Last update: 2024-02-05

  1. General
    This privacy policy explains how we collect, use, disclose and store your personal data and how we also ensure that your personal data is processed in accordance with current legislation.

  2. Who is responsible for the personal data?
    EkoGraf Företagstjänst AB, with org. no 556761-1842 and postal address Fleminggatan 7, 80260 Gävle (in this policy called “Ekograf”) is responsible for the processing of your personal data. As a data controller, it is Ekograf’s responsibility to ensure that your data is handled correctly, securely and in accordance with applicable legislation.

  3. What personal information do we process?
    We may collect and processes the following categories of personal data:
    • Contact information: such as name, email address, delivery address, invoice address and telephone number.
    • Identification number: such as organization number.
    • Order and customer information: such as customer number and order number.
    • Payment information: such as payment method, amount and payment history.
    • Financial information: such as credit information.
    • Correspondence: such as information about support matters, notes and emails when contacting customer service.
    • User-generated data: such as IP address, device information (technical information about computer, mobile phone and other devices that you use, for example, browser settings, time zone, operating system), location information and click and visitor history which, among other things, shows which products or offers you have been interested in.

  4. From what sources do we collect information about you as a customer?
    We collect your personal information when you e.g.:
    • visit our website, through e.g. Cookies. You can find more information about how we use cookies in Cookie policy.
    • contact a 3rd-party producer or broker through this domain.
    • contact us directly though this domain, email, phone, or letter.

  5. Why do we process personal information about you?
    We collect and manage information about you for various purposes. These purposes set the external framework for what we may use your personal data for. Below, we explain the purposes of our treatment and give examples of the treatment activities that occur under each purpose. Please note that some of your personal data may be processed for several purposes.
    • Forwarding the request for information or price to 3rd party producers and brokers.
      • When you are requesting information or a price of a product the request is forwarded to 3rd-parties. It is done in order to let them be able to contact you and support you directly for that request.
    • Manage orders and purchases (if you are a producer or broker of a product)
      • Processing of personal data for this purpose includes activities, among other things, to identify you and check your age, send order confirmation, manage payment for services, assess what payment methods we can offer you (based on contact information, ordered services, payment history and financial information), deliver orders, notify delivery and handle complaints and warranty issues regarding purchased services.
    • Performing legal obligations
      • Personal data is processed for this purpose so that we can fulfill the requirements of laws, judgments or decisions of the authorities. If the information that we collects within this context is not provided, our legal obligation cannot be fulfilled and in this case we can deny you the order, purchase or activity that gives rise to our legal obligations.
  1. What are the legal bases for our processing of your personal data?
    In order to have the right to collect and process your personal data, there must be a legal basis for every purpose for which the data is processed. The legal bases on which we base our treatment are described in this section. Please note that several legal grounds may apply to the same treatment.
    • Legal obligation;
      This basis means that our processing is necessary to fulfill a legal obligation required by Ekograf, for example, to document payment information in order to fulfill the requirements of the Accounting Act.
    • Contractual obligations
      This basis means that the treatment is necessary to fulfill an agreement with you as a customer or to be able to enter into an agreement at a later stage.
    • Legitimate interest
      This basis means that our treatment is based on a so-called balance of interests of legitimate interest. This means that the processing takes place because Ekograf assesses that we have legitimate interests in processing your personal data that outweighs your interest in not having the personal data processed. On this basis, we process your personal data, among other things, to prevent, prevent and investigate crimes within the framework of our operations. If we believe that a crime or attempted crime has been committed and we make a police report, Ekograf will also continue to process your personal data so that we can establish, defend or make legal claims.

  2. How long do we store your personal data?
    We will keep your personal data for as long as necessary to fulfill the purposes for which the data is processed. The length of the storage period therefore depends on the purpose for which the data is processed. In addition, we may save the data for longer if it is needed to determine, defend or make legal claims, e.g. whether a dispute is ongoing or if a report of crime has been filed with the Police Authority.

  3. Who do we share your personal information with?
    • We discloses your contact information such as name, telephone number, email and delivery address to 3rd-party producers and brokers.
    • We may disclose your information to authorities if it is necessary to comply with law, regulation or governmental decisions or for Ekograf to determine, defend or make legal claims.
    • IT service providers which have access to the IT infrastructure.
    • Other 3rd parties, needed to deliver the services reuested.

  4. Where do we store your personal information?
    We will manage and store your personal data within European Union.

  5. Right to your own data
    We are responsible for ensuring that your personal data is processed in accordance with applicable legislation. We will, at your request or on your own initiative, correct, de-identify, delete or supplement any information found to be incorrect, incomplete or misleading. If you have any questions about this or wish to exercise any right, please contact us at the information provided at the bottom of this policy. If you feel that we are handling your personal data incorrectly, you are welcome to contact us. Contact information can be found at the bottom of this policy. You also have the right to submit any complaints regarding the processing of your personal data to the Data Inspectorate, which is the responsible supervisory authority for the processing of personal data in Sweden. Your rights:
    • Right to access your personal data
    • Right to correct your personal data
    • Right to delete your personal data
    • Right to data portability
    • Right to restriction of treatment
  1. Implementation and amendment of the privacy policy
    The latest version of the privacy policy is always available on our website. Our Privacy Policy applies at any time in the form and to the content published on the Website. Moreover, we have the right to update the privacy policy at any time with no prior notification. If the privacy policy is changed, the updated policy will be published on this domain.

  2. Contact details
    Contact us by clicking here.