This privacy policy contains rules and guidelines for the processing of personal data carried out by Kallax Flyg as the data controller, regardless of the type of personal data involved and whose personal data it concerns. The purpose of this privacy policy is to establish the framework for the new General Data Protection Regulation (GDPR) within the group.
In several cases, when we request personal data, we do so in order to comply with legal or contractual obligations, or requirements necessary to enter into an agreement with, for example, a customer. If the data subject does not provide the requested information, it may, in certain cases, result in us being unable to enter into or fulfil an agreement with the data subject.
What is the legal basis for the processing?
In order to enter into and manage agreements with our customers, Kallax Flyg processes personal data of individuals who are customers. Some personal data may also be processed because Kallax Flyg has a legal obligation to do so, for example, personal data on invoices due to accounting requirements.
What personal data is processed and who are the recipients?
We process personal data concerning customers with whom we have a customer agreement. The personal data processed may include, but is not limited to, name, phone number, email address, personal identification number, and credit evaluation. We may also process personal data concerning representatives of companies that are customers. The data processed may include name, phone number, address, and email address. The recipients of the data are mainly relevant personnel in the sales department, finance department, marketing department, managers, contract administrators, and any distributors. Helpdesk staff and technicians may also receive the data.
For what purposes is personal data processed?
When a customer agreement exists, Kallax Flyg processes only the personal data that is relevant to the customer relationship and required for fulfilling the agreement. Personal data such as a representative’s name, email, and phone number is processed in order to maintain communication with the customer and to administer the customer agreement in general. Personal identification numbers are processed only when necessary for invoicing, credit assessments, or similar matters. Representatives’ personal data may also be processed for the purpose of sending offers and advertisements to the customer company. However, the representative has the right to object to the processing of personal data for direct marketing at any time (see “Right to object” below).
How long is personal data stored?
Kallax Flyg never stores data longer than necessary in relation to the purposes of the processing. Therefore, Kallax Flyg regularly reviews stored personal data and deletes any data that is no longer needed once the customer relationship has ended.
However, Kallax Flyg may need to store personal data after the customer relationship has ended, for example, to administer warranties and complaint periods, handle legal claims that may be directed against Kallax Flyg, or for marketing purposes and to send offers that Kallax Flyg believes may be of interest to former customers. As a result, personal data may be stored for a certain period after the end of the customer relationship or until the individual has objected to direct marketing.
Special note regarding sensitive data
In this Policy, sensitive data refers to personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for uniquely identifying a natural person, data concerning health, or data concerning a natural person’s sex life or sexual orientation.
Kallax Flyg never processes sensitive data about its customers.
WHAT RIGHTS DOES THE DATA SUBJECT HAVE?
Right of access
The data subject has the right to contact Kallax Flyg in its role as data controller and request access to the personal data processed by Kallax Flyg and to be informed of, among other things, the purposes of the processing and who has received the personal data.
Kallax Flyg, as data controller, shall provide the data subject with a free copy of the personal data that is being processed.
Right to rectification, erasure, or restriction
The data subject has the right to have their personal data rectified without undue delay or, under certain conditions, restricted or erased. If the data subject believes that Kallax Flyg is processing inaccurate or incomplete data, they may request correction or completion.
The data subject also has the right to have their data erased, for example, if it is no longer necessary or if the processing is based on consent that has been withdrawn.
Right to object
The data subject has the right to object at any time to the processing of their personal data if the legal basis for the processing is public interest or legitimate interest under Article 6.1 of the GDPR. The data subject also has the right to object at any time to the processing of their personal data for direct marketing purposes.
Right to withdraw consent
If the processing of personal data is based on the data subject’s consent, the data subject has the right to withdraw that consent at any time. Such withdrawal does not affect the lawfulness of the processing carried out before the withdrawal.
Right to lodge a complaint with the Swedish Authority for Privacy Protection
The data subject has the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Contact information
Phone: +46 8 657 61 00
Email: datainspektionen@datainspektionen.se
CONTACT INFORMATION
If you have any questions regarding the processing of your personal data, you are welcome to email us at:
personuppgift@kallaxflyg.se
CHANGES TO THE POLICY
Kallax Flyg reserves the right to change and update this Policy. In the event of material changes or if existing information is to be processed in a different manner than stated in this Policy, Kallax Flyg will provide appropriate notice.