How we may share your personal information with others

Where permitted by applicable law, If may share personal information with other third parties, for example, If group companies, other
insurers, reinsurers, insurance- and reinsurance brokers, other intermediaries and agents, appointed representatives, distributors and
financial institutions, securities firms and other business partners.

• accountants, auditors, experts, lawyers and other professional advisors;
• IT support- and hosting service providers including Tietoevry, Microsoft Ireland Operations, HCL Technologies and Puzzel (phone calls and call recordings);
• If IT Services A/S (part of If Group and a sister company to If Skadeförsäkring);
• banks and financial institutions, i.a. payment administration, Lowell (debt collection);
• travel and medical assistance providers (such as Viking, part of If Group and a sister company to If Skadeförsäkring), claim investigators and adjusters;
• claim partners, such as car repair shops, road assistance companies (such as Viking, part of If Group and a sister company to If Skadeförsäkring), glass repair shops, construction consultants, veterinaries; engineers; examiners, health care providers;
• Volvo Car Sverige AB – if provides claims information about the car and the accident to Volvo's accident commission (Sw. Haverikommissionen) with the purpose to develop and improve traffic- and vehicle safety. This also includes contact details to the policyholder, which may be used for Volvo's accident commission to obtain more information about the accident;
• other third party providers that assist us in carrying out our business activities including insurance intermediaries, group representatives for the group insurances and claims preventive services

We may share personal information with companies conducting marketing activities on our behalf and companies analysing customer data for the purpose of marketing activities. Please refer to the section regarding Advanced Analytics.

We may also share personal information with: (a) government or other public authorities (including, but not limited to, workers’ compensation boards, courts, dispute resolution boards, regulatory bodies, law enforcement agencies, tax authorities and criminal investigations agencies) data protection authorities; (b) third party participants in legal proceedings and their accountants, auditors, lawyers, and other advisors and representatives, as we believe to be necessary or appropriate and (c) the Motor insurance bureau (concluded compulsory motor third party liability insurance policies and reported traffic accident claims).

We may share personal information with emergency providers (fire, police and medical emergency services); retailers; medical
networks, travel carriers; credit bureaus; credit reporting agencies; other people involved in an incident that is the subject of a claim.
Where permitted by applicable law, personal information (including details of injuries) may be put on registers of claims and shared with
other insurers. We may search these registers when dealing with claims to prevent, detect and investigate fraud (not used for sales
purposes).

If you benefit from another party’s insurance policy or service arrangement with If (for example, a policy taken out by your employer),
personal information relating to the administration of that insurance policy or service may be shared with that other party.

GSR
We use a claim reporting register (GSR) that is common to the insurance industry. This register contains certain information about the
claim and information about who has requested compensation. This means that we find out if you have previously reported any claim to
another insurance company, occupational pension company or authority that handles similar claims. The purpose of GSR is to provide
insurance companies, occupational pension companies and authorities that handle similar claims with a basis for identifying unclear
insurance claims and other claims. In this way, companies and authorities can counteract the payment of compensations that are based
on incorrect information as well as incorrect payment under several insurance policies for the same claim. The information can also be
used in de-identified or pseudonymised form for statistical purposes and analyses at an aggregated level. The data controller for GSR is
Skadeanmälningsregister (GSR) AB, Box 24171, 104 51 Stockholm, Sweden. See www.gsr.se for more information about the processing of
data that occurs in the register.

Larmtjänst AB
With the purpose to fight insurance related crimes and to support insurance companiess´investigation activities regarding unclear
insurance cases, information may be submitted to Larmtjänst. The information relates to goods reported stolen or missing. For more
information please refer to www.larmtjanst.se.