Wostman cares about your personal data because it is yours. We want you to feel safe sharing them with us and we want you to trust that we protect them. Therefor all processing of your personal data according to EUs new GDPR-law (General Data Protection Regulation).
What is personal data?
All information about you that is specific for you is called personal data (contact information is also personal data). Your name, security number, address, phone number, email-address, IP-address or photos counts as personal data.
In the text below we have described, as simple as possible, how we process the personal data that we collect from you and what your rights are regarding the processing of your personal data.
2. Who is responsible for your personal data?
Wostman Ecology AB, Sprängarvägen 18, 13238 Saltsjö-Boo, Sweden. 08-7151320. Org.no: 556451-8701 are the controller of the personal data that are being collected and processed by someone at Wostman.
3. What personal data are we collecting?
If you contact us to purchase a product, seek technical support, ask a question or subscribe to our news letter then we will collect your email address, phone number, name and in some cases your home address, security number/organization number, payment information, IP-address, photos or other data related to the case (usually data that you send to us).
In some cases we can demand a copy of your identification but this will only happen if we feel the need to verify your identity. The copy of your ID will be filed together with all other documents regarding the case in our physical paper archives * . The physical archives can only be opened and processed by a few people within Wostman with special authority.
4. Why are we collecting your personal data?
Our reason and legal ground for collecting your personal data depends on your relationship to us. In general, we collect your personal data to be able to contact you in the future if we have an active case or that the law requires that we save your personal data. But usually you voluntarily share your personal data with us when we start purchase-, supplier-, or employment contract together.
The legal grounds:
Customer - Consent and contract.
Supplier - Contract and legal requirements.
Retailer - Contract and legal requirements.
Employer - Contract and legal requirements.
News letter subscribers - Consent.
5. Who has access to your personal data?
Your personal data is being processed internally and is stored in our online system Fortnox where we have our customer register. Personal data stored in Fortnox can only be changed, stored and deleted by a few people at Wostman with special authority.
We never forward or sell your personal data for marketing purposes to a third party. The only time we share your personal data with a third party is when we book transports with our transportation company and when we send you news letters through a third party service (you can unsubscribe to these news letters whenever you want). The news letter service we currently use is located outside EU/EEA. We have approved contracts with all third parties mentioned above which insures you that none of the third parties can use your personal data for marketing or process your personal data wrongly.
6. How long do we store your personal data?
We never store your personal data longer than necessary. If you have a contract with us, we will store your personal data during the time of the contract and one year later (for invoices this means 3 years warranty + 1 year). If you have only been in contact with us without creating a case or contract then we wont save your personal data at all. Emails that may contain personal data will be deleted after 1 year.
*Regarding paper copies of contracts like invoices that contains personal data, these will be stored in our physical paper archive for 7 years according to the swedish accounting act.
7. Your rights
You have according to the General Data Protection Regulation a right to:
- Information about the processing of your personal data.
- Access to your registered data..
- Correction, if you think that the data we have is incorrect.
- Deleting of your personal data if there are no legal grounds for us to keep it.
- Limiting of processing (“freeze my data!”).
- Data portability (right to get your data in a digital or physical format).
- Right to object (=right to questions how we use your personal data. For example to unsubscribe from our news letter).
- Right to receive information about automated processing.
8. Contact information to the data inspection
The swedish data inspection is responsible for the General Data Protection Regulation in sweden. If you have questions regarding the regulation or the processing of your personal data you can contact them through their website: www.datainspektionen.se or call them on 08-657 61 00 (+46 8 657 61 00).