PRIVACY POLICY VÄDERSTAD AB
Väderstad AB (hereinafter referred to as “Väderstad”, “we”, “us”) believes in an open and transparent process with regard to which personal data we process and for which purposes. It is also important to us that we protect your personal data.
This Privacy Policy describes for you who are customer, buyer or user of our machines, supplier or who are otherwise in contact with us, how Väderstad processes your personal data. We also describe the rights that you have with regard to our processing of your personal data.
The data processed in different contexts and for different purposes is set out under the headings below. If you have any questions concerning the processing of your personal data, you are welcome to contact us using any of the contact details provided at the end of this document.
This Privacy Policy is addressed to those who:
- are customers of ours or who represent a company or organisation that is a customer of ours or a prospective customer;
- are or represent one of our current or future suppliers, distributors or partners;
- use our products;
- use our applications and/or cloud services;
- visit our website;
- receive our marketing;
- receive information as owners of a Väderstad machine;
- communicate with us;
- attend our courses and events;
- participate in our marketing;
- is employed by or represents a company that is a party to or otherwise is involved in an acquisition process;
- visit our premises;
- take part in a recruitment process with us; or
- use our IT systems, such as our Partner Portal.
Table of contents
1. Who is responsible for processing of your personal data?
2. What personal data is processed and why?
3. Who has access to your personal data?
4. Use of automated individual decision-making, etc.
5. Duration of data processing and storage
6. Your rights
7. Contact details
8. Changes to our privacy policy
1. Who is responsible for the processing of your personal data?
Väderstad is the Data Controller responsible for the processing of your personal data.
In certain situations, Väderstad may be joint controller of your personal data together with one or more parties, where the parties and Väderstad jointly determine the purpose and means of processing. This is the case for certain processing that is carried out by Väderstad along with one of Väderstad’s subsidiaries, i.e. another company within Väderstad Group.
If Väderstad is a joint controller for personal data along with one of its subsidiaries, the companies concerned are jointly responsible for ensuring that your personal data is processed in the right way and that you receive relevant information about the processing of your personal data. You have the right to exercise your rights towards any of these companies that you want to but Väderstad will be your main contact. If there are joint controllers, the joint responsibility for personal data is mutually regulated in an agreement. You can always contact Väderstad with all questions about responsibility for the processing using the contact details provided at the end of this document.
The Väderstad products are distributed via a network of authorised distributors, importers and other partners. The majority of these distributors, importers and partners are independently owned and operated companies, that may have their own privacy policies. If you have any questions concerning how your distributor/partner/importer uses your personal data, contact the distributor/partner/importer directly.
2. What personal data is processed and why?
Väderstad AB processes your personal data in different ways and for different purposes. Below, there is provided more details information about how we process your personal data in different situations, why we conduct the processing and the legal basis for our processing.
2.1 When purchasing our products
Väderstad processes your personal data in order for Väderstad AB to be able to administer and complete your purchase of our products or the purchase of our products that you carry out for a person or company you are representing. Processing is carried out irrespective of whether you purchase the product directly from us, through our Collection Shop, from one of our subsidiaries or from one of our distributors or partners. However, we will process different data depending on how you choose to carry out the purchase. If you do not purchase the product from us, the person you purchased the product from has disclosed the information to us.
|
Why do we use your data? We use the data to administer, complete and follow up the purchase of our products (e.g. to provide you with and retain information about the purchase and upcoming updates, follow-up, support, service and complaint cases). We also use the data to fulfil our warranty commitments and otherwise to handle legal requirements. |
|
|
Categories of personal data
|
|
|
Type of processing |
Legal basis |
|
If you are a private individual or sole trader: Processing is necessary for us to be able to fulfil our agreement with you or take action upon request from you before an agreement is concluded. Without the requested information, we cannot fulfil the purchase. If you are a representative of a company that is our customer: Processing is necessary to fulfil our legitimate interest in the preparation, administration and fulfilment of the agreement with the company that you represent. |
|
Processing is necessary to fulfil our legitimate interest in the communication, planning, follow-up and evaluation of questions regarding the agreement with you or the company that you represent. |
|
It is in our legitimate interest to process complete data about and in connection with a purchase in order to defend ourselves against and handle any warranty claims, objections or complaints in relation to a purchase, irrespective of whether you purchased the product directly from Väderstad AB, from one of our subsidiaries or from a distributor.
