Privacy Policy

Version: 1.0.0

1. Introduction

This privacy policy ("Privacy Policy") describes how Prisjakt Sverige AB, org. no. 556665–1799, with address Kamengatan 6, 262 32 Ängelholm ("Prisjakt", "we", "our" and "us"), processes personal data about you who visit and use our website and about you who come into contact with us because of our business and our services - usually because you are a contact person for a corporate customer, cooperation or business partner or a supplier to us.

We are responsible for the personal data processing described in the Privacy Policy as a personal data controller. If you want to know more about our processing of your personal data, you are always welcome to contact us, e.g. at the address above or via our email address [email protected]

We are keen that you feel safe with how we process your personal data and we therefore ask you to read the Privacy Policy, which we may update from time to time. If we change the Privacy Policy, the new version applies from publication on our website. You can see when we last made updates at the top of the Privacy Policy.

2. How we collect your personal data

The information we process about you is mainly collected directly from you when you visit and use our website or in connection with us coming into contact with you - e.g. via e-mail, social media, phone or similar occasions. We may also collect information about you from third parties.

3. How we process your personal data

3.1 Introduction

We only process your personal data if the processing is permitted according to applicable data protection legislation. This means i.a. that we must have support for the purposes of the processing in the form of a so-called legal basis, which for our part mainly means one of the following grounds:

Fulfillment of agreement - the processing is necessary for us to be able to provide you with our services or otherwise fulfill agreements between us, or to take measures at your request before entering into an agreement.

Fulfillment of legal obligations - the processing is necessary to fulfill our legal obligations according to e.g. law or other constitution to which we are subject or court or authority orders that require us to process data about you.

Balance of interests - the processing is necessary for purposes related to our or third parties' legitimate interests, provided, however, that your interests or fundamental rights or freedoms do not outweigh (in which case the processing may not take place).

Consent - the processing takes place with the support of your prior consent, where we e.g. has a responsibility to clearly inform you about which treatment you consent to and the possibility to easily withdraw your consent to our continued treatment.

Below we explain in more detail the categories of personal data we process, the purposes for which we process them and the legal grounds on which our processing of your personal data is based, including how long the data about you is stored with us and with whom we share your personal data.

3.2 Maintain and improve our website and services

Purpose of the treatment: Collect statistics on and analyze visitor traffic to our website as well as other technical information generated during visits to the website and the creation of personalized content for you, e.g. through relevant product recommendations, in order to maintain and improve its functions, the user experience (including through customized advertisements from third parties on our website) and our work to detect and counteract errors, intrusions and incidents.

This is done with the support of analysis services from third parties. The statistics we compile and the analyzes we carry out with the support of these services are done with the use of data in aggregated form and with the support of de-identified or anonymized data.

Categories of personal data: The personal data we process refers to:

• IP address

Other technical information generated when visiting our website, such as the type of technical device you used, browser, click history, pages visited and times of visits, user-generated data, browser information, geographic information from the location where you visited our website and other web traffic information.

Legal basis: Balance of interests, where our legitimate interest is to collect data to maintain and improve the functionality, content, security of our website and to be able to deliver a personalized experience of our services. Collection of information using cookies and similar technologies takes place with the support of your consent, with the exception of such use that is strictly necessary for you to be able to use our website in an appropriate manner. For more information about how we use cookies and other similar technologies, see our cookie policy.

Storage time: We process and store information about how visitors interact with our website for a maximum of fourteen (14) months. In most cases, the collected personal data is transformed into aggregated data (anonymized) before this time period expires, in connection with our production of statistics.

Sharing of personal data: We will share your personal data with our IT providers.

3.3 Administer your membership and provide personalized features

Purpose of the treatment: Create and administer your membership and provide the personalized functions of the member service, such as the ability to create lists and watches. This includes i.a. to identify and certify you as a user of the account, as well as to be able to give you a personalized experience of the account and the services provided.

Categories of personal data: The mandatory personal data we process refers to:

• Email address (required)

Other, voluntary personal data refers to:

• Username (if other than email)

• Profile picture

• Settings and your personal choices

• Your personal lists

• Surveillances

Legal basis: Fulfillment of agreements, where the collection of your email address is required in order for us to create a member account and thereby provide the member service to you.

Collection of other personal data as above is not required to create an account with us, but is voluntary information that you can choose to provide or not. Our processing of such personal data takes place with the support of a balancing of interests, where our legitimate interest is to be able to provide as relevant a service as possible and improve the experience for our users.

In the event that you add goods, based on which it is possible to generate conclusions about special categories of personal data (in accordance with Article 9 GDPR) such as your religion, your sex life or sexual orientation or your political opinions, to your lists or choose to monitor them, we will process the information that you have saved the goods in question with the support of your consent. Your choice to add the relevant product(s) to your list or monitoring constitutes in such cases your consent to our processing of the relevant data.

