Privacy policy

 

ITAB Group (“ITAB” “we”, “our” and “us”) care about and value your privacy. In this privacy policy we therefore wish to provide you with information on how we process your personal data as well as what rights you have in relation to our processing of your personal data when you interact with us in different situations. Please be aware that a separate Privacy Policy applies to recruitment. The Privacy Policy applicable to recruitment is available on https://career.itab.com/data_privacy.   

This privacy policy applies to you who:

  • represent a company that is a customer or potential customer (prospect) to us; 
  • represent a company that is a supplier or partner to us;
  • is a shareholder or represents a shareholder;
  • visits ITAB´s website; or
  • contacts us, communicates with us or subscribes to information from us.

In summary, we process your personal data in order to:

  • communicate with you;
  • administer, negotiate and execute agreements with the company you represent;
  • help you with customer service and support matters;
  • send newsletters, marketing and information to you;
  • arrange events;
  • handle any claims and fulfill legal obligations such as complying with the accounting act; and
  • comply with our legal obligations.

Below you can read more about how and why we process your personal data.

 

Who is responsible for the processing of your personal data?

ITAB Shop Concept AB (publ.) with company registration number 556292–1089 is responsible for the processing of your personal data as described in this privacy policy (controller). If you are in contact with any other company within the ITAB group of companies, the company that you are in contact with will be the controller of the processing of your personal data. For information about all companies within the ITAB group and their contact details, please visit https://itab.com/en/contact-us/.

If you have any questions regarding our processing of your personal data, or if you want to exercise any of your rights, please contact us at gdpr@itab.com. Our postal address is Instrumentvägen 2, 553 02 Jönköping, Sweden.

 

Who can gain access to your personal data and why?

Your personal data is primarily processed by us at ITAB and within the ITAB group. We will share your personal data with our IT-suppliers who will process the personal data on our behalf as processors.

We may transfer your personal data outside of EU/EEA to companies within the ITAB group and to our IT suppliers that are processing the personal data on behalf of us as processors. When we transfer your data outside of the EU/EEA, this will only be done if we have support for the transfer under applicable data protection legislation. This means that the transfer is based on either an adequacy decision by the Commission or standard contractual clauses.

If you have any questions about how we share your personal data, e.g. about what legal basis we have, which suppliers we share your personal data with or if you would like a copy of the appropriate safeguards we have taken, you are welcome to contact us at the contact details we have provided above.

 

Detailed information about how we process your personal data

We collect your personal data directly from you, for example when you contact us. We may also collect your personal data directly from the company you represent, if they state you as their representative. If you use our website, we will also use Google services to collect information on your browsing of our website to analyse your use of our website.

In the tables below you can read more about why we process your personal data, which categories of personal data we process and our legal basis for the processing. You can also read about how long we process your personal data for each purpose.

 

If you represent a prospect, customer or other partner

 

If you represent a supplier or other partner

 

If you are a shareholder or shareholder representative

If you visit our website

If you interact with us on our social media accounts 

Balancing of interests assessments when processing personal data based on the legal basis “legitimate interests”

As we have stated above, for some purposes we process your personal data relying on our legitimate interest as legal basis for the processing. When assessing the legal basis, we rely on a balance of interests test, through which we have determined that our legitimate interest for the processing outweighs your interest and your fundamental right not to have your personal data processed. We have stated what our legitimate interest are in the tables above.

You are welcome to contact us if you want to read more about how we have done this test. Our contact details are as stated in the beginning of this privacy policy.

 

What rights do you have in relation to our processing of your personal data?

According to the applicable data protection legislation, you are entitled to a variety of rights to affect our processing of your personal data.

If you would like to know more about your rights or if you wish to exercise any of your rights, please contact us at the contact details provided at the beginning of this privacy policy.

 

Right to object to processing

You have the right to object to our processing of your personal data. You have always right to object to marketing from us, such as newsletters.

The right to object is applicable when the processing is based on the legal basis “legitimate interest”. Read more about what this means in the tables above. In some cases, however, the right to object does not exist (e.g. when we must store your personal data). If we can show compelling legitimate reasons for the processing that outweigh your interests and fundamental rights or if it is for the purpose of determining, practicing or defending legal claims you do not have a right to object to the processing.

 

Right to access

You have the right to obtain confirmation as to whether or not we are processing personal data concerning you. If we process your personal data you have the right to obtain a copy of the personal data processed by us and information on how we process them.

 

Right to rectification

You have a right to obtain rectification of any inaccurate personal data concerning you and to ask us to have incomplete personal data completed.

 

Right to erasure (“right to be forgotten”) and restriction of processing

You have the right to have your personal data erased in certain instances. This is the case e.g. when the personal data is no longer necessary for the purposes for which it was collected or otherwise processed and where we process your personal data on the basis of our legitimate interest and we find that we do not have an overriding interest in continuing to process it.

You also have a right to request that we restrict our processing of your personal data. For example, when you question the accuracy of the personal data, when you have objected to our processing of your personal data based upon our legitimate interest, or where the processing is unlawful, and you oppose to the erasure of your personal data and instead want us to restrict our processing.

 

Right to lodge a complaint to a supervisory authority

You always have the right to lodge a complaint with a supervisory authority.

You may do this in the EU/EEA member state where you live, work or of where an alleged infringement of the applicable data protection laws has occurred. The supervisory authority in Sweden is Swedish Authority for Privacy Protection. This right is without prejudice to any other administrative or judicial remedy.

 

This privacy policy was updated by ITAB in January 2021.