Integrity policy
1. Scope of the integrity policy
1.1 Below, it is described how Order Nordic AB, company reg. No. 556203-0451, with address Makadamgatan 14, 254 64 Helsingborg (”Order Nordic”, “us” or “we”) process personal data.
1.2 We prioritize integrity. Therefore, it is important for us to protect your per-sonal data and to ensure that our processing of the data is conducted in a correct and lawful way.
1.3 In this integrity policy, we explain which types of personal data we may process and for what purpose we process such data. This integrity policy applies when you use our website, app, and services that are part of an app or on a website administered by Order Nordic AB and for purchase and delivery of products from Order Nordic AB (the “Service”). Personal data is information that can be linked directly or indirectly to a physical living person. Examples of personal data are name, address, phone number and email address. Information about IP number and your user activity regarding the use of the Service may also constitute personal data. Processing includes all handling of personal data, such as collection, analysis, registration and storing. We also detail our processing of personal data as well as what your choices and rights are in relation to such processing. We kindly ask you to carefully read our integrity policy and acquaint yourself with its content.
1.4 Please note that this integrity policy relates to the processing of personal data for which Order Nordic is data controller. This means that we are re-sponsible for the handling and processing of your personal data. It also means that you should contact us if you have any questions or comments or to exercise any of the rights you have in relation to our processing of your personal data.
2. Sources of personal data
2.1 This policy applies to personal data that we gather from the following sources:
(a) Orders and inquiries addressed to customer service
Information stated in orders, your customer history and e-mail com-munication with our customer service.
(b) Job applications
Information provided by you in connection with job applications.
(c) Websites administered by Order Nordic AB
Data collected on our domains and in our apps, and on or websites and social media belonging to third parties such as Facebook, Twitter and Instagram.
(d) E-mail communication
Electronic communication between you and Order Nordic AB.
(e) Demographic information
All information provided with you in registration are collected. Geo-graphical data indicating residential area may also be collected.
(f) Data on use of our websites/communication
When you visit our website, we use automated data collection tech-niques to collect information about your activities. This includes links you click, pages and content you are viewing, and corresponding data and statistics about your visit. The data is automatically collected us-ing cookies (browser cookies and session cookies) as well as third par-ty tracking services. Information about employer/organization, its address and your title. Certain data is automatically retrieved when you use the Service, including data about your use of the Service, tech-nical data such as IP address, hardware type, operating system, and browser version, geographical data, and address information. We may update your data from other public records, such as SPAR, if nec-essary to maintain good record keeping.
(g) Technical data, computer/mobile phone
Information about your computer or similar equipment used to access our website, such as the IP address of your computer/device, operating system, browser and version. If you are using a smartphone or other mobile device, we also collect data about the phone’s unique ID, adver-tising ID, geographic location, etc. for the device.
3. Personal data that we process
We may process the following personal data pertaining to you:
(a) Contact information in relation to ordering goods or support matters
• Name
• Address
• Country
• Telephone number
• Email address
• Customer number
• Username and password
(b) Additional information about you who are a sole proprietor of a com-pany or has a personal customer number
• Personal identification number.
(c) Contact information for newsletters, promotional campaigns and important information
• Email address
• Company name/Name
• Company registration number/personal identification number
(d) Contact information in connection with job applications
• Name
• Email address
• Telephone number
• Gender
• Position applied for
• Date of birth
• Information provided by references
• Summaries of interviews
• CV
• Cover letter
(e) Contact information in connection with you contacting us via our website or by email
• Name
• Email address
• Telephone number
(f) Cookies
On Order Nordic AB’s websites, www.order.se, www.championnordic.se, www.frontier.se, permanent cookies are used for the best functionality. A cookie is a small text file stored on your computer and containing information.
(g) Log files
We collect information using log files that register activities on our website and collect statistics about your surfing habits.
(h) Web tags
Web tags are scripts with codes linked to graphic objects on a website or in an email. Their purpose is to send back data to us. Examples of information collected are technical data such as IP addresses and in-formation on how you respond to an email campaign (e.g., when the message was opened, what link/s you clicked, if you are using a com-puter/mobile phone, etc.). We use web tags on our website and in email communication.
4. The purpose of the processing and legal grounds
4.1 We process your personal data under (a) above for the purpose of, and based on our legitimate interest in enabling orders, informing you of our updates of the Service and terms of use, providing direct marketing and preventing use of the Service in violation of the terms of use of the Service and to prevent and investigate misuse of the Service. We also process your personal data under (a) above to fulfill our legal obligations.
4.2 We process your personal data under (b) for the purposes stated under 4.1 above and the legal basis of fulfilling our agreement with you.
4.3 We process your personal data under (c) for the purpose of, and based on our legitimate interest in providing newsletters, promotional campaigns and important information to you.
