INTEGRITY POLICY

Responsible for the processing of personal data is Automotive Components Floby AB, org. no. 556981‑8874, Aspenäsgatan 2, 521 51 Floby (“ACF”). ACF processes personal data in accordance with applicable law, including the EU Data Protection Regulation.

The terms “we, ours and us” below refer to ACF.

We who process your personal data
ACF is responsible for the processing of the personal data that you provide to us, that we collect about you or that we receive from others about you.

You can contact us as follows:

• via email info@acfloby.com
• by writing a letter to or visiting us at Aspenäsgatan 2, 521 51 Floby.

What personal data do we process about you?

When you as the contact person for your organization are in contact with us via, for example, visits, telephone, e-mail, letter or in any other way, we process the personal data that you provide to us or that we collect about you. Personal information that you provide to us and that we process can e.g. be your name, telephone number, e-mail address, title, information about the organization you represent, photo, shoe size, host, fax, authority and information of the customer and third party that performs sorting. If you represent an individual company, we may also process information about purchasing and sales and organization number, which is the same as your social security number.

We may receive e-mails and other correspondence that contain personal information about third parties and therefore process such personal information. If required, we will inform you as a third party about the treatment.

• Why and on what legal basis do we process your personal data?

Agreement between us and you or the organization you represent

If you represent an individual company or organization with which we have a business relationship, we will process the personal data you have provided to us in and for this relationship. We process your name, telephone number, address, e-mail address, title, social security number / organization number and information about the organization you represent. We do this, among other things, to be able to carry out procurements and purchases and to handle deliveries and complaints. The legal basis for our processing of personal data about you that represents an individual company with which we have a business relationship is that it is necessary to fulfill our agreement with you or to take action before our agreement is entered into. The legal basis for our processing of personal data about you that represents an organization with which we have a business relationship is a balance of interests, ie. the treatment is necessary for a purpose relating to our legitimate interest in maintaining and fulfilling our commitments in the relationship. This means that our interest in processing your personal data as a representative of your organization takes precedence over your interest in protecting your privacy. If you do not provide your personal information, we do not have the opportunity to have a business relationship with your organization and to fulfill our obligations to the organization.

Visit

If you visit us, we will process your name, picture, shoe size, host, date and time of visit and information about the organization you represent to manage your visit, for example by sending a visit report to the host and to be able to lend safety shoes for you as a visitor. We will also photograph you. We do this to protect your safety and to let us know which people are in our premises in the event of an accident or evacuation. The legal basis for our processing of your personal data is that it is necessary for our legitimate interest in being able to enable safe and secure visits to our business.

Marketing

We will process your name, telephone number, e-mail address, address, title and information about the organization you represent to send offers and information about us and our business to you or your organization. The legal basis for our processing of your personal data is that it is necessary for our legitimate interest in being able to market products and services that we believe you or your organization may be interested in. Our interest in processing your personal data to send offers and information to you or your organization takes precedence over your possible interest in protecting your privacy in light of the potential benefits that these offers bring to you or your organization.

Requirements for our business

We will process data to meet requirements that are incumbent on us in accordance with environmental legislation and that follow from the standards we are certified against, e.g. ISO standards. For this reason, we will process your personal data, such as name, telephone number, e-mail address, title, authority and information about the organization you represent. The legal basis for our processing of your personal data is that it is necessary for us to be able to comply with our legal obligations under relevant environmental legislation. The legal basis is also that the processing of your personal data is necessary for our legitimate interest in ensuring your security and being able to live up to the business-specific requirements that are incumbent on us, such as ISO standards or GIS. Our interest in processing your personal data for this purpose takes precedence over your possible interest in protecting your privacy in the light of the fact that it ensures a good quality of our products and services that you and your organization benefit from.

Accounting

We will process information about the transactions that take place between you or your organization and us for accounting purposes. For this reason, we will process your personal data, such as name, telephone number, e-mail address, address, title, social security number / organization number, type of service and information about the organization you represent. The legal basis for our processing of your personal data is that it is necessary for us to be able to comply with our legal obligations under the Accounting Act and other relevant legislation.

