Privacy policy for DistIT Services AB

This privacy policy describes how DistIT Services AB (”DistIT Services”, "we", "us") processes the personal data of customers, suppliers, partners, visitors to our websites and other external persons.

1          Data controller 


DistIT Services AB

Organisation number:  556161-5864

Glasfibergatan 8

125 45 Älvsjö

 

E-mail adress: gdpr@aurdel.com

 

2          Processing activities 


2.1        Sales of goods and services 

When you buy goods from us, we process personal data about you for the purpose of being able to process your order, including being able to deliver the ordered goods and/or services, to invoice your orders and otherwise manage our customer relationship.

For this purpose, we process the following categories of personal data:

        •    Your basic identification and contact data, including name and email address and, if applicable, your address and telephone number. 

        •    Data about your orders, including 

                    ○    Company name

                    ○    delivery data (date and delivery address, if different from the address we have obtained from your contact data)

                    ○    data about which goods and/or services you have ordered, including

                                 •    Product number 

                                 •    Product name or description 

                                 •    Quantity

                    ○    Purchase date

                    ○    Retailer data 

                    ○    Payment data

The legal basis is Article 6 (1) (b) of the General Data Protection Regulation, as the processing is necessary for the conclusion or performance of an agreement with you, as well as Article 6 (1) (f) of the General Data Protection Regulation, as the processing is necessary for us to pursue our legitimate interest in ensuring the efficient processing of your orders and the efficient administration of the customer relationship.

We may pass your data to subcontractors, freight companies and others to the extent necessary to be able to deliver the order to you. 


We store data regarding your purchase(s) for a period of five years from the end of the year in which the purchase took place, as this is necessary to comply with our obligation under the Swedish Bookkeeping Act.


Data regarding warranty information is stored until ten years after the end of the year in which the warranty period has expired, so that we can ensure that we are able to fulfil our obligations to you in this regard.


However, we may retain the data for an extended period of time if such data is lawfully processed for other purposes, including providing you with personal benefits or personal direct marketing with your consent. 


Finally, we store information about your overall purchase history with us as part of the master information about you. This information is kept for as long as we have an active relationship with you, which we have until the end of the year in which we have not had transactions with you for five full consecutive calendar years. 


2.2        Sending newsletters
 

If you receive newsletters from us, we will process your data in order to send (relevant newsletters). The data we process includes

        •    Name


        •    Email address 


        •    Consent information (when the sending is based on marketing consent) 


        •    Information that you do not wish to receive newsletters (either because you have withdrawn your consent or because you have requested to no longer receive newsletters that you have received because you have previously purchased goods or services from us)
 

The legal basis for the processing is Article 6 (1) (f) of the General Data Protection Regulation, as the processing is necessary for us to pursue our legitimate interest in sending marketing material to customers and others who have indicated an interest in such material.
 

We store the data for two years from the end of the year in which the first of the following two situations arise: 

        •    You withdraw your consent to receive marketing materials 

        •    12 months have passed without us sending you marketing materials
 

If you inform us that you no longer wish to receive marketing materials that you have received because you have previously purchased goods or services from us, we will retain this data for 10 years from the end of the year in which we receive it so that we can ensure that we do not send marketing materials to you if you shop with us again. 


2.3        Visiting our website

If you visit our website, we may collect your personal data in the form of cookies and similar technologies. The purpose of this is to allow us to optimize our website based on data about how visitors navigate the website, which parts of the website they use, and whether technical problems arise while using the website, including whether visits to the website are interrupted in unexpected ways.
 

You can read more about individual cookies, including the purpose for which we use them, and how long the data is stored in our cookie policy.
 

The legal basis for the processing is Article 6 (1) (f) of the General Data Protection Regulation as the processing is necessary for us to pursue our legitimate interest in collecting data about the use of our website for the purpose of optimizing the website and the targeting of our marketing. 


2.4        If you are (a contact person for) a supplier or partner 

If you are a contact person for one of our suppliers or business partners, we process your data in order to manage our relationship with you and the company you represent. 

The data we process for this purpose includes: 

•    Name
•    Work address, email and phone number
•    Trade history and correspondence
 

We receive the data directly from you or the company you represent.
 

The legal basis for the processing is Article 6 (1) (b) of the General Data Protection Regulation, as the processing is necessary for the conclusion or performance of a contract with you and/or the company you represent, as well as Article 6 (1) (f) of the General Data Protection Regulation, as the processing is necessary for us to pursue our legitimate interest in the efficient administration of our supplier and business relationships.
 

