Name of the register

Raisio plc’s shareholder register

Controller

Raisio plc (Business ID 0664032-4)
Address: Raisio plc, P.O. Box 101 (Raisionkaari 55), FI-21201 RAISIO, Finland
Telephone: +358 2 443 2111

Contact person in matters regarding the register

Ms. Johanna Aho, Shareholders Services
Address: Raisio plc, P.O. Box 101 (Raisionkaari 55), FI-21201 RAISIO, Finland
Telephone: +358 2 443 2111
E-mail: osakaspalvelu@raisio.com

Purpose and legal basis for processing personal data

The purpose of the processing of data is to maintain the shareholder register of Raisio plc based on the data on shares and shareholders included in the book-entry system.The processing of the shareholder register data of Raisio plc is based on legislation (chapter 3, section 15 of the Limited Liability Companies Act).

Categories of personal data and content of the register

• Name of the shareholder, the entity shareholder or the nominee registration guardian
  personal ID number or business ID or other identifier
• address
• telephone number
• e-mail address
• payment details
• tax information
• number of shares by class
• the central securities depository party providing the book-entry account into which shares have been registered

Book-entry account number is requested only in Euroclear Finland ltd’s system for identification and it is not disclosed to Raisio plc.

For a temporary entry, as set out in chapter 5, section 6a of the Limited Liability Companies Act, the following information is included in the shareholder register:

• shareholder’s name and address and personal identification number or some other identifier
• the number of shares per share class that are to be entered into the shareholder register

Retention period of personal data

After a change in ownership the shareholder register is updated with the current shareholder information. Historical ownership information can be found in Euroclear Finland ltd’s system since 16 October 2000.

Sources of information

Data is received from the shareholder either in person or from an entity representative or from the book-entry system.

Transfer or disclosure of personal data

Raisio plc shares are included in the book-entry system, and the company’s shareholder register is publicly available on the premises of Euroclear Finland Oy based on the chapter 3 section 17 of the Limited Liability Companies Act. Anyone can receive a copy of the shareholder register or a part of it for a fee that covers the related expenses.

However, the public access to information does not apply to the individual number of the personal identification number, payment and tax information or information on the transaction account into which the shares that the shareholder is selling have been recorded.

Raisio plc publishes information on its major shareholders (the 100 largest owners) on its website https://www.raisio.com/en/investors/shareholders/shareholders/. The published information includes the following: name, number of shares and votes and changes in ownership within last 12 months. Raisio plc uses Eurolandcom AB as its technical service provider based on a written agreement between the parties.

If the Population Registration Centre, based on section 36 of the Act on Population Information System and Certificate Services Provided by the Population Register Centre (661/2009), has issued an order that restricts the disclosure of information on a shareholder (non-disclosure for personal safety reasons) and the shareholder has notified Raisio plc or Euroclear Finland Ltd of this restriction, information about the shareholder’s address, domicile and other contact details will only be disclosed to such authorities that have the right to access it.

The Limited Liability Companies Act enables the use of personal data in the shareholders’ register for legal purposes, such as journalistic, study and direct marketing purposes. Raisio plc does not disclose personal data to third parties for these purposes, but Euroclear Finland Ltd may disclose data for these purposes, if the person requesting this data commits to Euroclear Finland Ltd’s terms of use. In case a shareholder does not wish his/her personal data in the shareholders’ register to be disclosed for direct marketing or for market research or opinion polls, it is possible to request a ban on direct marketing (in Finland) by notifying Euroclear Finland Ltd.

Personal data of shareholders covered by the ban on direct marketing or shareholders under 18 years of age is not disclosed. Despite of the ban, Raisio plc or a party given a mandate by the company, have the right to send to the shareholder necessary material related to the company and the shareholdings.

Raisio plc uses Euroclear Finland Ltd as an external service provider for the technical implementation and maintenance of the shareholder register and for the processing of personal data. Personal data is transferred to Euroclear Finland Ltd under a written agreement concluded between the parties and to the extent that is necessary in order to provide services.

Personal data is processed outside the EU and EEA in India by the subcontractors (processors) of Euroclear Finland Oy: Capgemini India Private Ltd and Tata Consultancy Services. The processing is based on a contract between Euroclear Finland Oy and the above-listed sub-processors. The contract takes into account the requirements of the EU’s General Data Protection Regulation.

Except as stated above, no data is transferred or disclosed to any third parties or outside the EU or EEA.

Principles for the protection of personal data

Electronic data are kept in databases that are protected by firewalls, passwords and other technical means. Databases and their backups are in locked spaces and access to the data is limited to certain pre-named persons.

Manual material is kept in locked storage and only the employees with the right to process the data based on their work duties are entitled to use the personal data.

The connection from Raisio plc’s browser to the server of Euroclear Finland Ltd is SSL-encrypted.

Data subject’s rights

The Data Subject is entitled to verify what data has been stored about him/her and receive confirmation, if there is not any data about him/her in the file. The Data Subject is entitled to request rectification of inaccurate or insufficient data concerning him or her.

Request shall be made in writing to the person responsible for the register. The data subject must prove his/her identity in an acceptable way.

The Data Subject is entitled to file a complaint with the supervisory authority if the Data Subject considers that personal data has not been processed in accordance with this Privacy statement or the law: Office of the Data Protection Ombudsman, PL 800, 00521 Helsinki, Finland or e-mail at: tietosuoja@om.fi.

Changes

Raisio reserves the right to change this Privacy Statement in order to develop its business operations or in case the legislation changes.