Privatlivspolitik

1. Data Controllers

Nextt & Mason operates across Denmark and Sweden. Depending on your location and the services provided to you, the relevant data controller is:

Nextt & Mason A/S (Denmark)

Niels W. Gades Gade 19

2100 Copenhagen

Denmark

Email: denmark@nexttandmason.com

Nextt & Mason AB (Sweden)

Kärleksgatan 2A

211 45 Malmö

Sweden

Email: sweden@nexttandmason.com

2. Contact

If you have any questions regarding our processing of personal data, please contact us at the relevant email address above. We aim to respond to all enquiries within five business days.

3. Delivery of Our Services

Nextt & Mason provides interim management and executive leadership services across Denmark and Sweden. We process personal data in connection with the following activities:

• Placement of interim management candidates
• Executive search (permanent and interim)
• Project management services
• CFO and financial leadership services
• Leadership advisory and organisational consulting

As part of the Nextt & Mason candidate network, you may have submitted personal data to us. This data is used to match you with relevant interim assignments and leadership opportunities. Your data will only be shared with client organisations in relation to specific, relevant assignments.

Nextt & Mason retains your data in accordance with applicable data retention legislation. The legal basis for processing is the performance of a contract, pursuant to Article 6(1)(b) of the General Data Protection Regulation (GDPR).

Candidate Network

If you are part of our candidate network, you will periodically receive emails about relevant assignments and opportunities. If you no longer wish to receive such communications, you may unsubscribe by clicking the link at the bottom of any email, or by contacting us directly at the relevant email address above.

Newsletter Consent

If you have subscribed to the Nextt & Mason newsletter, you consent to receiving newsletters from us. The legal basis for this processing is your consent, pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time by unsubscribing via the link in any newsletter or by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

We retain your details for newsletter purposes until you unsubscribe.

Processing may also take place on the basis of Article 6(1)(f) GDPR, where the legitimate interest is to communicate with candidates in our database about relevant activities, assignments, and professional events — including sending evaluation forms and administering professional activities.

4. Categories of Personal Data

We process the following categories of personal data:

• Standard personal data: first and last name, email address, postal address, telephone number, and similar contact details for registration in our candidate database
• Professional data: CV, work history, competencies, references, and similar information relevant to matching you with assignments
• For Nextt & Mason employees: payroll data including national identification numbers, as required by law

5. Sources of Personal Data

We collect personal data from the following sources:

• Directly from you
• Public business registers (e.g. CVR in Denmark, Bolagsverket in Sweden)
• LinkedIn and other professional platforms, where applicable
• Referrals from clients or other candidates

6. Disclosure of Your Personal Data

In certain cases, we share your personal data with data processors, including providers of software and IT operations. All data processors are subject to a written data processing agreement requiring them to process your data confidentially and to implement appropriate technical and organisational measures to prevent accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access to your personal data.

We do not sell your personal data to third parties.

7. Retention of Your Personal Data

We retain your personal data in accordance with the following criteria:

• Data is retained for as long as it is necessary for the purposes for which it was collected (see Section 3)
• We delete your data when we no longer need it to fulfil one or more of the purposes described above — taking into account any statutory retention obligations (e.g. bookkeeping legislation) or other legitimate purposes

Candidates who have shown no activity for 10 years will be contacted to confirm whether they wish to remain in our candidate database. In the absence of a response, their data will be deleted automatically. This review is conducted annually, around 20 November each year.

Unsolicited CVs received by email will be deleted from our inbox and the sender asked to resubmit via our website if they wish to be registered in our database. No physical documents containing personal data are stored unsecured; such documents are shredded when no longer in use.

In certain cases, we engage third parties to process data on our behalf, for example in connection with:

• Email newsletter management
• Surveys and contact data management
• Newsletter subscription handling
• Accounting and payroll

All such partners act as data processors, and Nextt & Mason has entered into data processing agreements with each of them, ensuring compliance with applicable data protection rules.

If you leave our website via an external link, we encourage you to review the privacy policy of the destination site.

8. Your Rights

Regardless of whether we process your data as a candidate or as a newsletter subscriber, your personal data is handled securely and confidentially in accordance with applicable law — including the applicable national data protection act and the GDPR. We apply high technical and security standards, and your data is only processed by authorised personnel.

You have the following rights:

• Right of access: you may request a copy of the personal data we hold about you
• Right to rectification: you may request that inaccurate data be corrected
• Right to erasure: you may request that your data be deleted ('right to be forgotten')
• Right to object: you may object to the processing of your personal data
• Right to restriction: you may request that processing be restricted in certain circumstances
• Right to object to direct marketing: you have an unconditional right to object to processing of your data for direct marketing purposes
• Right to data portability: you may receive the personal data you have provided to us in a structured, commonly used, and machine-readable format
• Right to withdraw consent: if processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing
• Right to lodge a complaint: you may always file a complaint with the relevant supervisory authority

Please note that conditions or limitations may apply to some of these rights depending on the specific circumstances of the processing activity.

How to Exercise Your Rights

To access, correct, or delete your personal data held by Nextt & Mason, please contact us at:

Denmark:

denmark@nexttandmason.com — Nextt & Mason A/S, Niels W. Gades Gade 19, 2100 Copenhagen

Sweden:

sweden@nexttandmason.com — Nextt & Mason AB, Kärleksgatan 2A, 211 45 Malmö

Complaints may be directed to the relevant supervisory authority:

• Denmark: Datatilsynet — www.datatilsynet.dk
• Sweden: Integritetsskyddsmyndigheten (IMY) — www.imy.se

9. Updates to This Policy

We reserve the right to update this Privacy & Cookie Policy at any time, for example due to changes in legislation, new technical solutions, new or improved website features, or changes in how we process personal data. We recommend that you review this policy periodically. The most current version is always available on our website.

Cookie Policy

10. What Is a Cookie?

A cookie is a small data file stored on your computer, tablet, or mobile device when you visit a website. Cookies are not programs and cannot contain malware or viruses.

11. How We Use Cookies

Some cookies are necessary for our website to function correctly. Cookies also help us understand how visitors use our site, so we can continuously improve and tailor it to your needs and interests.

We use cookies for the following purposes:

• Necessary cookies: essential for core website functionality
• Functional cookies: remember your preferences (e.g. language settings)
• Statistical cookies: help us understand how visitors interact with the site (e.g. via Google Analytics)
• Marketing cookies: used to show you relevant content or advertisements on other platforms

12. How Long Are Cookies Stored?

The retention period varies depending on the type of cookie. A cookie's lifespan is calculated from your most recent visit to our website. When a cookie expires, it is automatically deleted. The lifespan of each cookie is specified in our full cookie declaration, available on our website.

13. How to Reject or Delete Cookies

You can reject or delete all cookies (including third-party cookies) at any time by changing the settings in your browser. The location of these settings depends on which browser you use. Please be aware that rejecting certain cookies may affect the functionality of our website.

To opt out of Google Analytics tracking specifically, you can install the Google Analytics Opt-out Browser Add-on, available at tools.google.com/dlpage/gaoptout.

Cookies you have previously accepted can be deleted through your browser settings. The exact steps vary by browser (Chrome, Firefox, Safari, Edge, etc.) and device.

Nextt & Mason — Privacy & Cookie Policy