General Terms and Conditions – Crystal Alarm AB

Last amended: 24 February 2026

1. Definitions

Unless the context or circumstances clearly indicate otherwise, the following terms and expressions shall have the meanings set out below:

A) "Agreement" refers to the document entitled "Agreement Crystal Alarm" together with all annexes specified therein.

B) "User" means the natural persons who are entitled to use the Service on behalf of the Customer. The Customer is fully responsible for its Users' use of the Service.

C) "Client" means the device (e.g. a mobile phone) to which the User has downloaded the Service, or through which the User otherwise accesses the Service.

D) "Customer" means the legal entity that has entered into an agreement with the Supplier for access to the Service.

E) "Supplier" means Crystal Alarm AB, reg. no. 556822-8034, which holds the rights to the Service.

F) "Self-Service Portal" means the part of the Service that enables the Customer to administer its Services independently by logging in at www.crystalalarm.com/sv.

G) "Service" means the service or services and the Equipment provided to the Customer under the Agreement, as further described in the service description (Agreement Annex 2).

H) "Equipment" means a separate alarm button and/or other hardware rented by the Customer from the Supplier, as further described in Agreement Annex 2.

2. The Service

A) To gain access to the Service, the Customer is required to register all Users in the Self-Service Portal. Login credentials for the Self-Service Portal are provided by the Supplier.

B) The Service is a personal alarm delivered via a mobile application and the Equipment, which the Customer may make available to its Users, who may only consist of employees and board members. Additional Users may be accepted subject to a specific written agreement. The Customer is responsible for registering Users.

C) The Supplier provides support for basic usage queries relating to the Service by email on weekdays (excluding public holidays) between 09:00 and 17:00. Support requests shall be submitted either to support@crystalalarm.se or via the form available at www.crystalalarm.se.

D) The Service is compatible only with the iOS and Android operating systems in the versions specified from time to time in the Supplier's online documentation at wiki.crystalalarm.com. Certain Clients may have defects that prevent the Service from functioning. The Customer is responsible for testing the Service immediately upon it being made available by the Supplier.

E) The Service is not intended to replace other security arrangements available in society, but solely to function as a complement to these.

3. Installation

A) The Service is delivered by providing the Customer with login credentials for the Self-Service Portal and making the Service accessible.

B) The Customer is solely responsible for ensuring that accurate and up-to-date information is registered in the Service and that the Service has been tested. The Customer undertakes to test the Service on a regular basis to verify that it functions as the Customer expects. This must be carried out on all Clients (mobile phones) of the makes, models, and operating system versions that the Customer intends to use with the Service, as well as the Equipment, for all Users. The Customer undertakes to notify the Supplier immediately if any error or deviation occurs in the Service.

C) The Customer administers the Users of the Service independently via the Self-Service Portal. Through the Self-Service Portal, the Customer determines, among other things, who shall be Users of the Service and who shall receive alarms from Users. For the Service to function at all, it is required that all information requested in the Self-Service Portal is provided and completed in full by the Customer, and that Users have entered the activation code, approved all functions requested, and completed activation directly in the mobile application on the Client. The Customer shall follow the instructions provided by the Supplier at wiki.crystalalarm.com or communicated in another manner. The Customer acknowledges and accepts that this is a prerequisite for the Service to function as intended.

D) The Supplier does not verify the information registered by the Customer.

4. Responsibility for the Service

A) The Supplier is responsible for ensuring that the Service functions substantially in accordance with the service description.

B) The Supplier does not guarantee that the Service will be provided free of errors, without interruption, and/or without disturbances. Furthermore, the Service may from time to time be wholly or partially unavailable to the Customer while the Supplier carries out necessary maintenance or improvements, and may also be affected by both external and internal circumstances. The Supplier is not responsible for the compatibility of a Client with the Service or for the general functionality of a Client. The Supplier is not responsible for circumstances beyond the Supplier's control, such as failures in communications, battery performance, or other third-party products for which the Supplier has not expressly assumed responsibility.

C) The Supplier undertakes not to disclose to any third party information about the Customer that may be regarded as trade secrets, professional secrets, or otherwise sensitive to the Customer or its Users.

D) The foregoing shall not apply to information required to assist an ongoing rescue operation.

E) The Supplier discloses information about Users to the Customer solely for the purpose of maintaining safety and security. The Supplier provides, for example, statistics on installation, active Users, alarm usage, and test alarms. In order to protect the identity of Users, the Supplier does not disclose information about the locations a particular User visits or other data that could be used to map a User's working day. Exceptions may be made only during an ongoing incident where there is a risk to a User's health.

