Privacy Policy
INTRODUCTION
In this Privacy Policy, you can read about how Värmlands Auktionskammare Aktiebolag, with organization number 559410-2211, processes personal data. References to "we", "our" or "us" refer to Värmlands Auktionskammare Aktiebolag. References to "you" or "your" refer to the data subject whose personal data we process.
According to the GDPR (General Data Protection Regulation), we are obliged to protect your personal privacy. The purpose of this data protection policy is to explain how we collect and use your personal data. In addition, it describes your rights towards us and how you can claim these rights. If you have any questions about privacy or data protection, please feel free to contact us via e-mail: info@dartkungen.se and state "GDPR" in the subject line.
By purchasing goods from us, you accept that we handle your personal data in the manner described in this Privacy Policy. It is important that you read and understand our Privacy Policy before using our services. In order to sell and deliver goods to you, we need to process your personal data. We act with the utmost respect for your privacy.
DEFINITIONS
In addition to the terms defined in the running text of this Privacy Policy, the following definitions shall have the meanings stated below when they appear with a capital letter as the initial letter, regardless of whether they are used in plural or singular, in definite or indefinite form:
Processing: refers to everything that happens with Personal Data, automated or otherwise. Processing can occur through a single action or through a combination of different actions. Examples of common processing of Personal Data include storage, deletion, sharing, registration, copying, collection, organization, use, adjustment, etc.
Payment Service Provider: refers to a Third Party that, among other things, processes payments from our customers or performs invoicing on our behalf.
GDPR: refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Personal Data: refers to all information that, directly or indirectly, alone or together with other information, can be linked to an identified or identifiable living natural person. Some examples of Personal Data are: name, telephone number, address, e-mail address, social media user ID, etc.
Controller: refers to the one who determines the purpose of a certain processing of Personal Data and how the processing should be carried out. Natural persons, legal persons, authorities, institutions or other bodies can be Controllers.
Processor: refers to the one who processes Personal Data on behalf of a Controller, according to the Controller's instructions.
Data Subject: refers to the person who can be identified through the Personal Data.
SCC: refers to Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, or a later updated version.
Third Party: refers to anyone other than the Controller (and the persons authorized to process the Personal Data), the Data Subject or the Processor (and the persons authorized to process the Personal Data). A Third Party can be a legal person or a natural person, institution, authority or other body.
The Website: dartkungen.se
Any other GDPR-related terms not defined herein shall have the same meaning in this Privacy Policy as set out in Article 4 of the GDPR.
DATA CONTROLLER
Värmlands Auktionskammare Aktiebolag is the Data Controller for all Processing of Personal Data performed by us or on our behalf, to the extent that we determine the means and purposes of the Processing (according to the principle of accountability).
This means, among other things, that we are the Data Controller for Personal Data belonging to our customers and other natural persons, which are collected by and/or provided to us in connection with contact and/or entering into agreements with us.
Unless otherwise expressly stated, we are the Data Controller for the Processing described in this Privacy Policy.
We Process all Personal Data to which we gain access with care and do not share the Personal Data with unauthorized persons. Our Processing of Personal Data takes place in accordance with the GDPR (and SCC where applicable) and the fundamental data protection principles.
WHAT INFORMATION DO WE COLLECT?
We may collect information about you in several ways, for example, when you place an order, sign up for our newsletter, contact us, or use any of our services where you share personal information. This information includes the following categories:
- Customer and contact information: This includes details such as your name, email address, and phone number. We collect this information when you use our services, usually when you place an order for goods from us. In cases where you ask us to help you place an order by phone, we may request your personal identification number for identification via BankID.
Meta Conversion API (CAPI)
We use Meta Conversion API (CAPI) to improve our advertising and measure how users interact with our website. This means that certain information is sent directly from our servers to Meta (Facebook). The purpose is to ensure that our ads are shown to the right target audience and that we can effectively analyze ad results. What information do we share with Meta via CAPI? When you interact with our website, we may send the following data to Meta via the Conversion API: Page views and interactions on our website Purchase information (order amount, currency, product ID) Shopping cart data and checkout events Encrypted identifiers, such as email, IP address, and phone number (hashed to protect your privacy) Device and browser information This information is used solely to improve our marketing and conversion tracking. All data is sent with secure encryption and in accordance with GDPR. Legal basis for processing We process and share this information with Meta based on: Consent – If you have approved the use of cookies and tracking when visiting our website. Legitimate interest – To optimize our marketing and measure the effectiveness of our ads. You can withdraw your consent at any time by adjusting your cookie settings on our website. Sharing of data with Meta/Facebook Meta Platforms Ireland Ltd is the recipient of the data we share via the Conversion API. Meta acts as an independent data controller and processes the information according to their own privacy policy. For more information on how Meta processes personal data, visit: Meta Privacy Policy Your rights and choices. If you wish to limit data collection, you can: Adjust your cookie settings via our cookie banner. Use Facebook's ad settings via: https://accountscenter.facebook.com/ads/
Contact us if you have any questions.
