Processing of Personal Data within Wermlands Skogsförråd AB (“WSFAB”)
Your privacy is important to us. We are therefore keen that the personal data collected about you is stored and handled in a safe and secure manner, and in accordance with data protection legislation. The General Data Protection Regulation (GDPR) applies throughout the EU and aims to create a uniform and equivalent level of protection for personal data so that the free flow of data within Europe is not hindered.
Much of the GDPR is similar to the rules that existed in the Personal Data Act.
This information text explains how WSFAB handles your personal data and what rights you have. The information is intended for you who:
- Are a customer or supplier with us – and who buys and/or sells goods and/or services to us.
- Visit our website or our social media platforms.
- articipate in our marketing activities or customer surveys.
- Communicate with us in other ways, such as via our office.
We encourage you to read this information text carefully. If you have any questions about how your personal data is handled, you are welcome to contact us. Our contact details can be found further down in this information text.
Who Is Responsible for Your Personal Data?
WERMLANDS SKOGSFÖRRÅD AB (reg. no. 556512-6017) is responsible for the personal data processing we carry out.
What Are Personal Data?
Personal data is all information that can be directly or indirectly linked to you (i.e., together with other information), such as name, picture, personal number, IP address, as well as travel and purchase history.
What Personal Data Do We Process About You and Why?
In this section, we explain how your personal data is used so that we can provide you with relevant goods, services, and offers.
When you purchase goods/services from us on invoice, we handle the following data that you provide to us:
- your name and contact information
- your personal number
We process your personal data to:
- identify you as a customer
- be able to charge for goods/services you have purchased from us
- manage and deliver what you have purchased
- notify you of any changes/delays in product/delivery.
Legal basis for processing: We process your personal data based on contract fulfillment when providing the product, and based on a legitimate interest when we have a justified interest in using your data for statistics and to market our services and ensure payment.
When you sell goods/services to us, we handle the following data that you provide to us:
- your name and contact information
We process your personal data to:
- identify you as a supplier
- be able to identify and pay for goods/services we have purchased
- manage and receive the delivery of what we have purchased
- notify you of any changes or other important information about the product/delivery.
Legal basis for processing: We process your personal data based on contract fulfillment when providing the product, and based on a legitimate interest when we have a justified interest in using your data for statistics and to market our services and ensure payment.
For private food suppliers, we handle the following data that you provide to us:
- your name and contact information
- your personal number
Basis for processing: The supplier number is linked to specific deliveries and is used for traceability of the supplier’s food delivery and for the possibility of connecting a financial quality bonus to an individual supplier. Storage time: We save your data for up to 7 years in accordance with the Accounting Act (1999:1078) SFS 2018:172
When you communicate with us
You can choose to communicate with WSFAB in many different ways, e.g., via social media, calls, and emails with our staff.
When you communicate with us, we handle the data you provide to us, such as:
- Name and contact information
- Information about your viewpoint, question, or case
We process your personal data to:
- Answer questions and handle your case, e.g., fix errors, handle complaints, and questions about deliveries.
- Improve our services and the information we provide and publish on our website
Legal basis for processing: We process your personal data based on our and your legitimate interest in handling your case (legitimate interest).
Storage time: We save your data for up to 7 years in accordance with the Accounting Act (1999:1078) SFS 2018:172
When we have a legal obligation
In addition to what is described above, we sometimes process your personal data when we are legally obliged to do so, e.g., due to our accounting obligations or at the request of an authority.
Legal basis: When we process your personal data because we are legally obliged to do so, we do so based on a legal obligation.
How Long Do We Store Your Personal Data?
Your personal data is only stored for as long as required to fulfill the purposes of the processing or as long as we must store them according to the law. Därefter raderas eller avidentifieras dina uppgifter på ett säkert sätt, så att de inte längre kan kopplas till dig. After that, your data will be deleted or anonymized in a secure manner so that they can no longer be linked to you.
To Whom Do We Disclose Your Personal Data?
WSFAB never sells your data to a third party. However, we may disclose your personal data to the following categories of recipients:
- Suppliers, both within and outside the EU/EEA, such as those providing IT services, handling customer service cases, or performing payment mediation and credit checks on behalf of WSFAB
- Your bank when you pay by card or Swish
- Other recipients when required by law, other regulations, or government decisions
Recipients who process personal data on behalf of WSFAB must always enter into a so-called personal data processing agreement with us to ensure that your data is handled correctly and securely. If we use suppliers who process your personal data on our behalf outside the EU/EEA, we take special protective measures, e.g., by signing agreements that include the standard contractual clauses for data transfers adopted by the European Commission, which are available on the European Commission’s website.
When your personal data is shared with a recipient who is independently responsible for personal data, such as an authority or a bank, the recipient’s privacy policy and information about personal data management apply.
How Do We Pprotect Your Personal Data?
Your privacy is important to us, and therefore we focus on security. We take measures to protect your data in accordance with the GDPR and established information security guidelines. This means that we have procedures and rules regarding data protection, such as securely sending your data and ensuring that staff only have access to the data they need to perform their work.
Your Rights
You have certain rights under data protection legislation. If you want to exercise any of your rights, you can contact us using the contact details in the next section.
- Access to your personal data – you have the right to receive confirmation of whether we process your personal data and a copy of the data being processed
- Request correction – you have the right to have incorrect data corrected
- Request deletion – you have the right, under certain circumstances, to have your data deleted
- Object to processing based on our legitimate interest and against processing for direct marketing – you have the right to object to the processing of your personal data or request that the processing be restricted
- Right to data portability – you have the right to request that personal data be transferred from us to another company, authority, or organization. This right is limited to data you have provided to us.
If you want to learn more about data protection legislation and your rights, you can read the European Parliament and Council Regulation (eur-lex.europa.eu).
If you believe that our processing of your personal data does not comply with data protection legislation, we ask you to contact us, see the contact details section below. You also have the right to complain to the Swedish Data Protection Authority, which is the supervisory authority.
Contact Details
WSF AB (reg. no. 556512-6017) is responsible for the processing of your personal data. If you want more information about how your personal data is handled, contact us with a written, personally signed request sent to:
Wermlands Skogsförråd AB
Box 87
665 23 Kil
In the letter, please provide your name, address, email, phone number, and personal number in addition to your request. Please also include a copy of your ID. A reply will be sent to your registered address.
11. Updates To The Information Text
This information text may be updated. If we make significant changes to the text, we will notify you at least 30 days before the change takes effect, either by email or by publishing a new version on our website.