1. GENERAL
1.1 Introduction
1.1.1 Your privacy is important to us at Akustikmiljö i Falkenberg AB and our owner Götessons Industri AB (“Götessons”). We are committed to ensuring that the personal data collected about you is stored and processed safely and securely, and in accordance with applicable data protection legislation. In this policy, in each of Sections 2–5, we inform you about which types of personal data we may process, for what purposes, on what legal bases, how it is collected, with whom it may be shared, and how long it may be stored. In Section 6, we inform you about your rights, and in Section 7 about how to contact us regarding, for example, questions about this policy or our processing of personal data.
1.1.2 You are under no obligation to provide your personal data to us. If you choose not to provide personal data, we may not be able to offer you our range of products and services, process your job application, or send you newsletters and invitations.
1.2 Controller
1.2.1 The Swedish company Götessons Industri AB (“Götessons”) is the controller for the processing of your personal data in accordance with applicable data protection regulations.
Götessons Industri AB
Rönnåsgatan 5 A, 523 38 Ulricehamn
Company register: Bolagsverket
Company reg. no.: 556287-5251
Authorised representative: Karl Emil Johansson
1.3 Where your data is stored
1.3.1 The data we collect from you is stored within the European Economic Area (EEA), but may also be transferred to and processed in a country outside the EEA. Any such transfer of your personal data will be carried out in accordance with applicable legislation. Where personal data is processed outside the EU/EEA, there will either be a European Commission adequacy decision for the third country in question or appropriate safeguards ensuring that your rights are protected. Examples of appropriate safeguards include an approved code of conduct in the recipient country, standard contractual clauses, binding corporate rules, or the Privacy Shield.
1.4 Who has access to your data
1.4.1 We use suppliers to perform system maintenance, data analysis, audits, payments, marketing, and development. These suppliers have access to your personal data to the extent necessary to perform these tasks on our behalf and are obliged not to disclose or use the information for any other purpose. Your data may also be shared with Götessons, which owns Akustikmiljö i Falkenberg AB. We never forward, sell, or exchange your personal data for marketing purposes.
2 CUSTOMER, SUPPLIER, OR PARTNER
2.1 Introduction
2.1.1 If you are a customer, supplier, partner, or a contact person for any of these categories, we may collect, store, and otherwise process your personal data in accordance with this Section 2.
2.2 What personal data we process
2.2.1 Personal data we process about you may include name, title, employer, contact details (such as address, email address, and phone number), information about your contact person(s) with us, information about indicated areas of interest for newsletters and other mailings, information about participation in trade fairs and events, and notes and summaries from meetings we have had with you. We do not process special categories of personal data (i.e., data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or data concerning health or sex life).
2.3 How the personal data is collected
2.3.1 The personal data is provided to us by you, the customer, supplier, partner, or an intermediary connecting us, or is obtained by us from such persons or from private or public registers or other sources.
2.4 Purpose and legal basis
2.4.1 Your personal data may be processed in order to enter into and manage agreements with our customers, suppliers, and partners. Certain personal data may also be processed because Götessons has a legal obligation to do so, e.g., personal data on invoices due to bookkeeping obligations. Processing is based on our legitimate interests in managing relationships with our customers, suppliers, and partners.
2.4.2 The personal data may also be processed for the purpose of, through you, maintaining and developing the relationship with each customer, supplier, and partner and, unless you have objected, marketing our services (e.g., by sending invitations to trade fairs and events as well as newsletters and other mailings). Processing is based on our legitimate interests in maintaining and developing relationships with our customers, suppliers, and partners.
2.5 Who has access to your data
2.5.1 We share your personal data with the carriers we use to deliver your goods. The data may also be disclosed to Link Mobility Support to enable SMS mailings for trade fairs, to Ungapped for email mailings, and to the web host R3, which processes registrations via our website.
2.6 How long the personal data is stored
2.6.1 As a rule, we store your personal data for as long as the customer, supplier, and/or partner relationship continues. We normally delete the data within three months after the relevant relationship has been terminated or after we have been notified that your position as a contact person has ended. Provided you do not object, personal data such as name, title, employer, contact details (address, email address, and phone number), and information about areas of interest for newsletters and other mailings may be stored beyond the three-month period for marketing purposes. If you object to continued storage, the above data will be deleted. Your personal data will always be retained to the extent and for the time we are required by law, e.g., under the Accounting Act.
3 PROSPECTIVE CUSTOMER, SUPPLIER, OR PARTNER
3.1 Introduction
3.1.1 If you are a prospective customer, supplier, partner, or a contact person for any of these categories, we may collect, store, and otherwise process your personal data in accordance with this Section.
3.2 What personal data we process
3.2.1 Personal data we process about you may include name, title, employer, contact details (such as address, email address, and phone number), information about your contact person(s) with us, information about indicated areas of interest for newsletters and other mailings, information about participation in trade fairs and events, and notes and summaries from meetings we have had with you. We do not process special categories of personal data (see Section 2.2.1).
3.3 How the personal data is collected
3.3.1 The personal data is provided to us by, or on behalf of, you; a customer, supplier, partner; a prospective customer, supplier, or partner; or an intermediary connecting us, or is obtained by us from such persons or from private or public registers or other sources.
3.4 Purpose and legal basis
3.4.1 Your personal data may be processed for the purposes of, through you, establishing, maintaining, and developing the relationship with you as a prospective customer, supplier, or partner, or with the prospective customer, supplier, or partner for whom you are a contact person, and—unless you have objected—marketing our products and services (e.g., by sending invitations to trade fairs and events as well as newsletters and other mailings). Processing is based on our legitimate interests in establishing, maintaining, and developing relationships with prospective customers, suppliers, and partners, and in marketing our services.
