Privacy Policy
- INTRODUCTION
Paprtect values your privacy. We want you to feel secure when entrusting your personal data to us and therefore we have drawn up this policy. It is based on current data protection legislation and clarifies how we work to safeguard your rights and privacy.
The purpose of this policy is to make you aware of how we process your personal data, what we use it for, who may view it and under what conditions, and how you can safeguard your rights.
- DATA CONTROLLER
Paprtect AB (559292-5126) (“Paprtect”, “we” or “us”) is responsible for the personal data processed about you. Paprtect is therefore the controller of your personal data. Contact us if you have any questions or want to exercise your rights. You find more information about your rights under section 3 below.
PAPRTECT AB
Mogölsvägen 4
S-554 75 Jönköping
Sweden
E-mail: info@paprtect.com
If you have any comments on our processing or if you are not satisfied with our answers, you have the right under data protection legislation to submit any comments or complaints to the relevant supervisory authority (in Sweden it is the Swedish Authority for Privacy Protection “Integritetsskyddsmyndigheten” (IMY)).
Contact details to IMY:
Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm
Phone number: +46 (0)8 657 61 00
E-mail: imy@imy.se
- YOUR RIGHTS
When we process your personal data, you as a data subject has a number of rights from the GDPR. You are welcome to contact us at any time with respect to these, and if you wish to exercise any of the rights described below, you can reach us most easily at info@paprtect.com.
We will take appropriate protective and security measures in order to ensure that you are the person you claim to be when you contact us. If you cannot satisfactorily demonstrate your identity, we may not be able to respond to your request.
3.1 Right to information
Your right to receive information about our processing of your personal data is partly met by this Privacy Policy. Please contact us if you want additional information.
3.2 Right to access
You have the right to know what personal data we process about you. If you wish to know, you can get a compiled register extract from us that contains all the personal data we process about you.
3.3 Right to erasure (“right to be forgotten”)
If we were to process your personal data incorrectly or if we no longer need the data, you are entitled to have it deleted. Please keep in mind that we may not be able to provide you with our services if you request to have your personal data deleted.
3.4 Right to rectification
You have the right to obtain from us the rectification of inaccurate personal data. If the data is incomplete, you have the right to have it supplemented.
3.5 Right to data portability
In certain circumstances you have the right to receive the data that we process about you in a general, written, machine-readable and structured format. You have the right to do so for the personal data that you have provided to us and which we process with your consent or when the personal data is required to enter into or complete an agreement.
3.6 Right to restriction of processing
Under certain conditions, you have the right to request that we restrict our processing of your data. This means that we mark the data so that in future we only process it for certain specific purposes. We may not be able to provide you with our services if we restrict the processing of your personal data.
3.7 Right to object
You have the right to object to the processing of personal data that is carried out to perform a task in the public interest, as part of an exercise by a public authority or after a balance of interests. We do not process your personal information for any of these purposes or on any of these grounds. Therefore, you cannot direct any objections towards our processing on this basis.
- WHAT DATA DO WE COLLECT ABOUT YOU – AND WHY?
We process your personal data in order to provide you with our services and products, i.e. only to enter into or fulfil a contract with you as a customer. We strive to minimize the amount of data we process. This means that we do not collect more personal data than what is necessary to enter into or fulfil contracts with you or your employer. To make you find what is relevant to you, we have divided the information into different paragraphs due to categories of data subjects.
4.1 Customer contact persons
Purpose
We process contact persons and employees of our customers’ and potential customers’ personal data to contact the company, to administer the company’s and our relations and to fulfil a contract with the company.
Lawful basis
Legitimate business interest.
Categories of personal data
Contact details (name, telephone number and e-mail address).
Storage time
For as long as the customer relationship remains. If your personal data is found in invoice documentation, it will be stored for seven years according to the Swedish accounting act (Bokföringslagen).
4.2 Supplier contact persons
Purpose
We process contact persons and employees of our suppliers’ and potential suppliers’ personal data to contact the company, to administer the supplier’s and our relations and to fulfil a contract with the supplier.
Lawful basis
Legitimate business interest.
Categories of personal data
Contact details (name, telephone number and e-mail address).
Storage time
For as long as the supplier relationship remains. If your personal data is found in invoice documentation, it will be stored for seven years according to the Swedish accounting act (Bokföringslagen).
4.3 Visitors to our website
We might process your personal data when you visit our website. Whether and the extent of our processing depends both on your browser settings and on what cookie settings you chose when you enter our website. The cookies we use at our website are small text files collecting different kinds of information about how you use our website. You can read about our use of cookies and what cookies we use in our Cookie information in the bottom left corner on each page at our website.
