Personal data processing policy
This policy applies to the processing (collection, storage, transfer, etc.) of personal data that occurs within Plastex.
Plastex processes personal data only in accordance with applicable personal data legislation in order to protect privacy.
Personal data refers to any information relating to an identified or identifiable natural person. An identifiable natural person is a person who can be directly or indirectly identified by, for example, a username, an identification number, location data, online identifiers or one or more factors specific to the identity of the natural person.
Processing of personal data
We are transparent with how and why personal data is collected and processed. Processing refers to any handling of personal data such as collection, storage and use.
We mainly process the following personal data:
- Names, personal identify numbers, contact details, credit reports, payment information and history regarding private customers
- Names and contact details of ongoing business contacts
- Names and contact details of previous business contacts
- Names, personal identity numbers, images, application documents and contact details of job seekers
Plastex does not process sensitive personal data (special categories of personal data).
Collection of personal data
We primarily collect personal data directly from the data subject through personal meetings, email and telephone contacts, or through websites and social media.
In some cases, we collect data from other than the data subject, for example from publicly available sources and from third parties in the form of contact lists or data from credit reference agencies. When we collect data from persons other than the data subject, the data subject is informed of the processing as soon as possible and no later than six months from the time the data were collected.
The purposes of processing
Plastex process only data for the purpose for which the data has been collected as follows:
Enter into and maintain contractual relations
We process personal data in connection with preparation for contracts (potential customers, suppliers or partners) as well as for the administration and fulfilment of contracts entered into (current and former customers, suppliers or partners).
Personal data of customers who are private individuals is processed in order to fulfil our obligations under the contract with the data subject such as handling of payment, delivery and handling of complaints and warranty matters.
Personal data about business contacts is recorded to maintain a contact list. The processing is based on our legitimate interest in maintaining business relations and communicating with the data subjects. We consider this interest to outweigh the interest of data subjects in protecting their privacy. The personal data will be processed solely for the intended purpose and only as long as the data subject is a business contact of Plastex.
Processing of personal data is necessary for us to be able to tender and fulfil obligations under contract.
Data on previous customers is deleted according to Plastex’ routines and upon every contact with our customers (phone or face to face meetings).
Recruitment
Plastex processes personal data collected in connection with recruitment procedures.
It may occur that personal data is processed in computer systems at Plastex’ related companies, external recruitment companies and organizations with which we cooperate in the recruitment process. Personal data will be retained by us and our partners for the time necessary to carry out the recruitment procedure.
In recruitment procedures, applicants are given the opportunity to agree that we retain personal data for future recruitment needs. The applicant may withdraw such consent at any time. When the data subject no longer consents to Plastex processing the personal data for future recruitment procedures, the data are deleted.
Marketing
Plastex processes e-mail addresses to conduct direct marketing of the company’s products. The data is processed on the basis of our legitimate interest in maintaining a contact list, maintaining business contacts and communicating with the data subject as a business contact. We consider as a starting point that these legitimate interests outweigh the data subject’s interest of the data being not processed.
In some cases, we purchase information from address providers (data-selling companies) that includes:
company names, personal names, e-mail addresses, title/service, industry, etc.) This is done primarily for the purpose of preparing invitations to events, conducting marketing and/or other communication with a specific target group that we believe has needs and/or interest in the products and/or services we offer.
Development and improvement of Plastex products
We process correspondence and feedback regarding the company’s products, purchases and user-generated data such as click and visit history, technical data regarding devices used, and information about interaction with Plastex, such as information about how long pages have been visited and how pages have been accessed. The data are processed on the basis of our legitimate interest in developing and improving the company’s products and systems, as well as for statistical purposes and quality work. We consider as a starting point that this interest outweighs the registered interest of the data not being processed.
Screening of personal data
Personal data is stored no longer than is necessary to fulfil the purpose of the processing. We continuously screen personal data when they are no longer relevant for the purposes for which they have been collected. As a starting point, this means that personal data are only retained until the data subjects and all the transactions of the data subject are finally regulated.
Sharing of personal data
We may share personal data with our data processors. Our data processors process personal data on behalf of Plastex and according to our instructions. We have data processors who handle transportation and deliveries, marketing and IT services.
In cases where Plastex establishes written agreements with the company’s data processors. These agreements ensure the security of the personal data processed and the data processor undertakes to comply with our security requirements and requirements regarding the international transfer of personal data.
We may share personal data with suppliers and resellers for administrative purposes regarding customers and contact persons and for direct marketing of Plastex products. If such sharing occurs, the companies that receive the data are the data controllers for the personal data.
Plastex never sells any personal data to anyone else for direct marketing purposes or similar. Otherwise, we only disclose information if mandatory law so requires or if the data subject consented thereto.
Rights
The data subject has the right, under applicable personal data legislation, to request a so-called register extract with information about the personal data that Plastex processes in relation to the individual. The request under this paragraph must be made in writing and signed by the individual personally, to avoid unauthorized access to personal data.
In addition, the data subject has the right, at any time, to request that we correct, block or delete the individual’s personal data. If Plastex is required by law to continue with the storage of the personal data, the data can only be blocked.
The data subject has the right to unsubscribe from our newsletter or the sending of direct marketing. This can be done through a link in the mailing or by contacting our customer service. In this case, Plastex will stop processing the data subject’s personal data for this purpose.
Information security and measures
Plastex takes the technical and organisational measures necessary to ensure that the processing is carried out in accordance with applicable personal data legislation, this policy and to ensure that personal data are not lost, or become available to unauthorized persons.
Responsibility for personal data
Plastex is responsible for the processing of personal data that takes place on our behalf and thus is responsible for the legality and correctness of such processing.
Any questions, comments and complaints regarding Plastex’ handling of personal data are sent to: info@plastex.se or by conventional mail:
Plastex AB
Box 106
931 21 Skellefteå
SVERIGE
Supervisory Authority – Data Inspectorate
If you believe that Plastex violates applicable personal data laws, you can contact the Swedish Data Protection Authority. Further information on how to proceed can be found on the Swedish Data Protection Authority’s website.