5. Prices and Payment

A) Payment for the Service is made monthly in advance. Additional orders are invoiced in arrears, transitioning to advance payment as soon as practicable (where possible).

B) Additional orders are placed at the price list applicable at the time of the order.

C) All prices stated in the Agreement are exclusive of VAT.

D) Default interest shall accrue in accordance with applicable law, and an invoicing fee of SEK 100 shall apply.

E) Standard charges for data traffic and SMS traffic may apply to the Customer's use of the Service. The Customer is solely responsible for payment of all fees that a third-party provider may apply from time to time.

F) Charges for SMS sent from the Service to the Customer's Client(s) are applied in accordance with the applicable price list.

G) Payment for the Service shall be made in the manner directed by the Supplier from time to time. Certain services may, at the Customer's request, be invoiced by paper invoice. If the Customer requests a paper invoice, an invoicing fee of SEK 75 shall apply.

6. Customer's Responsibilities

A) The Customer undertakes to use the Service in accordance with the terms of this Agreement and the instructions provided by the Supplier from time to time.

B) The Customer undertakes to store and handle passwords, keys, Equipment, and related instructions concerning the Service in a manner that protects against unauthorised access, and to immediately notify the Supplier if there is a risk that an unauthorised third party has gained access to the Service and related information. The Customer further undertakes to update and amend, as necessary, user details, including contact information, names, phone numbers, alarm groups, and alarm recipients for all Users, via the Self-Service Portal.

C) The Customer undertakes to ensure that Users take proper care of the Equipment and follow the usage instructions provided by the Supplier from time to time. The Customer is responsible for ensuring that the Equipment is not damaged by external influences. Upon termination of the Agreement or upon earlier return of the Equipment by a User, the Equipment shall not be in a worse condition than what is reasonable given its age and normal use. If a defect arises in the Equipment, it shall be returned to the Supplier for replacement or repair within a reasonable time, and no later than one (1) month from the date on which the Equipment was returned to the Supplier for remediation. The Customer shall not be entitled to any other compensation or remedy.

D) The Customer acknowledges and accepts that the Service may only be used for lawful purposes. The Customer undertakes to hold the Supplier harmless from all claims brought by third parties against the Supplier arising from the Customer's and Users' use of the Service, including but not limited to claims relating to the unlawful processing of personal data.

7. Subcontractors

A) The Supplier may engage subcontractors for the provision of the Service and other obligations under this Agreement. The Supplier shall be liable for the work of subcontractors as if it were its own.

8. Hardware Rental

A) The Supplier makes available, within the scope of the Agreement, hardware such as alarm equipment, communication devices, sensors, cameras, accessories, and other technical equipment (the "Equipment") on a rental basis. Unless otherwise expressly agreed in writing, ownership of the Equipment remains with the Supplier. The Customer shall not be entitled to transfer, sublease, pledge, modify, or otherwise dispose of the Equipment without the Supplier's prior written consent.

B) In the event of damage to the Equipment beyond normal wear and tear, or in the event of loss or theft of the Equipment, the Customer shall notify the Supplier without delay. In the event of theft, the Customer shall, upon the Supplier's request, file a police report.

C) The Customer's liability for compensation shall be as follows:

• Repairable damage: Actual repair cost, not exceeding 50% of the Replacement Value.
• Irreparable damage or loss: 100% of the Replacement Value.

D) "Replacement Value" means the residual value of the Equipment calculated by straight-line depreciation over a useful life of seven (7) years, based on the new purchase price applicable at the time of damage, loss, or failure to return the Equipment, as set out in the Supplier's current price list for the relevant equipment.

E) The Replacement Value is calculated as follows:

Replacement Value = Purchase Price × (1 − (number of commenced rental years / 7))

The Replacement Value shall never be less than zero (0) Swedish kronor. In addition to the Replacement Value, reasonable costs for shipping, handling, administration, and installation may apply.

F) "Normal wear and tear" means deterioration resulting from correct and intended use over time. Normal wear and tear does not give rise to any obligation to pay compensation. Damage resulting from negligence, improper use, or external force shall not be considered normal wear and tear.

G) Upon termination of the Agreement, regardless of the reason, the Customer shall without delay return all Equipment in working order, taking into account normal wear and tear. If the Equipment is not returned within thirty (30) days of the termination of the Agreement, the Supplier shall be entitled to charge the Customer compensation equal to the Replacement Value of the Equipment, plus any applicable administrative costs.