Purpose
Collecting information about how our website is used to understand how visitors use it in order to both ensuring the functionality and improving the website.
Lawful basis
We base the use of strictly necessary cookies on our legitimate interest since those are needed to provide you with a functioning website. The processing of your personal data with the use of analytical or marketing cookies, where applicable, is based on your consent. You are not required to consent to those cookies to access the website. However, some services and functions require the use of such cookies, and those may be limited or inaccessible without your consent. You can change your settings and withdraw or change the scope of your consent at any time by clicking on the symbol in the bottom left corner on each page at our website.
Categories of personal data
IP-address and information about how the visitor uses the website.
Storage time
Differs from cookie to cookie. See our Cookie information by clicking on the symbol in the bottom left corner on each page at our website or you can find it here: https://paprtect.com/cookie-policy.
4.4 Social media interaction
We are the controller for the personal data we publish in our social media channels on Facebook, Instagram, TikTok and YouTube. We have the responsibility for limiting inappropriate and offensive posts, comments or other interactions are being published in our channels. In that case, we will remove such activities.
Purpose
Marketing and sharing information about our business, products, and services to existing and potential customers. If you interact with any of our social media channels, you also agree to receive our posts in your feed. You can stop liking or following our pages or accounts or hide individual or all the posts we make at any time. We may use the information to contact the company or organisation you represent and inform about our goods / services.
Interacting with social media channels means that your personal data may be transferred to third parties located in a third country (the US).
For more information about third country transfers and actions we take regarding third country transfers, see section 7 below.
If you want to receive more information about how your personal data is processed, we refer to the respective channel Facebook, Instagram, TikTok and Youtube.
Lawful basis
Legitimate interest.
Categories of personal data
The personal data you decide to share in your comments and interactions, including your name where you as a natural person appears as the sender.
Storage time
Personal data that you provide by interactions or comments where you as a natural person appears as the sender will be retained until further notice or until you delete the interaction or comment yourself. We will continuously remove inappropriate comments and interactions.
4.5 Subscribers to our newsletter and other marketing (by e-mail)
Purpose
To provide a newsletter or other marketing by e-mail.
Lawful basis
Consent.
You have the right to withdraw your consent by unsubscribing from our mailing list. There is an opt-out link at the bottom of each newsletter.
Categories of personal data
Contact information (e-mail address and phone number).
Storage time
Until you unsubscribe from our mailing list.
- HOW DO WE PROTECT YOUR PERSONAL DATA?
The security of your personal data is our main priority. Therefore, we have taken appropriate technical, organisational, and administrative security measures to protect your personal data from unauthorised access and other unauthorised processing. We regularly analyse and evaluate the measures to ensure that protection of your data is as safe as possible.
- WHO DO WE DISCLOSE YOUR DATA TO?
We do not disclose your data to other companies or organisations unless required by law or necessary to perform our statutory or contractual obligations towards you.
We will disclose your personal data to authorities when required by law and may disclose personal data to any of our partners, suppliers or subcontractors delivering support services such as IT- and marketing services, but only in ways and to the extent necessary for us to meet our obligations in relation to you as a data subject. Hence, we never provide the recipients more information than is necessary.
When required by law, we may need to disclose your data to public authorities and other organisations. We may also need to disclose your data if it is necessary to exercise, establish or monitor our legal claims.
- TRANSFER OF PERSONAL DATA OUTSIDE THE EU/EEA
Paprtect and our processors strive not to transfer data to a country or company located outside the EU/EEA (a third country). However, while communicating with our customers and suppliers based in third countries, we will transfer personal data to those countries. In addition, we use third party cookies on our webpage. The use of third-party cookies can lead to your personal data being transferred to a third party located in a third country (e.g., the US). You have the possibility to limit the use of cookies and you can find more information about this in our Cookie information found here.
If personal data is transferred to a third country, we will always ensure that appropriate safeguards are in place to ensure the secure processing of your personal data. Such appropriate safeguards include ensuring that the country to which your personal data is transferred has an adequate level of protection or that we enter into the European Commission’s standard contractual clauses (SCCs) from 2021.
Please contact us for more information about potential transfers to third countries and to request a copy of our security measures. You find our contact details in section 2 above.
- CHANGES TO THIS PERSONAL DATA POLICY
We will change this privacy policy when it is necessary due to our changed processing of personal data and in order to meet new regulations, interpretations of regulations or the technical and digital development. When we carry through fundamental changes of our processing and accordingly this privacy policy, you will always be addressed personally. The current version of the policy will always be available here at our website.
This Privacy Policy was updated 2023-12-18.