|
|
It is in our legitimate interest to be able to defend ourselves against or assert any legal requirements and claims. |
|
It is in our legitimate interest in order to be able to develop our products and business. When reporting transactions and purchasing our products internally, your personal data may appear in for example, contract documentation that is used as a basis for reporting. |
|
In some cases, it is in our legitimate interest to request a credit report before we execute the agreement in order to ensure that you or the entity you are representing will have the financial capacity to execute the relevant agreement. |
|
If your personal data is contained in documents that must be saved for example, under rules in the Swedish Accounting Act, we process the data because it is necessary to fulfil our statutory and/or regulatory obligations or our obligations in accordance with a decisions rendered by public authorities. |
2.2 When using our products
Some of our products contain software that makes optimum seeding and soil cultivation possible. The data generated with the use of the products may contain personal data that Väderstad may process in different situations.
|
Why do we use your data? We use the data in order to be able to provide support and service to those who use our products, to fulfil our warranty commitments, to provide our services in connection with your use, and to facilitate development of our products, services and offers. |
||
|
Categories of personal data
|
||
|
Type of processing |
Legal basis |
|
|
If you are a private individual or sole trader: Processing is necessary for us to be able to fulfil our agreement with you. We cannot carry out support or servicing of the product without access to and processing of the relevant data. If you are a representative of a company that is our customer: Processing is necessary for our legitimate interest in fulfilling our commitment to the company that you represent to carry out support or servicing of the product. |
|
|
It is in our legitimate interest to evaluation, develop and improve our products. When we do this, it is of value for us to access the information that our products generate. If we process your personal data for product development purposes, we only do so in an aggregated format in which we cannot track the individual behind each data set. |
|
|
If you are a private individual or sole trader: Processing is necessary for us to be able to fulfil our agreement with you. We cannot carry out analyses and services to you without access to the data. If you are a representative of a company that is our customer: Processing is necessary for our legitimate interest in fulfilling our commitment to the company that you represent to carry out analyses and services. |
|
|
It is in our legitimate interest to process complete data about and in connection with a purchase in order to defend ourselves against and handle any warranty claims, objections or complaints in relation to a purchase, irrespective of whether you purchased the product directly from Väderstad, from one of our subsidiaries or from a distributor. |
|
2.3 When we send information about your Väderstad machine to you
You have the option of registering your possession of one or more Väderstad machines with us (e.g. through link). When you register your new or used machine, or when we register your machine in connection with a purchase from us or one of our distributors, we will process your personal data. Processing takes place in order to send you important information and tips about your machine to you or the company that you represent. In addition, we may use the data to send you safety-related information or other mandatory information to you.
|
Why do we use your data? We use the data in order to provide you with information relevant for you as an owner or user of our machines or products (irrespective if you have bought the machine directly from us or any of our distributors). For example, we may provide you with safety information, information about updates or other information of relevance for your machine or for you, or to share tips and tricks that we deem are useful for your use of the machine. |
||
|
Categories of personal data
|
||
|
Type of processing |
Legal basis |
|
|
It is in our legitimate interest to process your personal data in order to provide you with information about the machine or product that you own or use in order to give you useful information. |
|
|
We process the personal data in order to fulfil our statutory and/or regulatory obligations or our obligations in accordance with a decision rendered by a public authority, e.g. to inform you about any safety risks regarding your machine or product. |
|
2.4 When we send marketing to you
We process personal data in order to send marketing material to you. This is personal data that we have received from you, or that someone has collected from another party such as your employer or from general address registers. At any time, you have the right to object to such processing. Irrespective of the basis on which we process your data to send marketing material, you always have the possibility of stopping such emails, mail and other communications from us by emailing Väderstad at gdpr@vaderstad.com or using the communication channel specified in the mailing.
|
Why do we use your data? We use the data to provide you with marketing material in which we believe you have an interest. |
||
|
Categories of personal data
|
||
|
Type of processing |
Legal basis |
|
|
If you or someone you represent has made a purchase with us or any of our distributors, our processing is based on our legitimate interest in disseminating information about our range of products and services, news, etc. and providing you with information about us and our products in which we believe you have an interest. If we do not have a relationship that is due to previous purchases, we will process your data on the basis of the explicit consent that you have given us. In certain cases, we buy contact details from organisations such as SPAR. We have made the assessment that it is in our legitimate interest to send marketing material through our digital channels to farming companies and potential customers with whom we do not normally come into contact through our digital channels. |
|
2.5 When using our applications and our website
We process personal data when you use our applications and our website, for example in the form of cookies, IP addresses and similar. In the first instance, we process this type of personal data in order to give you a better user experience.
|
Why do we use your data? We use the data to provide information about our products and our offers, to give you a better user experience as a user and to be able to develop our products and offers. |
||
|
Categories of personal data
|
||
|
Type of processing |
Legal basis |
|
|
Processing is necessary for both our legitimate interest and your legitimate interest in being able to provide you with information and necessary features through our website and applications. Without this data, you cannot use certain features of our applications, such as our AR function in our mobile application. |
|
|
It is in our legitimate interest to provide you with information about our offer and evaluating, developing and improving our applications and website at the same time. When we do this, it is of value for us to access the date that is generated through your use of our applications and our website. |
|
|
It is in our legitimate interest to process complete data in order to be able to defend ourselves against and handle any claims or complaints. |
|
2.6 When you communicate with us
We will process personal data when you communicate with us via social media and email, irrespective of what your matter concerns.
|
Why do we use your data? We use your data in order to be able to respond to your requests, comments and posts on our social media and by email and then to continue to communicate with you in relation to such matters. |
||
|
Categories of personal data
|
||
|
Type of processing |
Legal basis |
|
|
The processing is necessary for our legitimate interest to assist you or the person or company that you represent and to respond to your requests, comments and posts, as well as your emails to us, to meet your expectations and to handle any legal claims. |
|
|
It is in our legitimate interest to process complete data in order to be able to defend ourselves against and handle any claims or complaints.
|
|
|
It is in our legitimate interest to process complete data in order to be able to defend ourselves against and handle any legal claims. |
|
2.7 When you attend courses and events
We process personal data when you attend in physical or digital courses and events that we arrange or for example, attend trade fairs at which we participate as exhibitors or attend courses that we organise alone or together with our partners.
There may be photography take place at courses and events in order to promote the course or event both internally and externally. In such cases, we will inform you about the fact that photographs may be taken and give you the option of not being in the photo.
|
Why do we use your data? We use your information to administer and make it possible for you to attend our courses and events, communicate with you in relation to courses and events and (where applicable), promote and distribute information about our range of products, services etc. |
||
|
Categories of personal data
|
||
|
Type of processing |
Legal basis |
|
|
If you are a private individual or sole trader: Processing is necessary for us to be able to fulfil our agreement with you. Without the requested information, we cannot hold courses that are relevant to you. If you are a representative of a company that is our customer: Processing is necessary for our legitimate interest in fulfilling our commitment to the company that you represent in holding courses that are relevant to you as an attendee. |
|
|
The processing is necessary for both our legitimate interest and your legitimate interest in being able to effectively administer and communicate about the courses and events that you attend. |
|
|
The processing is necessary for our legitimate interest to distribute information about our range of products and services on our website or on social media and in particular, to communicate information directly with you about upcoming courses and events in which we believe you have an interest in attending. You always have the option of stopping this type of communication by emailing us at gdpr@vaderstad.com or using the communication channel that is specified in the mailing. |
|
|
If we process your personal data for marketing purposes, we will do so solely based on the explicit consent that you gave us when attending the course or event or as we have received from you afterwards. |
|
2.8 When you participate in our marketing
We process personal data when you participate in our external or internal marketing in different ways. This may be if you are set up as a model for images that we use in our marketing or that our partners and distributors use in their marketing of our products or contribute photographs, films, texts or other materials to our marketing.
