Formpress Privacy Policy – Processing of Personal Data
At Formpress, we care about your privacy and always strive for a high level of data protection (for example, we would never sell your personal data to another company). This privacy policy explains how we collect and use your personal information. It also describes your rights and how you can exercise them.
It is important that you read and understand this privacy policy and feel secure in how we handle your personal data. You are always welcome to contact us if you have any questions.
With the help of the table of contents below, you can easily navigate to the sections that are of particular interest to you.
Table of Contents
- What is personal data and what is the processing of personal data?
- Data Controller
- What personal data do we collect about you as a customer and why?
- From what sources do we collect personal data?
- Who may we share your personal data with?
- Where do we process your personal data?
- How long do we retain your personal data?
- What rights do you have as a data subject?
- How do we handle personal identification numbers?
- How are your personal data protected?
- Supervisory authority
- Contact us with questions
1. What is personal data and what is the processing of personal data?
Personal data is any kind of information that can directly or indirectly be attributed to a living physical person. This includes not only names and social security numbers but also, for example, images and email addresses. Personal data may also apply to a sole proprietorship where the company registration number is often the same as the individual’s social security number.
Processing of personal data refers to anything done with personal data within IT systems. This includes, for example, collection, registration, structuring, storage, processing, transmission, and deletion. In some cases, activities outside IT systems, such as keeping registers, may also be considered processing.
2. Data Controller
Formpress AB (556537-0995) is the data controller for the company’s processing of personal data.
3. What personal data do we collect about you as a customer and why?
We primarily process your name, address, email address, and phone number. We process your personal data to provide the services and products you have requested (such as a newsletter or when ordering our products). We will also process your personal data to manage and maintain our relationship with you or, if applicable, to manage the agreement with you or your employer. Additionally, we will use your personal data to inform you about products and services we offer that may be of interest to you.
Formpress always processes your personal data in accordance with applicable legislation. We process your personal data when necessary to fulfill an agreement with you or respond to your service request, or when we have another legitimate and justified interest in processing your personal data, such as marketing our services.
If Formpress processes your personal data for a purpose that requires your consent, we will obtain your consent in advance. Some personal data may be mandatory to provide, for example, to deliver a service or fulfill another request from you. This will be indicated or apparent when the data is collected.
4. From what sources do we collect personal data?
We collect your personal data when you provide it, for example, when signing up for a newsletter, ordering services or products from us, or contacting us. Information about you may also be collected when the company you work for orders services or products from us.
Sometimes we collect data from third parties, primarily to obtain information about creditworthiness.
5. Who may we share your personal data with?
Data processors
In some situations, it is necessary for us to engage other parties to perform our work. This includes, for example, using various IT providers. They are considered data processors for us. Formpress is responsible for signing agreements with all data processors and providing instructions on how they are allowed to process personal data. When data processors are engaged, it is only for purposes that align with the purposes we have for the processing.
Entities that are independently responsible for personal data
We also share your personal data with certain other entities that are independently responsible for personal data. This means that we do not control how the information provided to that organization will be processed. This can involve authorities, such as the Swedish Tax Agency. Some data is also shared for statistical purposes.
When your personal data is shared with an entity that is independently responsible for personal data, the privacy policy and personal data handling of that organization apply.
Formpress may also disclose personal data to third parties, such as the police or other authorities, in cases involving criminal investigations or when we are legally obliged to disclose such information by law or governmental decision.
6. Where do we process your personal data?
We always process your personal data within the EU/EEA, and all of our IT systems are located within the EU/EEA.
7. How long do we retain your personal data?
We never retain your personal data longer than necessary for each specific purpose. We have established data cleansing procedures to ensure that personal data is not retained longer than required for the specific purpose. The retention time varies depending on the reason for processing. Some data, for example, must be stored for at least seven years due to legal accounting requirements.
8. What rights do you have as a data subject?
As a data subject, you have several rights under current legislation. For information on how to exercise your rights, see the section “Manage Your Rights” below. Here we list the data subject’s rights:
Right of access (commonly called a data subject access request)
If you want to know what personal data we process about you, you can request access to the data. When you submit such a request, we may ask some questions to ensure that we handle your request efficiently. We will also take steps to ensure that the information is requested by and provided to the correct person.
Right to rectification
You can request that your personal data be corrected if it is incorrect. Within the specified purpose, you also have the right to supplement any incomplete personal data.
Right to erasure
You can request the deletion of personal data we process about you, for example, if:
- The data is no longer necessary for the purposes for which it was collected or processed.
- You object to a legitimate interest assessment we have made, and your reason for objecting outweighs our legitimate interest.
- The personal data is being processed unlawfully.
- Personal data was collected about a child (under 13) for whom you have parental responsibility.
We may have the right to deny your request if there are legal obligations that prevent us from immediately deleting certain personal data. The processing may also be necessary for us to establish, exercise, or defend legal claims.
If we are unable to comply with a deletion request, we will instead block the data from being used for purposes other than the one that prevents the requested deletion.
Right to restriction
You have the right to request that the processing of your personal data be restricted. If you believe that the personal data we process about you is incorrect, you can request restricted processing while we verify whether the personal data is correct.
If and when we no longer need the personal data for the defined purposes, our routine is normally to delete the data. If you need the data to establish, exercise, or defend legal claims, you can request restricted processing of the data. This means that you can request that we do not cleanse or delete your data.
If you have objected to a legitimate interest assessment that we have invoked as the legal basis for a purpose, you can request restricted processing while we assess whether our legitimate interests outweigh your interests in having the data deleted.
If processing is restricted in any of the above situations, we may only, beyond storage, process the data to establish, exercise, or defend legal claims, to protect someone else’s rights, or if you have given your consent.
Right to object to certain types of processing
You always have the right to object to any processing of personal data based on a legitimate interest assessment. You also have the right to opt-out of direct marketing at any time.
Right to data portability
As a data subject, you have the right to data portability if our legal right to process your personal data is based on your consent or the performance of a contract with you. A condition for data portability is that the transfer is technically possible and can be automated.
Manage Your Rights
Requests for data subject access or to exercise any other rights must be made in writing and signed by the individual to whom the request pertains. We will respond to your request without undue delay and no later than within 30 days. Send your request to: Formpress AB, GDPR Group, Kraftvägen 10, 386 32 Färjestaden, Sweden.
9. How do we handle personal identification numbers?
We avoid processing personal identification numbers as much as possible. However, in some cases, it is necessary to ensure secure identification. In cases where personal identification numbers are treated as company registration numbers for sole proprietorships, this processing is required as long as the company is our customer.
10. How are your personal data protected?
We actively work to ensure that personal data is handled securely, using both technical and organizational measures.
11. Supervisory Authority
The Swedish Data Protection Authority (which will soon change its name to the Swedish Authority for Privacy Protection) is the authority responsible for overseeing the application of data protection legislation. If you believe we are acting incorrectly, you can contact the Swedish Data Protection Authority.
12. Contact us with questions
If you have any questions about how we process personal data or have a request in accordance with the above rights, you are always welcome to contact us at: info@formpress.com.
We may make changes to our privacy policy.
The privacy policy was last updated on 2018-05-24.