We use CCTV (camera surveillance) in areas near our entrances. This notice explains why we use surveillance, how we process personal data, and your rights.

Purpose of Processing

We process personal data through CCTV for the following purposes:

• to maintain the safety and security of our premises, employees, and visitors, and

• to prevent, detect, and investigate criminal activity (such as theft, vandalism, or unauthorized access).

Legal Basis

The processing is based on our legitimate interest in ensuring security and preventing crime. We have assessed that this interest outweighs the impact on individuals in this context.

Categories of Personal Data

We process video recordings in which individuals may be identifiable when entering or exiting our premises.

Retention Period

Recorded material is retained only for as long as necessary to fulfill the purposes described above, typically for no longer than 90 days, unless it is required for the investigation of an incident or to comply with legal obligations.

Access and Sharing

Access to CCTV footage is restricted to authorized personnel. Personal data may be shared with law enforcement authorities (e.g., the police) where necessary for the investigation of a crime.

Your Rights

Under applicable data protection law, you have the right to:

• request access to your personal data

• request rectification or erasure

• object to the processing

• request restriction of processing

Please note that some rights may be limited under applicable law, particularly in connection with ongoing investigations.

Contact Information

• Data Controller: Paradox Interactive AB

• Company Registration Number: 556667-4759

• Email: dpo@paradoxinteractive.com

Complaints

If you have concerns about how we process your personal data, please contact us. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.