Processing of personal data
We are the data controller
Heyman & Holmberg AB med organisationsnummer 556009–8963 och adress Klangfärgsgatan 14 426 52 Västra Frölunda (”Vi”, ”Oss”) ansvarar för de personuppgifter som behandlas om dig.
We care about your privacy. You should feel safe when you entrust us with your personal data. We have therefore drawn up this policy. The policy is based on current law and clarifies how we work to safeguard your rights and protect your privacy. The purpose of the policy is to let you know how we process your personal data, what we use it for, who can access it and under what conditions, and how you can exercise your rights.
Why do we process personal data about you?
We process your personal data in order to provide you with our products and information about them, i.e. to enter into or fulfil a contract with you as a customer. In some cases, we also save your personal data to facilitate contact regarding future purchases or to offer service and information regarding our products.
Incoming e-mails and phone calls
If you contact us by e-mail or telephone, we process your telephone number, e-mail address and other information you choose to include in your correspondence. We do this to respond to your message and to provide information about us and our business. The processing is based on our legitimate interest in handling incoming correspondence and providing information. The processing takes place until 1 month has passed since you contacted us, unless there is no other basis for processing these personal data.
Incoming questions from questionnaires
If you contact us via the form on our website, we process your name, phone number and e-mail address. We do this to be able to answer your request and to conduct a dialogue about our products. The processing is based on the fact that we have a legitimate interest in handling your personal data in order to conduct a dialogue about our products before we enter into an agreement. The processing takes place until the dialogue has ended or 1 month has passed, if there is no other basis for processing this personal data.
When you act as a contact person for a company and order products from us, we process your name, email address and phone number. If you run a sole proprietorship, we may also need to collect your social security number. The processing takes place in order to fulfil the order, to fulfil our responsibility for the correctness or performance of the product, to exchange correspondence regarding the product and to issue an invoice. These processing operations are necessary to fulfil the contract for our products that you enter into with us. The processing takes place during the term of the contract and during the time that we have issued a guarantee for the product.
When you order a product from us, your name and email address are processed to send you marketing and offers related to our other products. The legal basis for this processing is that we have a legitimate interest in presenting our full product catalogue to you. The data is processed for this purpose during the time you have a contract with us and for some time thereafter. You can object to marketing at any time by contacting us.
Archiving of accounting data
To the extent that your name or address appears in our accounting information, this data will be processed to enable us to properly archive
accounting information. The processing is necessary to comply with our legal obligation to archive accounting data in accordance with applicable legislation. The processing lasts for 7 years after the calendar year in which the financial year ended.
Who do we share your data with?
We do not disclose your data to other companies or organisations unless it is required by law or is necessary for the performance of our legal or contractual obligations to you. We may disclose your data to third parties who process the information on our behalf and in accordance with our instructions. For example, third parties providing IT and accounting services may assist us.
How do we protect your personal data?
Your security is important to us. Therefore, we have put in place appropriate technical, organisational and administrative security measures to protect your personal data from unauthorised access and other unlawful processing. We regularly analyse and evaluate these measures to ensure that the protection of your data is as secure as possible.
How long do we process your personal data?
We keep your personal data for the duration of the contract. Under certain circumstances, we may keep your data for longer than the contractual period. This applies, for example, when required by law or when the data may be needed to establish, exercise and defend legal claims. We also need to keep your personal data for the duration of our warranty period to ensure we can assist with warranty claims. The warranty period varies depending on the product you purchased from us.
When we process personal data about you, you as a data subject have several rights. You have the right to contact us at any time regarding these, and if you want to exercise any of the rights described below, you can reach us at email@example.com. We reserve the right to take appropriate protection and security measures to ensure that you are who you claim to be when you contact us. If you cannot credibly prove your identity, we may not be able to fulfil your request.
Access to personal data
You have the right to know what personal data we process about you. If you want to know, you can get a summarised register extract from us containing the personal data we process about you.
Rectification and deletion
If we process your personal data incorrectly or if we no longer need it, you have the right to have it erased. If the data is incomplete, you have the right to have it completed. Please note that if you request the deletion of your personal data, we may not be able to provide our services to you.
In certain circumstances, you have the right to receive the data we process about you in a common, written, machine-readable and structured format. You have this right with regard to personal data that you have provided to us and that we process on the basis of your consent or when the personal data is required to enter into or fulfil a contract with you.
Limitation of treatment
Under certain conditions, you have the right to request that we restrict our processing of your data. This means that we mark the data so that in the future we only process it for certain specific purposes. We may not be able to provide you with our services if we restrict the processing of your personal data.
Right to object
You have the right to object to the processing of personal data carried out for the performance of a task carried out in the public interest, in the exercise of official authority or following a balancing of interests. We do not process your personal data for any of these purposes or on any of these grounds. You can therefore not object to our processing under this ground.
Right to complain
You have the right to lodge a complaint with the Swedish Data Protection Authority if you believe that we are processing your personal data incorrectly. You can read more about this on the Data Inspectorate's website www.datainspektionen.se. We will notify each recipient to whom the personal data has been disclosed of any corrections or deletion of data and restriction of processing of data. You have the right to object to personal data processing carried out on the basis of a balance of interests. If you object to such processing, we will only continue the processing if there are legitimate reasons for the processing that outweigh your interests.
You can contact us at any time by writing to firstname.lastname@example.org or by calling us on 031-41 70 98 if you want to know more about how we process your personal data. You can also read more about us on our website www.heymanholmberg.se.