What personal data will be processed and why?
- We collect and process your name, address, telephone number, job position or title, email address, city and country that you submit in order to obtain information, e.g. press releases, interim reports and annual reports, by post;
- We collect and process your email address and user account details, including username and password that you submit in order to create a user account on this website;
- We collect and process your telephone number and your email address when you request to receive information, e.g. press releases, interim reports and annual reports by SMS and email and when you subscribe to our subscription service; and
- In addition to the abovementioned use and purposes, we may also use your IP address and cookies to administrate and improve this website, for our internal records and for statistical analysis.
We only collect the personal data directly from you.
What is the legal basis for processing of your personal data?
HEXPOL processes personal data in accordance with applicable personal data protection legislation.
The processing of your personal data for the purposes in 1 – 3 above is based on our legitimate interest to provide you with the requested information about our business. Furthermore, the processing in 4 above is based on our legitimate interest of improving our website and the services available there which also is beneficial for you as a user. We have conducted a balance of interest test and consider that our interest of processing the personal data for the aforementioned purposes overweighs your interest of not having your personal data processed for these purposes.
If the processing of personal data requires your prior consent, we will collect such consent before carrying out the process in question.
Who has access to your personal data?
We have implemented appropriate technical and organisational measures to protect your personal data against loss, unlawful access, etc. The number of persons with access to your personal data is limited and only individuals associated with HEXPOL AB that need to process your personal data will have access to your personal data.
Your personal data will also be shared with service providers that carry out services on our behalf such as our IT service provider for digital communication.
Furthermore, personal data may be disclosed to a third party if HEXPOL is required to do so according to applicable laws and regulations or in order to detect and prevent fraud or other security problems.
Your personal data may be transferred to countries outside of EU/EEA which may have a lower level of protection than within the EU/EEA. When transferring personal data to countries outside the EU/EEA, we use standard contractual clauses approved by the European Commission to ensure a sufficient level of protection for your personal data. The standard contractual clauses can be found via the following link: Standard Contractual Clauses (SCC).
For how long is your personal data stored?
We store the personal data as long as it is necessary to fulfil the purpose for which the personal data has been collected. This means that we delete your personal data when such data is no longer necessary in order to process a request and to administrate your account. We will stop sending you information if you have requested to unsubscribe to our subscription service. Inactive accounts will be deleted. Statistics which have been anonymised may be saved thereafter.
What are your rights?
HEXPOL AB, reg. no. 556108-9631, address Skeppsbron 3, 211 20 Malmö, Sweden, is the controller of the processing of your personal data. This means that we are responsible for your personal data being processed correctly and in accordance with applicable laws.
You are entitled to know what personal data we are processing regarding you and you can request a copy of such data. You are entitled to have incorrect personal data regarding you corrected, and in some cases you may request that we delete your personal data. If you have given your consent to processing of your personal data for an explicit purpose you may always withdraw your consent. If you want to withdraw your consent, you may contact us through the contact information provided above. You also have the right to object to certain processing of your personal data, and request that the processing of your personal data is limited. Under some circumstances you are also entitled to extract your personal data in a machine-readable format and to transfer the personal data to another controller.
If you have questions regarding how we process personal data concerning you or wish to exercise your rights, you are most welcome to contact us at firstname.lastname@example.org, by mail to the address above or by phone +46 40 25 46 60.
If you have any objections to or complaints about the way we process your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority.
Updates to the policy
This policy was last updated in June 2018. If any changes are made concerning the processing of your personal data, we will publish an updated version of this privacy notice on our website.