1.2 Sagaform AB, 556402-4064 (the “Company”, “we” or “us”) is the controller of personal data.
2. COLLECTION OF PERSONAL DATA
2.1 When you place an order on the Website, we collect and store the following information that you provide: company name, customer number, name of the person placing the order/reference/contact person, address, email address and phone number.
2.2 If you contact our customer service in relation to your order, we may – in addition to what is set out above – store such information you provide to our customer service.
2.3 Please note that information that may identify you as an individual is considered personal data, even if you place the order on behalf of a company.
3. OUR USE OF YOUR PERSONAL DATA
3.1 We use the personal data we collect for the following purposes:
a) To accept and process your order.
b) To, when needed, contact you in relation to your order.
c) To deliver and invoice the goods you have ordered (including to notify you of delivery).
d) To manage complaints and warranty related matters, legal matters and questions to our customer service.
e) Provided that you have not opted out, to send you information regarding us, our products and our services.
3.2 The Company does not collect or purchase customer data from a third party. Neither do we disclose your personal data to a third party, except and insofar it is necessary to fulfill the purposes set out in section 3.1, to manage our IT systems or if it follows from law or a decision by a public authority.
3.3 Partners who process personal data on our behalf will always enter into a data processing agreement with us, to ensure that our partners maintain a high level of security for your personal data.
4. LEGAL GROUND FOR PROCESSING OF PERSONAL DATA ETC.
4.1 Personal data may only be processed if there is legal ground, and the Company will always process your personal data in accordance with applicable law.
4.2 The Company will process personal data since it is necessary for us to fulfill the purchase agreement with the customer. Marketing to customer is based on our legitimate interest to provide relevant information and offers to our customers. In case we need to process personal data for legal matters (e.g. in relation to product liability), it is a legitimate interest for the company to protect our legal interests.
5. HOW LONG DO WE KEEP DATA?
5.1 We will only keep your personal information for as long it is necessary according to the purposes set out in section 3.1, or is mandated by law.
6. HOW WE PROTECT YOUR PERSONAL DATA
6.1 The Company has taken necessary and appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, loss or use of personal data. For example, our systems have restricted access and the data is protected behind firewalls and through encryption.
7.1 Please note that the Website may contain links to other websites which are outside the control of the Company. These links may be provided to help you find information we believe are of interest to you as a customer. The Company is not responsible for the protection of your integrity or the contents on such websites, and we ask you to observe that such websites have their own terms and conditions and to review how they process your personal data.
8. YOUR RIGHTS
8.1 You have the right to, in accordance with applicable data protection legislation, at any time request access to the personal data concerning you that we process. Further, you have the right to obtain rectification of inaccurate personal data concerning you, to obtain erasure or restriction of processing of personal data concerning you, to exercise your right to data portability and to object the processing of personal data concerning you.
8.2 In case you would like to exercise any of your rights, please contact us:
firstname.lastname@example.org (write “Data Protection” in the subject line)
8.3 You are further entitled to, at any time, lodge a complaint with the competent supervisory authority if you consider that your personal data has been processed in violation of applicable data protection legislation: