PRIVACY POLICY
This policy applies to the processing of personal data that HydX AB ("HydX" or "we") collects about you that may come, for example, through our Website (including social networks belonging to third parties), email, text message, telephone, other contacts with us, from our group companies, third parties or from publicly available information. We care about your privacy. This policy sets out how we collect, use and protect information about you and how you can exercise your rights. Please get in touch with us if you have any questions or concerns about this Privacy Policy. With reference to law, we refer below to the General Data Protection Regulation (GDPR) and other applicable Swedish data protection legislation.
Personal data
"Personal data" means information that relates to you and can identify you. In this privacy policy, the terms "personal data" and "data about you" are used synonymously and interchangeably. In general, you can use our Website without providing us with any information other than technical data. Otherwise, the personal data we process about you usually comes from you or from someone within your organisation in connection with the purchase and performance of our services, such as product and technology development, commissioning, service, maintenance and support. On some pages, data will be requested from you, for example, in connection with service requests or if you register to receive electronic newsletters. If you represent a company as a supplier, contractor or consultant for us, the data may come from someone within your organisation or from yourself. In addition, we may use information about you that we have obtained from other sources provided by third parties, such as marketing and sales promotion companies.
The personal data about you that may be affected is:
Personal and contact data - such as your name, address, email address, telephone number, date of birth, age, gender, hobbies and, where clearly justified by the purpose of the processing or the importance of secure identification, also social security number.
Technical information about your device or internet connection - such as IP address, cookies, geographical location and login details.
Information about your user behaviour - such as your search patterns and activities on the Website, your response time to pages and how you use our services.
User-generated information - content you voluntarily register, submit or publish, for example, when calling customer services or via the contact forms on our Website, as well as content you share with us by uploading to our Website or social networks (which you authorise the network to share with us), such as texts, videos and photographs.
Information from other sources, such as publicly available information or information from our partners.
Purpose and legal basis
For our processing of your personal data to be lawful, there must be a legal basis for it, i.e. it is necessary for the performance of a contract with you or a legal obligation to which we are subject, the processing is based on a balancing of interests, or you have given your consent to a specific processing. Below are examples of the purposes for which we process your personal data and the legal basis on which this is done.
HydX processes your personal data for various purposes. Mainly, HydX processes your data for the following purposes and the following stated legal bases for the same:
One of our primary purposes for collecting personal data is to fulfil our obligations to our customers and suppliers, such as administering orders and fulfilling other commitments related to the purchase of our products and services, for accounting and billing purposes, sending out information for product safety purposes and otherwise ensuring compliance with legal requirements (e.g. the Accounting Act).
Legal basis: Performance of a contract or legal obligation, or if you are a representative, employee, or otherwise represent an organisation that has agreed with us - legitimate interest. HydX's legitimate interest in processing personal data is to fulfil contractual or legal obligations.
Another primary purpose for our use of personal data is to personalise our products and services. We use the data we collect to provide information about the products and services requested, but also to understand our customers better. To achieve this, we conduct customer surveys and market analyses, among other things. We also use personal data for statistical purposes. Customer and market analyses and processing for statistical purposes are carried out at an aggregated level and are not intended to identify individuals.
Legal basis: Legitimate interest. HydX's legitimate interest in the aforementioned personal data processing is to be able to offer you better products and services and a better shopping and customer experience, as well as to provide you/your organisation with customised offers and other relevant information.
We may use personal data, such as contact details, date of birth, age, gender and hobbies, to send you newsletters by post, email, text message or telephone, to inform you about new products and services, promotions, offers and other information about our products and services that we or our partners offer and that we think may be of interest to you and your organisation. We may therefore use your data for direct marketing purposes unless we have been instructed not to do so.
You can object to our use of your personal data for direct marketing purposes at any time by contacting us as described in section 11 below, or directly in our electronic mailings—legal basis: Legitimate interest. HydX's legitimate interest in the above-mentioned personal data processing is to be able to offer you/your organisation better products and services and a better shopping and customer experience, as well as to provide you/your organisation with customised offers and other relevant information.
Information on cookies
We use cookies, electronic images and similar tracking technologies on our Website and in our email communications. For more information on how we use cookies and similar technologies, please see our "About cookies" document.