3.5 Who has access to your data
3.5.1 The data may be disclosed to Link Mobility Support to enable SMS mailings for trade fairs, to Ungapped for email mailings, and to the web host R3, which processes registrations via our website.
3.6 How long the personal data is stored
3.6.1 The personal data may be stored until you object, upon which it will be deleted.
4 PERSONAL DATA RELATED TO TRADE FAIRS, EVENTS, NEWSLETTERS, ETC.
4.1 Introduction
4.1.1 When, via our website, our social media, or otherwise, you register interest in our events, newsletters, and other mailings, or register for events, we will collect, store, and otherwise process your personal data in accordance with this Section 4.
4.2 What personal data we process
4.2.1 The personal data we may process includes name, title, employer, contact details (address, phone number, and email address), information on indicated areas of interest for newsletters and other mailings and on desired participation in events, and, for events involving food, any specific dietary requests.
4.3 How the personal data is collected
4.3.1 The personal data is provided to us by, or on behalf of, you via our website, our social media, when you visit our stand at a trade fair, or otherwise.
4.4 Purpose and legal basis
4.4.1 The personal data may be processed for the purpose of administering the sending of invitations to events and of newsletters and other mailings to you. Processing is based on our legitimate interests in sending you mailings in accordance with your stated preferences.
4.4.2 The personal data may be processed for the purpose of administering (including arranging food according to your requests) the execution of events with you as a participant. Processing is based on our legitimate interests in administering the execution of the event with you as a participant in line with your stated preferences.
4.5 Who has access to your data
4.5.1 The personal data may be disclosed to Link Mobility Support to enable SMS mailings for trade fairs, to Ungapped for email mailings, and to the web host R3, which processes registrations via our website. Personal data may also be shared via a name badge you are offered to wear during the event or via a participant list at the event.
4.6 How long the personal data is stored
4.6.1 Information regarding dietary requests is deleted as soon as the relevant event has taken place. Otherwise, the personal data may be stored until you unsubscribe from mailings about our events, newsletters, and other communications, upon which it will be deleted.
5 RECRUITMENT
5.1 Introduction
5.1.1 When you apply for a job or otherwise express interest in a job with us, we may collect, store, and otherwise process personal data relating to you in accordance with this Section 5.
5.2 What types of personal data we process
5.2.1 We record the details and information you provide to us in connection with your application. This also includes information we receive in connection with your application, such as your CV, cover letter, or references from previous employers.
5.3 Purpose and legal basis
5.3.1 Your data will be used to assess your application, check your references, and verify your information. We will also use your data to respond to your application and to invite you to an interview where applicable. When you submit an application or expression of interest to us, you consent to us processing your personal data in a recruitment process.
5.4 Who has access to your data
5.4.1 The personal data may be disclosed to any recruitment consultant or other service provider engaged in connection with the recruitment process. The data may also be shared with our subsidiary Akustikmiljö i Falkenberg AB.
5.5 How long we store your personal data
5.5.1 The personal data may be stored for the duration of the recruitment process, after which it will be deleted. If you have consented to our processing the data for future recruitments, the data may instead be retained for two years after consent is given (or until consent is withdrawn earlier), after which it will be deleted. Notwithstanding the foregoing, we may retain the personal data for as long as a non-hired applicant may take legal action in connection with the recruitment process.
6 YOUR RIGHTS
6.1 Right of access
6.1.1 You have the right to request information at any time about the personal data we have stored about you. As controller, Götessons shall provide you with a free copy of the personal data being processed. For any additional copies, Götessons may charge an administrative fee.
6.2 Right to data portability
6.2.1 Whenever Götessons processes your personal data by automated means based on your consent or under a contract, you have the right to have a copy of your personal data in a structured, commonly used, and machine-readable format transferred to you or another party. This only includes the personal data you have provided to us and applies insofar as it is technically feasible for us to meet your request.
6.3 Right to rectification
6.3.1 You have the right to request rectification of your personal data if it is incorrect, including the right to complete incomplete personal data. If you have an account on our customer portal, you can edit your personal data on your account pages.
6.4 Right to erasure
6.4.1 You have the right, under certain circumstances, to have personal data concerning you deleted by us, e.g., if the personal data is no longer necessary to fulfil the purposes for which it was collected or if the personal data has been processed unlawfully.
6.5 Your right to object to processing based on legitimate interests
6.5.1 You have the right to object to processing of your personal data that is based on a balancing of interests (legitimate interests). We will then cease processing unless we can demonstrate a compelling legitimate ground for the processing which overrides your interests and rights or due to legal claims.
6.6 Your right to object to direct marketing
6.6.1 You have the right to object to direct marketing. You can opt out of direct marketing by following the instructions in each marketing communication or by contacting Götessons.
6.7 Right to restriction
6.7.1 You have the right, in certain cases, to request that we restrict the processing of personal data concerning you. For example, if you contest the accuracy of the personal data, you can request that we restrict processing while we verify the accuracy of the data.
6.8 Right to lodge a complaint with a supervisory authority
6.8.1 If you believe that Götessons is processing your personal data incorrectly, you can contact us. You also have the right to lodge a complaint with the Swedish Data Protection Authority (www.datainspektionen.se), which is the supervisory authority in Sweden, or with the supervisory authority in the country where you live or work.
7 CONTACT DETAILS
7.1 If you wish to exercise your rights as above or otherwise wish to contact us regarding our processing of your personal data, you can do so by phone at +46 (0)321-68 77 28 or by email at info@gotessons.se.
8 CHANGES TO THE POLICY
8.1 We may need to update our privacy policy. The latest version of the policy is always available on our website. We will notify you of any material changes to the policy, for example the purpose of using your personal data.