Our data protection work
Lifts All must process personal data as part of its day-to-day business. We care about your privacy, and we strive for high levels of security in our work with data protection. It is important to us that everyone affected is confident about the methods we use to process personal data.
Our data protection policy outlines, among other things, which types of personal data we process and the respective storage periods.
Do you want to know if we have stored any personal data related to you? Or have you found inaccuracies in the data we have stored about you? If so, you may file a request to our data protection service for rectification or erasure of your personal data. Please e-mail privacy@liftsall.se. More information about your rights can be found in the policy below.
Lifts All’s data protection policy
At Lifts All, we care about your personal privacy. We strive to maintain a high level of security in our work with data protection. This policy describes how we gather and use personal data and how we work to protect this data using both technological and organizational safeguards. “Personal data” refers to all types of data that can be linked to you as a living, natural person. The policy also describes your rights with regard to how we process your personal data and how you can exercise these rights.
Lifts All processes personal data in accordance with the General Data Protection Regulation (Regulation No. 2016/679 of the European Parliament and of the Council, also called “GDPR”).
Personal data controller
The personal data controller is Lifts All AB, CIN 556208-4656, at the address Passadvägen 10, 177 70 Järfälla, Sweden.
Which personal data does Lifts All process?
The personal data we process depends on your relationship with us. We have described in the following table the most common categories of personal data that we process. We gather the information directly from you, from our partners and suppliers or from publicly available registers. This data may also be gathered via digital channels, for example when you visit one of our websites.
In some cases, we gather personal data from you, but the data refers to someone else. In such situations, we assume that the person who provides us with the personal data of other people has their consent or in some other way has a valid reason for providing us with this information. We will inform concerned persons about our personal data processing policy during our first contact with them.
Examples of personal data we process concerning customers:
Name, position, company/organization, contact details, invoicing information, purchase history, dialogue history
Examples of personal data we process concerning prospects/intended purchasers:
Name, position, company/organization, contact details, dialogue history
Examples of personal data we process concerning suppliers:
Name, position, company/organization, contact details, invoicing information, delivery history, dialogue history
In addition to the examples above, we may gather data about IP addresses and the digital device you are using, for example when you visit one of our websites. Lifts All’s websites also use “cookies” when you visit our websites. More information about how Lifts All uses cookies is provided in our cookie policy.
Your personal data can also be found in different types of data logs that are necessary for several of our digital systems to function properly. These logs refer to, for example, access to information, incoming and outgoing emails or telephone conversations.
Legal basis and purpose for processing personal data
Lifts All processes personal data for several different purposes. The primary purposes are so that we can
– Process orders, purchases, customer service matters and communication with customers and suppliers
– Document, evaluate, develop and market our operations
– Fulfill our commitments as partners and a member of society
– Stop fraud and prevent crime
Marketing mailings from us always offer the possibility of “opting out” of future similar mailings.
All processing of personal data that Lifts All carries out can be justified based on one or several of the following legal grounds:
Compliance with a legal obligation
Example: We need to process some personal data to fulfill the requirements set out in the Accounting Act.
Contractual necessity
Example: When you buy a product from Lifts All, we must obtain some personal data from you to be able to deliver ordered products, provide installation and maintenance, as well as invoice what you have ordered.
Legitimate interest
Example: If you are professionally active in a certain industry and Lifts All have a product suitable for this industry, we may contact you to market the product. We believe that our interests as a company in marketing our products override your interests as a professional not to be subject to marketing. Contact us if you would like more information about the assessment we have made in this matter.
Consent
Example: When you subscribe to one of our newsletters, we ask if you consent to us processing your personal data. In cases where processing is justified only by consent, you may withdraw your consent at any time and request that we cease with the processing in question. Contact us if you would like to withdraw your consent.
Storage periods and safeguards
To protect your personal data from loss, damage or unauthorized processing, Lifts All constantly works to maintain and improve a number of different safeguards. This applies to physical protection (for example of persons, IT infrastructure and buildings), information security (for example against infringement of IT systems, virus attacks and through back-ups) and organizational protection (for example that only those who need it in their daily work have access to your personal data).