Transfer of personal data
We treat your personal data with the utmost care, and your data is only used by us and by selected third parties.
Third parties, including group companies, that we engage to help us run our business (such as for IT and customer surveys) are, in most cases, only authorised to use your personal data on our behalf and for the specific tasks they are required to carry out on our instructions. They thus act as data processors for us. They are obliged to keep your personal data confidential and secure.
To perform a service for us or you/your organisation, offer better products and services or for marketing purposes, we may also disclose your personal data to other third parties, usually as independent data controllers, such as our strategic supplier partners where we act as their distributor (e.g. for handovers of projects, business or the entire customer relationship, or for direct deliveries), freight service companies, insurance companies, banks/credit reference agencies or to advertising networks with which we cooperate.
We may also disclose personal data in other specific cases, for example when we have reason to believe that the data is necessary to identify, contact or bring an action against someone against whom, for example, we have a claim or who may have infringed the Website, or who has otherwise infringed or is infringing our rights or property or the rights of our customers or other visitors/partners.
Processing of your personal data in accordance with this privacy policy may require that your personal data be transferred to a destination outside Sweden. Transfer of personal data to countries outside the EU/EEA only takes place to the extent permitted by law and thus requires, for example, that the country in question has an agreement with the EU/EEA, that the government is considered to have adequate data protection legislation, or that we have entered into a deal with the third party in question that they are obliged to apply clauses approved by the European Commission regarding the protection of personal privacy. You can find the list of authorised third countries and standard clauses on the European Commission's Website and on the Swedish Data Protection Authority's Website on data transfers to third countries.
Your rights
In accordance with the law, you have the right to request information about personal data we hold about you after you have identified yourself and clearly stated what information you wish to receive. Such a request must be in writing, personally signed and sent to the address indicated below under point 11. Furthermore, we may request additional information to ensure that the information is provided to the right person. We will respond to your request as soon as possible and within one month. If we are unable to fulfil your request, we will notify you and explain why.
If you believe that the information about you is inaccurate or incomplete, you have the right, to the extent permitted by law, to contact us with a request for rectification. We will correct or update the information about you as soon as reasonably possible. You also have the right, as provided by law, to request the deletion of your data or to request that we restrict the processing of your personal data and to withdraw any consent.
You also have the right, as provided by law, to have the personal data you have provided to us transferred (ported).
Please note that we may be required to retain necessary personal data in connection with deletion, withdrawal of consent or porting to fulfil our legal or contractual obligations. We may also be permitted by law to retain specific personal data to fulfil our business needs.
You have the right to object to the processing of your personal data that we carry out based on a balance of interests. We must then, after you have specified the processing to which you object, demonstrate that there are interests that weigh more heavily. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.
Storage time
Your personal data will only be retained for as long as necessary for the purposes set out in this privacy policy or as required by law or contract. Personal data is deleted or anonymised when it is no longer relevant for the purposes for which it was collected or is no longer required by law or contract.
Data security
We process personal data in accordance with the applicable laws on personal data processing. Personal data is stored in operating environments that use security measures to prevent unauthorised access. Reasonable standards for the protection of personal data are observed. Measures are taken to avoid unauthorised or unlawful processing of your data and accidental loss or destruction of, or damage to, that data.
Should a personal data breach be detected, it will be reported to the Data Protection Authority and to you as required by law.
Links to other websites
Please note that this Website may contain links to other websites. If you follow such a link, you may be visiting other websites that have different privacy policies from those set out in this privacy policy.
Amendment of the privacy policy
We may update this Privacy Policy. If there are material changes to this Privacy Policy, we will notify you by placing a prominent notice on the Website or by other required means. We encourage you to review this Privacy Policy to stay informed about how we process your personal data.
Complaints
If you believe that the processing of your personal data has been mishandled, please report this to us as soon as possible. You also have the option of complaining to the Data Protection Authority regarding our processing of personal data.
Contact us
HydX AB, 556791-5326, is the data controller for the processing of your personal data as described above, unless otherwise expressly stated in connection with the collection of your data. If you have any questions about the policy or our personal data processing, please get in touch with us as follows.
E-mail: info@hydx.se
Address: Norra Zinkgatan 29, 271 39 Ystad
Telephone: 0411-557 180
