Policy for personal data in external contacts
1. Scope of personal data policy
1.1
Here is a description of how Sweden by Bike AB, org. No. 559016-0668, with address Centralplan 3, 111 20 Stockholm (“Sweden by Bike”, “us” or “we”) processes personal data. The platform norwaybybike.com is run by Sweden by Bike AB.
1.2
We prioritize the issue of privacy protection. We strive to protect your personal data in the best possible way and ensure that our processing of them takes place in a correct and legal manner.
1.3
In this personal data policy, we explain how different types of personal data may be processed and for what purpose we process them. We also explain our processing of personal data and what choices and what rights you as a customer or supplier have in relation to it. We recommend that you read our personal data policy carefully and familiarize yourself with the content.
1.4
Note that this personal data policy concerns the handling of personal data for which Sweden by Bike is responsible for personal data. This means that we are responsible for the handling and processing of your personal data. It also means that it is to Sweden by Bike that you should turn to with questions or comments, or in the event that you want to exercise any of the rights you have in relation to our handling of your personal data.
1.5
It is these regulations regarding our handling of personal data that we use when we process personal data that we have collected from you.
2. Regarding personal data handled
2.1
Below you can see what different personal data has to do with you that we may handle that can be attributed to you as a consumer or sole trader at Norway by Bike:
(a) name
(b) social security number
(c) organization number for individual company
(d) address
(e) email address
(f) telephone number
(g) image
(h) posts in social media
(i) IP address
(j) credit information
(k) order number
(l) customer number
(m) account number
2.2
In the event that you are a contact person for a company that buys goods from Norway by Bike or is a supplier to us, the following personal information that we may handle that can be attributed to you:
(a) name
(b) email address
(c) telephone number
(d) address
(e) customer number
(f) information about your employer
(g) your title
3. Purpose of treatment and legal grounds
3.1
Regarding you as a consumer at Norway by Bike, we process your personal data in points 2.1 (a) – (f) and 2.1 (j) – (m) above for the purpose of administering our customer relationships, delivering goods and providing support. The treatment takes place on the basis that it is necessary for us to be able to fulfill our agreement with you.
3.2
Furthermore, we process your personal data in section 2.1 (a), (d), (e), (f), (g), and (h) above for the purpose of marketing our goods and services and being able to communicate with you as a consumer. The treatment takes place on the basis of our legitimate interest in reaching out with marketing.
3.3
Regarding you who voluntarily publish information on Sweden by Bike social media, we process your personal information, section 2.1 (a), (g), (h) and (i) above, for the purpose of administering our customer relationships and marketing our goods and services. The treatment takes place on the basis of our legitimate interest in reaching out with marketing.
3.4
When purchasing invoices, we may process your social security number and credit information, section 2.1 (b) and (j) above. This is done on the basis that it is clearly justified with regard to the importance of secure identification.
3.5
Regarding you as a contact person for a corporate customer or supplier to Sweden by Bike, we process your personal data in section 2.2 (a) – (g) above for the purpose of administering our customer and supplier relationships, delivering goods, providing support and marketing our goods and services. The treatment takes place on the basis of our legitimate interest in streamlining our operations and our contact with customers and suppliers, as well as reaching out with marketing. In situations where Sweden by Bike sells goods or services to a company where you are the contact person, the processing takes place on the basis that it is necessary for us to be able to fulfill our agreement with you.
3.6
Regarding contact persons at corporate customers and suppliers, we process your personal data in section 2.2 (a) – (b), (d) and (e) above (and if you are a sole trader, your social security number according to section 2.1 (b) for statistics and analysis of The processing takes place on the basis of our legitimate interest in being able to follow up and analyze sales.