We store your personal data as long as it is necessary to fulfill the purposes described above. The data is then erased or anonymized in a secure manner, so it can no longer be linked to you. Unless agreed otherwise, and if the law does not require us to keep the data longer, the storage periods set out below apply. If you would like us to terminate the storage of your personal data earlier than this, you may request that we do so. See the section entitled “Your rights”.
Transfer of personal data to others
Lifts All will never sell your data to a third party if we have not received your consent to do so. However, we may turn over your personal data to the following categories of recipients:
Authorities
Example: Lifts All may turn over necessary information to authorities such as the Swedish Police or the Swedish Tax Agency if we are obligated to do so by law.
Processor (with Lifts All as the controller)
Example: If Lifts All employs another organization to carry out certain services on its behalf – for example transports, telemarketing or the operation of IT systems – this could mean either that the organization gathers personal data for us, or needs access to the personal data Lifts All has gathered. In this case, we are the controller and the other organization is the processor. We then enter into a processor agreement with the aim of ensuring that personal data is processed correctly and securely.
Transfer of personal data to countries outside the EU/EEA
Lifts All’s basic principle is that we do not transfer personal data to organizations outside of the EU/EEA. The exception is operations conducted in a third country that is considered to have an adequate protection level in accordance with the European Commission’s decision under Article 45 of the GDPR.
Your rights
According to GDPR, if you are listed in a register you have a number of rights vis-a-vis Lifts All. If you would like to exercise these rights, please send an e-mail to privacy@liftsall.se.
You may also send a letter to:
Lifts All AB
Attn: Data Protection
Passadvägen 10
177 70 Järfälla
Sweden
Regardless of whether you submit your request online or through a letter, we will respond within 30 days, calculated from the date that we were able to verify your identity. In order to protect you and your personal data, Lifts All will not turn over data to anyone whose identity has not been verified. If we, regardless of the reason, cannot fulfill your request, we will explain why.
For all rights listed below, if you so desire, you may request that we extend your request to our partners, if we have shared your personal data with any of them.
Right of access to your personal data
You are entitled to obtain confirmation as to whether Lifts All is processing your personal data and in such a case obtain a summary of the personal data in question. Most of Lifts All’s systems use email addresses as identifiers, and we will therefore normally deliver the copy of the data digitally to your email address.
Right to rectification
Lifts All strives to ensure that all data processed by us is accurate. If you discover inaccuracies in your data, you may request that we rectify the inaccurate data. We will then rectify the error.
Right to data portability
If you would like to receive your personal data from Lifts All in order to be able to use it elsewhere, you are entitled in some cases to receive the data in a structured, commonly used and machine-readable format and transmit it to another controller. However, this assumes that the transfer is technically feasible, that the other party accepts the formats we provide and that this can occur with reasonable effort on our part.
Given the limited volume of personal data that Lifts All processes, it will almost always be easier for you to provide the other party with your personal data. Please also note that this right is limited to data that is processed with your consent or to fulfill contractual obligations with you and that it only applies to the personal data you have submitted yourself.
Right to restriction of processing
If you would like Lifts All to process your personal data only for limited purposes, you can request a restriction of processing. This applies, for example, if you consider the information to be inaccurate, that our processing is unlawful, that we no longer need the data for the purpose of the processing, or when you have objected to processing on the grounds of legitimate interests pending the verification of whether our interest overrides your interest. We will then mark the data to ensure that it does not become subject to additional processing and cannot be changed.
Right to erasure (“right to be forgotten”)
If you would like us to cease all processing of your personal data, you may request erasure in some cases. We will then erase all data that can be linked to you as a person. When the erasure is completed, you will receive a confirmation via email, after which we will also delete the sent email.
Please note that an erasure means that we will remove all information about you, including information that you at one point requested to be forgotten. If you would like, we can instead keep your email address in one place, namely on the Forgotten list, with people who do not want to be in our systems at all. If, at some future point in time, we were to obtain your email address in some other way, for example from an organization in which you are a member, we will be able to immediately see that you do not wish to receive any mailings from Lifts All. There will therefore be no need for you to once again request erasure of your data.
If you think we have made a mistake
If you consider Lifts All’s processing of your personal data to be in conflict with applicable legislation, or that we have processed a request from you improperly when you wanted to exercise your rights in accordance with the above, you may report this to the Swedish Data Protection Authority (Privacy Protection Authority).