Storage time: We process and store your personal data as long as you have a member account with us.

Sharing of personal data: We will share your personal data with our suppliers [good if you can specify e.g. if it is IT suppliers].

3.4 Newsletters and other marketing mailings

Purpose of the treatment: Administer and carry out e-mails, with the aim of informing about our business, our services and ongoing activities.

Categories of personal data: The personal data we process refers to: Email address

Legal basis: We will only send marketing emails to you if you have registered for such mailings and then agreed to receive them.

Storage time: We process and save your personal data in order to carry out marketing mailings via e-mail to you as long as you have not unregistered from receiving further mailings. Such deregistration can be done at any time by using the deregistration link included in our mailings.

Sharing of personal data: We will share your personal data with our marketing service providers.

3.5 Administer and handle customer support cases

Purpose of the treatment: Communication and handling of issues, investigation of complaints and provision of technical support and improvement of customer experience.

Categories of personal data: The personal data we process refers to: Contact information such as name and e-mail address Personal information that you provide yourself in your contact with us

Legal basis: Balancing of interests, where our legitimate interest is to be able to answer questions from users and handle customer requests in order to improve the functionality, content and security of our website.

Storage time: We process and save your personal data for as long as it is necessary for us to be able to help you with your case and handle possible legal claims from you as a customer. The personal data is stored for 24 months after a closed case.

Sharing of personal data: We will share your personal data with our support system providers for customer support cases.

3.6 Publication of reviews

Purpose of the treatment: Enable the publication of user reviews, ensure that the reviews are authentic, and improve the user experience by providing reliable and useful information to other users.

Categories of personal data: The personal data we process refers to:

• Contact information such as username and email address.
• Personal data that you provide yourself in your contact with us.

Legal basis: Balancing of interests, where our legitimate interest is to be able to ensure the authenticity of reviews, which is essential to improve the user experience, provide reliable information and maintain transparency in our communications.

Storage time: We process and save your personal data as long as the product or store is listed. If a user has been inactive for more than three (3) years, we anonymize the review.

Sharing of personal data: We will share your personal data with our marketing service providers.

3.7 Selection and recruitment of candidates based on submitted application documents

Purpose of the treatment: Selection and recruitment of candidates based on submitted application documents (such as CV and cover letter), interviews, reference checks and, where applicable, personality and intelligence tests.

Categories of personal data: The personal data we process refers to:

• First and last name
• Address
• Contact details such as email address and phone number
• Application documents such as CV and cover letter
• Image (if applicable)
• Name
• Email address

Legal basis: Balance of interests, where our legitimate interest is to be able to evaluate your merits and personal characteristics in connection with selection for and decisions on recruitment. Fulfillment of the legal obligation to document information about education, professional experience and other qualifications for the persons who are employed to fulfill the legal requirements in ch. 2. Section 4 of the Discrimination Act (2008:567).

Storage time: Data that is collected about you in connection with your application for a job with us is deleted as a starting point after the recruitment process has ended and as a maximum of two (2) years thereafter.

Sharing of personal data: We will share your personal data with our recruitment system provider.

3.8 Fulfilling legal obligations and securing legal claims

We may process your personal data in order for us to fulfill our legal obligations according to e.g. law or other constitution to which we are subject or court or authority orders that require us to process data about you.

We may also process your personal data so that you or the company or organization you represent, us or a third party concerned can establish, enforce or defend legal claims, for example in the event of an impending or ongoing dispute.

4. Security measures

We take security measures to ensure that our handling of your personal data takes place in a secure manner. For example, the systems in which the personal data is stored are only accessible to our employees and service providers who need the data to fulfill their tasks. These are also informed about the importance of security and confidentiality in relation to the personal data we process. We take appropriate security measures and security standards to protect your personal data against unauthorized access, unauthorized disclosure and misuse. We also monitor our systems to detect vulnerabilities. In addition, we have entered into personal data processing agreements with our service providers (see further in sections 5 and 6 below).

5. With whom do we share your personal data?

Access to your personal data is limited to recipients who need such access for the purposes described in section 3 above or otherwise stated below. Your personal data will thus be shared with the following recipients:

Our suppliers: We use third-party providers to manage parts of our business. We will share personal data with these suppliers in order for them to perform services on our behalf, such as providing us with support and business systems, social media platforms, or performing tasks as subcontractors for us in connection with our own services. When we use suppliers in accordance with this point, we establish personal data processing agreements and take other appropriate measures to ensure that your personal data is processed in a manner consistent with this Privacy Policy.

Business partners/Collaboration partners: We occasionally collaborate with external parties in order to improve our services and operations, e.g. advisors and salespeople. These actors process personal data either as personal data subjects according to their own terms and guidelines for handling personal data, or as personal data assistants to us according to our instructions for processing. In the latter case, we establish personal data processing agreements and take other appropriate measures to ensure that your personal data is processed in a manner consistent with this Privacy Policy.