H) The Supplier shall furthermore be entitled to charge rent or an equivalent fee for the period until the Equipment has been returned or replaced.

I) The Supplier is not responsible for ensuring that the Equipment is insured during the rental period. The Customer is solely responsible for taking out any necessary insurance covering damage, loss, or theft of the Equipment.

9. Intellectual Property Rights

A) The Supplier reserves all rights, including intellectual property rights, in and to the Service and the software and documentation comprised therein. This Agreement does not transfer any intellectual property right, or any part thereof, to the Customer beyond the limited right of use specified in the Agreement. The Supplier shall own all results arising from the Supplier's performance of its obligations under the Agreement, including new versions, modifications, and new solutions to the Service.

10. Amendments to the Service and Prices

A) The Supplier is entitled, without prior notice to the Customer, to make changes to the Service that do not materially impair the Service for the Customer.

B) In addition to agreed price adjustments and automatic indexation, the Supplier is entitled to make price changes to the Service and any additions thereto upon thirty (30) days' written notice. The Customer shall be entitled to terminate the Agreement, no later than the date on which the price change takes effect, with effect from the end of the contract period for which the Customer has already paid. Continued use of the Service following a price change shall be deemed to constitute the Customer's acceptance thereof.

11. Restriction of Access to the Service

A) If the provision of the Service entails a risk of harm to the Supplier or to another customer, the Supplier may suspend or restrict the Customer's access to the Service. The Customer shall be notified of the restriction of access as soon as reasonably practicable.

B) The Supplier is furthermore entitled to suspend or restrict the Customer's access to the Service if contractual payment has not been made or if the Customer has otherwise breached its obligations under this Agreement.

C) If a circumstance referred to in Clauses A–B persists for more than fourteen (14) days, the Supplier shall be entitled to terminate the Agreement with immediate effect, while retaining the right to keep payments already received. This shall not limit the Supplier's right to take legal action or otherwise assert claims against the Customer.

12. Processing of Personal Data

A) The Customer is solely responsible for ensuring that the personal data processed or stored through use of the Service is handled in accordance with applicable legislation. In respect of personal data processed within the scope of the Service, the Customer is the data controller and the Supplier is the data processor.

B) The Customer acknowledges and accepts that it is solely responsible for ensuring that all processing of personal data carried out within the scope of the Service under this Agreement — including but not limited to the processing of personal data relating to individuals at the Customer and Users of the Service — is in compliance with applicable legislation, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation) ("GDPR"). This includes, for example, the obligation to inform Users and individuals at the Customer to the necessary extent about the processing taking place within the scope of the Service, and where applicable, to obtain consent or ensure that another lawful basis exists for the processing. The Customer warrants that it fulfils all such requirements and that the processing carried out within the scope of the Service is at all times in compliance with applicable legislation. The rights and obligations of the parties with respect to the processing of personal data are governed in further detail by the Data Processing Agreement (Agreement Annex 4).

13. Third-Party Services and Applications

A) The Customer acknowledges and accepts that, for the Service to function, it is required among other things that: (1) Users (including alarm recipients) have a functioning mobile application downloaded to their Client at the time of an alarm; (2) the Customer has registered accurate information for Users (including alarm recipients) and has otherwise followed the instructions provided by the Supplier; (3) the Client (e.g. mobile phone) of a User (including an alarm recipient) must, at the time of an alarm, have a functioning internet connection/coverage and a functioning mobile operator service with coverage at the location where such User/alarm recipient is currently situated; and (4) the settings on a User's (including alarm recipient's) Client (e.g. mobile phone) must conform to the settings specified by the Supplier, and Users must grant all permissions requested by the mobile application, including but not limited to GPS, push notifications, mobile data, and SMS.

B) The Customer is solely responsible for ensuring that the necessary prerequisites for the functionality of the Service listed in Clause A are fulfilled at all times. The Supplier bears no responsibility whatsoever for ensuring that these prerequisites are met.

C) The Service is integrated with third-party applications, websites, and services ("Third-Party Applications") for the purpose of making content and/or services available to the Customer. Such Third-Party Applications may have their own terms of use and privacy policies, and the Customer's use of Third-Party Applications is governed by and subject to such terms and policies. The Customer acknowledges and accepts that the Supplier does not endorse and is not responsible for the behaviour, functionality, or content of any Third-Party Application, nor for any transaction the Customer may enter into with the provider of such Third-Party Application. The Customer is responsible for ensuring that Third-Party Applications do not adversely affect the mobile application provided within the scope of the Service.

