This privacy policy contains rules and guidelines for the processing of personal data carried out by Kallax Flyg in its capacity as data controller. The purpose of this privacy policy is to establish the framework for the new General Data Protection Regulation (GDPR).
In several cases where we request personal data, we do so in order to fulfil legal or contractual obligations or requirements necessary to enter into an agreement with a supplier. If the data subject does not provide the requested information, this may in some cases result in our inability to enter into or fulfil an agreement with the data subject.
What is the legal basis for the processing?
To enter into and manage agreements with suppliers, Kallax Flyg processes personal data belonging to individuals who represent the suppliers. Certain personal data may also be processed due to Kallax Flyg’s legal obligations, for example personal data on invoices due to accounting requirements.
What personal data is processed and who are the recipients?
We process personal data relating to representatives of supplier companies with whom we have, or intend to enter into, agreements. The personal data processed may include name, phone number, email address, and postal address.
The recipients of the data are primarily Kallax Flyg’s purchasing and raw materials departments, the responsible manager, the CEO, the finance department, and the IT department. For raw material suppliers, we also share data with third parties in order to give instructions to our contractors.
For what purposes is the personal data processed?
Kallax Flyg processes personal data in order to administer purchase agreements, handle invoices, and to ask the supplier questions about the goods or services we purchase.
How long is the personal data stored?
Kallax Flyg never stores data longer than necessary for the purposes of the processing. Regular reviews of stored data are conducted, and data that is no longer needed is deleted after the contractual relationship has ended.
However, Kallax Flyg may need to retain the data after the contract has ended in order to manage warranties and complaint periods, or to handle any legal claims that may be directed at Kallax Flyg.
Personal data may also need to be stored to fulfil legal obligations, such as accounting requirements or statutes of limitation. Where such an obligation exists, the data may be stored for up to 10 years.
What rights does the data subject have?
Right of access
The data subject has the right to contact Kallax Flyg, in its capacity as data controller, and request access to the personal data we process, and receive information about, among other things, the purposes of the processing and the recipients of the data.
Kallax Flyg shall provide the data subject with a free copy of the personal data being processed.
Right to rectification, erasure or restriction
The data subject has the right to have incorrect personal data rectified without undue delay or, under certain conditions, to have the processing restricted or the data erased.
If the data subject believes that Kallax Flyg is processing incorrect or incomplete personal data, they may request that it be corrected or completed.
The data subject also has the right to have their personal data erased, for example if it is no longer necessary for the purposes for which it was collected or if the processing is based on consent and that consent has been withdrawn.
Right to object
The data subject has the right to object at any time to the processing of their personal data where the legal basis is public interest or legitimate interest according to Article 6(1) of the GDPR.
They also have the right to object to the processing of their personal data for direct marketing purposes.
Right to withdraw consent
If the processing is based on consent, the data subject has the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of the processing based on consent before it was withdrawn.
Right to lodge a complaint with the supervisory authority
The data subject has the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Contact details
Phone number: +46 8 657 61 00
Email address: datainspektionen@datainspektionen.se
Contact details
If you have questions about how your personal data is handled, you are welcome to contact us at:
personuppgift@kallaxflyg.se
Changes to the policy
Kallax Flyg reserves the right to amend and update this policy. In the event of material changes or if existing data is to be processed in a different manner than stated in this policy, Kallax Flyg will inform affected individuals in an appropriate way.