Hydroscand Sweden takes privacy and integrity very seriously, and we only process personal data relating to an identified or identifiable natural person in accordance with applicable data protection legislations and this privacy policy.

The purpose of this privacy policy is to provide you with information about how we use, capture, and share your personal data. The policy describes which personal data we collect, for which purpose we collect data, how you can control your personal data and how to get in contact with us.

Our employees are obliged to adhere to this privacy policy as well as observe applicable local data protection legislations.

Hydroscand AB (556130-7124, "Hydroscand", Box 17, 125 30 Älvsjö) is the data controller for the processing of personal data within Hydroscand AB.

In this section we describe for which purposes we process personal data, which personal data that is processed and on which lawful ground the processing done.

Personal data is processed to:

• Deliver ordered products or services (including notification of delivery or contacts regarding delivery)

• Enable ID checks

• Manage payments

• Manage returns, complaints and guarantees

Personal data processed:

• Name

• Contact information (e.g. address, email, phone number)

• Payment information (e.g. transaction reference)

• Company/VAT number, personal identification number

• Payment history

• Order information

Legal basis: Fulfillment of contract when we have a contract with you as a private individual. 
Legitimate interest - Some processing is also based on a legitimate interest to perform our contract with your employer, i.e. Hydroscand's customer, supplier or partner. When we do this, we consider and weigh your interest in privacy against our interest and purpose (as set out above) in carrying out the data processing. We then balance these interests and consider both positive and negative effects and conclude that our interest is justified.

Sharing of personal data: We only share the data with suppliers who are necessary to carry out the processing, and within the framework of the purposes stated above. For example:

• IT services (companies that handle the necessary operation, technical support and maintenance of our IT solutions, etc.).

• Companies that arrange transport (logistics companies, freight forwarders).

Storage period: We store your data only for as long as is necessary to fulfil our contractual obligations and legitimate interests, as we consider justified, taking into account what is stated above about legal grounds and purposes; usually for the duration of the customer or supplier relationship and for customer care purposes, which means that we delete or anonymize your data at the latest at the end of the calendar year two years after your last transaction with us.

Personal data is processed to:

• Provide access to login

• Keep data accurate and up-to-date

• Enable payment history tracking 

Personal data processed:

• Name

• Contact information (e.g. address, email, phone number)

• Username (email)

• Purchase history

• Order history

• Customer number

Legal basis: Legitimate interest. The processing is necessary for our mutual interest in managing and administering your user account.
Sharing of personal data: We only share the data with suppliers who are necessary to carry out the processing, and within the framework of the purposes stated above. For example:

• IT services (companies that provide the necessary operation, technical support and maintenance of our IT solutions, etc.).

Storage period: We store your data only for as long as is necessary for us to be able to administer your web account correctly, taking into account what is stated above about legal grounds and purposes; usually for the time that the e-commerce account is maintained by you, which means that we delete or anonymize your data at the latest at the end of the calendar year two years after your last transaction with us.

Personal data is processed to:

• Communicate with customers and respond to inquiries that come to customer service via digital channels or telephone

• Handle questions, resolve problems and support matters

Personal data processed:

• Name

• Contact information (e.g. address, email, telephone number)

• Correspondence

• Information about the time of the transaction, place of the transaction, product complaints, etc.

Legal basis: Legitimate interest. The processing is necessary for our mutual interest in handling customer service matters.

Sharing of personal data: We only share the data with suppliers who are necessary to carry out the processing, and within the framework of the purposes stated above. For example:

•  IT companies that provide us with our solutions for customer service matters (companies that handle the necessary operation, technical support and maintenance of our IT solutions).

• Companies that arrange transport (logistics companies, freight forwarders).

Storage period: We store your data only for as long as it is necessary for us to be able to provide you with the service that we consider justified, taking into account what is stated above about legal grounds and purposes; usually for the time that the matter is handled. We store this information together with the purchase information as described in the sections above and then purge it.

Personal data is processed to:

• Provide ordered printed materials, e.g. product booklet or brochure

Personal data processed:

• Email address

• Telephone number

• Name

• Address 

• Store

Legal basis: Legitimate interest. The processing is necessary to deliver your ordered material.

Sharing of personal data: We only share the data with suppliers who are necessary to carry out the processing, and within the framework of the purposes stated above. For example:

• IT services (companies that provide the necessary operation, technical support and maintenance of our IT solutions).

• Companies that arrange transport (logistics companies, freight forwarders).

Storage period: We only store your data for as long as is necessary for us to fulfil our contractual obligations and as we consider it justified, taking into account the above-mentioned legal grounds and purposes; usually for the time the order is processed, which means that we delete or anonymize your data at the latest at the end of the calendar year two years after your last transaction with us.

Personal data is processed to:

• For recruitment purposes or for spontaneous applications

Personal data processed:

• Email address

• Telephone number

• Address

• Information in attached documents

Legal basis: Legitimate interest. The processing is necessary to be able to handle your job application.