14. Limitation of Liability and Claims

A) The Supplier's liability in damages is limited to an aggregate amount equal to fifteen percent (15%) of the fees actually paid by the Customer for the Service under this Agreement during the preceding twelve (12) months. The Supplier shall not in any event be liable for indirect loss, such as loss of profit or other consequential loss.

B) In order not to forfeit its right of action or any other right to assert claims against the Supplier arising from this Agreement or the Service, the Customer must bring any claim no later than one (1) month after the Customer became aware of, or ought to have become aware of, the basis for the claim, and in any event no later than twelve (12) months from the date on which the harmful act was carried out.

15. Force Majeure

If a party is prevented from fulfilling its obligations under this Agreement due to circumstances beyond its control, such as lightning strikes, labour disputes, fire, changes in regulatory requirements, governmental intervention, or errors or delays in services from subcontractors caused by circumstances of the type described herein, this shall constitute grounds for exemption, resulting in the deferral of the time for performance and exemption from liability in damages and any other potential consequences. If the performance of the Agreement is substantially prevented for a period exceeding two (2) months due to any of the circumstances described above, either party shall be entitled to terminate this Agreement in writing. A party wishing to invoke force majeure is obliged to promptly notify the other party in writing. This obligation also applies when the relevant circumstances are ongoing.

16. Consequences of Termination of the Agreement

Upon termination of the Agreement, regardless of the reason, the Customer's right to use the Service shall cease without any further action being required on the part of the Supplier, and all rights granted to use the Service shall automatically revert to the Supplier. The Customer shall therefore immediately cease all use of the Service, and the Equipment shall be returned to the Supplier immediately in undamaged and working condition. The Customer shall also uninstall the Crystal Alarm application from all devices on which it is installed. If the Customer continues to use the Service after the termination of the Agreement, the Customer shall pay full compensation with a surcharge of fifty percent (50%). This does not limit the Supplier's right to take further action in respect of the breach of contract. The Supplier is entitled to take all measures necessary to restrict the unauthorised use of the Service following termination of the Agreement.

17. Marketing

The Customer consents to the Supplier referring to the Customer's use of the product in sales and marketing activities.

18. Confidentiality

The parties undertake, both during and after the term of the Agreement (for a maximum period of five (5) years), to maintain confidentiality with respect to confidential information received in confidence within the scope of this Agreement and the underlying business relationship. Each party undertakes to treat all confidential information as strictly confidential and not to disclose or use it without authorisation. Information shall not be considered confidential where it:

A) is or becomes publicly known other than through a breach of this Agreement; or

B) can be demonstrated to have already been known to the receiving party at the time it was received from the other party; or

C) can be demonstrated to have been received from a third party without any obligation of confidentiality to that third party.

19. Entire Agreement

This Agreement constitutes the parties' complete and exclusive regulation of all matters addressed herein. All prior written or oral commitments and representations are superseded by the terms of this Agreement.

20. Amendments and Additions

Amendments to and additions to this Agreement shall, in order to be binding, be made in writing and signed by both parties.

21. Severability

Should any provision of this Agreement, or any part thereof, be found to be invalid, this shall not render the Agreement as a whole invalid. To the extent that the invalidity materially affects the rights or obligations of either party under the Agreement, the Agreement shall be subject to reasonable adjustment.

22. Assignment

The Customer shall have no right to assign this Agreement or any of its rights or obligations under this Agreement without the prior written consent of the Supplier. The Supplier shall be entitled to assign all or part of its rights and obligations under this Agreement.

23. Governing Law and Disputes

This Agreement shall be governed by Swedish law. Disputes arising in connection with this Agreement shall be finally settled by arbitration in accordance with the Rules for Expedited Arbitrations of the Arbitration Institute of the Stockholm Chamber of Commerce. The seat of arbitration shall be Stockholm. The language of the proceedings shall be Swedish.

Arbitration proceedings initiated pursuant to this arbitration clause are subject to confidentiality. The confidentiality obligation encompasses all information disclosed during the proceedings as well as any decisions or awards issued in connection with the proceedings. Information subject to this confidentiality obligation may not be disclosed in any form to a third party without the written consent of the other party. However, a party shall not be prevented from disclosing such information to the extent necessary to best protect its rights against the other party in connection with the dispute, or if a party is required to disclose such information under statute, regulation, governmental order, stock exchange rules, or equivalent obligations. Any third party to whom this Agreement, or any part thereof, is assigned shall automatically be bound by this arbitration clause.