(1) Companies and intermediaries may process stockholders’ personal data for purposes of identification, of communicating with stockholders, companies and intermediaries, of exercising the shareholder rights, of maintaining the share register and of cooperating with the stockholders.
(2) Where the companies or intermediaries become aware that a stockholder no longer is a stockholder of the company, they may store that stockholder‘s personal data for no longer than twelve months, unless stipulated otherwise by law. Storage of the data for a longer period by the company moreover is permissible for as long as this is required for legal proceedings.
(3) By disclosing information regarding the identity of stockholders to the company, or to intermediaries obligated to forward such information, in accordance with section 67d, intermediaries will not be violating contractual or legal prohibitions.
(4) Anyone who was identified by incomplete or incorrect information as a stockholder may demand that the company and the intermediary providing said information rectify the data without undue delay.