Sharing of personal data: We only share the data with suppliers who are necessary to carry out the processing, and within the framework of the purposes stated above. For example:

• Marketing agencies, who help us inform the public when we have a vacancy in our company.

• IT services or recruitment companies that help us manage or recruit employees in our business, such as Teamtailor.

Storage period: We only store your data for as long as we consider it justified, taking into account the legal basis and purposes stated above, in this case 12 months from the time of your application (unless you request otherwise, which we will of course respect). 

Personal data is processed to:

• Be able to contact customers after the event regarding inquiries made

Personal data processed:

• Email address

• Telephone number

Legal basis: Legitimate interest. The processing is necessary to satisfy your inquiries.

Sharing of personal data: We only share the data with suppliers who are necessary to carry out the processing, and within the framework of the purposes stated above. For example:

• Suppliers such as event agencies and the like.

• Other IT services (companies that handle the necessary operations with regard to the various events).

Storage period: We store your data only for as long as necessary for us to be able to fulfill our legitimate interest. Usually for a period of two years after the event. If our contact after a potential event or the like causes further relationships, purchase-related actions or otherwise, we refer you to other personal data processing described in this privacy policy, and the storage periods specified there.

Personal data is processed to:

• Send newsletters

• Analyze data to create relevant offers for you

Personal data processed:

• Email address

• Name 

Legal basis: Consent. By providing your email address in the provided field and actively clicking the "Subscribe" button, you are deemed to have given your consent.

Sharing of personal data: We only share the data with suppliers that are necessary to administer the newsletters. For example:

• IT services (companies that provide the necessary operation, technical support and maintenance of our IT solutions).

Retention period: We use data from your other interactions with us as described above, and do not store such data for this purpose for longer than described above.

Personal data is processed in order to:

• Be able to fulfill legal obligations as required by laws, judgments or authority decisions, e.g. Accounting Act 

Personal data processed:

• Name

• Contact information (e.g. address, email, telephone number)

• Correspondence

• Username for the web account

• Organization, VAT or personal identification number

• Payment information

• Order and payment history

Legal basis: Legal obligation.

Sharing of personal data: We only share the data with suppliers that are necessary for the processing to comply with our legal requirements. For example:

• Authorities such as the police, tax authorities or similar.

• IT services (companies that handle the necessary operation, technical support and maintenance of our IT solutions).

Storage period: We only store your data for as long as it is necessary for us to comply with our legal obligations, for example for 7 years as required by the Accounting Act.

When Hydroscand is sharing your personal data to the above-mentioned recipients, our partners are sometimes processing the personal data as data controllers in accordance with their own privacy policies and handling instructions and sometimes as processors on behalf of us.

Hydroscand's objective is to process personal data within EU/EES and to cooperate with partners and suppliers that process personal data within EU/EES. If this is not possible, the processing of personal data can only take place in countries having an appropriate level of protection in accordance with decisions from the European Commission or by using appropriate protection measures e g standard clauses in the agreement or binding company internal regulations. Irrespectively in which country the personal data is being processed, Hydroscand will take reasonable technical, legal, and organizational measures to secure that the level of protection is the same as in the EU/EES.

According to the EU General Data Protection Regulation (GDPR), you as an individual have the following rights in relation to the personal data we process about you.

You have the right to demand access to your personal data and receive information on how it is processed.

You have the right to have your personal data rectified if you consider it inaccurate. In some cases, you have the right to have your personal data erased. This does not apply if your personal data is still required, for example due to legal requirements or if the processing can be based on some other legal basis. You have the right to request that the processing of your personal data be limited to a shorter period while we investigate potential errors.

If you have consented to a certain type of processing, you have the right to withdraw your consent. See more about this in the Contact information section below.

When the processing is based on legitimate interest you have the right, at any time, to object to such processing.

You may, at any time, object to processing of your personal data for direct marketing purposes. Upon such objection, the personal data shall not be processed for such purpose anymore.

You are entitled to data portability, which means that you may, under certain circumstances, have the right to receive such personal data that you have provided to us, for the purpose of transferring such personal data to another controller.

You also have the right to file a complaint with the Swedish Data Protection Authority (IMY) if you believe that our processing of your personal data does not meet the requirements of the EU General Data Protection Regulation.

We use cookies on our website. Cookies are small text files that are stored on your device via your browser. Such data can be used to customize the content and features of our services and contribute to a better user experience. For information about how we use cookies, read our cookie policy.

We reserve the right to make changes to this Privacy Policy at any time to the extent that the changes are necessary. All changes will be published on our website. You should therefore review this Policy periodically to ensure that you are satisfied with the changes.

If the changes concern personal data processing that we carry out on the basis of your consent, we will provide you with the opportunity to withdraw your consent.