- Information about your order: delivery & billing address and other details regarding the goods you have purchased from us, as well as receipts for completed purchases. This information is processed by us so that we can fulfill the delivery to you and comply with the requirements of the Accounting Act.
- Historical information: We store your purchase history regarding our goods to be able to handle any questions or problems that may arise, and to tailor our offers and recommendations based on your previous purchases from us.
- Information about interaction with our website: We collect data on how you use our website, including page loading times, any errors that occur, your way of entering and leaving our website. This information helps us to understand how you interact with our website and how we can improve the experience. We also process device information, such as technical details like your IP address, language settings, browser settings, time zone, operating system, platform, and screen resolution. The purpose of collecting this information is to facilitate order management and to be able to provide you with a more tailored experience. We also use this data for business development and statistical purposes. The collection of this information takes place through cookies with the support of your consent.
- Contract details: This includes information about agreements entered into between you and us, as well as relevant details related to these agreements.
- Case details: This includes your communication with our customer service, for example, via email, chat or phone calls, regarding various matters such as complaints, support cases and similar.
- Consent details: This category includes information about any consents you have given, for example, regarding direct marketing or the use of cookies on our Website.
Our processing of these different categories of data is carried out in accordance with the GDPR and with the aim of maintaining an efficient and positive customer relationship. We follow strict security measures to protect your data and use it only for the specified purposes. We prioritize treating your information with respect for your integrity and security, and we ensure that only necessary information is used to achieve the stated purposes. If you have any questions or concerns regarding our handling of your personal data, you are welcome to contact us for further information.
LEGAL BASIS AND PURPOSE OF PROCESSING
In accordance with the principle of purpose limitation, we only process Personal Data for specific, explicitly stated, and legitimate purposes. In addition, each Processing is lawfully based in accordance with the provisions of the GDPR.
We primarily process Personal Data based on one of the following four legal grounds:
Consent: The Data Subject has given their consent for their Personal Data to be processed for one or more specific purposes (Article 6.1.a GDPR).
Contract: Processing is necessary for the performance of a contract to which the Data Subject is party or in order to take steps at the request of the Data Subject prior to entering into such a contract (Article 6.1.b GDPR).
Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject (Article 6.1.c GDPR).
Legitimate interest: Processing is necessary for the purposes of the legitimate interests pursued by us or by a Third Party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject which require protection of Personal Data (Article 6.1.f GDPR).
You may need to provide your Personal Data to enter into an agreement with us, receive the goods you have ordered, or fulfill legal or contractual obligations.
In some cases, it is voluntary for you to provide your Personal Data to us. However, if you do not provide your Personal Data, we may not be able to provide the requested services, purchased goods, or support. Unless otherwise stated, you will not suffer any negative legal consequences if you do not provide your Personal Data.
When we process your Personal Data based on your consent, you can withdraw your consent at any time, without affecting the legality of processing based on consent before withdrawal.
When we process your Personal Data based on a legitimate interest as a legal ground, our assessment is that the processing does not constitute an infringement of your right to privacy and integrity. We have come to this conclusion after balancing, on the one hand, what the processing in question entails for your interests and right to privacy, and on the other hand, the legitimate interest in the processing in question. However, we never process sensitive Personal Data based on a legitimate interest as a legal ground.
Specific processing activities
Below you can read more about the legal basis we rely on for a particular processing activity and the purpose of our processing of Personal Data. Where applicable, we have also identified what legitimate interests exist.
When you visit our website
The website uses cookies. The use of non-essential cookies only occurs if the website visitor gives their consent. The given consent can be withdrawn at any time (without affecting the legality of the processing carried out with the support of the consent before it was withdrawn). In the Cookie Policy published on the website, you can read more about how cookies are used on the website and how you can manage the storage of cookies. Legal basis for the above processing: Consent.
