1. Background and purpose
We protect your privacy and always strive for a high level of data protection (eg we would never sell your personal data to another company). This privacy policy explains how we collect and use your personal information. It also describes your rights and how you can enforce them. It is important that you read and understand the privacy policy and feel secure in our processing of your personal data. By being informed about our privacy policy in connection with providing information, you consent to the processing of your personal data. You are always welcome to contact us with any questions.
Ernströmgruppen AB is the personal data controller for the processing of the personal data you provide when you register on the website. You can unregister at any time at info@ernstromgruppen.com.
As a Data Controller, Ernströmgruppen AB is responsible for processing your personal data, for example when you register on our website. If you have any questions, would like to unregister from the website or would like to exercise your rights under GDPR, you can reach us through the following contact details:
Our Email Address: info@ernstromgruppen.com.
2. Which personal data is referred to?
Your personal data; such as e-mail, name, cookies, etc., will be processed by us for the purpose of administering information (among other things for marketing purposes or for business-related purposes) from us to you.
If you choose not to provide the requested personal data, we will consequently not be able to send you any information.
3. Why do we process your personal data?
The treatment is based on a balancing of interests. In our judgment, the processing is necessary for our legitimate interest in administering information to you in accordance with your request to receive it.
4. How long do we save your personal data?
We process your personal data based on the requirements set, which means, among other things, that your data is kept for the time that is necessary regarding; the purpose of the processing, our obligations under other legislation or according to what is permitted under current legislation.
5. Overview of how be process your personal data
In those cases, your consent is required or otherwise appropriate, before we start processing your personal data. You have the right to withdraw your consent at any time. We will stop processing your personal data unless required by contract or law. When we enter into an agreement, you also consent to us processing your personal data.
We also process your personal data in the following ways:
To communicate with and answer questions from you
- Purpose: We process your personal data for the purpose of communicating with you and answering questions from you when you interact with us, e.g. if we receive a question from you regarding our range of services.
- Categories of personal data: We collect your name, email address, address, telephone number (work) and other information that you provide to us (e.g. department affiliation and job title).
- Legal basis: The legal basis for this processing is a balance of interests to satisfy our legitimate interest in being able to communicate with you and handle questions from you.
- Storage period and/or criteria: We process your personal data for as long as it is necessary to fulfill our purpose and will then delete the personal data, unless we have another purpose according to this privacy notice.
Carrying out surveys and surveys
- Purpose: We process your personal data when you respond to surveys or participate in surveys.
- Categories of personal data: We collect your name, email address, address, telephone number (work) and other information that you provide to us (e.g. in free text fields).
- Legal basis: The legal basis for this processing is a balance of interests to satisfy our legitimate interest in being able to understand how our products and services should be designed to meet existing and potential customers’ needs.
- Storage period and/or criteria: We process your personal data for as long as it is necessary to fulfill our purpose and will then delete the personal data, unless we have another purpose according to this privacy notice. As an existing or potential customer, you always have the opportunity to decline to participate in surveys or surveys.
Use, troubleshooting and keeping statistics for our website
- Purpose: We process certain information about website visitors in order to use our website as intended, to keep statistics and perform troubleshooting.
- Categories of personal data: Personal data is collected via cookies and consists e.g. of IP address, device model and data traffic source (e.g. if you clicked through to our website through campaigns).
- Legal basis: We process such personal data based on our legitimate interest in being able to improve the website. You can object to this processing at any time by adjusting your cookie preferences.
- Storage period and/or criteria: Unless you have adjusted your cookie preferences, we process your personal data for as long as necessary to fulfill our purpose and will subsequently delete the personal data, unless we have another purpose according to this Privacy Notice.
Contact with you as a representative of a potential partners
- Purpose: In order for us to be able to market our services, identify new partners and create quotes in our sales process, we process your personal data as a representative of a potential partners. For example, we use compilations of public registers and databases as well as social media to identify representatives of potential partners.
- Categories of personal data: We collect name, e-mail address, address, telephone number (work) and information about department affiliation and position. We also note if there is interest from you.
- Legal basis: We base this processing, after a balance of interests, on our legitimate interest in identifying new customers in order to market our service offering to them.
- Storage period and/or criteria: The personal data is saved in our CRM and quotation systems or similar. As a representative of a potential customer, you can always ask us to unsubscribe.
Marketing mailings
- Purpose: We process personal data to offer information and news mailings to representatives of existing and potential partners Personal data is collected directly from representatives of existing and potential customers, e.g. in connection with events, through cookies or through public registers and databases. The information is provided by telephone, letter, e-mail, SMS and/or equivalent contact channels, as well as through advertising.
