The following privacy policy is effective as of May 25, 2018.
Data refers to information we hold and collect about you and how you use our services – to provide you with excellent experiences, services, and offers. Here you will find information on:
- What type of data we collect
- How we collect data
- What we use data for
- How long we store data
- To whom we disclose data
- How we protect data
- You control your data
What type of data we collect
We collect two types of data about you – customer data and traffic data.
Customer data is information linked to your service – e.g., name, address, email address, phone number, personal identification number. It may also include information about the services you have and how you use them, orders, user ID, password, and other information you have provided during your interactions with us.
Traffic data is information related to what happens when you use our services. Traffic data is processed for the purpose of transmitting an electronic message via an electronic communications network when you use your services (e.g., when you make a call or send an email).
How we collect data
We collect and process data that:
- you provide yourself when you become a customer with us and when you communicate with us – e.g., when you become a customer, contact us for information, or subscribe to newsletters.
- is generated when you use any of our services – e.g., when you visit our website, make a call, or send an SMS or email.
- we retrieve from other sources – e.g., publicly available personal registers such as SPAR, registers used for credit assessment such as UC, and from other operators and partners.
- is collected through our websites using cookies that gather information on and from your browser.
The information we collect about you depends on which of our services you use.
What we use data for
For data processing to occur, there must be support in applicable data protection regulations, a so-called legal basis. This means that for our processing of your data to be lawful, it must be necessary (1) to fulfill the agreement with you or (2) to fulfill a legal obligation for Byggdagboken. The processing of your data may also be carried out (3) after a balancing of interests or (4) after you have given your consent to that specific processing.
To be able to provide services and products, we need to process and manage your data.
Below are examples of the purposes for which we process your data and the legal basis on which we do so.
Provision of services
We process data to identify you as a customer or user, to manage and deliver orders in accordance with your agreement, and to provide services. We also process data to charge for the services you use, to manage your invoices and payments, for credit reporting purposes, to rectify errors and handle other incidents, and to manage complaints and claims.
Legal basis: fulfillment of contract
Other communication about services
We also process data in connection with other communication with you, e.g., when we send information about and are in contact with you regarding our services. When you call our customer service, the call may be recorded. When you chat with our customer service, the written texts may be analyzed. We do this to train our employees, improve our voice response, and our working methods to always be able to assist you in the best possible way.
Legal basis: legitimate interest (customer data) and consent (traffic data).
Development of services
We process data to develop and manage our operations, our services and networks, and our processes. For this purpose, we may also compile statistics for analysis needs.
Legal basis: legitimate interest (customer data) and consent (traffic data).
Direct marketing
We process various types of data to market our products and services directly to you. You may receive it via, for example, mail, phone, SMS, and email. For this purpose, we may also compile statistics for analysis needs.
Legal basis: legitimate interest (customer data) and consent (traffic data).
Information security and prevention of service misuse
We process data to ensure the security of all our services and communication networks, to detect or prevent various types of illegal use or use that otherwise violates the terms of service. We also process this data to prevent misuse of networks and services, and to detect and prevent fraud, virus attacks, etc.
Legal basis: fulfillment of contract (customer data) and legal obligation (traffic data).
Compliance with laws
We process data to fulfill our statutory obligations.
Legal basis: legal obligation
How long we store data
We never store data longer than necessary. Some data is discarded immediately, while other data is stored for varying lengths of time depending on its intended use and our legal obligations.
Customer data is stored as long as you are a customer of Byggdagboken and thereafter for a maximum of 24 months after the contractual relationship has ended. Exceptions apply to documentation that must be stored by law, e.g., the Accounting Act.
We also store traffic data to assist you if there is an issue with the services we provide. To continuously offer better services based on our customers’ needs, we also store statistics based on this data. This data is stored for 6-24 months.
To offer you attractive market offers based on your needs, we store certain data. We store this information for 36 months.
To limit damage from and protect you against internet fraud, we store IP addresses so that we can trace, block, and remove addresses and messages. This prevents the spread of viruses, spam, and Trojans. Dynamic IP addresses in the fixed network are stored for 6 months, and dynamic IP addresses in the mobile network are stored for 100 days.
To whom we disclose data
We may disclose your data to:
Subcontractors and other companies within Byggdagboken that process data on our behalf.
In various areas, we engage suppliers and, in some cases, our own group companies to deliver our services. This means that they also need certain information about you as a customer. However, these parties may not use data about you for any purpose other than to provide the service or under the conditions we specify.
Transfer to third countries
Some suppliers may have part of their operations in countries outside Sweden or the EU/EEA (so-called “third countries”). If, to provide the service to you, we transfer your data to a supplier in such a third country, we take appropriate safeguards and ensure that transferred data is handled in accordance with applicable law. Firstly, there are certain such countries that the EU Commission has decided meet the required level of personal data protection, and secondly, we regularly enter into agreements with our suppliers stating that they are obliged to apply clauses approved by the EU Commission regarding personal data protection.
Authorities
We are obliged, upon request according to law and official decisions, to disclose the data required by the decision – e.g., to the police.
How we protect your data
We constantly work to protect our customers’ privacy. Our security efforts include protecting individuals, information, IT infrastructure, internal and public networks, as well as office buildings and technical facilities.
Special attention is paid to information security regarding your data to prevent, hinder, and detect its dissemination to outsiders or loss. Access to your data is granted only to those who need it for their work tasks. Data processing is systematically logged and controlled. Data encryption is performed using generally recognized and secure encryption methods. We continuously work to combat spam and viruses in our networks.
You control your data
Certain data processing is based on your approval, known as consent. You always decide which processing you approve and if you wish to withdraw your consent.
Click here to find out how.
Note! To be able to provide services and products, we need to process and manage your data. However, you are not obliged to provide your data to us. If you choose not to do so, we may not be able to provide all our products and services to you.
Click here to request or delete your data.
