Purpose
We care about your privacy. You should always feel safe when entrusting your personal data to us. For this reason, we have devised this policy which sets out how we work to safeguard your rights and privacy.
The purpose of this policy is to inform you of how we process your personal data, what we use it for, who can access it and under what conditions, and how you can exercise your rights The policy is based on the new data protection legislation, the GDPR, and contains rules on how personal data may be processed.
Background
We process your personal data primarily to meet our obligations to you. Our basic principle is not to process more personal data than is needed for the purpose, and we always endeavour to use the least privacy-sensitive data.
We also need your personal data to provide you with service of an appropriate standard, e.g. as regards marketing, follow-up and information. We may also need your personal data to comply with legislation and conduct customer and market analyses.
You are entitled to object to our use of personal data for direct marketing purposes. The first time we collect personal data about you, you will receive more information about such use and how you can object to it.
What personal data do we collect?
We only process personal data when we have a lawful basis to do so. We do not process personal data other than when it is needed to meet our contractual or legal obligations. Here are some examples of the personal data we process:
– Name
– Title
– Company
– Address
– E-mail
– Telephone number
– Username
– Information that you voluntarily register yourself
– Content that you publish yourself, so-called user-generated content
How do we gain access to your personal data?
Wherever possible, we try to obtain your consent before we start processing your personal data. We do this by having you complete explicit consent clauses in those cases where the processing is based on consent.
You have the right to withdraw your consent at any time. We will then cease to process your personal data or collect new data, provided it is not needed to meet our contractual or legal obligations. Bear in mind that withdrawal of consent may mean that we cannot meet our obligations to you.
We also have access to your personal data in the following ways:
– Data that you provide us with directly
– Data that is registered when you visit our website
– Data that we obtain from public registers
– Data that we obtain when you subscribe to our newsletter and other mailings
– Data that we obtain when you respond to surveys and analyses
– Data that we obtain when you contact us, apply for employment with us, visit us or contact us in some other way
What information do we provide you with?
The first time we collect your personal data, we will inform you about how we obtained the personal data, what we will use it for, the rights you have under data protection legislation and how you can exercise these. You will also be informed about who is responsible for the processing of the personal data and how you can contact us if you have questions or need to submit a request or enquiry relating to your personal data and/or rights.
Is your personal data processed in a satisfactory manner?
We devise procedures and methods to ensure your personal data is handled in a secure manner. The basic principle is that only employees and other persons in the organisation who need the personal data to perform their work tasks should have access to it. In the case of sensitive personal data, we have established special authorisation checks, resulting in greater protection for your personal data. Our security systems have been developed with your privacy in mind and provide extremely good protection against intrusion, destruction and other changes that may pose a risk to your privacy. We have several policies for IT security in order to ensure that your personal data is processed securely. We do not transmit personal data in cases other than those expressly stated in this policy.
How do we use the information we collect?
We process personal data primarily for the purposes set out below, as well as for the further purposes, where applicable, stated at the point of collection.
– To fulfil your orders for our services
– To facilitate good customer service, such as handling your enquiries, correcting incorrect data or to send information you have requested, e.g. our newsletter
– To administer customer profiles, undertake analyses and market surveys
– For system administration and statistics
– To be able to send you information and marketing via e-mail and social media
– To be able to contact you via e-mail, mail, social media about other offers, campaigns or services we believe may interest you
– To be able to provide you with relevant recommendations, offers and tailored services
– To help us develop our website and make it more user-friendly for you as customer, as well as to provide you with a better user experience
– To be able to send important messages as communication about changes in terms and conditions and policies
When do we disclose your personal data?
Our basic principle is that we will not disclose your personal data to third parties without your consent or unless it is necessary to fulfil our contractual or legal obligations. In cases where we disclose personal data to a third party, we establish a confidentiality agreement and ensure that the personal data is processed in a satisfactory manner.
Responsibility
Prototal is the personal data controller, which means that we are responsible for how your personal data is processed and that your rights are safeguarded.
If you want to know what data we have saved about you and your company specifically, or you want to erase personal data that we have saved about you/your company, please contact us at info@prototal.se