1. Introduction.
byMM AB, reg. no. 559495–1161, is the data controller for the processing of your personal data that takes place in connection with your visit to our website, as well as in other contexts where we are in contact with you. byMM is therefore responsible for ensuring that all personal data is processed correctly and in accordance with applicable data protection legislation.
This personal data policy describes byMM’s processing of personal data and is intended to ensure that you feel confident that byMM handles your data in accordance with applicable data protection legislation. “Personal data” refers to any kind of information that can be directly or indirectly attributed to a living natural person. Within the scope of byMM’s operations, personal data may include, for example, first and last name, telephone number, address, postal code, email address, etc. If you are missing an answer to any question, please feel free to contact us. Information on how to contact us is available under the heading “contact information” below.
2. Why we process personal data, the legal basis, which personal data we process, and the retention period.
2.1. Customers or customers’ representatives, as well as prospective customers
Purpose: To be able to handle orders/purchases from customers, as well as respond to inquiries from prospective customers/participate in procurements and pitches.
Processing carried out: We handle contact details in order to fulfill an order placed by a customer. Where contact details are used, this includes, for example, that we must be able to maintain ongoing contact with the customer’s contact persons via various contact channels (telephone, email, chat, video conference, or similar). Personal data is also needed to handle quotations, deliveries (including handling shipping documents, delivery notifications and contacts regarding the delivery), identification of customers, payment handling, address verification against credit reference agencies, and handling of complaints and warranty matters.
Categories of personal data: Organization number, contact details (for example address, email and telephone number), payment information, purchase information (e.g., which service has been ordered and production follow-up).
From which sources do we collect personal data: Customer, prospective customer, customers’ representatives, references, credit reference agencies
Legal basis: Performance of a contract. This collection of personal data is required for us to fulfill our obligations under the contract. If the data is not provided, our obligations cannot be fulfilled and we may need to decline the assignment.
Automated decision-making: Our processing of personal data does not involve decisions being made based on automated processing of personal data.
Retention period: The personal data is stored until the delivery has been completed (including payment) and for a period of 36 months thereafter for the purpose of being able to handle any complaints and warranty matters or additional orders. Personal data necessary for handling and fulfilling byMM’s legal obligations under statutory requirements, court judgments or authority decisions (for example the Swedish Bookkeeping Act) is stored on the basis of legal obligations until delivery and payment have been completed and for a period of up to an additional 7 years.
3. Recipients of personal data and transfers outside the EU/EEA
As the data controller, we may engage a partner or supplier to carry out the processing specified above, e.g., IT suppliers, providers of analytics tools, advertisers, etc. Such processing will not take place for any purpose other than those stated. Certain partners and suppliers may have part of their operations in countries outside the EU/EEA (so-called third countries). Transfers take place only to countries that, according to the European Commission, have an adequate level of protection, or where the supplier has a legally binding and enforceable instrument that guarantees the security of the data.
4. Your rights as a data subject
You have the right to: request information about which personal data we process about you and you may request a copy of it (data extract), have incorrect personal data corrected and, in certain cases, ask us to erase your personal data, object to the processing of certain personal data about you and request that the processing of your personal data be restricted, have the personal data you have provided to us transferred to another data controller (right to data portability), where the processing is based on consent, withdraw that consent at any time, and if you are dissatisfied with how we process your personal data, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten), which is the supervisory authority.
You may email the responsible person at any time to obtain, erase, or restrict the processing of your personal data (contact information can be found below). Please note that if you request that we restrict the processing of or erase your personal data, this may mean that we will not be able to provide the service to you.
5. Protection of personal data
We have implemented appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, and destruction. Our employees are bound by confidentiality agreements and are required to follow our rules for information and IT security, this personal data policy, and other internal regulations that further govern the processing of personal data.
6. Changes to this personal data policy
byMM reserves the right to revise this personal data policy when necessary. The date of the most recent change is stated at the end of the personal data policy. If byMM makes any changes to the personal data policy, byMM will publish these changes in the news feed on the website. You are therefore recommended to read this personal data policy regularly to note any changes. If byMM changes the personal data policy in a way that materially differs from what was stated when the employee’s consent was collected, byMM will notify you of these changes and, where necessary, obtain new consent to byMM’s processing of personal data.
7. Contact information
If you have questions about our personal data policy or about our processing, contact: contact@bymm.se .
The personal data policy was adopted on 2024-11-11