GDPR Policy
Privacy and marketing policy
1. Introduction
This Privacy Policy aims to provide you, as a contact person at a client company or potential client company of Emcomp International AB (the Company), with information about how the Company handles your personal data. The Privacy Policy also describes your rights in relation to us and how you can exercise those rights. The client companies with which the Company has a contractual relationship or intends to establish a contractual relationship are referred to below as “Clients.” Companies contacted by the Company without an existing or imminent client relationship are referred to as “Potential Clients.”
2. Who is the controller of personal data?
The Company is the data controller for the processing of personal data collected regarding the contact persons of Clients and Potential Clients.
Below, you will find the Company’s contact details:
Emcomp International AB, 556556-0165
Tomtagatan 17, 703 32 Örebro
If you have any questions regarding the Company’s processing of your personal data, please contact us at info@emcomp.se.
3. Types of personal data processed
3.1 Customers
The Company processes the following personal data about the contact persons of Clients:
- Name
- Phone number
- Email address
If the Client is your sole proprietorship, we may also collect the following information:
- The company’s registration number
- Credit information
The processing of the above personal data is necessary for the Company to fulfill the agreement it has with the Client. If these data cannot be processed, the agreement with the Client cannot be fulfilled. The data are collected from you personally and/or from the Client you represent.
The Company also retains Clients’ purchase history, including information about purchased products, quantities, dates, and prices.
3.2 Potential customers
The Company processes information regarding the name, contact details, and position of contact persons at Potential Clients. This information is collected through interactions with potential clients, such as via email, phone calls, trade fair visits, and similar activities.
4. Purpose, Legal Basis, and Retention Period
4.1 Customers
4.1.1 Customer administration
Names and contact details are processed to enable the Company to complete purchases, deliver products to the Client, administer the Client’s orders, provide post-purchase service, and otherwise exercise its rights and obligations under the agreement with the Client. If the Client is not a sole proprietorship, the processing is based on a legitimate interest, where the Company’s legitimate interest is to fulfill the agreement with the Client and provide good service. If the Client is a sole proprietorship, the legal basis for the processing is the necessity of fulfilling the agreement with the Client.
The registration number/personal identification number of sole proprietorships is processed when purchases are made on invoice. This processing is based on a legitimate interest, where the Company’s legitimate interest is to confirm the Client’s identity.
A credit check for sole proprietorships may also be processed to ensure the Client’s creditworthiness. This processing is based on a legitimate interest, where the Company’s legitimate interest is to assess the likelihood of receiving payment.
The above-mentioned data is retained for as long as necessary to fulfill the purposes outlined above.
4.1.2 Returns, warranty claims and product liability
The Company retains information about the Client’s purchase history, as well as any correspondence and documentation related to the products purchased by the Client. Such documentation may include the contact person’s name and other information related to the contact person.
The Company retains this documentation for as long as necessary and to the extent required to provide the Client with qualified post-purchase service and to handle any complaints, warranty claims, and claims under the Product Liability Act. This data is retained for these purposes based on a legitimate interest.
4.1.3 Direct marketing
The Company may also process your email address for direct marketing purposes. The marketing consists of the Company sending newsletters and offers about goods/services that we deem relevant to your professional activities via email.
For sole proprietorships, newsletters and offers may be sent via email for up to 36 months after the Client’s most recent purchase. For contact persons at client companies that are not sole proprietorships, newsletters and offers may be sent via email for up to 36 months after the Client’s most recent purchase.
Newsletters and marketing emails are only sent if you have not objected to such marketing, and you can opt out of receiving our newsletters and marketing emails at any time. To unsubscribe, please contact the Company at info@emcomp.se or use the unsubscribe link provided in each newsletter/email.
The marketing is based on a legitimate interest, where the Company’s legitimate interest is to market its products.
4.1.4 Miscellaneous
In addition to what has been stated above, the Company may process your personal data if it is necessary to fulfill a legal obligation that requires processing under applicable law, or to enable the Company to establish, assert, or defend legal claims.
4.2 Potential Customers
The Company uses contact persons’ information for marketing purposes based on a legitimate interest. The marketing consists of sending newsletters and offers via email that we deem relevant to you in your professional activities. Newsletters and marketing emails are only sent if you have not objected to such marketing, and you can opt out of receiving our newsletters and marketing emails at any time. To unsubscribe, please send an email to the Company at info@emcomp.se or use the unsubscribe link provided in each newsletter/email.
Your data is retained for as long as the Company needs the information for the marketing campaigns for which the data was collected, provided that you have not previously objected to the marketing. The marketing is based on a legitimate interest, where the Company’s legitimate interest is to market its products.
5. Who might we share your data with?
The Company may transfer your personal data to website administrators, CRM system providers, and similar third parties. These recipients are only authorized to process your personal data on behalf of the Company in connection with providing a service to the Company, such as delivering an ordered product to the Client. The Company takes all reasonable legal, technical, and organizational measures to ensure that your data is handled securely and with an adequate level of protection when transferred to or shared with such selected third parties.
The Company may also disclose your personal data to authorities, such as the Swedish Tax Agency, if required by law. In the event that all or part of the Company’s business is sold, the Company may transfer your personal data to a potential buyer of the business.
6. Transfer of Personal Data Outside the EU/EEA
Your personal data will primarily be processed within the EU/EEA but may also be transferred to countries outside the EU/EEA. The Company has taken appropriate protective measures to safeguard your personal data by ensuring that the recipient of the personal data has signed an agreement containing certain standard contractual clauses approved by the European Commission. A copy of these signed standard contractual clauses can be provided upon request to info@emcomp.se.
7. Your rights
Du har vissa lagstadgade rättigheter som du kan göra gällande mot Bolaget. Nedan följer en sammanfattning av dessa rättiFor complete information regarding your rights, please refer to the General Data Protection Regulation (GDPR), Sections 3–5.
Right of Access/Register Extract:
You have the right to know whether the Company processes personal data about you. If so, you are entitled to information about, for example, which personal data is processed, the purposes of the processing, the external recipients who receive your personal data, and how long we retain your personal data.
Right to Data Portability (Sole Proprietorships Only):
If you are a customer through a sole proprietorship, you have the right to request a copy of the personal data you have provided to the Company in a structured, commonly used, and machine-readable format. You also have the right to request that the Company transfer this personal data to another data controller. The right to data portability applies to personal data processed automatically and based on your consent or a contract to which you are a party.
Right to Rectify Incorrect Data:
You have the right to request that the Company correct any incorrect or incomplete information about yourself.
Right to Erasure of Certain Data:
You have the right to request that the Company delete your personal data under certain conditions, for example, if the personal data is no longer necessary for the purpose for which we collected it.
Right to Object to the Company’s Processing of Personal Data:
You have the right to object to the Company’s processing of your personal data under certain conditions.
Right to Object to Direct Marketing:
You have the right to object at any time to the Company processing your personal data for direct marketing purposes. If you object to such processing, the Company will, without undue delay, cease all direct marketing to you.
Right to Restriction of the Processing of Your Personal Data:
You have the right to request a restriction on the Company’s processing of your personal data in certain cases. For example, if you have contested the accuracy of your personal data, you may request a restriction of processing for a period that allows the Company to verify whether the personal data is correct.
Complaints:
If you have any complaints regarding the Company’s processing of your personal data, you have the right to file a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten).
If you wish to make a request for access, data portability, rectification, erasure, objection, or restriction, please contact the Company at info@emcomp.se.
8. Changes in the privacy policy
The Company reserves the right to make changes to this Privacy Policy. If such changes occur, they will be notified on the Company’s website.