|
Why do we use your data? We use your data to market and distribute information about our range of products, services, etc. as well as to store data for such future use, as well as to administer our obligations in relation to you with the use of the material you have produced on our behalf. |
||
|
Categories of personal data
|
||
|
Type of processing |
Legal basis |
|
|
If you are set up as a model, we will enter into an agreement that governs our right to use your data for marketing purposes. In such cases, the processing is done on the basis that the processing is necessary for the fulfilment of our agreement. |
|
|
If we process your personal data for marketing purposes, we do so based solely on your explicit consent, which we obtain in association with the photography or afterwards or that you provide to us when we enter into a photography agreement. At any time, you can withdraw your consent by contacting us. |
|
|
If you as a creator or copyright holder has provided us with material to use in our marketing, we will enter into an agreement that regulates our respective rights and obligations in connection with the use of the material. If so, our processing is necessary for us in order to fulfil our agreement. |
|
|
We process the personal data in order to fulfil our statutory obligations, e.g. your right to be named as a creator in accordance with the applicable copyright act. |
|
2.9 When you are or represent one of our current or future suppliers, distributors or partners.
We will process your personal data when you are a supplier to us, may deliver products or services to us or when you are representing such a company. We will process your personal data in the same way when you are a distributor, or represent a dealership providing our products or are representing in another way or are a partner of ours. The personal data processing may be done for the purpose of communicating with you, for the negotiation and signing of agreements, complaints or error handling or for the management and administration of our professional relationship for other reasons.
|
Why do we use your data? We use your data to administer the contractual relationship, follow up on the products and services that you or the company that you represent purchase from or provide to us, to communicate with you and to handle any legal requirements. |
|
|
Categories of personal data
|
|
|
Type of processing |
Legal basis |
|
If you are a private individual or sole trader: The processing is necessary in order for us to be able to fulfil our agreement with you or take action upon request from you before entering into an agreement, e.g. regarding your request for information, handling orders, invoice handling, support and administration of the contractual relationship. Without the requested information, we cannot execute the agreement. If you are a representative of the company that is our supplier, distributor or partner: The processing is necessary in order to fulfil our legitimate interest in the preparation and administration of the agreement with the company that you are representing, as well as for the provision of information to you, the handling of orders, processing of invoices and support and administration of the contractual relationship in your capacity as a representative for our supplier. |
|
In some cases, it is in our legitimate interest to request a credit report before we execute the agreement in order to ensure that you or the person you are representing will have the financial capacity to execute the relevant agreement. |
|
Processing is necessary to fulfil our legitimate interest in the communication, planning, follow-up and evaluation of questions regarding the agreement with you or the company that you are representing. |
|
It is also in our legitimate interest to be able to defend ourselves against and handle any claims or complaints in relation to a contractual relationship with you or the company you are representing. |
|
It is in our legitimate interest to process complete data in order to be able to defend ourselves against and handle any legal claims. |
|
It is in our legitimate interest to be able to develop our business and products. Your personal data may appear in documents used as a foundation for internal reporting. |
|
If your personal data is contained in documents that must be saved for example, under rules in the Swedish Accounting Act we process the data because it is necessary to fulfil our statutory and/or regulatory obligations or our obligations in accordance with decisions rendered by public authorities. |
2.10 When you represent, owns or is employed by a company that we may acquire or represent the owner of such company
When we take part in a possible acquisition of a company, we may process personal data to a varying extent aiming at evaluate, perform and thereafter to follow up the acquisition. In some cases, but not all, your personal data may appear in the material the we get hold of, e.g. when we perform a due diligence of the company. Please note that it is the person that share the information with us who is responsible to ensure that the sharing of information that contain personal data is performed correctly and in accordance with the applicable data protection rules. Väderstad may not be able to influence which personal data we will get transferred to us in connection with the acquisition in advance.
