Greystone Energy Systems Inc. is sensitive to privacy issues on the Internet and is committed to protecting your privacy on our Web sites. Greystone Energy Systems Inc. takes reasonable precautions to keep all information obtained from our online visitors secure against unauthorized access and use and we periodically review our security measures. We have established the following guidelines to explain the way in which we use information gathered from visitors to our Web sites:

In general, you can visit Greystone Energy Systems Inc. on the Web to access information while remaining anonymous and not revealing any personal information. There are times, however, that we will ask you to provide certain information (such as your name and address) so that we may understand you better and make you aware of any new products that you might be interested in. Our Web server may also collect the domain names, but not the e-mail addresses, of visitors to our Web site. We use information to monitor and assist us in improving the content on our Web site.

Forms you fill out to interact with our company may request that you give us sensitive information such as your e-mail address, mailing address, telephone number. Whenever that is the case, Greystone Energy Systems Inc. will only use this information for direct business purposes.

Note that our Web site contains links to other non-Greystone Energy Systems Inc. Web sites. Although we try to link only to Web sites that share our concern for customer information privacy, we are not responsible for their content or their privacy practices.

You can help us to maintain the accuracy of your information by notifying Greystone Energy Systems Inc. of any change to your mailing address, phone number or e-mail address.

Greystone Energy Systems is owned by Latour Industries AB (www.latourindustries.se).

Latour Industries AB
GDPR Statement

BACKGROUND
The General Data Protection Regulation (GDPR), which comes into force on May 25, 2018, is a change for many companies including Latour Industries AB and its subsidiaries. We do not only see it as a legal requirement but an opportunity for us to review internal processes and implement appropriate technical and organizational measures that strengthen us our business.

GDPR gives us an opportunity to review our internal routines, to strengthen our personal data protection and an opportunity to change our companies for increased efficiency, increased customer value and ultimatelyincreased profit for our owners.

IMPLEMENTATION AND ORGANIZATION
Latour Industries has appointed a project manager or DPM (Data Protection Manager) for the introduction of GDPR. Respective subsidiaries have nominated a DPC (Data Protection Contact) for the individual subsidiary. The purpose is to coordinate the work to effectively introduce GDPR in all our companies. We can benefit from economies of scale and standardize processes and procedures for the entire Latour Industries AB business unit.

Latour Industries DPM informs, advises, coordinates and monitors the introduction of GDPR. Our companies will implement the necessary changes as well as introduce the support systems needed to meet or exceed the requirements of the new legislation.

We work closely with our subsuppliers to ensure that they also comply with the new legislation considering that they in many cases affect our business.

EXAMPLES FROM OUR COMMON GDPR POLICY

PERSONAL INFORMATION THAT WILL BE TREATED

Latour Industries will work on the principle of data minimization and only collect the personal data necessary to conduct our business.

PURPOSE OF TREATMENT OF PERSONAL DATA
The purpose of processing personal data will in all cases be defined. No personal data will be processed without a clarified purpose.

LEGAL BASIS FOR TREATMENT OF PERSONAL DATA
Latour Industries AB will in all cases define the legal basis for processing personal data.

TIME PERIOD FOR TREATMENT AND STORAGE
We will only process or store personal data as long as there is a purpose for the data or, for example, when there are legal requirements for storing personal data.

THIRD-PARTY TREATMENT AND TRANSFER OF PERSONAL DATA
Personal data will be handled in some cases by third-party sub suppliers. Agreements will always be established and we will strive not to transfer personal data to non-EU or EEA countries.

YOUR RIGHTS AS A PRIVATE PERSON
It will be offered the opportunity to obtain registry extracts or request erasing according to GDPR after the law has entered into force.

CONTACT
If you have further questions regarding GDPR and our implementation, you are welcome to contact the following persons

Tomas Löf
Data Protection Manager
Latour Industries AB