1.       Purpose

In compliance with the European Union General Data Protection Regulation (GDPR)[1], below are LNT Marine’s policy for storing, managing and protecting personal information you provide to us (“Personal Information”) either as an employee, a person seeking employment in the LNT Marine group or by accessing the LNT Marine website (www.lntmarine.com ).

2.       Responsibility

On behalf of the entire LNT Marine group, responsibility for the Personal Information lies with the management of LNT Marine, with its group headquarters located at Bragernes Torg 1, 3017 Drammen, Norway. We confirm that we are, being located in Norway, obliged to comply with the European Union GDPR.

3.       What information we collect as an employer

In order to fulfill our obligations as an employer, we are obliged to collect the following Personal Information about you:

• Name
• Social security number[2]
• Gender
• Address
• Telephone number
• Next of kin details
• E-mail address
• Job Applications from you to us
• CV (for current employees and potential employees)
• Diplomas, transcripts, certificates related to your education and skills (copies)
• Driver license (scanned copy)
• Correspondence received from public authorities as employer
• Correspondence between you and LNT Marine somehow related to your employment and the exercise of your work

In addition, we keep backup of all activity on the company servers as well as cloud-based applications like SharePoint and Outlook. This means that any Personal Information you may include in e-mails or in other documents, is stored according to our backup routines.

4.       How we use the information we collect

As an employer (or future employer) any Personal Information we collect from you may be used to fulfill our obligations as an employer, i. e. being able to pay correct salary and withholding taxes, as well as comply with other requirements in the legislation (statistics, employer’s tax etc.).

As a consequence of your use of our website, any Personal Information we collect will not be stored for any other purpose than what is normal business practice for websites of a similar nature providing information to you.

Your Personal Information will not be sold, exchanged, transferred or given to any company outside LNT Marine group or our trusted third-party service providers for any reason whatsoever, without your consent.

If we store your Personal Information for any of the reasons mentioned above, we will strive to keep your Personal Information accurate. In order to maintain data integrity, we have implemented management processes and policies, and through our service providers’ necessary technology. We will provide you with access to your Personal Information when reasonable, or in accordance with relevant laws, including making reasonable efforts to provide you with online access and the opportunity to change your Personal Information. To protect your privacy and security, we will take steps to verify your identity before granting access or making changes to your data. Requests to delete Personal Information are subject to any applicable legal and ethical reporting or document retention obligations. To access and/or correct any Personal Information, please contact the HR department.

5.       With whom we share the information we collect

Since we operate globally, it may be necessary to transfer, store and process Personal Information in other countries in which we or our affiliates, subsidiaries or service providers maintain facilities. The data protection and other laws of these countries may not be as comprehensive as those in the European Union − in these instances we will take steps to ensure that a similar level of protection is given to Personal Information. Your consent to the transfer of your Personal Information to countries outside the European Union is assumed given by reading this policy and not expressing any objections thereto.

We do not sell, trade or otherwise transfer Personal Information to outside parties (except necessary transfer to the third parties with whom we have contracted to provide services to us, as detailed in the section below).

Our general data service provider is Netsolution (www.netsolution.no ) and for salaries we use Oseberg Services (www.osebergservices.no ). Both companies operate in accordance with GDPR. Below you can find the links to these two companies and their GDPR policies.

Also Evidi (www.evidi.no ) has access to our MS Dynamics NAV as our ERP system partner, and Cloud Connection (www.cloudconnection.no ) has access to our SuperOffice. Both operate in accordance with GDPR.

In Poland, HK Finance (www.hk-finance.pl ) provides accounting and salary services. As Poland is an EU country, also this company is in line with GDPR.

Also, we may release your Personal Information when we believe release is appropriate to comply with the law, enforce our website policies or protect ours or others’ rights, property or safety.

6.       How long do we retain the information we collect?

LNT Marine will retain Personal Information if you are employed by us as long as legislation requires us to keep it. Thereafter, information will in general be destroyed. We may keep job applications and/or CVs from persons we consider hiring later. If you have accessed our website or sent us a message via email, we will only retain any Personal Information for as long as is normal business practice and in accordance with GDPR. At any time, you may request to view, change and update your Personal Information by emailing us at post@lntmarine.com . You can also request that we will cease processing, correct errors or that we will erase Personal Information by e- mailing us at post@lntmarine.com . Within the legal boundaries, we will comply with such requests.

7.       How do we safeguard and transfer your information?

We are committed to use our reasonable efforts, in accordance with market best practices, to ensure the security, confidentially and integrity of the Personal Information. Access to the Personal Information is based on the ‘least to know’ concept in combination with the software’s embedded access control system based on role definitions, both ensuring only authorized access to the Personal Information. To protect the privacy of any Personal Information, we are using data hosts (service provider) with state-of-the- art security measures. Although we take steps to safeguard such information, we cannot be responsible for the acts of those who gain unauthorized access, and we make no warranty, expressed, implied or otherwise, that we can prevent such access. If a password is used to help protect your accounts and Personal Information, it is your responsibility to keep your password confidential.

8.       What are your rights?

You may contact us at post@lntmarine.com (or the HR department) any time and request to access, delete, change or update any personal data relating to you (for example, if you believe that your Personal Information is incorrect, you may ask to have it corrected), but if you are employed by LNT Marine, we are obliged to keep some information.

If you wish to raise a complaint on how we have handled your Personal Information, you can contact us as set forth below.

9.       Minors

Our website, products and services are all directed to people who are above the age of 18. In the event that we become aware that a user under the age of 18 has shared any Personal Information, we will discard such information. If you have any reason to believe that a minor has shared any Personal Information with us, please contact us at post@lntmarine.com .

10.     Updates or amendments to the Privacy Policy

We may revise this Privacy Policy from time to time, in our sole discretion, and the most current version will always be posted on our website. We encourage you to review this Privacy Policy regularly for any changes.

11.     Contacting Us

If there are any questions regarding this Privacy Policy or the information that we collect about you, or if you feel that your privacy is not treated not in accordance with this Privacy Policy, you may contact us at post@lntmarine.com .

Drammen, January 5th, 2024

Kjetil Sjølie Strand CEO

[1] European Union regulation (EU) 2016/679 (General Data Protection Regulation) is meant to harmonize data privacy laws across Europe (including the EEA countries, like Norway), and came into force May 25th, 2018

[2] «Personnummer»