1. Scope

1.1 Below is a description of how AB Carlsson & Möller (hereinafter referred to as the Company/we/us) processes personal data.
1.2 Your privacy is important to us. It is therefore important to us that we protect your personal data and ensure that our processing of it is carried out correctly and legally. It is based on the applicable General Data Protection Regulation (GDPR) and clarifies how we work to safeguard your rights and your privacy.
1.3 In this policy, we explain what types of personal data we may process, the purposes for which we process them, and what choices and rights you have in relation to this.
1.4 The policy concerns the processing of personal data for which the Company is the data controller. This means that we are responsible for the management and processing of your personal data. It also means that it is to us you should turn with questions or comments, or if you wish to exercise any of the rights you have in relation to our handling of your personal data.
1.5 These provisions regarding our processing of personal data apply when we process personal data obtained from you.

 

2. Personal data processed

Our starting point is to not process more personal data than we need and we always strive to use the least privacy-sensitive data. Normally, we do not collect sensitive personal data unless there are legal grounds for doing so, for example in recruitment or employment. Primarily, we process your personal data to fulfil our obligations under agreements, contracts and law, and to conduct customer and market analyses.
Regarding you as a contact person, at a company that buys services from us or is a supplier to us, we may process the following personal data that can be attributed to you:
(a) name
e-mail address
telephone number
(d) address
customer number/supplier number
(f) details about your employer and your professional position

 

3. Purpose of the processing and legal grounds

3.1 In relation to you as a contact person at a corporate customer or supplier to the Company, we process your personal data as referred to in point 2 above for the purpose of administering our customer and supplier relationships, delivering goods and services, and marketing our goods and services. The processing is based on our legitimate interest in streamlining our operations and our contact with customers and suppliers, as well as reaching out with marketing. In situations where the Company sells goods or services to a company where you are the contact person, the processing is based on it being necessary for us to fulfil our agreement with you.
3.2 For contact persons at corporate customers and suppliers, we process your personal data as described in point 2 for statistics, customer surveys, and sales/project analysis. This processing is based on our legitimate interest in being able to follow up, analyse, and ensure the quality of sales/projects.

 

4. Storage of personal data

4.1 In relation to you as a contact person at a customer or supplier, we store your personal data for as long as is necessary to fulfil the purpose of the processing.
Your data will be stored for as long as we, based on your professional role, assess that you could be a potential customer.
Personal data required for us to send you marketing is stored until you object to marketing.
4.2 We always process your personal data to the extent and for the duration we are legally obliged to do so. Examples include personal data that is necessary to process to ensure correct accounting. This data is saved for seven years after the accounting event has occurred. In cases where personal data is not linked to current legislation and agreements, we revise our records once every two years to remove outdated personal data.
4.3 If you apply for a job with us, we will store and process your information for recruitment purposes, to be able to contact you. If you consent to future recruitment opportunities, we may also store your information for up to 12 months after our last contact, for the purpose of potentially contacting you for a later follow-up. You have the right to withdraw your consent at any time during this period.
4.4 To the extent your personal data is no longer necessary for the purpose of processing, or processing is otherwise no longer permitted, the data will be anonymised or deleted.

 

5. Recipient

5.1 We may disclose your personal data to our data processors, for example, companies that provide IT and cloud services. In such cases, data processing agreements will be entered into, ensuring that your personal data is processed only in accordance with this privacy policy.
5.2 We may also disclose your personal data to public authorities if necessary.
5.3 We do not share your data with third parties.

 

6. Safety

6.1 We have developed routines and working methods to ensure that your personal data is handled securely. Our starting point is that only employees and other individuals within the organisation who need the personal data to perform their work tasks should have access to it.
6.2 Our security systems are developed with your privacy in mind and offer a very high level of protection against intrusion, destruction, and other changes that could pose a risk to your privacy. We have robust IT security procedures in place to ensure that your personal data is processed securely.

 

7. Rights

7.1 You have the right to obtain confirmation as to whether or not we are processing personal data concerning you, and, where that is the case, to access that personal data and also information about the personal data and our processing of it.
7.2 You have the right to have inaccurate personal data relating to you rectified by us without undue delay. You also have the right, taking into account the purpose of the processing, to have incomplete personal data completed in certain cases.
7.3 You have the right, under certain circumstances, to have your personal data erased by us, for example, if the personal data is no longer necessary to fulfil the purposes for which it was collected, or if the personal data has been processed unlawfully.
7.4 You have the right to request that we restrict the processing of your personal data in certain circumstances. For example, if you dispute the accuracy of personal data, you can request that we restrict its processing for the period it takes us to verify its accuracy.
7.5 You have the right to object to the processing of your personal data that is carried out on the basis of our legitimate interest. If you do, we must demonstrate compelling legitimate grounds that outweigh your interests, rights, and freedoms in order to continue processing.
7.6 You have the right to object to the processing of your personal data where the processing is for direct marketing purposes. If you lodge such an objection, we will no longer process your personal data for that purpose.
7.7 You have the right, under certain circumstances, to receive the personal data you have provided to us, concerning you, in a commonly used electronic format. You have the right to transfer such data to another data controller (data portability).
7.8 If you have any remarks regarding our processing of your personal data, you are welcome to contact us (see ”Contact”). You also have the right to submit complaints about the processing of your personal data to the Swedish Data Protection Authority. Please note, however, that there may be limitations under law and other provisions that affect your aforementioned rights.

 

8. Data collection and tracking

You can visit our website without providing any personal information. We use Google Analytics, Hotjar, and cookies to improve our service, user-friendliness, and to analyse how the website is used. Apart from an approximate location (IP address), the information collected is mostly anonymous traffic data such as browser information, device, and language.
To ensure that our website functions well and to improve navigation, we or our service providers use cookies (small text files stored on the user's computer) and web beacons (electronic images that allow our websites to count the number of visitors who have visited a particular page and to access certain cookies) to collect aggregated data. By using the website, you agree to the use of cookies. If you do not wish to allow cookies, you can choose to change the settings in your browser. (Read more ”Cookies Policy”)

 

9. Additions and amendments

We may make additions or changes to this personal data policy. If we do, we will publish the updated policy with a new revision number.

 

10. Contact Us

If you have any questions about our Personal Data Policy or wish to update, correct or delete data we hold about you, please feel free to contact us.

For more information on the rules for processing personal data, please visit the Data Inspection Board: www.datainspektionen.se

 

11. Whistleblowing

It is important to us that what we do is right, and we want to do everything we can to prevent irregularities and other misconduct within our company.

To report information about serious misconduct that contravenes current legislation, ethics, morals, or other improprieties, this should be done anonymously via the company's owner, Indutrade, and then through the group's central whistleblowing system managed by a third party. Please use the following link and follow the instructions: www.indutrade.se/sustainability/whistleblowing