Westerstrand Urfabrik AB is committed to your personal privacy. We strive to protect your personal data in the best way and process it in accordance with the EU General Data Protection Regulation (GDPR), EU 2016/279.
When you provide us with your personal data by making a purchase, requesting support, submitting or requesting an offer or visiting our website, you confirm that the policy is relevant to our business relationship.
The policy applies to all data collected directly or through third parties.
Westerstrand Urfabrik AB, corporate identity number 556028-8648 located at Verkstadsgatan 1, Töreboda, is the data controller.
The purpose and the basis on which we process personal data
The personal data we process is the information you have provided to us or we have collected from you or obtained from third parties. Typical personal data includes your name, phone number and email address.
Such data is provided to us when you e.g. make a purchase or request an offer, order a service or request support, conclude a contract, send us information or offers. You also provide us with personal data for other reasons, such as when you visit our website, visit us at trade fairs, hold design meetings or conduct sponsorship or customer visits.
The data is collected and processed for the purpose of administering and fulfilling our obligations to you as a customer or supplier. The legal basis for our processing the data is that it is necessary for the performance of our agreement with you; if the data is not provided to us, we will not be able to fulfill obligations such as order processing, offers, service, support or payments etc. For this reason, we may share the above-mentioned personal data with our partners, such as payment intermediaries, IT suppliers and haulage companies.
We may use data we collect through your visits to our website, requests for offers and purchases etc. for analyses and statistics to develop our business. We may also collect such data through analysis tools such as Google Analytics when you navigate our webpages. Also, we may use your email address, address and telephone number for the dispatch of e.g. newsletters, invitations and relevant offers; the legal basis is our legitimate interest in communicating with you in order to develop our business. To this end, we may share your personal data with advertising agencies and IT companies e.g. for compilation, printing and distribution.
We may also store and process data created by you such as images, videos and texts, which you upload and share with us e.g. on our website or social media. We may use this for events such as competitions, communications on our social networks, information on our website, sponsorships or other activities appropriate for the purpose.
We also process your data to the extent necessary for compliance with applicable laws, decisions by government agencies and other legal obligations. For example, we store data to the extent necessary for compliance with the applicable accounting law.
Access to your personal data
Basically, your data will be processed solely by Westerstrand; we do not sell, trade, or otherwise transfer your personal data to third parties unless it is necessary to fulfill our contractual obligations toward you. However, your personal data may be shared with operators known as personal data processors who process personal data on our behalf. Westerstrand uses external suppliers for various purposes such as data storage or other data management, payment services, distribution of goods or information, printing, marketing or analyses. In such cases, the suppliers have no right of their own to use any personal data and we conclude personal data processing agreements with them.
We may also disclose your data to government agencies when necessary or because they have a legal right to it.
Protecting your personal data
We, and where applicable our partners, have taken a number of security measures to protect the personal data we process. We use anti-virus software and firewalls with intelligent intrusion protection to guard against external threats and prevent unauthorized access to our networks and systems. Server systems are physically protected, and only authorized personnel have access. Personal data in physical form is stored in locked buildings and archives are connected to external alarm services.
Our employees have strict instructions to handle all data in accordance with applicable laws, rules and policies. Only persons who need access to systems where personal data is stored are given access, and all data is protected by access rules/passwords.
In general, we and our partners only process your personal data within the EEA. Where such data is processed outside the EEA, it only takes place in accordance with current data protection legislation.
Retaining your personal data
Depending on the purpose for which the specific processing of your personal data is based, Westerstrand will store said data for varying periods of time. We will only store it while it is relevant for the purpose for which it was originally collected.
When you purchase our products or services, we store your data for as long as is necessary for the fulfillment of our obligations such as delivery and processing returns or warranties. In some cases, your data will be stored for as long as the customer relationship continues to enable us to perform our obligations for updates and support of the installation or service.
Our newsletters, invitations and offers will be sent to you for a period of one year from your last order, and we will therefore retain your contact details during this time. If you give your explicit consent to be sent the above information, we will retain your contact details until you ask us to stop sending the information.
We store contact details, name, telephone number or email address to our suppliers as long as our mutual customer relationship continues.
For accounting purposes, we retain data required under the Swedish Accounting Act for seven years.
If you have enabled cookies in your browser, your cookie information may be used to improve our communication with you via email, newsletters, and so forth.
Your personal rights
At any time, you have the right to withdraw part or all of any consent given for the processing of personal data. However, the withdrawal of your consent will not affect our processing of your personal data for the time prior to the withdrawal. You also have the right to object at any time to the processing of your personal data for marketing purposes.
In accordance with applicable personal data law, you have the right to information about the personal data concerning you that is processed by us. If your personal data is processed in violation of applicable personal data law, you have the right to request that it be corrected, blocked or deleted. You have the right to demand that processing be restricted.
You also have the right to submit complaints to the national regulatory authority.
You are never obliged to provide your personal data to Westerstrand, but if you choose not to, we will in most cases be unable to conclude or fulfill any agreements with you.
Should you have any questions regarding this policy, please contact us at firstname.lastname@example.org or through your personal contact with us.