General

Hagmans Nordic AB, 556071-4890, Förläggarevägen 2, 511 72 Fritsla (“we” or “Hagmans”) values your privacy. This data protection policy explains how we, as the data controller, collect, store, share, and use your personal data and what rights you have under applicable data protection legislation, including the General Data Protection Regulation (GDPR).

Data Controller and Contact

If you have questions about how we collect, store, and use your personal data or if you wish to exercise any of your rights under applicable data protection legislation, as described in section 8 below, please email us at: dataskydd@hagmansnordic.com 

Further Information About What Data We Process and Why

The summary below contains information about which personal data about you we process and why we process it (purpose), as well as our legal basis for the processing.

Description of Processing and Type of Personal Data	Purpose and Legal Basis
When you, as a contact person for your organization, purchase goods or services from us, we process the personal data that you provide to us. Personal data that you provide to us and that we process may include, for example, your name, your position, address, mobile and telephone number, and your email address.	We process your data to manage your user account and to fulfill our obligations in relation to your order. The legal bases for our processing are, on the one hand, a balancing of interests (the processing is necessary for us to fulfill our obligations under the order and manage our internal administration), and, on the other hand, that we have legal obligations under accounting legislation. For you who represent a sole proprietorship with which we have a business relationship, the legal basis is that the processing is necessary for us to fulfill our contract with you or to take steps prior to entering into our contract, as well as that we have legal obligations under accounting legislation.
When you, as a contact person for your organization, register a user account in our webshop and order goods via our webshop, we process the personal data that you provide to us.   Personal data that you provide to us and that we process may include, for example, your name, your position, address, mobile and telephone number, and your email address.	We process your data to manage your user account and to fulfill our obligations in relation to your order.   The legal basis for our processing is a balancing of interests. The processing is necessary for us to administer your user account as well as to fulfill our obligations under the order and manage our internal administration.
When you, as a contact person for your organization, contact us via telephone, email (for example our customer service), or letter, we process the personal data that you provide to us. Personal data that you provide to us and that we process may include, for example, your name, your role or position, address, mobile and telephone number, your email address, and the content of communication with us.	We process your data to communicate with you regarding the matter in question and to administer and respond to your inquiry, such as questions about complaints or previous purchases (color code), as well as to evaluate and improve our services and our customer service.   The legal basis for our processing is a balancing of interests. The processing is necessary for our legitimate interest in maintaining a good level of service, fulfilling our obligations under the agreement with the organization you represent, and providing you with professional service.
During the time that you are a contact person for your organization, we process the personal data that you provide to us, as well as personal data that we have collected about you, in order to establish and maintain our business relationship with you. This includes communicating relevant information to you (information/marketing), conducting customer satisfaction surveys regarding our products and services, and sending newsletters to you.   Personal data that we process includes your name, your role or position, address, mobile and telephone number, and your email address.	We process your data to communicate with you regarding the matter in question, to market our products and services, and to evaluate and improve our services and our customer service.   Det rettslige grunnlaget for vår behandling er en interesseavveining. Behandlingen er nødvendig for vår berettigede interesse i å kommunisere med deg, markedsføre våre produkter og tjenester og gi deg profesjonell oppfølging.
When you visit our website and download materials, we will collect personal data about you. This may include your IP address, search engine, operating system, which page you link from, our URL, and the date and time of the visit.   For more information about the data we collect about you via our website, see our cookie policy.	We use this information in the ways and for the purposes further specified in our cookie policy.   The legal basis for our processing is a balancing of interests, i.e. the processing is necessary for a purpose concerning our legitimate interest in analyzing and improving our website.

Privacy Policy

In addition to us, your personal data may be processed by others after being transferred from us. We assure you that we take all reasonable legal, technical, and organizational measures to ensure that your personal data is handled securely and with an adequate level of protection when transferred to or shared with such third parties.

The third parties to whom we may transfer personal data mainly fall into the following categories of recipients.

