Clas Ohlson’s Site Privacy and Cookie Policy

Introduction

On this page you can read:

• How we process your personal data at Events

• How we process your personal data for Subscriptions

• How we process personal data through this website, Cookies

Events

Who is the Data Controller?

Clas Ohlson AB, company registration number 556035-8672, is the data controller for the processing of your personal data in relation to events organised by Clas Ohlson.

What personal data do we collect and process?

During events organised by Clas Ohlson – such as store openings and annual general meetings – we may record video and take photographs, which involves the collection of audio and visual data in which you may be identifiable. If we intend to photograph or record an event, you will be notified accordingly.

If an event requires registration, we will also collect your contact details, such as your name, address, email address and telephone number.

What is the purpose of processing your personal data?

When we record audio and visual content at events, Clas Ohlson processes such material for the purposes of informing about, documenting, and promoting Clas Ohlson and its events, as well as for planning and publicising future events. The material may be used both internally and externally via our website, social media channels, marketing materials, and press releases. In some instances, the material may also be archived for the purpose of documenting the history of Clas Ohlson.
If we intend to photograph or record at an event, you will be informed in advance.

When we collect your contact information in connection with a registered event, we process your personal data in order to manage and administer the event – for example, to confirm attendance, provide relevant information, and grant you access to the venue.

What is the legal basis for processing your personal data?

The legal basis for our processing of your personal data is our legitimate interests. This means that we have assessed that our interest in processing your data for the aforementioned purposes outweighs any potential intrusion into your privacy.
This assessment particularly considers the fact that you will be informed of any photography or filming in advance, will have the opportunity to opt out or inform a photographer not to include you, and that we typically take wide-angle shots and avoid focusing on identifiable individuals.
With regard to contact details collected for registered events, the processing is deemed beneficial to you, as you have voluntarily registered to attend.

How long do we retain your personal data?

We retain your personal data only for as long as necessary to fulfil the stated purposes. As a general rule, audio and visual recordings are deleted from our systems after one year. However, selected images may be retained for longer on the basis of our legitimate interest in documenting historical events, preserving company history, or for similar purposes.

Contact details collected for registered events are retained only until the conclusion of the event.

What rights do you have?

You have the right to request a copy of all personal data we process about you. You also have the right to receive your personal data in a structured, commonly used, and machine-readable format (data portability), enabling you to transfer your data to another data controller.
You may also request correction or deletion of your personal data, or request restrictions on how we process your data.

Furthermore, you have the right to object to our processing of your personal data based on our legitimate interests. Should you raise such an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. In the absence of such grounds, we may only continue to process the data to establish, exercise or defend legal claims.

If you believe we have processed your data in an unlawful or inappropriate manner, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).

Do we share your personal data with third parties?

Your personal data may be shared with the following categories of recipients:

• Public authorities, such as the police, where required by law or for the investigation of criminal offences;
• Third-party partners managing the printing and distribution of our communications and marketing materials;
• Partners and service providers supporting our internal and external communications and marketing, including on social media platforms;
• IT consultants and service providers contracted for the maintenance and development of our IT systems.

Some of our service providers are located outside the EU (e.g. the United States), where the level of data protection may not be deemed adequate under EU standards. In such cases, we conduct a thorough assessment to ensure all legal requirements are met, and implement technical and organisational safeguards to ensure the security and integrity of your personal data. These safeguards include the use of the European Commission’s Standard Contractual Clauses (SCCs), which are available at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

In cases where we transfer your data to third-party processors acting on our behalf, we enter into data processing agreements with strict instructions concerning data handling, confidentiality, and security.

Questions?

If you have any questions regarding how we process your personal data, you can find more information in our Privacy Statement or contact us directly using the details below:

Postal address: Clas Ohlson, 793 85 Insjön, Sweden
Email: contact@clasohlson.se
Telephone: +46 (0)247 444 00You may also contact our Data Protection Officer directly by emailing: privacy@clasohlson.se

Press releases and subscriptions

The e-mail address or address or name you give when you subscribe to press releases or financial reports will be transferred to the supplier of the subscription service, Cision (which may change over time), to administrate the service on our behalf. We have entered into a Data Processor Agreement with the suppliers to ensure your personal data is secured.

The data collected in order to send annual reports is stored internally at Clas Ohlson only until the report has been sent.

The legal foundation for data processing is consent.

If you want to end your subscription of press releases and financial reports, please follow the link that you will find in every press release or financial report that you receive from us. 

If you have any questions regarding how we process your personal data, or need help ending an subscription, you can find more information in our Privacy Statement or contact us directly using the details below:

Postal address: Clas Ohlson, 793 85 Insjön, Sweden
Email: contact@clasohlson.se
Telephone: +46 (0)247 444 00You may also contact our Data Protection Officer directly by emailing: privacy@clasohlson.se

Cookies

What are cookies?