|
Why do we use your data? We may get access to your personal data that are included in the material that we review in a due diligence in order to evaluate the acquisition. In addition, we may use your personal data in connection with the negotiation and administration of the contractual relationship with you who is the seller or represent the seller in order to communicate with you, to perform necessary measures to fulfil our acquisition (if applicable) and handle any legal claims or requirements in connection therewith. After an acquisition is fulfilled, we may need to process your personal data in order to implement the company’s operations in Väderstad Group. |
|
|
Categories of personal data
|
|
|
Type of processing |
Legal basis |
|
If you are a private individual or sole trader: The processing is necessary in order for us to be able to fulfil our agreement with you or take action upon request from you before entering into an agreement, e.g. to negotiate the agreement and to administrate the contractual relationship. Without the requested information, we cannot execute the agreement. If you are a representative of the company that we are interested in or represent the seller: The processing is necessary in order to fulfil our legitimate interest in the preparation, evaluation, negotiation and administration of the agreement with the company that you are representing, and if applicable, prepare and fulfil the acquisition and execute the agreement with the company that you represent. |
|
In some cases, your personal data will be contained in material that we or our advisers receive from other personal data controllers for review during a due diligence before an acquisition. The processing is necessary due to our legitimate interest in evaluation and examination of the company and its state, before the acquisition is performed. |
|
Processing is necessary to fulfil our legitimate interest in the communication, planning, follow-up and evaluation of questions regarding the agreement with you or the company that you are representing. |
|
In some cases, your personal data may be processed by Väderstad in connection with the implementation of the acquired company’s operations in our company group. The processing is necessary to fulfil our legitimate interest in accomplishing the acquisition and performing the measures necessary in order to make the company a part of Väderstad Group. |
|
It is in our legitimate interest to process complete data in order to be able to defend ourselves against and handle any legal claims. |
|
If your personal data is contained in documents that must be saved for example, under rules in the Swedish Accounting Act we process the data because it is necessary to fulfil our statutory and/or regulatory obligations or our obligations in accordance with decisions rendered by public authorities. |
2.11 When you visit our premises
We process your personal data when you visit us.
|
Why do we use your data? We use your data in order to always know which individuals are staying in and have been in our premises. |
|
|
Categories of personal data
|
|
|
Type of processing |
Legal basis |
|
It is in our legitimate interest to conduct our business with adequate fire, safety and privacy measures that reduce the risk of harm by always knowing who is are staying and who has been at our premises at any given time. |
|
Processing is necessary for us to be able to fulfil our agreement with you or the party you are representing for the receipt and confirmation of payment. |
2.12 When you participate in a recruitment process with us
We process personal data when you are involved in a recruitment process with us or you otherwise participate in our business as a consultant or similar. In some cases, we cooperate with external recruitment companies in our recruitment processes. In such cases, we will provide you with particular information about it. If you are a consultant, it may be that your employer has provided us with your personal data. We may also process your personal data because you have been indicated as a reference by another person who has applied for a job with us.
|
Why do we use your data? We use your data in order to recruit staff and consultants and where applicable, to keep in touch with potential candidates so as to provide information about relevant vacancies in the future. |
|
|
Categories of personal data
|
|
|
Type of processing |
Legal basis |
|
Processing is necessary for us to be able to fulfil our agreement with you or take action upon request from you before an agreement is concluded. Without the requested information, you cannot apply for a job with us. |
|
It is in our legitimate interest to ensure that we interact with the individual who is applying for a position with us or who will be involved in our business as a consultant or similar, and that we can evaluate the application submitted by the individual. The same applies to the other data generated during interviews and tests or that is included in the application in one way or another. |
|
Some processing is necessary in order for us to be able to meet the statutory requirements in relation to recruitment and employment, etc. If we do not receive the requested information, we may have an obligation to reject your application or to reject your involvement in our business. |
|
If we are given your consent, we will retain your data and during that time possibly process your personal data for the purpose of contacting you and providing information about work opportunities or assignments that we think would be suitable for you. You can withdraw your consent at any time by contacting us. |
2.13 When using IT systems that we provide
We process your personal data when you use our Partner Portal or create a user in our Collection Shop or similar systems that are provided to you by us or to the person that you are representing.
|
Why do we use your data? We use your data to ensure correct authorisation and access with your login and use, etc. |
|
|
Categories of personal data
|
|
|
Type of processing |
Legal basis |
|
It is in our legitimate interest to ensure that the right people are logging in to our systems and that we exchange information with the right party/individual. |
3. Who has access to your personal data?
We will never sell personal data to third parties. However, in some cases we will transfer your personal data to other companies within the Väderstad Group or to third parties - see additional information about different categories of recipient under the headings below. The transfers are necessary in such cases in order to enable the operation of both our business and that of the Väderstad Group. When transferring your personal data, we have ensured that the responsibility for this is regulated by agreements and other appropriate safeguards.