When you use or visit the Website or our other digital channels, we may collect the following categories of data:
Your choices, clicks and engagement with pages and other content on our digital channels.
Information you may provide during your use of our digital channels, including feedback and comments.
The purpose of collecting the aforementioned Personal Data is to:
Provide you with relevant content.
Evaluate and improve our digital channels.
Analyze the use of our digital channels. We have a legitimate and justified interest in understanding how our digital channels are used, evaluating and improving our digital channels, and providing relevant content. Legal basis for Processing: Legitimate interest.
Links to third-party websites
The Website and our other digital channels may contain links to external websites, plug-ins or applications operated by third parties. It is important to note that if you click on these links or enable such connections, these third parties may collect or share your Personal Data. We want to clarify that we have no control over these third-party websites, plug-ins or applications and we are not responsible for their privacy policies or statements.
We encourage you to be cautious and to read the privacy policy for the website, application or service you visit or interact with. We are not responsible for the actions, omissions or practices of any third party, including their handling of your Personal Data.
If you have any questions or concerns regarding the privacy practices of third-party websites, plug-ins or applications linked from our websites, applications or other digital channels, please contact the respective third party directly for clarification.
When contacting us via contact form, email, phone or social media.
You can contact us via a contact form on our website, email, phone or social media, and in such cases, we gain access to your Personal Data as indicated in connection with such contact.
The following are the categories of Personal Data we may collect when you contact us or otherwise interact with us:
Your name and other contact details, such as address, phone number, email address and usernames for your social media (if applicable). This information is necessary for us to process in order to handle your inquiry and respond to you efficiently. If you represent a company when you contact us, we must also process the name and organization number of the represented company and, in some cases, the name of the signatory.
Information related to your question or request, such as inquiries, complaints, orders, transaction history, payment information and any other information you provide to us or that we may have collected in connection with a previous interaction with you.
Any other Personal Data included in the message content or otherwise recorded by us.
The following are the purposes for which we process your Personal Data when you contact us or interact with us via our digital channels:
To know who we are talking to and to keep in touch regarding the matter.
To communicate with you and handle your inquiry, whether contact takes place via our customer service, email form or social media accounts.
The provision of Personal Data to us is voluntary, which means that it is not a statutory or contractual requirement or a requirement necessary to enter into an agreement with us, and you are not obliged to provide the Personal Data, but the possible consequences of not providing such data are that we will not be able to know who we are talking to, keep in touch with you or otherwise handle the matter.
We process your Personal Data for the purposes stated above with the support of one of the following legal bases:
Contract: If we have entered into an agreement with you and the contact in question concerns something related to the agreement, we process your Personal Data to fulfill our obligations under the agreement or to otherwise administer the obligations arising from the agreement.
Legitimate interest: If your matter is not related to any agreement we have entered into with you, we process your Personal Data based on our legitimate interest in enabling effective communication with you, which may include responding to your inquiries, sending you updates about our goods/the matter in question, or providing you with important information. Our assessment is that the processing is necessary for purposes related to our legitimate interest, and that your interest in the protection of your Personal Data does not outweigh it, and that the processing in question does not infringe on your fundamental rights and freedoms.
When we pack an order on social media:
If you choose to shop with us, you have the option to request an extra personal touch to your experience. You can request that we film the packing of your order and share the clip on our social media with your name or username included.
For us to be able to process such a request, you must give your consent to such Processing of your Personal Data. Such consent must be provided to us by you as a customer, by explicitly requesting this in the message box at checkout when completing your order. In your message, you must explicitly state that you approve of our publishing either your first and last name or your username on our social media in connection with the publication of the packing video. We strive to fulfill such requests but cannot guarantee that all requests will be accommodated.
When we publish Personal Data in our social media posts, it is always based on an active and valid consent received from the Data Subject in question.
The legal basis for this Processing is the consent you provide. If you withdraw your consent, we will delete the post containing your Personal Data from our social media.
When you enter into an agreement with us When you enter into an agreement with us regarding our goods as a consumer, we gain access to the Personal Data that you provide to us in connection with the conclusion of the agreement. This includes order information as well as your first name, last name, email address, phone number, and delivery address. The data is registered in the systems we use within our business operations.
