized use or disclosure. Access is strictly limited to individuals with a legitimate business need. All collection, use, and transfer of personal data must comply with applicable laws and GDPR. This includes data relating to employees, job applicants, consultants, and interns. Protection of Customer and Business Partner Data We value the trust that our customers and partners give us by sharing their personal data. We will always process such data in a way that is legitimate and worthy of that trust. We commit to being open about what information we collect, how we use it, who we share it with, and how we protect it. Customer property that contains sensitive or personal data must never be accessed or disclosed without explicit permission. Protection of Information & Assets At Hedin Mobility Group, we share information openly to strengthen collaboration. At the same time, employees must never misuse or disclose confidential information. Confidential information includes non-public details about our operations, results, strategies, business plans, processes, and transactions. This duty of confidentiality continues even after employment or an assignment ends. Licenses and IT Systems Only approved systems and software may be used on company devices. Access to Hedin Mobility Group’s network is restricted to Hedin IT-approved computers, phones, and tablets. Additional software or equipment requires approval from Hedin IT. Given our heavy reliance on digital platforms, and safeguarding them is critical for our legal compliance, financial security, and reputation. Strong password management is essential — passwords must always be kept private and never shared. Respect and Care for Property Hedin Mobility Group provides employees with access to company property — such as facilities, tools, equipment, systems, and intellectual property — as well as, in some roles, property belonging to our customers. All property must be used responsibly, protected from misuse, theft, or damage, and handled with the highest respect. Customer property must never be accessed for personal purposes or used without authorization. When employment or assignments end, all Hedin Mobility Group´s property must be returned. Insider dealing We fully comply with all national and international laws on insider trading. Employees with inside information must never buy or sell financial instruments based on that knowledge, under any circumstances. Hedin Mobility Group AB | Code of Conduct | 21