Last updated: February 15, 2022

Generally

Privacy and data protection are important to us at Nordicdoc Solutions AB, (‘ NDS’, we and us’), registration number 556520-1166, Mallslingan 12 187 66 Täby. This Privacy Policy explains how we collect, use, disclose and store your personal data so that you can feel safe when you provide us with your personal data. We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”) and applicable national law.

This Privacy Policy applies to anyone who in any way uses NDS services or products and/or otherwise has contact with us. In this policy, NDS describes its personal data processing and what rights you have under applicable personal data legislation. You are always welcome to contact us if you have any questions and concerns regarding this policy or data protection.

Personal Data controller

NDS is the data controller for the processing of your personal data unless otherwise stated. As a data controller, it is NDS’ responsibility to ensure that your data is handled in a correct and secure manner in accordance with applicable legislation

The processing of personal data may be carried out by us or by one of our partners. Our partners are either our data processors or independent data controllers. NDS has a common IT infrastructure with certain companies that in these cases are personal data processors. When our data processors process your personal data, their processing takes place in accordance with the purposes and means specified in this policy.

Description of what personal data we process about you.

We process your personal data when you visit our website, make purchases, use our services, contact us or when we market and market our products and related services. Information you provide to us yourself: We process the personal data that you provide to us. Data from other sources: We process the following personal data that we have collected from other than yourself. We collect such data from the social network “LinkedIn”.

  • Employment details: position

Our personal data processing concerns, among other things:

  • Contact details such as name, title and attestation, e-mail address, delivery address, invoice address and telephone number of contact persons.
  • Account information such as customer number, username, password and when the account was registered.
  • Customer settings for marketing communications and personal offers.
  • The company’s corporate identity number.
  • Correspondence and other information about sales and support matters such as, notes and emails when contacting customer service.
  • User-generated data about your interaction with NDS marketing communications and websites, such as IP address, device information (technical information about your computer, mobile phone and other devices that you use e.g. browser settings, time zone, operating system), location information, responses to surveys, click and visit history that, among other things, show which of our goods or offers you have been interested in, how you interact with our newsletters and which of our events you signed up for and participants and any results from customer satisfaction or market research.
  • We may collect your personal data directly from you when you place an order, visit the NDS website, attend our events, click on links in digital marketing communications that we have sent to you, are in contact with our customer service or when you ot otherwise have contact with NDS and provide information. Information about you is collected on these occasions in order for you to enter into agreements with us and to enable us to provide our products and services to you in an efficient and good way.

The reason for personal data processing

NDS collects and handles data about you for various purposes. Below we explain the purposes of our processing and give examples of the processing activities that take place during each purpose. Please note that some of your personal data may be processed for several purposes.

Manage communication

We process personal data if you want answers to questions from us or otherwise want to get in touch with us.

Orders and purchases

Processing of personal data for this purpose includes activities to identify you, send order confirmation, handle payment for ordered products and goods, deliver orders, notify about delivery, and handle complaints and warranty matters regarding purchased products and services.
The collection of data that we do in order to handle your orders and purchases is required for us to fulfill our obligations in our deliveries. If the information is not provided by you, our obligations cannot be fulfilled, and we may deny you the order or purchase.

Marketing of products events and services

We process personal data for this purpose in order to inform you by email about and promote the products, services and offers we sell, show recommendations, and invite you to events, competitions and market and customer satisfaction surveys.

Manage cases in NDS Support and Sales Features

Processing of personal data for this purpose includes NDS activities to for example communicate, ensure the customer’s identity, investigate complaints and support matters, answer questions received by customer service, sales support or other support functions via email, telephone or digital channels, correct incorrect information, provide technical support and nurture the customer relationship.

Legal grounds

According to GDPR, a legal ground is required for all personal data processing. Below is the legal ground for each processing. We process your personal data on the following grounds:

  • As the processing of personal data is necessary for us to be able to perform and fulfill a contract that we have with you or your employer, and to take preparation for such contract. Such as the provision, administration and invoicing of goods and services.
  • Where the processing of personal data is necessary to comply with a legal obligation. Such as that invoice documentation is saved in accordance with applicable accounting rules.
  • As we have a legitimate interest in processing your personal data, where the legitimate interest is our interest in marketing. Such as sending newsletters to customers and partners in NDS’ area of activity.
  • Once you have given consent to the processing, such as when the processing takes place for a specific purpose that we have agreed upon and no other legal grounds for the processing exists. Such as sending newsletters to end customers (End User marketing)

The retention period of personal data.

NDS will save your data for the time it is necessary to fulfill the purposes for which the data is processed. The length of the retention period therefore depends on the purpose for which the data is processed. In addition, NDS may keep the data for longer if necessary to establish, defend or assert legal claims. We carry out annual revisions to delete personal data that is no longer necessary.

In order for us to be able to perform our contract with you, personal data is stored throughout the contract period.

According to the Swedish Accounting Act (1999:1078), we are obliged to save certain personal data for at least seven (7) years.

Personal data collected for marketing purposes will be deleted no later than one (1) year after collection.

Who do we share your personal data with?

NDS may disclose your information to other companies for you to be able to access our offers, products and services. The recipients of your personal data can either be data processors of NDS, i.e. companies that process your data on our behalf and according to our instructions, or independent data controllers, i.e. companies that are independently responsible for the processing of your data.