If you are an individual representing a company that purchases goods directly from us (i.e., a corporate customer), we gain access to Personal Data belonging to the authorized signatory of the represented company and, in some cases, also the contact person and any other employees relevant to the agreement in question. In such cases, we primarily Process the following Personal Data belonging to such Data Subjects:
First Name
Last Name
Email Address
Phone Number
Information about the employer Any other Personal Data that appears in correspondence between us and the Data Subject.
The purpose of the Processing of the above data is for us to be able to enter into an agreement with the contracting party in question and for us to be able to fulfill our contractual obligations. Personal Data is Processed to the extent necessary to fulfill the agreement. The possible consequence of not providing such information is that we cannot enter into or fulfill the agreement. Legal basis for Processing Personal Data: Contract.
Order ID and order history are processed by us each time our customer places an order with us, so that we can follow up on the matter, protect our contractual rights, and our other legitimate interests. The processing also takes place to handle any warranties, returns, and to recommend similar products that may be of interest to the customer. Legal basis for Processing: Balancing of interests.
In connection with complaints or right of withdrawal:
In the event of any complaints regarding our goods or invocation of the right of withdrawal, we Process the order ID and order history, as well as necessary Personal Data belonging to the Data Subject making the complaint, in order to handle the complaint case and otherwise fulfill our obligations under applicable legislation.
In the event that we make a payment to the Data Subject due to a completed complaint about our goods, we are legally obliged to Process the Data Subject's Personal Data for accounting purposes. Legal basis for the above Processing: Legal obligation.
In connection with the fulfillment of agreements:
We Process first name, last name, phone number, email address, order ID, and delivery address to be able to deliver the goods you have ordered and for us to otherwise be able to fulfill the agreement with you. Legal basis for the above Processing: Contract.
When managing our customer relationships:
Our customers can participate in a survey or leave a review regarding our goods, and in such cases, the Personal Data that customers provide in connection with the survey or in the review is Processed. Examples include name, email, survey responses, and/or the written review. The processing is based on our legitimate interest in analyzing and developing our business. Legal basis for Processing Personal Data: Balancing of interests.
Assume that we are required by applicable law to notify you of changes to our Privacy Policy or our terms of purchase. In that case, we Process the following Personal Data belonging to the Data Subjects: name, email address, phone number, order history. The processing is necessary to fulfill a legal obligation. Legal basis for Processing Personal Data: Legal obligation.
Newsletter You can consent to receive newsletters from us by giving your active consent for us to Process your email address to send you newsletters. Providing your email address to us for this purpose is voluntary, meaning it is not a statutory or contractual requirement or a requirement necessary to enter into an agreement with us, and you are not obliged to provide your email address, but the possible consequence of not providing your email address to us is that we will not send you our newsletters.
You can unsubscribe at any time by clicking the unsubscribe link in the newsletter and thereby withdraw your consent. If you withdraw your consent, we will not continue to send you newsletters.
Legal basis for the above Processing: Consent.
We may also send newsletters to your email address that you have previously provided to us in connection with entering into an agreement with us regarding the purchase of our goods.
The processing of your email address then takes place for marketing purposes, supported by our legitimate interest and with the balancing of interests as the legal basis, to send you information about our business and our goods that we believe may be of interest to you.
Unsubscribe from newsletters:
If you no longer wish to receive newsletters or marketing from us via email, you can object to this at any time by clicking the unsubscribe link at the bottom of each email.
If you unsubscribe from the newsletters, you will be removed from the email list for newsletter recipients, but your email address will remain in the database with a block for receiving newsletters. The purpose of this is to ensure that you do not receive further newsletters from us.
If you wish your email address to be deleted also from the block list, you can contact our support via email and request this. You are hereby informed that if your email address is deleted from the block list, it means that you may receive newsletters from us again if you or someone else registers your email address to receive newsletters again.
In our assessment, we have a legitimate interest in the Personal Data being Processed for the purposes mentioned above. The processing is necessary for a purpose related to our legitimate interest, and your interest in the protection of your Personal Data does not outweigh it. Our assessment is that the processing in question does not infringe your fundamental rights and freedoms.
Legal basis for the above Processing: Balancing of interests.