Transaction data is stored for five years from the end of the year to which the transaction relates. Other data is stored for five years from the end of the year to which the most recent transaction with you or the company you represent relates.
 

However, if you cease to be the contact person, we will delete your contact data as soon as we are informed. Other data is stored as stated above. 


2.5        If you are in contact our customer service or have contact with us for any other reason 

If you are in contact with us for reasons other than those stated in the section 2.1 – 2.4  above, we process your personal data in order to process your inquiry or any other reason why we are in contact with you.
 

In this regard, we process the following categories of personal data:
 

•    Your name 
•    Your contact data (address, email address and telephone number) 
•    Data on the reason why we are in contact with you, as well as any data we receive in connection with the contact we have with you.

The legal basis will usually be Article 6 (1) (f) of the General Data Protection Regulation, as the processing is necessary for us to pursue our legitimate interest in handling inquiries from persons we make contact with in connection with the operation of our company, in a suitable and appropriate manner. However, depending on the circumstances, other legal bases may be relevant.
 

If our contact with you involves financial transactions, we store the data on the individual transaction for five years from the end of the year to which the transaction relates, while other data is stored for five years from the end of the year to which the most recent transaction relates.
 

If our contact with you does not include financial transactions, we generally store data for two years from the end of the year we last made contact with you. 

 

3          Data you are obliged to provide us


You are not obliged to provide us personal data; but if you fail to provide the data we request, it may mean that we will not be able to process your inquiry or provide the services requested by you. 

 

4          Dissemination and transfer of data 


In addition to the data on dissemination contained in the description of the individual processing activities in the sections 2.1. – 2.5 above, we may disclose your personal data 

• To the companies in the Aurdel Group and resellers in order to deliver products and services to you, ensure a consistent level of service across our products, offerings and services, as well as improve our products, offerings, services and customer experience. The Aurdel Group consists of DistIT Services AB, Glasfibergatan 8, 125 45 Älvsjö and subsidiaries, including Aurdel Denmark A/S Lautruphøj 5-7, 2750 Ballerup, Aurdel Norway AS, Gjellebekkstubben 10, 2nd floor, 3420 Lierskogen and Aurdel Sweden AB, Glasfibergatan 8, 125 45 Älvsjö and Aurdel Finland Oy, Hämeenkatu 13b, 33100 Tampere and Aurdel Baltic UAB, R. Kalantos G. 32, LT-52494 Kaunas 

•  To third parties in the event of a merger, sale, joint venture, allocation, transfer or other disposal of all or part of the Aurdel Group's Ser assets or shares. 

•  To lawyers, accountants and other advisers assisting the Aurdel Group.

Finally, we may transfer personal data to third party suppliers who, as data processors, perform services on our behalf, including invoicing, sales, marketing, IT support, advertising, analysis, market research, customer service, product service, shipping and fulfilment of orders, data storage, validation, security or fraud prevention. 

 

5          Transferring data to third countries


When you use our online store, send us an inquiry or receive newsletters and other forms of marketing from us, your personal data is processed by data processors located in countries outside the EU/EEA or which use sub-processors outside the EU/EEA; primarily the United States. 

In such situations, we implement measures to establish a legal basis for the transfer – typically the EU Commission's standard contracts. We also implement additional measures to protect your rights and freedoms, if we judge this to be necessary in relation to the individual recipient countries. 

 

6          Storage of data 


How long we generally store your personal data is stated in the description of each processing activities in the sections 2.1-2.5 above. 

However, we may retain the data for a longer period of time if it is necessary for us to fulfil a legal obligation or for us to establish or enforce a legal claim or assert a legal claim. 

 

7          Processing activities 


As a registered user, you have the following rights: 

a) You have the right to request insight into, as well as correction or deletion of, the personal data we process about you.

b) You also have the right to object to our processing of personal data about you and to request a restriction on the processing of personal data about you.

c) In particular, you have an unconditional right to object to the use of personal data about you for the purpose of direct marketing. 

d) To the extent that the processing of your personal data is based on consent, you have the right to withdraw your consent at any time. Such a withdrawal of consent will only apply to the period after the withdrawal and will thus not affect the legality of our processing of your personal data in the period before the withdrawal of the consent. 

e) You have the right to receive a copy of the personal data about you that you provided to us in a structured, commonly used and machine-readable format (data portability). 

f) You always have the right to complain about our processing of your personal data to a data protection authority, e.g. the Swedish Authority for Privacy Protection. 
   Certain terms and conditions apply to these rights. We are, therefore, not obliged to comply with your request.
 

You can exercise your rights by contacting us with the contact data provided in section 1. 
 
 
 
Last updated October 2024