Bioextrax Privacy Notice
May 2026

Bioextrax takes the protection of personal data seriously and is committed to processing personal data in a lawful, fair and transparent manner. Bioextrax AB (556965-1473) is the data controller for the processing of personal data described in this privacy notice.

HOW AND WHEN WE PROCESS YOUR PERSONAL DATA  
1. WHEN YOU VISIT OUR WEBSITE 

When you visit our website, bioextrax.com, we process the personal data you provide to us via forms, such as your name, email address, company and country. We also use cookies to enhance your browsing experience. More information about our use of cookies can be found in our cookie policy.

Personal data submitted through website forms is processed based on our legitimate interest in responding to enquiries and communicating with website visitors. Where cookies require your consent, processing is based on your consent. You may withdraw your consent to cookies at any time via our cookie settings or by contacting info@bioextrax.com.

2. WHEN YOU SUBSCRIBE TO OUR NEWSLETTER 
When you subscribe to our newsletter, we process the personal data you provide to us, including your name and email address. We use an email service provider to facilitate the distribution of our newsletter, and this provider may also process your personal information on our behalf.

We process your personal data for this purpose based on your consent. You can choose to withdraw your consent and unsubscribe to the newsletter at any time using the links in the e-mail or by emailing info@bioextrax.com.  

3. When you communicate with us
If you contact us by email or otherwise communicate with us, we process the personal data you provide, such as your name, email address, telephone number, and other information included in your communication, in order to respond to your request.

Processing is based on our legitimate interest in handling enquiries and communicating with individuals who contact us. We have assessed that this interest is not overridden by your interests or fundamental rights and freedoms.

We retain correspondence for as long as necessary to handle your request. 

4. WHEN WE HAVE AN EVENT OR WEBINAR 
We process your personal data if you have signed up for and/or attended one of our events or webinars. We do this to give you access to the event or webinar and to follow up on your feedback. For this purpose, we may process your name, email address, phone number and country. If we use an event partner, your personal data may be shared with this party. 

We process the data based on our legitimate interests. This means that we have made the assessment that our interest to give you access to an event or webinar is in line with your interest of attending the same. 

We will store your personal data for one year after you last attended a webinar or event. We do this to be able to send you new invites to events and/or webinars that we think may be of interest to you.  


5. IF YOU ARE A SHAREHOLDER
We process personal data about our shareholders in order to fulfil our obligations towards shareholders, including maintaining the share register, providing information, paying dividends, and issuing notices.

For these purposes, we may process your name, address, personal identity number, telephone number, number of shares, dividend information, country of residence, bank account details, and signatures.

Processing is carried out to comply with legal obligations under applicable company and accounting legislation and, where relevant, based on our legitimate interest in communicating with shareholders and administering shareholder-related matters.

Where processing is based on our legitimate interest, we have assessed that our interest in administering shareholder-related matters is not overridden by your interests or fundamental rights and freedoms.

We retain your personal data for as long as required by applicable legislation. Personal data that we are not legally required to retain will be deleted when you are no longer a shareholder.
 

6. WHOM WE SHARE YOUR PERSONAL DATA WITH 
We share personal data with service providers that support our IT systems, hosting services, and data storage, as well as other suppliers and partners that assist us in operating our business.

Personal data may also be disclosed to public authorities, courts, regulators, or other third parties where required by law, in connection with legal proceedings, or following a request or decision from a competent authority.
 

7. WHERE YOUR PERSONAL DATA WILL BE PROCESSED 
We use various systems provided by external software and service providers. As a result, your personal data may be processed within the EU/EEA as well as in the United Kingdom and the United States.

Transfers of personal data to the United Kingdom are carried out on the basis of an adequacy decision adopted by the European Commission. Where personal data is transferred to the United States or other countries outside the EU/EEA that do not benefit from an adequacy decision, we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.

These measures ensure that transfers are carried out in accordance with applicable data protection legislation. 


8. YOUR RIGHTS 
You have the right to know what personal data we process about you and to request a copy of your personal data free of charge. You also have the right to have inaccurate personal data corrected and, under certain circumstances, to request that we delete your personal data (for example, if the personal data is no longer necessary for the purpose for which it was collected).

You have the right to object to processing based on our legitimate interests and to request restriction of processing while we investigate your request.

Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal does not affect processing carried out before consent was withdrawn.

In certain cases, where processing is based on your consent or a contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used and machine-readable format and have it transferred to another controller.

If you are dissatisfied with how we process your personal data, you have the right to lodge a complaint with a supervisory authority in the country where you live, work, or where you believe a breach has occurred. In Sweden, you can contact the Swedish Authority for Privacy Protection (www.imy.se).

If you have questions about how we process your personal data or wish to exercise your rights, please contact info@bioextrax.com.


9. CONTACT INFORMATION 

Postal address: Skiffervägen 76, 224 78 Lund, Sweden 
E-mail address: info@bioextrax.com 


10. CHANGES TO THE POLICY 
Bioextrax reserves the right to update this privacy notice where necessary to address operational disruptions or to comply with new legal or technical requirements. Any updates will be published on bioextrax.com. Where changes materially affect how personal data is processed, we will provide appropriate notice where required by applicable law.

11. LINKS 
If you follow a link from our website to another website, we recommend that you read the privacy policy applicable to that website. Bioextrax is not responsible for the processing of personal data carried out by third-party websites or organisations.