If you would like to receive more detailed information about who will receive your information, you are always welcome to contact us.
3.1 Transfer within the Väderstad Group
Personal data may be shared within the Väderstad Group for the purposes set out in this Privacy Policy. If the companies within the Väderstad Group do not notify you otherwise, their processing of your data will be in accordance with this Privacy Policy.
3.2 Transfer to authorised distributors or other partners
We may receive or send or some of your personal data to the authorised Väderstad distributors in the country in which you are active for the purposes set out in paragraph 2 above. For example, if you initiate a warranty case with us, we may send your information to your nearest distributor for the purpose of handling your warranty case.
3.3 Transfer in special cases
We may send some your personal data to third parties in association with sales or another transfer by part of the Väderstad Group business activities.
3.4 Transfer to third countries outside the EU/EEA
As a general rule, us and our suppliers and partners will only handle your data within the European Union (EU) and the European Economic Area (EEA). In cases in which data is handled outside the EU/EEA (in what is referred to as a “third country” ), there will be a decision by the European Commission that either the third country has adequate protection for your personal data (an adequate level of protection) or that there are other appropriate safeguards for your data that ensure that your rights are protected. If you would like to receive a copy of the safeguards that we use or information about where they are available, you are welcome to contact us.
3.5 Authorities
If we have a legal obligation to do so, we will disclose your personal data to authorities upon request from the Authority or you or on our own initiative.
3.6 Security companies, debt collection companies, other legal assistants, courts
We may disclose your information to security companies, debt collection companies, legal representatives or courts if it is necessary to protect our rights, e.g. to investigate potential crime or to detect, prevent or disclose fraud or other security issues or for example, in order to demand payment.
3.7 IT suppliers and partners that perform assignments for us
We may disclose your information to our product and service providers, such as wireless service providers, systems providers, payment service providers, companies that manage and operate our website, send messages or carry out data analytics to the extent necessary for us to conduct our business or fulfil our obligations to you in accordance with the purposes referred to above.
3.8 Financial service providers
We may disclose your information to system suppliers, advisors, banks, our other financial partners and other financial parties in order to process, store or manage payments and/or other financial information to enable us to conduct our business or fulfil our obligations to you.
4. Use of automated individual decision-making, etc.
Automated decision-making is present to some extent in the software and applications in our machines. This means that the machine or application that you use may make automatic decisions based on what you share with it or for example, how you use your machine. However, the decision-making only occurs for the purpose of enabling your use of our machines and not to conduct an assessment of you as a user of the machines (so-called profiling). The fact that certain data (e.g. location data) directly or indirectly constitute personal data is therefore not the primary aspect of the decision-making process but the processing of the personal data takes place only as part of the analysis and conclusions presented to you as a user.
5. Duration of data processing and storage
5.1 Data for the fulfilment of agreements
Personal data that we process for the purpose of negotiating, evaluating, entering into and fulfilling agreements with you, your employer or the company that you represent, is processed for as long as necessary for us to administer and fulfil the contractual relationship and in certain cases also thereafter, for as long as necessary, for example during the period in which you or the party for whom you are the contact person and us, have or can bring legal claims against each other.
5.2 Data when you have purchased one of our products
Personal data that we process when you have purchased one of our products directly from us, another company in the Väderstad Group or from one of our distributors or partners, is processed for as long as necessary with regard to our administration and delivery of your product and following completion of the purchase, for as long as necessary with regard to the warranties provided and our responsibility for the products that we have sold (for example, in order to be able to inform and enable necessary updates to the software in your machine).
5.3 Data for legal claims
When we process personal data in order to exercise rights and fulfil our obligations in relation to you or the company for which you are the contact person, we process your data during warranty or liability periods (e.g. when selling machines, spare parts, accessories or the distribution of apps) and thereafter during the period in which you or the party for whom you are the contact person and us, have or can bring legal claims against each other. If you have participated in a recruitment process, we will store your personal data during the period where you may direct legal claims towards us with regard to the recruitment.