In connection with our accounting:
We Process accounting records within the scope of our business, such as invoices, receipts, which we are obliged to Process and store according to the requirements of the Swedish Tax Agency and/or applicable legislation, such as the Accounting Act (1999:1078).
Accounting records and vouchers may in some cases contain Personal Data, such as name, billing address, order information, and any other contact details belonging to living individuals (e.g., customers, authorized signatories, etc.). Such records are stored for as long as required by law and/or the Swedish Tax Agency. Legal basis for the above Processing: Legal obligation.
Other purposes for our Processing of Personal Data:
Legal obligation: If a law, court, or government decision obliges us to Process specific Personal Data, the Processing takes place on the basis of a legal obligation as the legal basis. In such cases, the Processing only occurs to the extent necessary for us to fulfill our legal obligations. In this case, we only Process necessary Personal Data for as long as the law requires it (in accordance with the principle of storage limitation).
Balancing of interests: Based on our legitimate interest, we Process Personal Data for the following purposes:
Protection of our rights and property: to protect our rights and property, enforce our applicable terms and policies, and prevent fraud or other illegal activities.
Data analysis: to improve our marketing, digital channels, and our goods. This includes analyzing data to measure and optimize the effectiveness of our marketing campaigns.
Development and maintenance: to keep our services, product offerings, and digital channels updated and relevant and to develop our business in general. This includes identifying and prioritizing areas for improvement.
Feedback and incident management: to address issues and improve our goods and processes by collecting, managing, and investigating comments, feedback, and any incident reports submitted.
Statistical analysis: to compile statistics, reports, and other investigations into the performance and use of our digital channels, which helps us understand trends and insights.
Below is a summary of the data that we may Process for the execution of the purposes mentioned above:
Information provided by customers via comments, feedback, and incident reports.
Customer contact details, such as name, email, phone number, and address.
Information about the frequency and use of our digital communication channels, such as website and social media.
We have determined that we have a legitimate and justified interest in Processing Personal Data for the purposes stated above to operate our business, develop, improve, and analyze our goods, provide administration and support, etc., and that our legitimate interest does not constitute an infringement of the Data Subject's fundamental rights and freedoms. Legal basis for the Processing of Personal Data: Balancing of interests.
STORAGE LOCATION
We always strive to Process Personal Data within the European Union (EU) or the European Economic Area (EEA). However, in certain situations, Personal Data may be transferred to and processed in countries outside the EU/EEA. As we are committed to always protecting Personal Data, we will take all reasonable legal, technical, and organizational measures to ensure that Personal Data is handled securely and with an adequate level of protection comparable to and at the same level as the protection offered within the EU/EEA.
When such transfers occur, we take appropriate measures to ensure that Personal Data receives a level of protection consistent with the requirements of EU data protection legislation. These measures may include obtaining your explicit consent, implementing agreements with the receiving party containing standard contractual clauses (SCC) approved by the European Commission, or verifying that the recipient country has adequate data protection laws in place.
We will always strive to maintain the security and confidentiality of your Personal Data, regardless of where it is Processed, and we will ensure that all transfers comply with applicable data protection laws.
STORAGE PERIOD
We Process Personal Data for as long as necessary to fulfill the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements, in accordance with the principle of storage minimization. The exact duration of the storage period depends on the type of Personal Data and the purpose for which it was collected.
Personal Data collected in connection with entering into an agreement will be stored in our customer or supplier register for the duration of the agreement and for a period of four (4) years thereafter.
When we store Personal Data for purposes other than our contractual obligations, e.g., to comply with money laundering, accounting, and statutory capital requirements, we only store the data for as long as it is necessary and/or legally required for each purpose.
We may also delete Personal Data at your request if we do not need to Process the Personal Data in question to fulfill contractual or legal obligations.
When Personal Data no longer needs to be stored, it will be deleted or anonymized.
In the event of a claim being directed against us, we may retain Personal Data until the expiry of the statutory limitation period. Similarly, in the event of an ongoing dispute, relevant Personal Data will be stored until the dispute has been resolved. We ensure compliance with applicable laws and regulations regarding the storage of Personal Data under these circumstances.
SHARING OF PERSONAL DATA
We prioritize the protection of your Personal Data and maintain strict confidentiality. However, it is important to note that to effectively operate and conduct our business, we may need to share your Personal Data with selected companies that have expertise in their respective fields or if it is necessary for us to comply with applicable law (including social, labor, or tax legislation). In such cases, we will ensure that these companies act as our trusted partners and comply with strict confidentiality and data protection standards.
