AACA Group AB shall, through appropriate technical and organizational measures, limit access to personal data and only grant authorization to such personnel who need to have access to the personal data to fulfill their obligations.

AACA Group AB shall process personal data with confidentiality in accordance with the Public Access and Confidentiality Act (2009:400), and that persons authorized to process personal data at AACA Group AB have entered into a special confidentiality agreement or have been informed that a special duty of confidentiality exists in accordance with agreements or applicable law.