Processing of Your Personal Data
Ingenjörsfirma Gösta Hedlund AB, Corporate ID no. 556211-5450 (the “Company” or “we”), has a policy to take all necessary measures to ensure that personal data concerning our customers and suppliers is processed lawfully, accurately, and transparently.
When you use our services, we collect your personal data. The Company is the controller of your personal data and processes it in accordance with this Privacy Policy. This policy explains and clarifies your rights regarding the Company’s processing of your personal data and how you can exercise those rights.
The Company is committed to protecting your personal data and ensuring that it is always processed securely. We comply with all applicable laws and regulations designed to protect individual privacy, including the Swedish Personal Data Act (1998:204) (PUL), the Swedish Electronic Communications Act (2003:389), and other regulations implementing EU Directive 95/46/EC, EU Directive 2002/58/EC, as well as the EU General Data Protection Regulation 2016/679 (GDPR) and any amendments, additions, or replacements to such laws and regulations. We implement appropriate and reasonable physical, technical, and organizational security measures in proportion to the volume and sensitivity of the personal data.
It is important that you read and understand this Privacy Policy before using the Company’s services. If you do not accept the Privacy Policy, you should not use our services.
For information on the collection, handling, and storage of data obtained through cookies, please refer to the section titled “Cookies.”
What Personal Data Do We Collect and From Where?
If you request a quote or order goods/services from Ingenjörsfirma Gösta Hedlund AB, you may provide us with information classified as personal data under applicable data protection laws.
The types of personal data we collect may include, depending on the context:
- Name and contact information, including address, mobile number, and email address;
- Delivery and billing information, payment details, and other information you provide in connection with a purchase or delivery of a product or service;
- Other information relevant to customer surveys, advertisements, or offers.
We may collect your personal data from the following sources:
- When you contact us via email or phone;
- Through contracts, invoices, or other business interactions, if you are a contact person for one of our business partners.
Why Do We Process Your Personal Data?
If you have ordered goods or services, you have entered into an agreement with the Company. We process your personal data to administer your purchase or order and deliver the product or service you have requested.
In addition to processing your personal data to fulfill purchases, the Company may use your data for other purposes, based on the legal grounds outlined below:
- Performance of Contract: To manage and administer purchases, deliver goods, and process payments.
- Consent: For newsletters.
- Legal Obligation: We retain invoice documentation in accordance with applicable accounting laws.
- Legitimate Interest: To provide, perform, and improve our commitments, products, and services, we process personal data in certain situations, such as analyzing customer purchase habits to provide relevant information and marketing, and for statistical purposes.
Where a service we provide requires your consent, we will always explicitly request your consent before processing your personal data for such services.
When you provide consent, you will confirm that you have read this Privacy Policy and agree to the processing of your data as described herein.
Retention of Personal Data
The Company takes all reasonable measures to ensure your personal data is processed and stored securely. Your personal data is never stored longer than permitted by law and only as necessary to fulfill the purposes stated above. Personal data is processed for the following durations:
- Performance of Contract: Personal data (name, personal ID number, address, phone number, email, and payment/delivery details) provided during orders of goods or services is retained as long as necessary to fulfill the agreement, including delivery or warranty obligations.
- Legal Obligation: The Company retains documentation that constitutes accounting information in accordance with applicable accounting laws.
- Consent: When processing personal data based on your consent, we retain the data only as long as we have your consent.
Transfer of Personal Data
Information about our customers is an important part of our business, and we do not sell this information to others. Transfers of information occur only as described below, and always with caution and appropriate security measures.
- Integration with Private and Public Registers: The Company may supplement your personal data with additional information obtained from private and public registers (e.g., SPAR, Bisnode Sverige AB). This integration may enrich and update your personal data.
- Corporate Transactions: If all or part of the Company’s operations are sold or merged with another business, your personal data may be disclosed to our advisors, the potential buyer, and their advisors, and transferred to the new owners.
- Legal Obligations: Your personal data may also be disclosed to comply with legal obligations and may be provided to the police or other relevant authorities as permitted or required by law.
Transfers described above are limited to entities within the EU or EEA (i.e., EU member states, Iceland, Norway, and Liechtenstein). [We do not process personal data outside the EU and EEA.]
Withdrawal of Consent
If we process your personal data based on your consent, such as for newsletter subscriptions, you can withdraw your consent at any time by contacting the Company. Withdrawal may be partial or complete. If you no longer wish to receive marketing and promotional offers, you can withdraw your consent by contacting the Company. Withdrawal of consent for other purposes outlined in this Privacy Policy may affect your access to our websites or services.
Your Rights
You have the right to request information about the personal data we have registered about you and how it is used. Submit a written and signed request to the contact details below. You may also amend your personal data or request corrections if the information is incorrect, incomplete, or misleading.
In accordance with applicable data protection laws, you also have the right to request the deletion or restriction of your personal data. In certain cases, you may object to the processing of your data or request that your personal data be transferred electronically.
You may file complaints with the Swedish Authority for Privacy Protection (IMY) if you believe the Company is not processing your personal data in compliance with applicable law.
Cookies
The Company uses cookies on its websites. A cookie is a small text file sent from a website to your browser. Cookies do not identify you personally but recognize the browser on your device. Cookies do not carry viruses or damage other information stored on your device.
Changes to the Privacy Policy
The terms of this Privacy Policy may change over time. Any updates will be published on the Company’s websites. If changes relate to processing based on your consent, we will request your renewed consent.
Contact Us
If you have questions about this Privacy Policy or suspect a violation, please contact us:
Ingenjörsfirma Gösta Hedlund AB
Box 89,
822 22 Alfta, Sweden
Visiting Address
Bornvägen 65,
822 30 Alfta
Postal Address
Box 89,
822 30 Alfta
Contact
Phone: +46 271 554 10
Email: info@ingfahedlund.se