All sharing of Personal Data takes place in accordance with applicable data protection laws and regulations, with a focus on protecting your rights and privacy.
We may also share aggregated data, which consists of anonymous data, with third parties. This aggregated data is derived from information collected through our digital channels or in connection with various market research, and may include statistics on internet traffic or geographical location data related to service use. It should be noted that the aggregated data does not contain any information that can be used to identify individuals and therefore does not constitute Personal Data.
We may disclose Personal Data to the recipients listed below to achieve the purposes stated in section 6 (Specific processing activities) and described below.
Authorities:
We may provide necessary information to authorities, such as the police, tax authorities, or other authorities, if we are legally obliged to disclose or share Personal Data for us to fulfill our legal obligations. Personal Data may also be disclosed to authorities in response to lawful requests or when it is necessary to prevent, detect, or investigate criminal activity. This disclosure is made to protect our and other relevant parties' property, interests, and safety.
Suppliers: We may share Personal Data with our suppliers and subcontractors, who in some cases also act as our data processors or sub-processors and strictly follow our instructions and implement appropriate security measures, to:
Protect and safeguard our legal interests.
Fulfill our contractual and legal obligations.
Detect and prevent technical, operational, or security problems.
Provide and improve our goods. Provide, improve, and maintain our digital channels.
We have carefully selected each of our service providers based on their expertise in delivering the specific goods required, as well as their ability to handle your Personal Data. These providers have demonstrated sufficient guarantees to implement necessary technical and organizational measures in accordance with the requirements of GDPR and our own data protection standards.
We collaborate with various types of categories of data processors, including:
Server and hosting companies responsible for the infrastructure supporting our website and web agency.
Cloud services to efficiently manage our business operations, improve productivity, streamline workflows, and ensure secure access to business resources from various locations.
Email clients that facilitate email communication.
Business systems for storing and organizing business-related data and accounting firms.
Companies that help conduct various surveys on our behalf and provide data analysis and insights.
Other companies involved in delivering our goods and supporting our business operations.
Before disclosing any Personal Data to such service providers, we enter into a Data Processing Agreement with them in accordance with the provisions of the GDPR (including SCC if Personal Data will be Processed outside the EU/EEA), to ensure secure and proper Processing of Personal Data.
Other third parties: We may disclose Personal Data to legal advisors, banks, auditors, and other partners in accordance with applicable data protection legislation if it is done for us to fulfill legal obligations, contractual obligations, or to fulfill our legitimate interest.
In connection with or during negotiations concerning a transfer of our company's assets, merger, sale, financing, or acquisition of all or part of our business, Personal Data may be disclosed to the potential buyer or seller involved in such transactions, including their personnel/suppliers.
We have concluded that we have a legitimate interest in Personal Data being Processed for the purposes stated above, and that our legitimate interest does not constitute an infringement of your right to integrity and privacy.
Legal basis for the above Processing: Balancing of interests.
In some cases, we may share certain Personal Data with a third party, if the third party has a legitimate interest in Processing the Personal Data in question. It is important to note that in such cases, the third party is considered an independent Personal Data Controller with regard to its own Processing of the shared Personal Data in question, and the third party is responsible for complying with all relevant data protection legislation regarding their Processing of Personal Data, including informing the Data Subject about their Processing activities.
YOUR RIGHTS
Below is a summary of your rights as a Data Subject under GDPR:
Right to information: You have the right to receive information about our collection and use of your Personal Data. This includes information about the purposes of the Processing, which categories of Personal Data are affected, and any Third Parties with whom your Personal Data may be shared.
Right to access: You have the right to access your Personal Data held by us. You can request information about the Processing of your Personal Data, obtain a copy of the Personal Data in a machine-readable format (provided there is no applicable exception to the right of access) and be informed about the safeguards for cross-border transfers. However, this does not mean that you have the right to receive the documents containing the Processed Personal Data.
Right to rectification: You have the right to request the rectification of inaccurate or incomplete Personal Data about you that we Process. If we Process Personal Data about you that is inaccurate or incomplete, we will, at your request or on our initiative, supplement, correct or delete the Personal Data in question. Once we have corrected the Personal Data, we will notify you, provided it is not too burdensome for us.
