Privacy policy
Valid from March 2024 until further notice
This privacy policy is developed for suppliers, existing and potential customers of the Roomate brand, owned by Viscoast AB, 559355-7423, hereinafter referred to as the Company, us or we, due to the GDPR / Data Protection Regulation (EU) 2016/679 which entered into force on May 25, 2018. The Company is obliged to inform you about how personal data is processed and the purpose of the processing. In the document you will find all the information that we have been required to disclose to you.
Data controller
VisCoast AB
Org nr 559355-7423
Registered office: Varberg
www.roomatepicture.com
hej@roomatepicture.com
You always have the opportunity to contact the Company regarding the processing of your personal data or generally about this
privacy policy if information is missing here or if something is incorrect.
What is personal data?
Personal data means any information that can be directly or indirectly attributed to a living person. This can be one
or more factors relating to someone's physical, physiological, mental, economic, cultural or social identity.
What data we process and why
In connection with an order, we collect, process and store information about your name, e-mail address, telephone number
and information about your company. If a company is registered at a private address, we need to include it on invoices. We
handle the aforementioned personal data because it is necessary to fulfill an agreement to which you are a party.
The data is stored for 3 years after the completion of the last delivery to you, this with legal basis legitimate interest
to be able to feedback / follow up contact and to prevent fraud. Personal data is stored in our customer register,
e-mail system and in order documentation containing information about your order. According to the current law for archiving
of accounting, invoices are saved for 7 years and with these also existing personal data.
In connection with an offer/webinar/digital meeting/newsletter, we collect, process and store information about your name,
e-mail address, telephone number and information about your company. We handle the aforementioned personal data for
direct marketing purposes and are saved for 3 years after the first contact, in our customer register and e-mail system, with
legal basis legitimate interest to be able to provide feedback/follow up.
In cases where you have a sole proprietorship, we only process the full social security number in those places where it is necessary for
to comply with laws on accounting and invoicing and during the agreed time we save your finished product. At other
locations, the social security number is replaced with the company name or trademark.
Publication of image, sound, name, email and link on the company's digital channels takes place with your consent.
Cookies
When you visit our website, you will be given the opportunity to accept or reject cookies that are not necessary
according to the current policy. Necessary cookies do not collect any personal data. Read more about cookies here.
What data we do not process
We do not process sensitive personal data such as ethnic origin, political opinions, religious or philosophical beliefs,
trade union membership, health status, sexual orientation, genetic and/or biometric data. We do not process
the data of minors either. If the Company is involuntarily provided with such information, it will be deleted and the sender
will be notified as soon as possible.
External services/third parties
In cases where we use external services, so-called third party services, we refer to the respective privacy policy for more
information. External services based outside the EU are approved under the EU-U.S. Data Privacy Framework.
Your rights
You have the right to erasure of your data - in whole or in part
You have the right to request that your personal data that we process be erased. In such cases, we do this without unnecessary
delay, but no later than one month, with the exception of such data that is necessary to fulfill agreements or other
legal relationships, such as accounting law. We will also, without you actively requesting it, delete your
personal data on our own initiative when there is no longer a legal basis for continued processing.
You have the right to withdraw consent
You have the right to withdraw the consent you have given. In such cases, we will delete the data whose processing is based on
your consent. Your withdrawal of consent does not oblige us to delete data whose lawful
processing is based on a contract or other legal relationship.
You have the right of access
You have the right to obtain from us confirmation as to what personal data we are processing concerning you and the following information
- the purposes of the processing
- the categories of personal data to which the processing relates
- the recipients or categories of recipients to whom the personal data are or will be disclosed
- the period for which the personal data will be stored or how this period is determined
- if personal data are collected from a source other than you: where such information comes from and what data
are concerned
- the existence of automated decision-making and profiling
You have the right to rectification
As a data subject, you have the right to obtain from us, without undue delay, but at the latest within one month, the rectification of inaccurate personal data
concerning you. You also have the right to request completion of incomplete personal data, taking into account
the purpose of our processing of personal data.
You have the right to restriction
You have the right to request erasure or the right to request that we restrict our processing of your personal data. You can do this by contacting
:
- you contest the accuracy of the personal data to allow us to verify the accuracy of the personal data
- the processing is unlawful but you do not want the personal data to be erased
- we no longer need the personal data for the purposes of the processing but you need it to establish,
exercise or defend legal claims or
- you object to processing involving profiling or automated decision-making, whereby restriction is made by
us pending verification of whether our legitimate grounds for processing outweigh your legitimate grounds.
Data portability
As a data subject, you have the right to obtain personal data concerning you that you have provided to us. You have the right to
access such personal data in a structured, commonly used and machine-readable format and you have the right to
transfer it to another controller, provided that our processing of the personal data is based on
consent or if the processing is automated, if we deem it technically feasible.
You have the right to object to processing
You have the right to object to our processing of your personal data relating to automated decision-making,
such as profiling and direct marketing, should such processing be carried out.
Right to lodge a complaint with a supervisory authority/Supervisory authority contact details
You have the right to lodge a complaint with your national supervisory authority about our processing of your personal data.
Regardless of whether we operate in the same country as you, you have the right to lodge a complaint with your national
supervisory authority. The link below provides you with the contact details of the Swedish supervisory authority IMY as well as a
list of contact details of European supervisory authorities:
https://www.imy.se/om-oss/kontakta-oss/
https://ec.europa.eu/newsroom/article29/items/612080
Subject to typographical errors