GDPR POLICYWe care about your privacy
PROCESSING OF PERSONAL DATA
You should feel safe when you entrust us with your personal data. This is why we have drawn up this policy. It is based on current data protection legislation and clarifies how we work to safeguard your rights and privacy.
The purpose of this policy is to let you know how we process your personal data, what we use it for, who can access it and under what conditions, and how you can exercise your rights.
We are the data controller
Kamado Sumo AB is responsible for the personal data processed about you. Kamado Sumo AB is therefore the controller of your personal data.
Why do we process personal data about you?
We process your personal data in order to provide you with our services and products, i.e. only to conclude or perform a contract with you as a customer.
What data do we collect about you - and why?
We aim to process as little personal data as possible about you. This means that we do not collect more personal data than necessary to enter into or fulfill agreements with you. In order to enter into and fulfill agreements with you, we need information about your first name, last name, e-mail address, address and other contact information. We do not have access to your personal data other than through your provision of the data to us.
If you have not given us your consent, we will not use your personal data for marketing purposes.
How do we protect your personal data?
Your security is important to us. Therefore, we have implemented appropriate technical, organizational and administrative security measures to protect your personal data from unauthorized access and other unauthorized processing. We regularly analyze and evaluate these measures to ensure that the protection of your data is as secure as possible.
Who do we share your data with?
We do not disclose your data to other companies or organizations unless it is required by law or necessary to perform our legal or contractual obligations to you.
We may disclose your personal data to any of our partners, suppliers or subcontractors, but only if it is necessary for us to fulfill our obligations in relation to you as a customer. We never disclose more personal data than is necessary.
When required by law, we may need to disclose your data to authorities and other organizations. We may also need to disclose your data if it is necessary to exercise, establish or defend our legal claims.
We never share your personal data with other companies or businesses for marketing purposes.
On what legal grounds do we process your personal data?
We only process the personal data we need to perform our services or deliver our products to you, i.e. when we enter into or perform a contract with you. To the extent that we process additional data, we will obtain your consent or ensure that the processing is permitted on another legal basis.
How long do we process your personal data?
We keep data about you as a customer for the duration of the contract with you and for a reasonable time thereafter. In the vast majority of cases, this means that we do not save your personal data for longer than one year from the termination of the agreement, but under certain circumstances we may keep your data for longer than that. This applies, for example, when required by law or when the data may be needed to establish, exercise and defend legal claims.
When we process personal data about you, you have several rights as a data subject. You have the right to contact us at any time regarding these, and if you want to exercise any of the rights described below, you can reach us at firstname.lastname@example.org.
We reserve the right to take appropriate protection and security measures to ensure that you are who you say you are when you contact us. If you cannot credibly prove your identity, we may not be able to comply with your request.
Access to personal data
You have the right to know what personal data we process about you. If you wish to do so, you can obtain from us a compiled register extract containing the personal data we process about you.
Rectification and deletion
If we process your personal data incorrectly or if we no longer need it, you have the right to have it erased. If the data is incomplete, you have the right to have it completed. Please note that if you request the deletion of your personal data, we may not be able to provide our services to you.
In certain circumstances, you have the right to receive the data we process about you in a common, written, machine-readable and structured format. You have this right in relation to personal data that you have provided to us and that we process on the basis of your consent or when the personal data is required to enter into or perform a contract with you.
Limitation of treatment
Under certain conditions, you have the right to ask us to restrict our processing of your data. This means marking the data so that in the future we only process it for certain specific purposes. We may not be able to provide you with our services if we restrict the processing of your personal data.
Right to object
You have the right to object to the processing of personal data carried out for the performance of a task carried out in the public interest, in the exercise of official authority or following a balancing of interests. We do not process your personal data for any of these purposes or on any of these grounds. You can therefore not object to our processing under this ground.
Right to complain
You have the right to file a complaint with the Swedish Data Protection Authority if you believe that we are processing your personal data incorrectly. You can read more about this on the Integrity Protection Authority's website www.Integritetsskyddsmyndigheten.se.