Policy for personal data in external contacts

1. Scope of personal data policy
1.1 Here is described how Sweden by Bike AB, org. No. 559016-0668, with address Centralplan 3, 111 20 Stockholm ("Sweden by Bike", "us" or "we") processes personal data.

1.2 We prioritize the issue of privacy protection. We strive to protect your personal information in the best possible way and ensure that our processing of it takes place in a correct and legal manner.

1.3 In this personal data policy we describe how different types of personal data may be processed and for what purpose we process them. We also explain our processing of personal data and what choices and rights you as a customer or supplier have in relation to it. We recommend that you read our privacy policy carefully and familiarize yourself with the content.

1.4 Please note that this personal data policy concerns the handling of personal data for which Sweden by Bike is responsible for personal data. This means that we are responsible for the handling and processing of your personal data. It also means that it is up to Sweden by Bike that you should turn to questions or comments, or in the event that you wish to exercise any of the rights you have in relation to our handling of your personal data.

1.5 It is these rules regarding our handling of personal data that we use when we process personal data that we have collected from you.

2. Regarding personal data handled
2.1 Below you can see what different personal data has to do with you that we can handle that can be attributed to you as a consumer or individual trader at Sweden by Bike:
(a) name
(b) social security number
(c) organization number for individual company
(d) address
(e) email address
(f) telephone number
(g) image
(h) posts in social media
(i) IP address
(j) credit information
(k) order number
(l) customer number
(m) account number

2.2 In the event that you are a contact person of a company that purchases goods from Sweden by Bike or is a supplier to us, the following personal information that we may process may be attributed to you:
(a) name
(b) email address
(c) telephone number
(d) address
(e) customer number
(f) information about your employer
(g) your title

3. Purpose of treatment and legal grounds
3.1 For you as a consumer at Sweden by Bike, we process your personal data in paragraphs 2.1 (a) - (f) and 2.1 (j) - (m) above for the purpose of administering our customer relationships, delivering goods and providing support. The treatment is done on the basis that it is necessary for us to fulfill our agreement with you.

3.2 Further, we process your personal data in paragraphs 2.1 (a), (d), (e), (f), (g), and (h) above for the purpose of marketing our goods and services and being able to communicate with you as a consumer . The treatment is based on our legitimate interest in reaching out with marketing.

3.3 For you who voluntarily publish information on Sweden by Bike social media, we process your personal data, paragraphs 2.1 (a), (g), (h) and (i) above, for the purpose of administering our customer relations and marketing our goods and services. The treatment is based on our legitimate interest in reaching out with marketing.

3.4 In the case of invoice purchases, we may process your social security number and credit information, points 2.1 (b) and (j) above. This is done on the basis that it is clearly justified by the importance of secure identification.

3.5 With regard to you as a contact person with a corporate customer or supplier to Sweden by Bike, we process your personal data in paragraph 2.2 (a) - (g) above for the purpose of managing our customer and supplier relationships, delivering goods, providing support and marketing our goods and services. . The treatment is done on the basis of our legitimate interest in streamlining our operations and our contact with customers and suppliers and reaching out with marketing. In situations where Sweden by Bike sells goods or services to a company where you are a contact person, treatment is done on the basis that it is necessary for us to fulfill our agreement with you.

3.6 Applicable contacts with corporate customers and suppliers we process your personal data in points 2.2 (a) - (b), (d) and (e) above (and if you are an individual trader, your social security number according to point 2.1 (b) for statistics and analysis The treatment is based on our legitimate interest in being able to follow up and analyze sales.

4. Storage of personal data
4.1 With regard to you as a consumer, we store your personal data for as long as it is necessary to fulfill the purpose of the processing. If you have an e-commerce account with Sweden by Bike and the customer relationship with us ends, we store your name, your address, your e-mail address and your phone number for a maximum of twelve months after the customer relationship ended. If you do not have an e-commerce account with Sweden by Bike and the customer relationship with us ends, we store your name, your address, your e-mail address and your phone number for a maximum of six months after the customer relationship ended.

4.2 Credit information in connection with purchase of invoices will be removed within three months from the examination of creditworthiness.

4.3 Existing information that is processed to administer customer competitions will be removed within three months from the end of the competition.

4.4 As regards data that users voluntarily publish on Sweden by Bike's social media, and which the respective users have the opportunity to delete without Sweden by Bike's involvement, Sweden by Bike has no responsibility to remove such data on its own initiative within a certain period of time.

4.5 With regard to you as a contact person of a customer or supplier, we store your personal data for as long as necessary to fulfill the purpose of the processing. If we end the customer or supplier relationship with an actor where you are a contact person or if your position as a contact person ends, we will store your personal data for six months. Personal information needed for us to send marketing to you is stored until you object to the marketing.

4.6 Regarding you as a contact person at a corporate customer or supplier, we can process your personal data for statistics and analysis for a period of 12 months from the time the data was collected.

4.7 When delivering goods, the name and address can be stored for up to 12 months after the transport for the purpose of being able to follow up transport handling.

4.8 We always process your personal data to the extent and during the time we are required to do so by law. Examples of this are personal information that is necessary to process in order to ensure correct accounting. This information is stored for seven years after the accounting event has occurred.

4.9 To the extent that your personal data is no longer necessary to fulfill the purpose of the processing, or the processing for any other reason would no longer be allowed, the data will be anonymized or deleted.

5. Receiver
5.1 We may disclose your personal information to our personal data assistants, eg companies that work with invoice administration, IT and cloud services or freight and delivery. In such cases, personal data access agreements are entered into which ensure that your personal data is processed only in accordance with this personal data policy.

5.2 We may also disclose your personal information to companies such as banks and insurance companies, eg. when purchasing supplemental insurance or part payment. These companies are themselves responsible for the processing of your personal data.

6. Your rights
6.1 You have the right to receive confirmation of whether we process personal data that concerns you, and in that case to access this personal data and also information about the personal data and our handling of it.

6.2 You have the right to receive inaccurate personal information that concerns you corrected by us without undue delay. You also have the right to supplement incomplete personal data in some cases, taking into account the purpose of the processing.

6.3 You are entitled in certain circumstances to have your personal data deleted by us, eg if the personal data is no longer necessary to fulfill the purposes for which it was collected, or if the personal data was processed illegally.

6.4 You have the right to demand that we limit the processing of your personal data in certain cases. For example, if you If you dispute the accuracy of the personal data, you may require that we limit the processing of the data during the time it takes for us to verify that the information is accurate.

6.5 You have the right to object to the processing of your personal data on the basis of Sweden by Bike's legitimate interest. If so, we must demonstrate compelling justifiable reasons that outweigh your interests, rights and freedoms in order to continue treatment.

6.6 You have the right to object to the processing of your personal data insofar as the processing takes place for direct marketing purposes. In such an objection, we will no longer process your personal data for that purpose.

6.7 You have the right, in certain circumstances, to obtain the personal data that you have provided to us and which move in an electronic format that is widely used. You have the right to transfer such data to another data controller (data portability).

6.8 If you have any comments on our processing of your personal data, you are welcome to contact us. You also have the right to submit complaints regarding the processing of your personal data to the Data Inspectorate.

7. Additions and changes
We may make additions or changes to this Privacy Policy. If we do, we will publish the updated policy on our website. If so, we kindly ask you to read the updated privacy policy carefully.

8. Contact us
To update, correct or delete any information we have about you or use any rights that accrue to you as above, you are welcome to contact us at info@swedenbybike.com.

__________________________

This Privacy Policy applies from May 25, 2018.