4. Storage of personal data
4.1
Regarding you as a consumer, we store your personal data for as long as is necessary to fulfill the purpose of the processing. If you have an e-commerce account with Norway by Bike and the customer relationship with us ends, we store your name, address, e-mail address and telephone number for a maximum of twelve months after the customer relationship ended. If you do not have an e-commerce account with Sweden by Bike and the customer relationship with us ends, we store your name, address, your e-mail address and your telephone number for a maximum of six months after the customer relationship ended.
4.2
Credit information in connection with invoice purchases is eliminated within three months of the creditworthiness survey being carried out.
4.3
Current information processed to administer customer competitions will be eliminated within three months of the competition ending.
4.4
With regard to information that users voluntarily publish on Norway by Bike’s social media, and which each user has the opportunity to delete without Norway by Bike’s involvement, Norway by Bike has no responsibility to remove such information on its own initiative within a certain period of time.
4.5
Regarding you as a contact person with a customer or supplier, we store your personal information for as long as it is necessary to fulfill the purpose of the processing. If we end the customer or supplier relationship with an actor where you are the contact person or if your position as a contact person ends, we store your personal data for six months. Personal information needed for us to be able to send marketing to you is stored until you object to the marketing.
4.6
Regarding you as a contact person at a corporate customer or supplier, we can process your personal data for statistics and analysis for a period of 12 months from the time the data was collected.
4.7
When delivering goods, the name and address can be saved for up to 12 months after transport for the purpose of being able to follow up transport handling.
4.8
We always process your personal data to the extent and during the time we are obliged to do so by law. Examples of this are personal data that are necessary to process to ensure correct accounting. This information is stored for seven years after the accounting event has occurred.
4.9
To the extent that your personal data is no longer necessary to fulfill the purpose of the processing, or the processing for some other reason would no longer be permitted, the data will be anonymised or deleted.
5. Receiver
5.1
We may disclose your personal information to our personal data assistants, e.g. companies that work with invoice administration, IT and cloud services or shipping and delivery. In such cases, a personal data assistant agreement is entered into which ensures that your personal data is processed only in accordance with this personal data policy.
5.2
We may also disclose your personal information to companies such as banks and insurance companies, e.g. when purchasing supplementary insurance or partial payment. These companies are themselves responsible for the processing of your personal data.
6. Your rights
6.1
You have the right to receive confirmation of whether we process personal data concerning you, and in that case to have access to this personal data and also information about the personal data and our handling of them.
6.2
You have the right to have incorrect personal data concerning you corrected by us without undue delay. You also have the right to supplement incomplete personal data in certain cases, taking into account the purpose of the processing.
6.3
You have the right to have your personal data deleted by us under certain circumstances, e.g. if the personal data are no longer necessary to fulfill the purposes for which they were collected, or if the personal data has been processed illegally.
6.4
You have the right to demand that we limit the processing of your personal data in certain cases. If you e.g. If you dispute the accuracy of the personal data, you can demand that we limit the processing of the data during the time it takes us to check whether the data is correct.
6.5
You have the right to object to the processing of your personal data that takes place on the basis of Norway by Bikes’ legitimate interest. If this happens, we must demonstrate compelling legitimate reasons that outweigh your interests, rights and freedoms in order to continue the treatment.
6.6
You have the right to object to the processing of your personal data to the extent that the processing takes place for direct marketing. In the event of such an objection, we will no longer process your personal data for that purpose.
6.7
You have the right, under certain circumstances, to obtain the personal data that you have provided to us and that concerns you in an electronic format that is widely used. You have the right to transfer such information to another personal data controller (data portability).
6.8
If you have views on our processing of your personal data, you are welcome to contact us. You also have the right to submit complaints about the processing of your personal data to the Data Inspectorate.
7. Additions and changes
We may make additions or changes to this Privacy Policy. If we do, we will publish the updated policy on our website. If so, we kindly ask you to read the updated privacy policy carefully.
8. Contact us
To update, correct or delete any information we have about you or use any rights that accrue to you as above, you are welcome to contact us at info@norwaybybike.com.
__________________________
This Privacy Policy applies from May 25, 2018.