Arktika Capital AB processes your personal data in accordance with applicable laws and regulations. This Privacy Policy explains how we collect and use personal data when you visit our website or contact us, and the rights you have in relation to your personal data.

1. Data controller and contact details

Arktika Capital AB is the data controller for the processing described in this Privacy Policy.

Arktika Capital AB
Registered address: Kungsgatan 58, 111 22 STOCKHOLM
Email: info@arktika.se
Company registration number: 559522-0822

2. Data Protection Officer (DPO)

Arktika Capital AB has appointed a Data Protection Officer (DPO). The DPO supports and monitors our compliance with data protection legislation and also acts as a contact point for the relevant supervisory authorities.

The DPO function is outsourced to Advisense AB.

DPO contact details
Name/Function: Data Protection Officer Cecilia Frank (via Advisense AB)
Email: cecilia.frank@advisense.com

You may contact us or the DPO if you have questions or comments regarding how we process personal data.

3. What personal data we process and why

Depending on your relationship with us or how you interact with our website, we may process the following categories of personal data:

a) When you contact us (e.g. by email or through a contact form)

Personal data: name, email address, message content and any other information you choose to provide.
Purpose: to respond to your enquiry, provide information and manage our communications.
Legal basis: legitimate interests (customer and stakeholder communications) and/or taking steps at your request prior to entering into a contract (where applicable).

b) Recruitment (if you apply for a position or submit an unsolicited application)

Personal data: information you provide in your application (e.g. CV, work experience, education and other relevant information).
Purpose: to administer recruitment processes and assess candidates.
Legal basis: legitimate interests (recruitment) and, where applicable, consent.

c) Website technical data and cookies

Personal data: IP address, device identifiers, browser type, pages visited, timestamps and interaction data (depending on configuration and cookie settings).
Purpose: to operate, maintain and secure the website, improve performance and user experience and, where applicable, perform analytics.
Legal basis: legitimate interests in processing necessary to operate and secure the website; consent where required for non-essential cookies and analytics tools.
For more information, see our Cookie Policy (where applicable).

d) When you hold a savings account with us

Personal data: identification and contact details, application information, account information such as balance, transactions and interest, the account number of your withdrawal account, and customer communications.
Purpose: to manage and administer the product and the customer relationship.
Legal basis: entering into and performance of a contract.

e) When we have acquired non-performing loans

Personal data: identification and contact details, and information about your loan such as outstanding balance, interest and payments.
Purpose: to ensure the efficient and appropriate management of overdue credit exposures.
Legal basis: legitimate interests in ensuring the efficient and appropriate management of overdue credit exposures.

4. Recipients and processors

We may share personal data with:

  • Service providers (e.g. for IT and hosting, website operation, security and analytics) that act as processors in accordance with our instructions and are subject to data processing agreements.
  • Debt collection agencies in connection with the management of non-performing loans.
  • Professional advisers (e.g. auditors and legal counsel) where necessary.
  • Public authorities where required by applicable law, regulation or supervisory decision.

5. International transfers

If personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses and, where necessary, supplementary safeguards.

6. Retention

We do not retain personal data for longer than is necessary for the purposes set out above.
The retention period depends on the type of data and the purpose of the processing, including legal obligations and limitation periods. When the data is no longer required, it is securely deleted or anonymised.

7. Your rights

Under applicable law, you have the right to:

  • Request access to your personal data
  • Request rectification of inaccurate or incomplete data
  • Request erasure in certain circumstances
  • Request restriction of processing
  • Object to processing based on legitimate interests
  • Request data portability (where applicable)
  • Withdraw consent at any time where processing is based on consent (without affecting the lawfulness of processing based on consent before its withdrawal)

To exercise your rights, please contact us at info@arktika.se. We will respond to your
request without undue delay and normally within one month, in accordance with applicable
requirements.

8. Complaints

If you believe that we process personal data in breach of applicable law, you have the right to lodge a complaint with a supervisory authority.
In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).

9. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

10. Updates to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be published on this website.
Last updated: 20 December 2025

11. Contact

If you have questions about this Privacy Policy or our processing of personal data, please
contact us at info@arktika.se.