- Categories of personal data: Personal data processed is name, e-mail address, address, telephone number (work) and information about department affiliation and position. We also process information about website visitors’ usage, clicks on the website, traffic data (IP address and device model) and data traffic source (e.g. if you clicked through to our website through campaigns) through cookies to optimize marketing.
- Legal basis: The legal basis for this processing is our legitimate interest in being able to provide information about and market our services.
- Storage period and/or criteria: The personal data will be saved until the purpose of these is fulfilled. You can always ask us to unsubscribe. We will then stop processing your personal data for this purpose.
Implementation of marketing activities and events
Purpose: We may contact you as a representative of existing or potential customers in order to invite you to marketing activities (events, lectures, seminars, courses or similar). We process personal data to the extent necessary to carry out the activity, to follow up participation and to be able to target marketing.
Categories of personal data: We process your name, e-mail address, address, telephone number (work) and other relevant contact details that you have provided to us, which we have collected from public registers and databases, or from our CRM systems if you are an existing customer representative, in order to be able to send out notices, list of participants and material before and after the activity.
Legal basis: We process your personal data according to our legitimate interest in being able to inform about events that we organize, carry out the event and to be able to direct offers of our services to the participants.
Storage period and/or criteria: We process your personal data for as long as it is necessary to carry out the event. The participant list is saved for administration and follow-up so that we can target marketing to participants about our services. You may object to our processing of your personal data for this purpose at any time and we will then stop processing your personal data, unless we have a different purpose as set out in this Privacy Policy.
6. Security measures for personal data
We take appropriate technical and organizational measures to safeguard your personal data from unauthorized access or misuse. Our security practices include regular system updates, encryption, and data backups. Access to personal data is limited to employees who need it for their job duties, and all staff are trained to maintain the confidentiality and security of the data.
7. Sharing of personal data
We only share your personal data with the following third parties:
- Service Providers. In certain cases, we work with partners, suppliers, or service providers to process your personal data, such as IT systems providers. We ensure that these processors have adequate technical and organizational security measures in place, and that they process the data strictly according to our instructions.
- Authorities. We may be legally obligated to disclose personal data to public authorities. Additionally, we may share data to establish, exercise, or defend against legal claims.
8. Transfers of personal data outside the EU/EEA
We strive to process your personal data within the EU/EEA. When possible, the data will be stored within the EU/EEA. However, some of our service providers may operate outside this region, particularly in the United States. This could involve access to personal data from there even though the data is stored within the EU/EEA. In such cases, we ensure your data is handled securely in accordance with GDPR, with protection equivalent to EU standards. You may contact us for more information about the countries in which our processors operate and the safeguards in place. Contact information can be found in section 1.
9. Your rights regarding personal data
We are committed to ensuring that your personal data is processed lawfully. The following is a summary of your rights under the GDPR. If you have questions or wish to exercise any of these rights, please contact us using the details provided in section 1. We will respond to your request within one month, and we may need to verify your identity before proceeding.
- Right of access. You have the right to request information on the data we hold about you, including the purposes of processing, the type of data, recipients, retention periods, and sources.
- Right to rectification. If your data is incorrect or incomplete, you can request that we correct or update it.
- Right to erasure. You have the right to request the deletion of your data. However, exceptions may apply, such as when we are legally required to retain certain data for purposes like accounting, tax compliance, or labour law, or if the data is necessary for defending legal claims.
- Right to data portability: You can request that we transfer your data to another data controller, when technically feasible. This applies to personal data you have provided to us, and only if the processing is based on your consent or is necessary to fulfil a contract.
- Right to restriction of processing. You can request that we restrict the processing of your data if you think the data is incorrect, or if you have objected to our processing based on legitimate interest. In these cases, processing will be restricted while we assess your request.
- Right to object. You have the right to object to certain types of processing, including processing based on legitimate interest and direct marketing. You can unsubscribe from marketing emails at any time. For other processing activities, we will assess whether our legitimate interest outweighs your rights and freedoms.
- Rights related to automated decision-making and profiling. You have the right to know if any automated decision-making processes are applied to your data, and to receive information on the logic and consequences. We do not currently engage in automated decision-making but will inform you if this changes.
- Right to withdraw your consent. You can, at any time, withdraw a consent and we will then stop processing the personal data for that purpose.
10. Complaint
If you believe that Ernströmgruppen AB is not handling your personal data correctly, you always have the right to file a complaint regarding Ernströmgruppen AB personal data processing to the Swedish Authority for Privacy Protection (IMY). More information can be found on the Swedish Authority for Privacy Protection website https://www.imy.se/.
11. Changes to this Privacy Policy
Ernströmgruppen AB reserves the right to update or change this policy at any time and you should regularly visit this website to get the latest version.