Computer cookies are small text files that a website transfers to your computer. A cookie will usually contain the name of the website from which the cookie originated, the “lifetime” of the cookie (i.e. how long it will remain on your device), and a value, which is usually a randomly generated number.
Cookies are used to allow websites to function more efficiently, but also to send information to the owner of a website. Cookies also make it possible to separate different users from each other, which can give each user a more personalised and positive experience of a website. 

Cookies cannot harm your computer. They do not contain any confidential information such as your email address or credit card details.

What are the reasons for collecting personal data through cookies?

Based on which consent for cookies and trackers you have given us and the personal data subsequently obtained, we use your data for the following purposes:

• to make our Website easier for you to use;
• to examine, develop and improve our Website, e.g. if the cookies show that the Website is difficult to navigate;

What is the legal ground for collecting personal data through cookies?

• Upon entering into the Website, you will be asked to consent to the use of cookies by clicking “I accept” in the pop-up window. In doing so, you consent to the collection, use and transfer of your information in accordance with this Policy.
• To withdraw your consent, or if you want to be notified each time a cookie is about to be used, you may use the settings provided in your website browser to prevent us from storing cookies on your computer. Information on how to do this can be found in the 'Help' section of your browser via the menu bar

What types of cookies do we use?

There are two types of cookies on the Website:

• First party cookies, i.e. cookies that are used by our site to provide you with a good user experience. For example, you won’t be asked to consent the use of cookies once you have clicked “I accept” in the pop-up window. 
• Third party cookies, i.e. cookies that belong to domains different from the one shown in the address bar. Third party cookies open up for potential tracking of the user’s browsing history.

First party

Third party

Do we transfer any cookies/personal data to third parties?

Google Analytics

We use the tool “Google Analytics” to collect information about use of the Website. Google Analytics collects information such as how often users visit the Website and what other websites they used prior to visiting the Website. We use the information to improve the Website’s technical performance, to optimise the performance of the Website’s features, to improve your experience of the Website, to better tailor the Website to you interests and needs and to make the Website easier to use. Google Analytics collects the IP address assigned to you on the date you visit the Website.

We do not combine the information collected through the use of Google Analytics with other personally identifiable information. Google’s possibility to use and share information collected by Google Analytics about your visits to our Website is restricted by the Google Analytics Terms of Service, available at http://www.google.com/analytics/terms/us.html, and the Google Privacy Policy, available at http://www.google.com/intl/en/policies/privacy/.

You can prevent Google Analytics from recognizing you on return visits to the Website by disabling cookies on your browser.

More information about data protection

Who is the controller?

Clas Ohlson AB is the controller for the personal data that we collect and process within the scope of this Policy.

How do we store and protect the information collected?

Your personal data is stored in our databases which are protected by physical, technical and process-related measures. Our information systems are protected by firewall software in order to segregate them from the access of other networks that are connected to the internet. Only those employees, which need the information to fulfil a certain assignment, are granted access to personal data. Our personnel are constantly informed about our security and data protection policies.

For how long do we store your personal data?

As a general rule, personal data should not be retained for a longer period than is necessary in relation to the purposes for which they were collected or for which they are further processed. 

Clas Ohlson will only store and process information when necessary in order to fulfil the obligations described in this policy.

Moreover, you have the right to request the erasure of your personal data (“the right to be forgotten”) by contacting us (please see contact details further below).

Do we transfer your personal data to third parties?

In addition to the specific sections on transfers of personal data to third parties outlined above, we will transfer your personal data to:

• The police, when obligated by law, to investigate a serious crime.
• IT consultants which we hire from time to time for service and development of our IT: Our current web partner is Amandus Communication AB.

In any case where we transfer your personal data to a third party which processes personal data on our behalf, we will enter into data processor agreements containing strict instructions on the processing of personal data, confidentiality and security.

What are your rights as a data subject?

As a data subject you have the following rights with respect to our processing of your personal data.
You are entitled to request a copy of all personal data that we retain about you, as well as the right to extract your personal data in a structured, commonly used and machine-readable format for the purpose of transferring your data to another personal data controller (’data portability’).

You also have the right to request correction or deletion of personal data and request limitation of the personal data processing that concerns you. However, if the processing of your personal data that you wish to limit or delete is necessary to comply with these terms, the usage of the Website may materially altered as a consequence of the restriction or deletion.

To request access or correct the personal data that we process about you or exercise any other rights, please contact us (see contact information below).

If you have complaints about our processing of your personal data, you have the right to submit a complaint to the Swedish Data Protection Authority.

Contact information

This Policy may be amended from time to time. Changes will be addressed on the Website.

If you have any questions regarding this policy or our use of cookies or personal data in general, please contact us at the contact details below.

Email: contact@clasohlson.se

Address: Clas Ohlson AB, 793 85, Insjön

Tel: +46 (0)247-44500

DPO: privacy@clasohlson.se