Who is responsible for your personal information?
Eric Rahmqvist AB (SE556273-390601) is responsible for all storage / processing of personal data.
What is processing of personal data?
Personal data is any information that can be directly or indirectly attributed to a physical living person.
Processing of personal data is all that happens with this information. Any action taken with personal data is a process, regardless of whether it is performed automated or manually. Examples of common processing are collection, registration, organization, storage, processing, transfer and deletion.
What kind of personal data do we collect?
We collect personal information when your company / you are registered as a customer, when you place orders, contact our customer service, contact our support department, submit a notification of interest for an employment with us, etc. This may include contact information such as phone number and email address, organization number or social security number and payment information.
We also collect personal information when you visit our website by using our web pages using cookies that collect information on and from your web browser. For example, it may include different electronic identities (eg IP numbers) if they can be linked to a physical person.
We also retrieve personal information from other sources - e.g. publicly available company and personal registers, records used for credit assessment, and from other partners as needed.
We do not, as a rule, collect and process sensitive personal information, such as information about health or ethnic origin. However, you may have chosen to provide certain information, for example, for an education or event that you are allergic to certain things or request a specific diet. By doing so, we assume you agree that we process these data in accordance with the purposes stated in this policy. We assume that you want us to process this information.
What we use the personal data to
To process data, there must be support in current data protection legislation, a so-called legal basis. This means that in order for our processing of your data to be legal, it is required that
- It is necessary to fulfill the agreement with you.
- It is relevant to fulfill a legal obligation.
- The processing of your personal data may be done with consideration of interest.
- You have given your consent to that particular process.
In order to provide services and products, we need to process and manage your data. Below are examples of the purposes for which we handle your data and on the basis of which legal basis we do this.
- To register you as a customer / contact person.
- To identify you as a customer or user.
- To answer your questions and to inform you of new, changed services / products / routines.
- To process and manage your orders, deliveries.
- To provide support services for delivered goods and products.
- To handle customer service issues and complaints.
- To contact you in case of any problems with order and / or delivery.
- To conduct credit checks by companies registered as a customer or when connected to new services.
- To handle your invoices and payments.
- To send promotional offers such as newsletters, promotional magazines or other information / communications (direct marketing.)
- To send surveys, market research that allows you to influence our offers and services.
- To collect statistics and make analyzes so that we can develop our services and products.
How long do we store your personal information?
We will save your information as long as it is required to meet the above purpose, or as long as we are required by law to do so.
We never store personal data longer than we need. Personal data is saved as long as you are a customer and thereafter no longer than 24 months after the contractual relationship has ended because we have a legitimate interest in preserving the data as long since the majority of our customers' purchase cycles are usually two years. Exceptions apply to such information that must be stored longer by law, for example, Accounting Act.
Who has access to your personal information?
Personal data can be transferred to external parties who process personal data on behalf of the company and as instructed by the company. Such external parties are personal information assistants and shall always sign a assistance agreement with the company.
In different areas, we hire other suppliers to deliver products and services. This means that they also need some information about you as a customer. However, these parties may not use data about you for any purpose other than providing the product / service or under the terms that we specify.
We never sell or exchange your personal information with a third party.
Where are your personal data stored?
The data we collect is stored in the EU / European Economic Area (EEA), but can also be transferred and processed in countries outside the EU / EEA. All such transfer of personal data is in accordance with applicable legislation.
What are your rights?
You are entitled at any time in writing request information about the personal information we have regarding your person. If this data is incorrect, you are allowed to have them corrected. You may request that your personal data be deleted, provided that the data is no longer required for the purposes for which they were processed, if the processing is based solely on your consent and you revoke this if you oppose data processing that takes place after consideration of interest and there are no legitimate reasons that weigh heavier than your interest. Statutory requirements for personal data cannot be deleted.
Certain data processing is based on your approval, so-called consent. You always decide what processes you approve and if you wish to withdraw your consent. Note, in order to provide services and products, we need to process and manage your data. However, you are not required to provide your data to us. If you choose not to do so, we may not be able to provide all of our products and services to you. You are always entitled to revoke a given consent for the use of personal data and to refrain from targeted marketing. For persons under the age of 18, a guardian must leave the consent.
You are entitled to have your personal information moved (porting) to use them elsewhere when technically possible. For this it is also assumed that the handling is based on consent or that the handling has been necessary for us to be able to fulfill an agreement with you.
Notification of violation (complaint)
If you believe your data is being processed in violation of current regulations, please report it to us as soon as possible. You can also file a complaint with your Data Protection Authority.
If you have been negatively affected by the fact that your data has been processed in violation of the applicable law, you may be entitled to damages. You may then seek damages from us or bring an action for damages in court. Such a request must be submitted in writing to us.
If you have any questions about this policy or want to update, correct, delete data or otherwise utilize your rights, contact us at firstname.lastname@example.org or phone +46(0)8-766 70 00.
Eric Rahmqvist AB
Ref: Data Protection Officer
SE-181 73 Lidingö