Privacy Policy

This is an account of the processing of personal data in accordance with the EU General Data Protection Regulation (2016/679) (GDPR).

Definitions

By Personal Data Controller is meant;
A natural or legal person, public authority, institution or other body that alone or together with others determines the purposes and means for the processing of personal data.

By Personal Data Assistant is meant;
A natural or legal person, public authority, institution or other body that processes personal data on behalf of the data controller.

By Personal Data is meant;
Any information relating to an identified or identifiable natural person (hereinafter referred to as the "Registrant") where an identifiable natural person is a person who can be directly or indirectly identified specifically by reference to an identifier such as a name, an identification number, a location data or online identifiers or a or several factors specific to the natural person's physical, physiological, genetic, psychological, economic, cultural or social identity.

By Processing of Personal Data is meant;
The action or combination of actions linked to Personal Data, regardless of whether they take place automatically or not, via e.g. collection, recording, organization, structuring, storage, processing or modification, extraction, reading, use, disclosure by transmission, dissemination or other provision of data, adjustment or aggregation, restriction, erasure or destruction.

Third Party means;
A natural or legal person who is not the data subject, the Personal Data Controller or the persons under the direct responsibility of the Personal Data Controller who are authorized to process the personal data.

Personal data controller

Etronix Group International AB
Organization number: 559303-9869
address: Susvindsvägen 1 B, 432 32 Varberg
telephone number: 010-7500895
e-mail: support@etronix.se

Contact information regarding data protection issues

Johan Weidolf Nyström
Telephone number: 010-7500895
Email: support@etronix.se

The data subject is advised to contact the above-mentioned contact person in all matters relating to the processing of personal data and in situations concerning the exercise of their personal rights.

Basis and purpose for the processing of personal data

The legal basis for processing personal data is:

The data subject's consent to the processing of personal data

The contractual relationship between the data subject and the personal data controller

The fulfillment of the personal data controller's legal obligations

The legitimate interest of the personal data controller or a third party

Protection of vital interests

The purposes of the processing of personal data are maintenance of customer relationships and partnerships, marketing and fulfillment of contractual obligations

Personal data processed

The personal data controller only collects the personal data from the data subject that is relevant and necessary for the purposes described in this privacy policy.

The following information is processed about registered persons:

Name
Position
Address, workplace
Home address (delivery address) for a private person
E-mail
Phone number
Product and technology interest
Consent
Purchase history

We do not store social security numbers or birth data.

Disclosure of personal data

Personal data is not disclosed to third parties, unless the law prescribes an obligation to do so. Data can therefore exceptionally be disclosed to authorities if the law requires it.

Protection of personal data

The personal data controller processes personal data in a way that aims to guarantee the appropriate security of the personal data, including protection against unauthorized processing and accidental disappearance, destruction or damage.

The personal data controller uses appropriate technical and organizational safeguards to ensure this purpose, including the use of firewalls, encryption technology and secure areas for equipment, appropriate access control, careful management of information system usernames and guidance of staff involved in the processing of the personal data.

Data storage time

The personal data controller processes the personal data for three years After this period, the personal data controller deletes or anonymises the data within six months in accordance with its deletion processes. The person in charge of personal data may be obliged to process some of the personal data contained in the register for a longer period of time than stated above in order to comply with legislation or authority requirements.

Profiling

Processing of personal data includes profiling. Profiling refers to the automated processing of personal data, where certain personal characteristics of the data subject are assessed using the data.

Profiling is used to direct relevant, professional information to the data subject.

The data subject's rights

Right to access personal data

The registered person has the right to receive a confirmation of whether their personal data is processed and, if they are processed, the right to receive a copy of their personal data.

Right to correct information

The registered person has the right to request that incomplete and incorrect personal data relating to him or her be corrected. The data subject also has the right to complete incomplete personal data by submitting the necessary additional data.

Right to delete data

The registered person has the right to request deletion of his personal data. This applies, among other things, when the personal data is no longer needed for the purposes for which it was collected, or when the personal data has been processed in an illegal manner, or if the data subject has withdrawn the consent on which the processing is based.

Right to limitation of treatment

The data subject has the right to request restriction of the processing of his personal data, among other things, if the data subject objects to the correctness of the data or considers that the processing is against the law.

Right to object

The data subject has the right to object to processing based on a legitimate interest. If the personal data is processed for direct marketing, the data subject always has the right to object at any time to the processing of his personal data for such marketing, including profiling of such direct marketing.

Right not to be subject to automated decisions

The data subject has the right not to be subject to such a decision which is solely based on automated processing, such as profiling, and which has legal effects or a similar noticeable effect on the data subject.

The above does not apply if the decision is necessary to enter into or fulfill an agreement between the data subject and the personal data controller or if it is based on the data subject's express consent.

Right to withdraw consent

The data subject has the right to withdraw his consent to the processing at any time without this affecting the legality of the processing previously carried out with the support of the consent.

Right to move personal data (data portability)

The registered person has the right to obtain the personal data relating to him, as well as the personal data that the registered person himself has submitted. The personal data must be disclosed in a structured, commonly used and machine-readable format. The data subject further has the right to transfer this data to another personal data controller.

Right to submit a complaint to the supervisory authority

The national supervisory authority for matters relating to personal data is the Swedish Data Protection Authority. The data subject has the right to transfer his case to the supervisory authority if the data subject considers that the processing of his personal data violates current legislation.

Change of privacy policy

The personal data controller continuously develops its business and may therefore need to update and change its privacy policies as necessary. The changes can also be based on changes in data protection legislation.

If the changes include new purposes for the processing of personal data, or the policy is otherwise significantly changed, the personal data controller will notify the changes in advance and, if necessary, request consent from the data subjects.