PRIVACY POLICY – PROCESSING OF PERSONAL DATA

The following policy has been established for Damasteel AB, corporate registration number 556514-2170, Stallgatan 9, 815 76 Söderfors, Sweden (“Damasteel”, “We” or “Us”).

This Privacy Policy was last updated on 2020-03-24

1 Purpose

Your privacy is important for Us. We protect Your privacy and You should be able to feel safe when You entrust Us with Your personal data. Therefore, Damasteel have established this policy based on current data protection legislation to clarify how We work to protect Your rights and Your integrity.

The purpose of this policy is to inform You about how Damasteel process Your personal data, what We use it for, who will get access to it and under what conditions and how You can exercise your rights. 

We do not process more personal data than is necessary for the purpose, and We always strive to use the least privacy-sensitive information.

Please read this Privacy Policy carefully. 

2 Guidelines

What types of personal data do We process?
We only process personal data when We have a legal ground. We do not process personal data in any case other than when it is required to fulfil Our obligations under law and agreements or based on legitimate interests. Here are examples of the types of personal data that We process:
• Name
• Address
• E-mail address 
• Phone number (optional)
• Bank card or credit card information
• Purchase history

How do We access your personal information?
We will primarily get access to Your personal information by You providing the personal data to Us. We can also get access through the following ways:
• Information that is registered when You visit our website.
• Information We receive from public registers.
• Information We receive from our cookies
• Information that We receive when you sign up for newsletters and other mailings.
• Information that We receive when you answer surveys and other polls and investigations.
• Information that We receive when You contact Us, seek employment with Us, visit Us or in other ways seek contact with Us. 

In what ways and for what reasons do We process Your personal data?
We mainly process personal data with the support of Our agreement with You, with the support of law, so called legal obligation, for example in order to comply with requirements under the Accounting Act, or with the support of an agreement with an individual (such as an employment contract).
In some cases, We may also process Your personal data based on legitimate interests. This will primarily be relevant when We need to process personal data for advertising or marketing purposes.

Is Your personal data processed in a safe way?
Damasteel has routines and procedures for managing your personal data in a safe way. Only persons who need personal data to perform their duties and Our commitments shall have access to personal data.
Our security systems are developed with your integrity in focus and to protect, to a great extent, against intrusion, destruction and other incidents that could endanger Your privacy. 

When do We share Your personal data?
Damasteel may not disclose Your personal data to anyone unless it is required by law.  
In some cases, personal data is transferred to Our subcontractors for marketing-, information- and follow-up purposes. See more about processors/sub-processors in section 4 below.
We do not transfer personal data to third parties in cases other that those expressly stated in this policy. 

Retaining and deleting personal data
We retain your personal data not longer than what is necessary in order to fulfil the purpose of the processing and We will delete personal data in accordance with applicable law.

When We process personal data with legitimate interests as legal ground, We store your personal data as long as We believe you are interested in our services and information from Us. We will carry out annual thinning for this type of processing.

3 Your rights

Request for rectification or erasure
You are entitled to request that personal data about you is rectified or erased. You also have the right to restrict the processing of your personal data or object to such processing in accordance with the General Data Protection Regulation or national privacy laws. Following such a request, We will examine whether there is reason to implement the requested change.

Request for a registry extract
You are entitled to request extracts from Damasteel and Our registries/systems in which personal data about You is processed and, in such extracts, be informed of what personal data about You that We are processing and how We process this data.

If You have questions regarding the processing of Your personal data or if You find that any data is incorrect, want to request rectification, erasure, restriction or objection to the processing please contact Us in accordance with section 5 below.

The Swedish Data Protection Authority
The Swedish Data Protection Authority (DPA) is the supervisory public authority for processing of personal data and data protection in Sweden. You are entitled to lodge complaints regarding the processing of personal data to the DPA. Contact information for the DPA can be found on www.datainspektionen.se/in-english/contact-us .

4 Controller of personal data and our processors

Damasteel always ensures through personal data processing agreements that Our processors/sub-processors only process personal data in accordance with this policy. Upon request Damasteel will provide a list of current data processors (sub-processors).

5 Contact details