Right to erasure: Under certain circumstances, you have the right to have your Personal Data erased. This applies, for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw your consent and there is no other legal basis for the Processing. However, legal obligations may prevent us from immediately deleting parts of the Personal Data. These obligations arise from accounting and tax legislation, banking and anti-money laundering legislation, and possibly consumer law. When we delete Personal Data at your request, we will inform you after the deletion, provided this is possible and not too burdensome for us.
Right to restriction of processing: You have the right to restrict the Processing of your Personal Data under certain conditions. This means that your data can only be stored and not further Processed, or only Processed for specific and limited purposes. An example of when this right applies is when the Personal Data we Process needs to be corrected. If you request us to correct your Personal Data, you can also ask us to restrict the Processing of the specific data until it has been corrected. We will inform you when the restriction ceases.
Right to data portability: You have the right to receive your Personal Data in a structured, commonly used and machine-readable format. You can also request the transfer of your data to another Personal Data Controller, where technically feasible. This right only applies if the Processing of Personal Data is carried out automatically and only if our Processing is carried out to fulfill an agreement to which you are a party or based on your consent.
Right to object: You have the right to object when your Personal Data is Processed after a balancing of interests. If you object under this right, we shall cease the Processing, unless our interest outweighs your interests, rights and freedoms. However, you always have the right to request that your Personal Data not be Processed for direct marketing. Such objections can be made at any time. If an objection is made against direct marketing, the Personal Data can no longer be Processed for such purposes and we will inform you when we have deleted the Personal Data if you request it.
Right not to be subject to automated decision-making: You have the right not to be subject to decisions based solely on automated Processing, including profiling, if these decisions significantly affect you. Exceptions apply if the decision is necessary for the performance of a contract or is permitted by law. If an automated decision has been made, with or without profiling, you can request that it be reviewed or contested. We do not carry out any automated decisions, neither with nor without profiling.
HOW TO EXERCISE YOUR RIGHTS
You are welcome to contact us via the contact details provided below if you wish to invoke any of the above rights regarding your Personal Data that we Process.
Exercising these rights is free of charge, provided that your requests are not excessive, repetitive or manifestly unfounded. In such cases, we have the right to charge a reasonable fee for handling your request or to refuse to carry out your request.
Before we handle or respond to your request, we may ask for additional information from you if necessary for us to confirm your identity.
We will inform you about our handling of your request without undue delay and at the latest within one month of receiving the request. If the request is complex or if, for example, we have received a large number of requests, this period may be extended by another two months. In such cases, we will notify you of the extension within the first month after receiving your request.
It is important to note that the rights are subject to certain limitations and conditions under GDPR. Some of the rights only apply in certain situations and only if it is legal and possible for us to fulfill your request.
If we cannot fulfill your request due to applicable law or other exceptions, we will notify you of this and inform you of the reasons why we cannot fulfill your request, subject to the limitations provided by law.
CHANGES
We review the content of this Privacy Policy at least once a year to ensure that the information is accurate and up-to-date. The content may be updated as needed, with or without prior notice. For example, if we need to clarify something due to changes or new legislation, or if our Processing of Personal Data changes.
You are responsible for reviewing the content of the current Privacy Policy and keeping yourself updated on any changes. We will notify you if we make significant changes, provided that such an obligation to inform is mandatory under applicable law.
The applicable version is always published on the Website.
QUESTIONS OR COMPLAINTS
If you have any questions regarding the content of this Privacy Policy or our Processing of Personal Data, or if you are dissatisfied with our Processing of your Personal Data, you are always welcome to contact us via the following contact details:
Company: Värmlands Auktionskammare Aktiebolag
Org. no: 559410-2211
Email: info@dartkungen.se
Phone: 076-100 77 11
Postal address: Sågarevägen 4, 669 32 Deje
If you are not satisfied with how we Process your Personal Data, you also have the right to file a complaint with the relevant supervisory authority. Our supervisory authority is the Swedish supervisory authority:
Name: Integritetsskyddsmyndigheten (IMY).
Phone: 08-657 61 00.
Email: imy@imy.se.
Postal address: Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm.
Please note that depending on your country of residence, there are different supervisory authorities you can contact regarding questions or complaints about the Processing of your Personal Data. You can find the different supervisory authorities in the EU Member States via the following link: https://edpb.europa.eu/about-edpb/about-edpb/members_en