1. Information on the processing of your personal data
2.What personal data will be processed
We collect and process the following personal data about you (your "Personal Data"):
- Contact information (e.g. name, company address, e-mail and telephone number);
- Position within the company (e.g. CEO, CFO, purchasing manager, IT manager);
- Data related to your position within the company (e.g. contract number, customer number, purchase history and related documentation)
Essentially, we collect Personal Data directly from you. In some cases, we may also collect contact information from publicly available sources or records, such as publicly available company websites. We may also collect your information from business partners and from other companies controlled by AddPro AB, as appropriate.
3. For what purposes do we process your personal data?
We process your Personal Data for the following purposes:
- To enter into, establish, fulfil and administer contracts with the client you represent
- To act in accordance with and fulfil our obligations under applicable accounting legislation;
- To provide you with newsletters and information via email;
- In order to provide quotations and offers and to offer and manage the renewal of licences and contracts to the client you represent
The provision of your Personal Data is necessary to enter into, establish and perform and administer contracts with the client whom you represent. If you do not provide your Personal Data to us, we will not be able to perform our obligations under the aforementioned agreements. The provision of your Personal Data is also necessary to send newsletters, to provide quotations and offers and to offer and manage renewals of licences and contracts to the customer you represent. If you do not provide us with your Personal Data, we will not be able to provide you with newsletters, offers or promotions of any kind.
4. What is the legal basis for processing your personal data?
The processing of your Personal Data for the purposes  in Section 1 above is based on the fact that the processing is necessary for us to be able to fulfil our obligations under the contracts in relation to our customers. The processing of your Personal Data for purposes  in Section 3.1 above is based on the processing being necessary for us to act in accordance with applicable legislation such as the Accounting Act (SFS 1999:1078) The processing of your Personal Data for purposes  to  in Section 1 above is based on our legitimate interest. The processing of your Personal Data for these purposes is based on our legitimate interest to market our services or products via newsletters and by providing quotations and offers related to our services or products. The Personal Data processed is of a simple nature and in many cases it appears in publicly available sources. Furthermore, the processing is of a simple nature and does not entail a major intrusion into personal privacy. Based on this, we have carried out a balancing exercise which has resulted in us considering that our legitimate interest outweighs your interest in not having your personal data processed for this purpose. You always have the right to object to this assessment. You can read more about your rights below.
5. Who has access to your personal data?
We have taken appropriate technical and organizational security measures to protect your Personal Data against loss and unauthorized access, etc. The number of persons who have access to your Personal Data is limited. Only persons at AddPro who need to process your Personal Data in accordance with the purposes stated above have access to the Personal Data. We may share your Personal Data with other companies controlled by AddPro AB in order to manage joint commitments related to any of the four original purposes in Section 3.1.
We may also share your Personal Data with suppliers and partners who perform services on our behalf, such as advertising agencies engaged by AddPro, subcontractors involved in the processing of customer invoices and related financial accounting and bookkeeping, shippers and distributors, providers of third-party IT services and document storage where we have an appropriate data protection agreement (or similar protection) in place. Your Personal Data may also be shared with a tax authority or other government agency when we determine in good faith that the law or other regulation requires us to disclose such data (for example, due to a request from a tax authority or in connection with pending litigation) Your Personal Data may be shared with a country outside the EU/EEA, such as the United States. The transfer is based on a balance of interests and is necessary to provide newsletters. When your Personal Data is shared with countries outside the EU/EEA, we use standard contractual clauses approved by the European Commission to ensure an adequate level of protection for your Personal Data. The standard contractual clauses are available via the following link: https: //ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/model-contracts-transfer-personal-data-third-countries_en
6. How long do we keep your personal data?
Your Personal Data will only be retained for as long as is necessary for the purpose for which it was collected and as long as permitted or required by local law. This means that your Personal Data will be retained for as long as we have contracts or obligations related to you or the organisation you represent, and for as long as permitted or required by local law. For those Personal Data collected based on a balance of interests, we will keep your contact details for 1 year if you have not contacted us (or the organisation you represent, where appropriate), unless our processing thereafter changes to be based on another legal basis (i.e. your company becomes a client of ours and you will be acting as a representative of the client).
7. What are your rights?
AddPro AB, registration number 556990-8485, with address Arenagatan 8 B, 215 33 Malmö, Sweden, is the controller of your Personal Data. This means that we are responsible for ensuring that your Personal Data is processed correctly and in accordance with applicable legislation. You have the right to know what Personal Data we process about you and you can request a copy of the Personal Data processed. You have the right to request that inaccurate or incomplete Personal Data be rectified, and in certain cases, you can request that we delete your Personal Data. If you have given specific consent for a particular processing operation, you always have the right to withdraw your consent. You also have the right to object to certain processing of your Personal Data and to request that the processing of your Personal Data be restricted. Please note that restriction or deletion of your Personal Data may result in us not being able to fulfil our obligations under the aforementioned agreements. You also have the right to receive your Personal Data in a structured, commonly used and machine-readable format and to transfer it to another controller. If you have any questions about how we process your Personal Data or wish to exercise your rights under [7.2], please contact us using the following form: https://www.addpro.se/personuppgifter-forfragan If you wish to report a personal data breach, please contact us using the following form: https:/www.addpro.se/personuppgifter-incident If you have any objections or complaints about how we process your Personal Data, you have the right to contact or lodge a complaint with the Swedish Data Protection Authority (Datainspektionen).
9. AddPro's whistleblower system
AddPro's whistleblower system provides the opportunity to report, with full confidentiality, suspected irregularities or breaches of our Code of Conduct, such as corruption, bribery, fraud, environmental contamination, breach of workplace safety or serious conditions directed at an employee. It is a timely warning system to mitigate risk and is an important tool to ensure a high level of business ethics and maintain the trust of our customers and the public in AddPro. Reporting can be done openly or anonymously.
Both external and internal persons can report, and only information about persons and events related to the company can be reported. That is, incidents related to AddPro's employees, directors, auditors, attorneys, suppliers and others. Anonymous reports are handled by individuals unrelated to AddPro.
When reporting, you choose whether or not you wish to remain anonymous: https://whistleblowersoftware.com/secure/AddPro