NDS may also disclose your information to authorities if it is necessary to comply with law, regulation or government decision or for NDS to establish, defend or assert legal claims. Depending on the contacts you have had with NDS, NDS may disclose your personal data to the following recipients:

  • Other companies that act as data processors to NDS in order for us to be able to fulfill the various purposes set out in this policy. The legal grounds for the transfer to these companies are the same as for our own processing.
  • Companies that provide information from public records to ensure that we have the right contact information for you so we can handle your orders and purchases as well as services related to you. The information disclosed is contact information based on our contractual obligations to you.
  • Government authorities, such as the Police Authority or the Swedish Tax Agency, to which we are obliged to disclose your personal data by law or government decision or to which we disclose personal data due to suspicion of a crime or attempted crime. The categories of information disclosed are contact details, company company number, account information, order information, payment details and user-generated data based on legal obligation incumbent on NDS or for us to establish, defend or enforce legal claims.

In addition, if you place an order or make purchases from NDS, we may disclose your p ersonal data to the following recipients in the context of processing your orders and purchases based on our contractual obligations to you as a legal ground:

  • Suppliers, manufacturers, distributors and subcontractors of products and services sold by NDS th at, among other things, provide the products and services and help us with support services such as maintenance, repair and disposal of returned products. The information provided is contact information and order information.
  • Logistics companies and freigh t forwarders who help us with goods transport so we can deliver our products and services to you. We provide contact information and order information to these recipients.
  • Insurers that provide insurance for some of our products and services. The informati on that is disclosed when you have chosen to take out an insurance policy is contact information and order information.
  • Companies that provide financial services such as ledgers and debt collection activities that ensure that NDS is paid for delivered prod ucts and services in the context of handling your orders and purchases. The information disclosed is contact details, the company’s payment details. registration numbers , order information and payment details.

NDS will not disclose your personal data unless it is required to fulfill deliveries or the performance of the service , or if we do not have your consent to it.

Where we store your personal data

NDS processes your personal data within the EU/EEA with one exception. NDS shares personal data such as [write what personal data] to Australia. In order to ensure that your personal data is handled in the same way that is comparable to the protection offered within the EU/EEA by the GDPR, the NDS has [write action].

Your rights

NDS is responsible for ensuring that your personal data is processed in accordance with applicable legislation. This section describes your rights related to our processing of your personal data. At your request or on our own initiative, we will correct, de-identify, delete or supplement data that is found to be inaccurate, incomplete or misleading. If you have questions about this or would like to exercise any right, please contact us on the information set out at the end of this policy.

Access to your personal data

We at NDS want to be open about how we process your personal data. If you wish to gain further insight into the processing we do about you, you have the right to request information about the processing including information about the legal ground and the purpose of the processing. Please note that upon request for access, we may ask for additional information about you to ensure that we disclose the information to the right person and what information you would like to receive. The register extract is free of charge once a year, but in case of repeated requests, NDS has the right to charge an administrative fee of SEK 200.

Correction of your personal data

NDS is committed to having accurate and up-to-date personal data. If the information we have about you is incorrect, you have the right to request that they be corrected. You also have the right to supplement any incomplete personal data. At your request, we will correct the incorrect or incomplete information we process about you as soon as possible, no later than within one month.

Deletion of your personal data

We respect that the personal data we process about you is borrowed from you. You therefore have the right to request that NDS delete your personal data when the data has been processed unlawfully, must be deleted in order to fulfil a legal obligation to which NDS is subject, are no longer necessary for the purposes for which it has been processed or when you object to a balance of interests of legitimate interest made by NDS and there is no legitimate interest in NDS or third parties weighing more heavily. However, we cannot always comply with your request as there may be reasons that give us the right to continue processing, for example if the personal data is processed to fulfill a legal obligation as a legal groud (as required by the Accounting Act) or if the data is necessary for NDS to establish, assert or defend legal claims.

Oppose treatment

You have the right to object to processing that we carry out on the legal ground of balancing interests, i.e. where we have indicated that we have a legitimate interest in the processing.

Limit treatment

You may also have the right to request that the processing of your personal data be restricted whenever possible. However, if you request such restriction of processing, we may be unable to meet our obligations to you while the restriction is in progress.

Data portability

If you want to transfer the personal data that you have shared with us with someone else, you also have the right to receive a copy of the personal data relating to you in a structured, machine-readable format.

Right to lodge a complaint

If you think that we handle your personal data incorrectly, you are welcome to contact us. Contact information can be found at the end of this policy. You also have the right to lodge any complaints regarding the processing of your personal data with the Swedish Privacy Protection Authority (see www.imy.se) which is the responsible supervisory authority for the processing of personal data in Sweden.

Protection of your personal data

You should always be able to feel safe when you provide us with your personal data. NDS has therefore taken appropriate technical and organizational security measures to protect your personal data against inappropriate or involuntary disclosure, use, improper access, deletion, alteration or damage to your personal data. For example, we use passwords and permission checks so that only certain employees of NDS, who need access to your data to perform specific tasks, have such access.

Application and amendment of the privacy policy

The latest updated version of the NDS Privacy Policy is always available on our website. Our privacy policy applies at any time in the form and to the content published on the website.

NDS has the right to update the privacy policy at any time. If the privacy policy changes, the updated policy will be published on the NDS website. We will also inform you by e-mail if there are major changes to the privacy policy.

Contact details of the controller

Do not hesitate to contact us if you have questions about this Privacy Policy or if you would like more information about our processing of your personal data or if any information would be incorrect and you would like us to correct it. You can also submit complaints to us according to the contact details below.

Contact regarding GDPR:
Lembit Karlson, lembit.karlson@nordicdoc.se or +46-8 54430410

NordicDoc Solutions AB
Org.nr. 556520-1166
Mall Loop 12
187 66 Täby
Sweden