5.4 Data in order to send marketing material to you
The personal data that we process for the purpose of communicating business or product news and updates etc. will be processed for as long as you or the company that you are representing has a business relationship with us and for a certain time thereafter or (if our processing if based on your consent), as long as you have expressly consented to it or until you have withdrawn your consent.
Irrespective of whether you have given your express consent or not, you will always have the option of unsubscribing form such mailings at any time by emailing Väderstad at gdpr@vaderstad.com or by using the communications channel specified in the mailing. If you unsubscribe, the processing of your personal data for this purpose will cease.
5.5 Data in order to send information to you about your Väderstad machine
Personal data that we process in order to inform you about your Väderstad machine will be processed until you chose to unregister from our mailings by sending an e-mail to us at gdpr@vaderstad.com, alternatively, using the communication channel that has been specified in the mailings. However, we will not store your personal data longer than to the expected usage time for your machine.
5.6 For analysis and business development
Personal data that we process in order to analyse our customer base for the purpose of developing our business and providing our customers with updated, relevant and improved offers is retained for as long as you or the company that you are representing have a business relationship with us and for a certain period thereafter or (if our processing is based on your consent) until you withdraw your consent.
5.7 Other
Väderstad may save your personal data for a longer period of time in order to comply with legal requirements or if Väderstad has the right to do so for the purposes referred to above. For example, personal data is saved in accounting documentation for at least seven (7) years after the calendar year in which the financial year ended.
6. Your rights
The GDPR involves a strengthening of the personal privacy and rights of the individual compared to earlier legislation. You have certain rights that you can exercise against us with regard to the processing of your personal data. You are welcome to contact us if you would like to exercise those rights. A brief description of your rights is provided below.
6.1 The right to withdraw your consent
If your processing is based on your consent, you may revoke the consent provided in full or in part at any time with immediate effect from the revocation. However, the revocation will not have any effect on the processing that took place before the revocation of consent was notified.
6.2 The right to object to processing
You have the right to object at any time to the processing of your personal data that is based on a balance of interests. If we cannot show that we have legitimate reasons for the processing that outweigh your interest in not having the personal data processed, your personal data will no longer be processed for this purpose.
6.3 The right to limitation of processing
Under certain conditions, you have the right to require that the processing of your personal data be limited. The right also exists if you have objected to the processing and we have not yet carried out verification of whether our legitimate interest outweighs your interest in not having the personal data processed.
6.4 The right to access
You have the right to know if we are processing your personal data and you have the right to access a copy of the personal data that we process. In the event of such a request, we must ensure your identity.
6.5 The right to rectification
You have the right to have inaccurate information corrected and to ask us to complete incomplete data. If you have a user account in the Väderstad Partner Portal, you will also be able to correct and update your details there.
6.6 The right of erasure
Under certain conditions, you have the right to request us to erase your personal data.
6.7 The right to data portability
Under certain conditions, you have the right to require that your personal data is transferred in a structured, widely used and machine-readable format to another Data Controller. This right is limited to the data that you have provided to us.
6.8 The right to file a complaint
You have the right to file a complaint with a supervisory authority. It is beneficial for you to file such a complaint with the authority of the EU/EEA country in which you live or work. The supervisory authority in Sweden is the Swedish Authority for Privacy Protection (www.imy.se).
7. Contact details
To get in touch with us regarding our processing of your personal data or to invoke your rights, please contact the Väderstad Data Protection Coordinator by email:
gdpr@vaderstad.com or by post:
Väderstad AB
Box 85
590 21 Väderstad
Mark the envelope with “Data Protection Coordinator”.
8. Changes to our Privacy Policy
This Privacy Policy may be updated without notice at any time and the most recent edition is always available and published on our website and numbered a.
If we make material changes to the text, e.g. regarding changes to the purposes of processing your personal data, we will notify you before the change takes effect by publishing a new version on our website. If applicable, the change will also be sent by email, will be made available at our premises and will be published on the Väderstad Partner Portal.