Fingerprints' whistle-blower policy

Background

Employees and others who are covered by the Whistle-blower Function Act because they operate under the corporation of Fingerprint Cards AB can, as below, draw the attention of those around them to any misconduct in work-related contexts.

We strive to have an open business climate, high business ethics and healthy employees. Our employees, customers and suppliers are our most important sources of insight into any shortcomings that need to be corrected.

As we run a value-driven business, we want anyone who suspects an irregularity that is contrary to our values, business ethics or applicable legislation to have the opportunity to be heard without fear of reprisals. You can choose to provide your information anonymously. To protect whistle-blowers, this is our whistle-blower policy with associated reporting function.

Whistle-blowing

Whistleblowing means to draw the attention of management to irregularities such as potentially illegal and/or unethical activities.

What can be reported?

This function can be used to report suspicions of serious irregularities. Serious irregularities include:

- financial crime such as bribery, theft, fraud, forgery, accounting fraud and other violations of accounting and tax legislation

- a conflict of interest between an employee and the employer

- other serious irregularities relating to the vital interests of the company where the employee works or the life and health of individuals, such as serious environmental crimes, major deficiencies in workplace safety and serious forms of discrimination and harassment.

Who can report?

The reporting procedure can be used by all employees (regardless of form of employment) in the companies listed above. Suppliers, customers, shareholders, interns and former employees, etc. can also use the function.

How are other matters reported?

Other types of cases such as disputes, errors, complaints, minor crimes, dissatisfaction with salary and the like do not constitute whistle-blower cases and should not be reported via this system. These matters should primarily be reported to the immediate manager or other member of the management team.

reporting

To ensure your anonymity, a reporting tool is provided by an external and independent party. The reporting channel is encrypted and password-protected. You never have to give your identity if you don't want to. You can choose to report as follows:

Reporting tools:https://fingerprint.whistlelink.com/

Phone: +46 (0)10-172 00 00 (switchboard)

Physical meeting: Please call in or notify via the reporting tool and state that you wish to meet in person

- You do not need to have evidence of your suspicion, but no accusation may be made with malicious intent or with the knowledge that the accusation is false

- It is important that you describe all the facts of the case, including the circumstances that you believe are less important

- Please elaborate on your claim carefully and attach anything that may be relevant.

who recives the notification

All reports are received by our Ethics Committee, which consists CEO, CFO, HR, Legal and board member. In cases where the reports concern a person on the ethics committee, or if external expertise is needed, investigations can also be carried out by an external actor with extensive experience of whistle-blower cases and related investigations. No information about you as a whistle-blower will be disclosed unless you have given your consent to this. You choose whether you want to be completely anonymous to the independent actor's investigators or if you want to say who you are.

feedback

Within a week of your report via the reporting tool, you can log in again with your personal login and password to see any follow-up questions/comments from our ethics committee. You can follow up on your case via the reporting tool if you have written down the case number and the code you receive when you submit your report. Log in regularly as the investigators may need to ask you additional questions and in some cases want to act quickly. Within three months at the latest, you will receive a report on the status of the case.

personal data and anonymity

We pay great attention to the protection of personal privacy. The rights of persons involved in cases in the whistleblowing process are protected under applicable data protection laws. Personal data included in the case management and investigation documentation will be deleted after the investigation has been completed, with the exception of those cases where applicable laws state that personal data must be saved. For other information, please refer to our Privacy Policy.

abuse

We will investigate all cases that are alerted. It is important that every individual who raises the alarm really suspects that serious misconduct exists. We take knowingly false or malicious accusations seriously and may take disciplinary action against anyone who maliciously accuses someone else.

Responsibility

The person responsible for this policy is Caroline Krüger (CHRO). The policy is revised annually.