• To whom do we pass the information and where do we process it geographically?

Your personal information may be disclosed to and processed by others. We may disclose your personal information to our parent company and other companies included in the group. Examples of third parties to whom we disclose your personal information include consultants we hire such as accountants and lawyers. These are personally responsible for their personal data processing.

We also disclose your personal data to our partners and to our service providers who process personal data on our behalf, so-called personal data assistants. We have agreements with our personal data assistants that ensure that they process your personal data in accordance with this policy and our instructions.

ACF may also share your personal information to allow a merger, acquisition or sale of all, or part of, ACF’s assets.

We may also disclose your personal information to authorities that require us to disclose such personal information.

We and our partners and service providers process, as a general rule, your personal data only within the EU and the EEA. Should personal data be processed outside the EU and the EEA, we will take measures to ensure that the personal data remains equally protected and also take the necessary measures to legally transfer personal data to countries outside the EU and the EEA.

• How long do we process your personal data for the various purposes?

We only process personal data for as long as there is a need to retain them in order to fulfill the purposes for which the data were submitted or collected. The same personal information can be stored in several different places for different purposes. This may mean that information that has been removed from a system because it is no longer necessary there and for that purpose, may remain in another system for another purpose where the personal information is still needed.

Personal data that we process in order to fulfill agreements entered into with you or your organization is processed during the time necessary for the fulfillment of the agreement.

Personal data that we process in order to handle visits, including your image, is processed during the day you visit our business and is subsequently deleted.

Personal data that we process to send offers and information about us to you or your organization is processed as long as we have an agreement with your organization and one year thereafter.

Personal data that we process to meet the requirements of our business is stored for as long as required by current legislation, other applicable regulations or as long as required to demonstrate compliance with standards in our business, e.g. ISO or GIS.

Personal data that we process for accounting is retained for seven years after the transaction in accordance with applicable accounting legislation.

Your personal data may be stored for a longer period of time than stated above if necessary to comply with legal requirements or government decisions.

• Your rights
  • Right to correction and extract from the register

ACF will take steps in accordance with applicable law to keep your personal information accurate, complete and up to date. You have the right to correct incomplete or incorrect personal information. Furthermore, you have the right to request an extract from the register regarding your personal data that we process.

• Right to object to treatment

If the processing of your personal data takes place on the basis of a balance of interests and you consider that your interest in privacy outweighs ACF’s legitimate interest in processing your personal data, you have the right, in the light of reasons relating to your specific situation, to object to the processing by contacting us at the contact details listed in point 1. If you object to the processing, we must show a compelling justified reason for continuing to process the personal data. You also always have the right to say no to the processing of your personal data that takes place for direct marketing purposes.

• Right to delete

Under certain conditions, such as when you have revoked a previously given consent and there is no other legal basis for further processing of your personal data, you have the right to request deletion of your personal data.

• Right to treatment restriction

Under certain conditions, you have the right to limit the processing of your personal data to only the storage of personal data, e.g. while we investigate whether you are entitled to deletion.

• Right of access

You have the right to receive a confirmation from ACF that your personal data is processed by us and, if so, to have access to the personal data and the following information:

• the purpose of the treatment;
• the categories of personal data processed;
• recipients of personal data (especially if they are located outside the EU / EEA);
• the period during which personal data is processed;
• information on the rights set forth herein;
• information about the source from which the personal data has been collected; and
  if there is automated decision-making, including profiling.

In addition to this, you also have the right to receive a copy of your personal data in a commonly used electronic format upon request.

• Right to data portability

You have the right to obtain the personal data that we process about you and that you have provided to us, in a structured, generally used and machine-readable format and to transfer this data to another personal data controller whenever technically possible.

• Complaints to the supervisory authority

You are welcome to contact us with questions or complaints regarding the processing of your personal data. You also always have the right to make complaints regarding the processing of your personal data to the supervisory authority:

Datainspektionen
Box 8114
104 20 Stockholm
datainspektionen@datainspektionen.se