4.4 We process your personal data under d) for the purpose of administering job applications. For advertised positions, we process these data based on our legitimate interest in administering job applications in connection with the advertised position. For spontaneous applications, we process these da-ta based on your consent.
4.5 We process your personal data under e) for the purpose of, and based on our legitimate interest in following up questions from you.
4.6 We process your personal data under f) – h) above for the purpose of, and based on our legitimate interest in fulfilling general business purposes such as improving your experience of the Service, improving and developing the Service and new services and products, analyzing your use of the Service, ensuring the technical functionality of the Service, preventing use of the Service in violation of the terms of use of the Service, preventing and inves-tigating misuse of the Service, measuring the effect of marketing and ad-vertising campaigns, and for the provision of statistics and analyzes.
5. Retention of personal data
5.1 We retain your personal data in accordance with items a) - b) above for as long as you have an account with us. After that, we retain your personal da-ta for marketing purposes until you oppose such processing. Other than that, we process your personal data as long as it is necessary to fulfill the purpose of the processing or as we are legally obliged.
5.2 We retain your personal data according to item c) above until you inform us that you no longer want to receive newsletters, promotional campaigns, and important information from us.
5.3 We retain your personal data according to item d) above until the applica-tion process has ended, or for spontaneous applications until you withdraw your consent (however, for no more than two years).
5.4 We retain your personal data according to item e) until your matter with us has been closed.
5.5 We retain your personal data according to items f) – h) for as long as is necessary to fulfill the purposes of section 4.6 above.
5.6 Insofar as your personal data is no longer necessary to fulfill the purpose of the processing, or if the processing for some other reason is no longer permitted, the data will be anonymized or deleted.
6. Recipients
6.1 We may disclose your personal data with our processors, for example group companies and companies providing hosting services or IT- and cloud ser-vices. In such cases, data processing agreements will be entered into to make sure that your personal data is processed only in accordance with this integrity policy.
6.2 Other information is not disclosed to third parties for any purpose other than updating data for public records or statistics/analyzes conducted by third parties on our behalf. The data are anonymized as far as possible. Third parties are not allowed to use your personal data for any purpose other than those stated in this integrity policy. Personal data may also be disclosed if we are required to do so to adhere to a court order or if we have received your consent to such disclosure. If there is any suspicion that you have committed a crime in connection with the use of the Service, data may be provided to authorities upon request.
7. Handling of personal data
7.1 We have implemented a number of methods to keep your personal data as confidential and secure as possible. Please note that this does not include data that you choose to share in social media.
7.2 Your personal data are only handled by authorized personnel who have ac-cess to them by virtue of their position and who must have access to/use the data for the stated/legitimate purpose only.
7.3 We store your personal data in our operating environments. Here, com-mon security methods are used to prevent unauthorized access. We comply with applicable laws and generally accepted standards for protecting pri-vate and sensitive data.
8. Your rights
8.1 You have the right to receive confirmation on whether or not we process personal data concerning you, and in such cases get access to such personal data and also information regarding the personal data and how we process it.
8.2 You have the right to have inaccurate personal data concerning you rectified without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data about you completed.
8.3 You have, under certain circumstances, the right to have personal data concerning you erased, for example if the personal data is no longer necessary in relation to the purposes for which it was collected or if the personal data have been unlawfully processed.
8.4 If our processing is based on your consent, you have the right to withdraw the consent provided by you at any time by contacting us. If your consent is withdrawn, we will no longer process your personal data for the purpose that you had given your consent to.
8.5 You have the right to require that we limit the processing of your personal data under certain circumstances. For example, if you contest the correct-ness of the personal data, you may require that we limit the processing of them during the time it takes for us to check if the information is correct.
8.6 You have the right to object to processing of your personal data that is based on Order Nordic’s legitimate interests. If this is done, we must provide compelling legitimate grounds for the processing, which outweigh your interests, rights and freedoms, in order to proceed with the processing of your personal data.
8.7 You have the right to object to our processing of your personal data to the extent such data is processed for direct marketing. Upon such objection, we will no longer process your personal data for that purpose.
8.8 You have, under certain circumstances, the right to obtain the personal data you have provided to us and which concern you in a commonly used electronic format. You are entitled to transfer such data to another person-al data controller (data portability).
8.9 Please contact us if you have any comments or concerns regarding our processing of your personal data. You also have the right to file a complaint regarding the processing of your personal data to the Swedish Data Protec-tion Authority.
9. Additions and amendments
We may make additions and amendments to this integrity policy. If we do so, we will publish the amended policy to our website. In such case, we kindly ask you to carefully review the updated integrity policy.
10. Contact us
To update, correct or erase data we have about you or to enforce your rights as described above, you are welcome to contact us at info@order.se.
This integrity policy applies from 25 May 2018