This policy aims to explain how our website stenasessan.se collects and processes your information, what choices and rights you have, and how you can exercise these rights. This policy is written for our websites users.
We believe that the protection of personal data is important, and we strive to design our website with respect for the privacy of our users. Our starting point is not to process more personal data than necessary for the purpose, and to use the least integrity sensitive data as possible.
Personal data we collect and how they are used
Personal data are data relating to an identified or identifiable person. Personal data is processed to take requested actions such as answering questions or sending material. Personal data can also be used for direct marketing to recipients in their professional role, customer and market analyses, invitations to meetings and other professional contacts regarding our products and services.
When visiting the site and when downloading documents, we automatically process information that under certain circumstances may constitute personal data. This includes data about time, date, downloaded file, file size, volume of transferred data, browser, language settings, operating system, referral domain, and IP address. The purpose of processing this kind of information is to provide an interesting, safe and user-friendly website.
The legal basis for our processing of personal data is a legitimate interest in marketing our services and products, communicating with customers, suppliers, and other stakeholders as well as offering an interesting, safe and user-friendly website. In some cases, the legal reason is that the processing of personal data is necessary to fulfil an agreement or to act at the request of the person who provided the personal data before an agreement is reached. In the case of cookies, the legal basis is the consent. Further information on this treatment can be found in the section on cookies and similar techniques below.
In general, we do not save personal data beyond what is necessary to fulfil the purpose of the treatment. We also delete personal information if you request that they be removed or if we find out that the personal data we process is out of date.
Transmission to third parties
Our starting point is not to disclose personal data to independent third parties unless it is necessary to fulfil our obligations under agreement or law. This is, for example, our suppliers in areas such as information security, IT, shipping and logistics, finance and marketing. If our company is included, or may be included, in a group, your data may also be shared with companies within the Group. We do not sell your personal information or allow any third party for other reasons to use personal information provided to us for their own purposes. Exceptions are certain technical information that, under special conditions, is shared with third parties as shown below.
We have routines and procedures for managing your personal information safely. Only persons in our organization who need personal data to perform their duties should have access to them. Our security systems are designed to protect against intrusion, destruction, and other changes that could lead to privacy risks. The personal information provided via forms on our site is protected by encryption during transmission to our servers.
Transmission to non-EU/ESS countries
Normally, we only process personal data within the EU/EES. However, your personal data and technical information may in some situations be transferred to non-EU/EES recipients who have an adequate level of protection of personal data. Exceptionally, after having taken special security measures, personal data may also be transferred to non-EU/EES recipients who lack adequate level of protection of personal data.
Rights relating to personal data
You are entitled to access your personal data on request and without undue delay, to have your personal information corrected or deleted. You also have the right to restrict the processing of your personal information and to transfer your personal data to someone else. Finally, you are entitled to request that your personal information is not used for direct marketing. If you have questions or are not satisfied with how we treat your personal information, you are always welcome to contact us. There is also an opportunity to contact the competent supervisory authority.
How we treat your personal information
The following sections explain the types of tasks that we may treat about you and for what purposes. We also explain how the data is collected and how long the data is saved.
Collection of web statistics
When you visit our site, we collect logs that contain network identifiers and time stamps using a vendor. We collect these data so that we can see how many users visit our site. Our legal basis for processing is our legitimate interest in knowing how our site is used. The data collected through these logs is immediately identified and is therefore not saved in our systems.
About cookies and similar techniques
When you visit our site, you can specify whether you agree to cookies that are used. The cookies are used to identify you as recurring visitor, analyse the use of our site, compile a profile of your interests, and to show you relevant ads. They are also used to give you access to third party cookies.
Shelf life: 2 years
Purpose: Used to distinguish users
Shelf life: 24 hours
Purpose: Used to distinguish users
Shelf life: 1 minute
Purpose: Used to throttle request rate.
Your browser or device allows you to change the settings for the usage and extent of cookies. For example, you can choose to block all cookies, accept only certain cookies, or delete cookies when you close your browser. Please note that some of our site may not work if you block or delete cookies. For more information about cookies and how to change your browser’s settings, visit www.aboutcookies.org or www.allaboutcookies.org
About sharing your information
We will not divulge, sell, transfer or otherwise disclose your information beyond the terms of this policy, unless we are required to do so to fulfil a legal obligation, or if we have consented to such disclosure. This does not exclude us from using personal data advisors who process information on our behalf in accordance with written personal data treaty agreements and our instructions. Personal data advisors who access your information (for example, when we use a third party to store data on a server) are not given a right to use your information for purposes other than the purposes stated in this policy.
About treating your information
We always strive to process your information within the EU/EES. However, your data may in some situations be transferred to and processed in a non-EU/EES country. We will then take all reasonable legal, technical and organizational measures to ensure that your information is handled securely and with an adequate level of protection comparable to and at the same level as the protection offered in the EU/EES.
About your rights
Right of access
You are entitled to request a copy of the information we process about you. The copy is free to request.
Right to rectification
You are entitled to correct incorrect or incomplete information about yourself.
Right to be deleted
You are entitled to request deletion of your data for those cases where the task is no longer necessary for the purpose for which it was collected. However, there may be legal obligations that prevent us from immediately deleting parts of your data.
Right to data portability
You are entitled to request that your information be transferred from us to yourself or to another provider. However, there may be legal obligations that prevent us from transmitting parts of your data.
Right to object
You have the right to object to the processing of your personal information that we perform based on interest balance. You must then specify what treatment you are facing. If your personal data is processed for direct marketing, you are always entitled to object to the treatment at any time.
Right to restriction
You are entitled to request a temporary limitation on processing your personal information. This means that we temporarily move the personal data to another treatment system or make the data unavailable to a user.
Right to revoke consent
You are entitled to withdraw your information brokerage consent at any time by contacting us at the information below.
Right to lodge a complaint
You are entitled to file a complaint with us or to the competent regulatory authority at any time.
About how you use your rights
If you wish to use any of your rights, please send us a message. If you want to file a complaint with a supervisory authority, please contact the Data Inspectorate at www.datainspektionen.se.
Changes to this policy
If we make changes to this policy, we will notify you by publishing the updated version on the website stenasessan.se. If the changes are significant, we will also notify you in the appropriate manner and, if required, request your consent.
How to contact us
If you have any questions about this policy, the processing of your information or how to exercise your rights, please contact us email@example.com