Privacy Policy (GDPR)

Processing of personal data within Bonaj AB

You who come into contact with us should feel secure that we handle your personal data in a secure manner. We comply with current data protection legislation as well as internal rules and procedures for secure handling of information. Here follows a description of how we handle the collection, processing, use and sharing of your personal data.

We may need your personal data to fulfill agreements or laws and to perform customer and market analyses. We may also need your personal data to provide you with good service in terms of information and follow-up.

When we collect personal data about you for the first time, you will receive more information about this and how you can object to it.

We collect personal data on the following grounds

We process personal data only when it is needed to fulfill obligations according to agreements and/or laws. Here are examples of personal data we process:

• Contact details: for example name, telephone number, e-mail address
• Social security number/organization number
• Username
• Bank-related information
• Data that you register yourself and data that you provide via consent
• Information about your facility/premises
• All contract-related information
• Other voluntarily provided information in free text fields via contact forms or similar.

We collect personal data in the following way

If necessary, we obtain your consent before the processing of your personal data begins. You can withdraw your consent at any time. We will then no longer process your personal data or obtain new ones on the condition that it is not necessary to fulfill our obligations according to agreements or laws. collect personal data in the following way

We also collect personal data in the following ways

• Data that you provide us directly
• Information that you provide in connection with entering into an agreement
• Data that we receive when you contact us or visit us.
• Data that we receive when you respond to surveys
• Data that we receive when you contact us via the web

Information you provide us, information we collect about you, as well as information about products/services and financial information, is generally necessary to enter into a contractual relationship with us, while the other information we collect is generally necessary for other purposes, as described below.

What we use the personal data for

All data is used to provide, perform and improve our products and services.

We process your personal data primarily to fulfill our commitments and comply with applicable laws. Our starting point is to collect only the data that is necessary, relevant and not redundant for the purpose for which it is intended.

We collect and process information about you solely for;

• employment contract.
• customer or supplier relationship.
• purchase of goods or services.
• marketing, customer information and statistics
• application for vacant positions or notification of interest in employment.
• visit to our business.
• internship
• message via the web
• to seek contact with us in another way.

We process your personal data only for the purposes above and always with the support of a legal basis.

If necessary, your personal data will be transferred to subcontractors, e.g. outsourced production process and transport services. In such a case, the personal data will only be processed and used by them for the agreed purposes. We also collect and/or receive data from third-party companies that we collaborate with, e.g. subcontractors etc. which are located within the EU.

To whom do we disclose your personal data?

We disclose your personal data to third parties only if it is necessary to fulfill our obligations under contract or law or if you have given your consent to it.

Bonaj AB is responsible for personal data, which means that the company is responsible for how your personal data is processed and that your rights are taken care of.

How long do we store your personal data?

Your personal data is only saved as long as it is necessary to fulfill the purposes of the processing, or as long as we are required to save it by law. After that, your data is securely deleted, so that it can no longer be recreated.

You have rights regarding your personal data and you have the opportunity to influence your information and what is saved. We will, on our own or your initiative, correct information if inaccuracies are discovered. You can also at any time request that your data be deleted if it is compatible with the law or that its use be restricted by contacting us. You have the right to object to the processing of your personal data or to the processing being restricted.

Your rights as a data subject regarding access, correction and deletion

• You have the right to request a copy of the information we hold about you and to verify the information we hold about you.
• You have the right to request the correction of incorrect or incomplete information about yourself.
• You have the right to request deletion of your personal data in cases where the data is no longer necessary for the purpose for which it was collected.

However, there may be legal obligations that prevent us from promptly deleting all personal data. Then we ensure that the data we are obliged to save is protected from being used for purposes other than fulfilling the legal requirements.

This is how we protect your personal data

We take measures to protect your data in accordance with the data protection regulation and ISO standards for information security. This means that we have routines and rules around data protection, for example that we send your data securely and ensure that only authorized personnel have access to the data they need to perform their work.

We develop routines and working methods to ensure that your personal data is handled securely.

The starting point is that only employees and other people within the organization who need the personal data to perform their tasks should have access to it.

Our security systems are developed with your privacy in focus and protect to a very high degree against intrusion, destruction and other changes that may pose a risk to your privacy.

Access to your personal data

You have the right to receive a register extract in order to check that your personal data is being processed correctly. You can also request deletion or object to our processing (for example, if any of the information we have about you is incorrect). We have the right to refuse your request if, due to legal requirements or the like, we are prevented from deleting or changing data.

If you believe that your rights are not being respected by us, please feel free to contact us (see contact details below) or contact the data inspectorate.

datainspektionen@datainspektionen.se

Contact details for the person in charge of personal data

Bonaj AB
Grönsta Industriväg 7
635 02 Eskilstuna

Phone: +46 (0)16-134060

Email: emil.ryden@bonaj.se