Sale or transfer: We will transfer your personal data to a buyer/investor or potential buyer/investor in connection with the sale or other transfer of all or part of our shares, assets or our business. Upon such transfer, we will take steps to ensure that the receiving party processes your data in a manner consistent with this Privacy Policy. The purpose of such a transfer is to allow a (potential) buyer/investor to carry out a review of our business and, where applicable, take measures and preparations for a possible purchase or investment, where the transfer takes place with reference to the legitimate interest of such an opportunity for review, respectively possible measures and preparations.

Authorities: We will also share your personal data with e.g. The police, the Tax Agency or other authorities when we are obliged to do so according to e.g. law or other constitution or according to a court or authority decision.

6. Where we process your personal data

We aim to always process your personal data within the EU/EEA. Since some of our suppliers work internationally, your personal data will be transferred to countries outside the EU/EEA according to the agreements we have with the suppliers. In such cases, we have an obligation to ensure that the transfer takes place in accordance with the applicable data protection legislation before the data is transferred, e.g. by assuring us that the country to which the data is transferred meets requirements for an adequate level of protection according to the EU Commission's decision, or by ensuring that the transfer is covered by appropriate protective measures in the form of e.g. standard contract clauses decided by the European Commission and further appropriate measures to safeguard your rights and freedoms.

Via the following link, you will find information on the countries outside the EU/EEA that the European Commission has decided meet an adequate level of protection for the permitted transfer of personal data: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_sv

Via the following link, you will find the standard contract clauses that the European Commission has decided on: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_sv

The countries outside the EU/EEA to which our suppliers currently transfer personal data are the following: USA. Price Hunt ensures that data processors storing user data in the US are certified under the Data Privacy Framework (DPF).

7. Your rights

You have rights in relation to us and our processing of your personal data. Information about your rights and how to exercise them is set out below.

We ask you to note that your rights apply to the extent that follows from the applicable data protection legislation and that, where appropriate, there may be exceptions to the rights. We also ask you to note that we may need more information from you in order to e.g. confirm your identity before we proceed with your request to exercise your rights.

To exercise your rights or request more information about these, we ask you to contact us, which is easiest to do by e-mail: [email protected]

7.1 The right of access

You have the right to receive confirmation of whether we are processing personal data concerning you. If this is the case, you also have the right to access this personal data through a so-called register extracts and additional information about the current processing, such as for what purpose or purposes the processing takes place, affected categories of personal data and which recipients the personal data has been disclosed to.

7.2 The right to rectification

You have the right to have incorrect information about you corrected without delay. You may also have the right to complete incomplete information.

7.3 The right to erasure

You can request that we delete your personal data without delay if:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• Our personal data processing takes place with the support of your consent and you withdraw your consent to the processing in question;
• You object to processing that we carry out based on balancing of interests and your objection weighs * more heavily than our or another's legitimate interest in the processing;
• The personal data has been processed in an illegal manner;
• The personal data must be deleted to fulfill a legal obligation.

7.4 The right to restriction of processing

You have the right to request that we limit the processing of your personal data if:

• You dispute the correctness of the personal data, for a period of time that gives us the opportunity to check whether the data is correct or not;
• The processing is illegal and you object to us deleting your personal data and instead request that we limit their use;
• We no longer need to process the data for the purposes for which they were collected, while you need the data to establish, assert or defend legal claims;
• You have objected to the processing that we carry out based on a balancing of interests and are awaiting verification of whether your objection outweighs our or someone else's legitimate interest in continuing the processing.

7.5 The right to object

You have the right to object to such processing of your personal data based on our or another's legitimate interest. If this happens, in order to continue the processing, we must be able to show compelling legitimate reasons that outweigh your interests, rights and freedoms.

7.6 The right to data portability

If we process your personal data on the basis of an agreement with you or on the basis of your consent, you have the right to obtain the personal data that you have provided to us and that concern you in an electronic format. You have the right to have the data in question transferred from us directly to another personal data controller, when this is technically possible.

Please note that this right to so-called data portability does not cover such data that is processed manually by us.

7.7 Right to withdraw your consent

If our processing of your personal data is based on your consent, you always have the right to withdraw your consent at any time. A withdrawal of your consent does not affect the legality of the processing that took place based on the consent before this was withdrawn.

8. Complaints to the supervisory authority

In Sweden, the Swedish Data Protection Agency is the authority responsible for monitoring the application of current data protection legislation. If you believe that we are processing your personal data incorrectly, we encourage you to contact us in the first instance so that we have the opportunity to review your views. However, you can always submit your complaint to the Swedish Privacy Protection Authority.