Privacy policy
Information on how Stabe AB processes your personal data
The data controller is Stabe Aktiebolag, organisation number 556851-3153.
In this privacy policy, we explain when and how personal data is processed, the legal basis for the processing and our approach to the storage and protection of this data. If you have any questions or complaints about our processing of personal data, you are welcome to contact us as described below:
035-777 94 33
info@stabe.se
Address: Karlsrovägen 60, 302 41 Halmstad
Stabe Aktiebolag, hereinafter referred to as "we", "our" or "Stabe" is responsible for the processing of personal data in accordance with the principles described on this page.
1. When processing of personal data takes place
In order for you to use our websites, purchase our services or products, visit us, receive our newsletter or contact us, we need to process personal data about you.
We collect and process personal data about you when you visit our website, apply for a job with us, visit us, subscribe to newsletters, make a purchase with us, enter into a contract with us or otherwise contact us.
The information is collected for the purpose of finalising and completing contracts/sales and for us to provide services, products, offers and information.
We may also, in some cases, collect and update existing address information via third-party address update services.
2. What personal data is processed
For you as a website visitor:
We collect information when you visit our website. We do this in order to understand how the site is used and to improve its content and appearance. The information collected is mainly non-identifying information of the type normally sent by browsers when a website is visited. Your IP address is in some cases considered personally identifiable information that we process in order to review the use of our services.
Data being processed:
Type of browser
Type of operating system
IP address
Language preference
Referring website
Date of the visit
If you use forms on the websites to contact us or subscribe to newsletters, we also need to process:
Name of the organisation
E-mail address and/or telephone number
Your activity on our website
For those who are our customers:
We process information about you as a customer in order to fulfil agreements, enable delivery and maintain communication.
The data processed are:
Customer number
Company name
Position/title
Organisation number
Address
Telephone number
E-mail address
Which tenders, contracts and products you are linked to
Invoices issued and their payment status
In cases where we have more than one contact person with you as a customer, these personal data are also processed.
For those who are looking to work with us:
When you apply for a job with us, we save your submitted application and any attachments.
The data being processed:
Name of the organisation
E-mail address
Telephone number
Date of birth
Position applied for
CV
Personalised letter
3. Legal bases for processing your personal data
We base the processing of your personal data on a number of legal grounds.
Performance of contracts:
We process your personal data in order to enter into and fulfil our obligations in a contract. For example, to be able to send out the right reports to the right people, to be able to invoice and communicate with the parties involved in a project. We also process your personal data in order to follow up on transactions and agreements.
Balancing of interests:
In some cases, we process your personal data based on a balance of interests. For example, in order to contact you with offers, carry out sales activities and follow up after a contract has ended.
Legal obligation:
In some cases, we have a legal obligation to process your personal data. This applies, among other things, to be able to fulfil legal requirements under the Accounting Act (1999:1078).
Consent:
In exceptional cases, we process your personal data on the basis of consent. Examples of this are when you interact with us on social channels, subscribe to our newsletter or contact us through contact forms on our website.
4. Who can have access to your personal data
Your personal data will be processed by us and by a trusted third party who processes personal data on our behalf. These companies then act as data processors.
For example, your personal data is processed by data processors who carry out our invoicing and auditing, and by IT and system suppliers who provide technical infrastructure or other technical services.
We and our suppliers and partners primarily process your personal data within the EU/EEA. If your personal data is processed outside the EU/EEA, we will ensure that such transfer and processing is done securely and in accordance with applicable law.
5. How we protect your personal data
We take ongoing security measures to continuously protect your personal data. We protect databases and internal systems with firewalls, passwords and, where applicable, two-factor authentication. Only a few users have direct access to the databases and we monitor internal systems for signs of intrusion attempts and the like.
6. How long we keep your data
The basic principle is that we will never keep your personal data for longer than is necessary to fulfil the purposes set out in this privacy policy. The exception is if we need to keep the data longer to comply with other legal requirements or to safeguard our legal interests, for example if there is a legal process underway.
We delete personal data relating to customers who no longer have active contracts after 25 months. In other cases, data is deleted 25 months after the last interaction.
7. your rights
As a data subject, you have the right to request the deletion or rectification of your data under certain conditions. You also have the right to object to our processing and to withdraw any consent given.
8. Changes to the privacy policy
We may change the privacy policy at any time and will give reasonable notice when a change is imminent.
9. Safety and security
We endeavour to ensure the security, integrity and confidentiality of personal information you submit, and we review and update our security measures in light of the latest technology. Unfortunately, no data transmission over the Internet can be guaranteed to be completely secure. However, we endeavour to take all reasonable steps to protect personal information that you transmit to us. Employees and contractors who provide services related to the website are required to respect the confidentiality of any personal information that we hold. However, we take no responsibility for events arising from unauthorised access to your personal information.
We take appropriate security measures to protect against accidental loss, unauthorised use or access to, or unauthorised alteration, disclosure or destruction of data. These include internal audits of our data collection, storage and processing practices and security measures, as well as physical security measures to protect against unauthorised access to systems where we store personal data. We limit access to personal information to our officers, employees, contractors and agents who need that information to operate, develop or improve our services. These individuals will only process your personal information in accordance with our instructions, are bound by confidentiality obligations, and may be subject to disciplinary action, including termination and prosecution, if they do not fulfil these obligations.
We have procedures in place to deal with any suspected personal data breaches and will notify you and any applicable supervisory authority of a breach where we are legally required to do so.
Data storage
We will only retain your personal information for as long as necessary to fulfil the purposes for which we collected it, including to meet any legal, accounting or reporting requirements. In determining the appropriate retention period for personal data, we take into account the amount, type and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes by other means, and the applicable legal requirements.
10. the Integrity Protection Authority (IMY)
If you believe that we are processing your personal data in breach of applicable law, you also have the option of contacting the supervisory authority, the Integritetsskyddsmyndigheten (IMY).
The Data Protection Authority
Box 8114
104 20 Stockholm
imy@imy.se
08-657 61 00