GDPR - Customers

PRIVACY NOTICE TO REPRESENTATIVES OF CUSTOMERS

In connection with the entry into force of the EU General Data Protection Regulation (GDPR), we would like to inform you about the processing of your personal data. As the representative of one of our customers we have and will collect Personal Data about you. This notice explains how AxFlow Limited (“we” or “AxFlow”), respects your privacy and protects the Personal Data we process about you. All processing of Personal Data (as defined below) is made in accordance with the General Data Protection Regulation and other applicable law. This privacy notice describes how we collect, process and share your Personal Data.

What Personal Data will be processed?

AxFlow has and will collect and process information about you as the representative of one of our customers: your name, date of birth, email address, title (Mr., Mrs., Ms.), position within the customer company, telephone number, fax number, name of the customer company that you represent and history of invites to our events as well as a communication log. We will also collect information regarding receipt of newsletters and marketing material we may send you in your capacity as representative of a customer and track which links etc. you have clicked on. The information set out in this section is referred to as your ”Personal Data”. The Personal Data is collected from you directly and by tracked links in newsletters and marketing material. We may also collect Personal Data about you from other AxFlow companies. What is the purpose of processing your Personal Data?

The processing of your Personal Data is necessary for the administration of the customer relationship and to some extent for customer care and direct marketing. We use tracked links in our newsletters and marketing material for the purposes of customising such marketing in accordance with your interests.

What is the legal basis for processing your Personal Data?

The processing of your Personal Data (i) for the administration of our customer relationship, (ii) for customer care and (iii) for marketing purposes is based on our legitimate interest.

The interest to administrate our customer relationship is considered legitimate based on (i) delivery being crucial for the fulfilment of the contract with the customer company, customer care being crucial for strong customer relationships and marketing being crucial for the business of AxFlow, (ii) that you are acting in your professional capacity and (ii) that personal data is kept to a minimum.

If you are a sole trader, the processing of your Personal Data for delivery of the products and/or services ordered by you are based on fulfilment of the agreement between us and you as a sole trader.

Who has access to your Personal Data?

We have implemented appropriate technical and organisational measures to protect your Personal Data against loss or unlawful access etc. The number of persons with access to your Personal Data is limited. Only individuals associated with AxFlow that need to process your Personal Data in accordance with the purposes above will have access to your Personal Data.

We share your Personal Data with AxFlow Holding AB as the provider of our central CRM-system and central marketing systems. We will also share your Personal Data with other AxFlow entities for the purposes set out in this notice. We will share your Personal Data with suppliers and partners that carry out services on our behalf. Our suppliers are changed from time to time but include IT-supplier and sub-suppliers that carry out certain service, maintenance and reparation as well as logistic partners. In connection with delivery of ordered product or services, we may need to transfer your Personal Data outside the EU/EEA to such country where you are located. In such case, we will ensure that the supplier for such delivery is either part of the Privacy Shield or that we have entered into EU Model Clauses with such supplier. You can find more information regarding Privacy Shield at https://www.privacyshield.gov/welcome. The EU Model Clauses are available at http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32004D0915. Other than set out above, we do not transfer your Personal Data to a recipient located outside the EU/EEA without informing you and ensuring adequate safeguards in accordance with EU data protection regulation.

For how long is your Personal Data stored?

Your Personal Data that is processed for the administration of our customer relationship and for customer care will be stored until our customer relationship ceases. By administration of our customer relationship we include continuous communication, support and services throughout the life cycle of the product ordered from us. Your Personal Data is erased earlier if you cease to represent the customer company. In such case we will store your Personal Data for up to two years following the date when you ceased to represent the customer company.

Your Personal Data that is processed for direct marketing will be processed for such purpose until you unsubscribe or object to such marketing by contacting us at dataprotection@axflow.co.uk. If you unsubscribe or object, we will store your name and contact details in order to ensure that we respect such opt-out or objection.

Please note that your Personal Data will be stored for a longer period than the mentioned above if it is required by applicable laws, such as for accounting purposes.

What are your rights?

AxFlow, reg. no. 4087125, with address 820 Yeovil Road, Slough Trading Estate, Slough SL1 4JA, and AxFlow Holding Aktiebolag, reg. no. 556356-6529, with address Sveavägen 151, 113 46 Stockholm, Sweden, are joint controllers of the processing of your Personal Data. This means that we are responsible for your Personal Data being processed correctly and in accordance with applicable laws.

You are entitled to know what Personal Data we are processing regarding you, and you can request a copy of such data. You are entitled to have incorrect Personal Data regarding you corrected, and in some cases you may request that we delete your Personal Data (if, for example, the Personal Data is no longer necessary for the purpose for which it was collected). You also have the right to object to certain processing of your Personal Data (such as direct marketing), and request that the processing of your Personal Data be limited. Please note that limitation or deletion of your Personal Data may result in us not being able to fulfil our commitments. You are also entitled to extract your Personal Data in a machine-readable format and to transfer the Personal Data to another controller.

If you have questions regarding how we process Personal Data concerning you, you are welcome to contact us at dataprotection@axflow.co.uk or by mail to the address above.

If you have any objections or complaints with the way we process your Personal Data, you have the right to lodge a complaint with the local data protection supervisory authority.