We may disclose personal data to our affiliated companies, partners, and service providers who process personal data on our behalf in connection with the performance of services for us. Processing carried out by such parties on our behalf is done in their capacity as data processors. We have agreements with our data processors that ensure that they process your personal data in accordance with this policy and our instructions.

We may also disclose your personal data to authorities, courts, and other law enforcement authorities or third parties when we are required to disclose the data (i) under applicable law, regulation, or industry code; (ii) to safeguard our rights; or (iii) to protect your or another person’s fundamental interests. Examples of situations where this may occur include measures against money laundering and terrorist financing.

We may also share your personal data with a potential buyer (and its representatives and advisors) in connection with a merger, acquisition, or sale of all or parts of Hagmans Nordic assets, provided that we inform the buyer that the personal data may only be used for the purposes stated in this policy.

We may disclose your personal data to another party if we have your consent to such disclosure.

We will not sell your personal data to third parties without your explicit consent.

Where Do We Process Your Data?

We always strive to ensure that the processing of your personal data takes place within the EU/EEA. We and our data processors, as a main rule, only process your personal data within the EU and EEA. If personal data is processed outside the EU and EEA, we will take measures to ensure that the personal data continues to be equally protected and also take the measures required to lawfully transfer personal data to countries outside the EU and EEA.

Security

Hagmans Nordic has taken the technical and organizational measures necessary to protect your personal data against unauthorized access, alteration, and deletion. The measures we have taken are designed to achieve a level of security appropriate in view of the risks associated with the processing.

How Long Do We Process Your Personal Data for the Different Purposes?

We only process personal data for as long as there is a need to retain it in order to fulfill the purposes for which the data was provided or collected, such as, for example, to manage an order or an inquiry or to fulfill a legal obligation incumbent upon us (accounting, tax, etc.).

When we no longer have a legal basis for processing your personal data, we will delete or anonymize the data or, if this is not possible (for example due to the data being in our backup), we will store your data securely until it is possible to delete it.

Your personal data may be retained for a longer period than stated above if required to comply with legal requirements or decisions by authorities.

Your Rights

When we process your personal data, you have certain rights under the law. Please note that the exercise of these rights is subject to certain requirements and conditions as further specified in law (primarily in the GDPR).

Your Right to Information and Access to Your Personal Data

You have the right to request information about which personal data we process about you and how we process it. You also have the right to – as a general rule free of charge – receive a copy of the personal data we hold about you (so-called register extract).

If you do not have grounds for your request or your request is unreasonable, for example if you request extracts at short intervals, we may either refuse to comply with your request or charge a fee that covers the administrative costs that your request entails for us.

Your Right to Rectification and Erasure of Your Personal Data

If your personal data is incorrect or incomplete, you have the right to request that we correct or complete such personal data.

You have the right to request the erasure of your personal data under certain circumstances (as specified in the GDPR). Provided that your request falls within one of these circumstances, we will delete your data.

Your Right to Object to Direct Marketing

You may at any time object to your personal data being processed for direct marketing. If you do not want us to process your personal data for this purpose, please inform us by contacting us.

Your Right to Request Restriction

Under certain conditions, as further specified in the GDPR, you have the right to request that the processing of your personal data be restricted. We will then restrict our processing in accordance with what the GDPR requires.

Your Right to Data Portability

Under certain conditions, as further specified in the GDPR, you have the right to receive the personal data we hold about you and that you have provided to us, in a structured, commonly used, and machine-readable format. Provided that it is technically feasible, you have the right to have the data transferred directly to another data controller.

Your Right to Lodge a Complaint

If you are dissatisfied with how we have processed your personal data, you are welcome to contact us, see our contact details below. You also have the right to lodge a complaint regarding our processing of personal data with the Swedish Authority for Privacy Protection (Datainspektionen).

www.datainspektionen.sewww.datainspektionen.se

Changes to the Data Protection Policy

If this data protection policy is changed, we will publish the revised policy on hagmansnordic.com with information on when the changes take effect. If we make any significant changes to the data protection policy, we may also choose to inform you in another way, for example via email or by publishing a notice on hagmansnordic.com.

The data protection policy was last updated 190516.