On 25 May 2018, the General Data Protection Regulation (GDPR) entered into force with the primary aim of protecting the fundamental rights and freedoms of individuals, in particular their right to the protection of personal data. The Regulation supersedes the previous Swedish Data Protection Act (PUL).
The General Data Protection Regulation (GDPR) applies throughout the EU and is intended to create a uniform and equal level for the protection of personal data in such a way that the free flow of information in Europe is not impaired. The same provisions apply throughout the EU.
The General Data Protection Regulation essentially applies to all automated processing of personal data, as well as manual processing in certain cases. Personal data is any information concerning an identified or identifiable natural person.
Our processing of personal data
Whenever we process personal data, we always do so for a particular purpose and on the basis of one or more legal grounds. The most common legal grounds that we use are:
Collection of personal data
We only collect personal data that is relevant and necessary, and we only retain such data for as long as is necessary according to the purpose for which it was collected. Personal data may be processed both manually and digitally.
We collect data from companies and customers with which we come into contact in connection with quotations, purchases of equipment, spare parts or servicing or other products and services that we provide. We collect the following data:
Company name, business address, company registration number, invoicing information and delivery address. Personal data relating to reference person(s) in the form of the person’s name, title/position, e-mail address and mobile telephone number.
As regards suppliers, we store their business address, company registration number and the name, title/position, e-mail address and mobile telephone number of any reference person(s).
The principle for storing personal data is to only retain it for as long as is necessary in order to:
As a general rule, this means that information that does not lawfully or contractually need to be retained will be deleted within a reasonable period of time after it has served its purpose.
If there is a legitimate interest in retaining the data, a balancing of interests will be performed, which will include an assessment of whether the data can be anonymised.
Your privacy is important to us. We have implemented appropriate technical, organisational and information security measures to limit the risk of personal data being processed erroneously and to ensure that only authorised personnel bound by a confidentiality obligation have access to identifiable personal data.
Information may be provided to the authorities as required by law, to our business partners and subcontractors providing services to Bäckman Blästermaskiner or to SBM or our clients, e.g. service, spare parts and installation services, etc. as necessary in order for Bäckman Blästermaskiner and SBM to fulfil its obligations.
Invoicing and accounting
Certain personal data such as contact persons and e-mail addresses are also retained for invoicing and accounting purposes. By law, supporting documentation for accounting purposes must be retained for a minimum of seven years. Personal data not required in accordance with the Swedish Bookkeeping Act is deleted from the accounting system following the end of a contract. Other information is retained for seven years. The legal basis for processing personal data falls under Agreements and Laws.
Distribution of e-mails
Bäckman Blästermaskiner regularly sends out e-mails to customers, suppliers and companies with a legitimate interest in our activities and what we offer. By declaring an interest in receiving e-mails from Bäckman Blästermaskiner and SBM, you are consenting to us processing your personal data. The data that we process comprises your e-mail address. All e-mails that are sent contain an option to be deleted from the mailing list.
Personal data sent to us in connection with requests and dialogue, e.g. quotation requests, delivery requests and customer enquiries, etc. is normally processed in accordance with our general principle, according to which information that does not need to be retained in accordance with the law or a contract is deleted within a reasonable period of time after it has served its purpose. The legal basis for personal data processing is Consents and Laws.
If you have any questions regarding to our processing of personal data, please e-mail us at firstname.lastname@example.org
Bäckman Blästermaskiner AB also processes personal data on behalf of Svensk Blästring & Maskinteknik AB (SBM)
Would you like to know what personal data we process that relates to you? Send a request to:
Personal Data Manager
Bäckman Blästermaskiner AB
SE 682 21 Filipstad