Our data protection work

At Lifts All , we care about your privacy, and we strive for a high level of security in our data protection work. This policy describes how we collect and use personal data, and how we work to protect the information using both technical and organizational safeguards. Personal data means any information that can be linked to you as a living natural person. The policy also describes your rights in relation to our processing of your personal data, and how to exercise those rights. Lifts All processes personal data in accordance with the General Data Protection Regulation (Regulation No 2016/679 of the European Parliament and of the Council, also referred to as "GDPR" after its English name General Data Protection Regulation).

The data controller is Lifts All AB, organization number 556208-4656, with address Passadvägen 10, 177 70 Järfälla. (For information about the processing of personal data for you who work at Lifts All , we refer instead to Lifts All's data protection policy for employees and consultants.)

The personal data we process depends on the relationship you have with us. In the table below, we have described the most common categories of personal data we process. We collect the data either directly from you, from our partners and suppliers or from publicly available registers. It may also be collected through digital channels, for example when you visit one of our websites. In some cases, we collect personal data from you but where the data relates to people other than you. For example, if you buy a product from us to be delivered to someone else. In these cases, we assume that you who provide us with the personal data of others have their consent or have some other valid reason for doing so.

• Name
• Position
• Company/organization
• Contact details
• Billing information
• Delivery history
• History of dialog

• Name
• Position
• Company/organization
• Contact details
• Billing information
• Delivery history
• History of dialog

• Name
• Position
• Company/organization
• Contact details
• Billing information
• Delivery history
• History of dialog

In addition to the examples above, we may collect information about IP addresses and the type of device you use, for example, when you visit one of our websites. Lifts All websites also use so-called cookies when you visit our websites.

Your personal data may also appear in various types of data logs that are necessary for several of our digital systems to function properly. This may include, for example, logs over , incoming and outgoing emails, or phone calls.

Lifts All processes personal data for several different purposes. The main purposes are so that we can:

• Manage orders, purchases, customer service issues and communication with customers and suppliers
• Document, evaluate, develop and promote our activities
• Fulfilling our commitments as a partner
• Preventing fraud and preventing crime

In the case of marketing mailings, you will always have the opportunity to decline further similar mailings from us, a so-called opt-out.

Any processing of personal data by Lifts All is justified on one or more of the following legal grounds:

Example: We need to process certain personal data to meet the requirements of the Accounting Act.

Example: If you buy a product from Lifts All , we need to obtain certain personal data from you in order to deliver the product, carry out installation and service, and invoice the order.

Example: If you work in a particular industry and Lifts All has a product designed for that industry, we may contact you to market the product. This is because we believe that our interest as a company in marketing our products outweighs your interest as a professional in not being targeted by marketing. Contact us you would like more information about the balancing of interests we have performed.

Example: When you sign up for one of our newsletters, we ask for your consent to process your personal data. In cases where processing is based solely on consent, you may withdraw your consent at any time and request that we stop the relevant processing. Contact us you wish to withdraw your consent.

If you are in contact with us in your professional role, for example as a customer or supplier, we will store your personal data. To protect your personal data against loss, damage or unauthorized processing, we at Lifts All are constantly working to maintain and improve a variety of security measures. These include physical protection (for example, for people, IT infrastructure and buildings), information security protection (for example, against intrusion into IT systems, virus attacks and through backups) and organizational protection (for example, that only the people who need it in their work have access to your personal data).

We keep your personal data for as long as necessary to fulfill the purposes described above. After that, the data will be securely deleted or de-identified so that it can no longer be linked to you. If you want us to stop storing your personal data earlier than these times, you can request this, see the section below on "Your rights".

Lifts All will never sell your data to third parties unless we have your consent to do so. However, we may disclose your personal data to the following categories of recipients:

Example: Lifts All may provide necessary information to authorities such as the police or the tax authorities if we are required by law to do so.

Example: If Lifts All engages another business to perform certain services for us - for example, transportation, telemarketing or operation of IT systems - this may mean that either that business collects personal data for us, or they need access to personal data that Lifts All has collected. In this case, we are the data controller and the other organization is the processor. We then enter into a data processing agreement in order to ensure that the personal data is handled correctly and securely.

Lifts All's basic principle is that we do not transfer personal data to operations outside the EU/EEA. The exception is operations conducted in a third country that is considered to have an adequate level of protection according to the European Commission's decision under Article 45 of the GDPR.

Under the GDPR, you as a data subject have a number of rights vis-à-vis Lifts All. If you wish to exercise these rights, please send an e-mail to privacy@liftsall.se.
You can also send a letter to:
Lifts All AB
Attn: Data Protection
Passadvägen 10
177 70 Järfälla

Whether your request is received online or by post, we will respond within 30 days of being able to verify your identity. To protect you and your personal data, Lifts All will not disclose the data to anyone whose identity cannot be verified. If, for whatever reason, we are unable to fulfill your request, we will provide a justification and explain why it was not possible. For all of the rights below, if you wish, you can request that we extend your request to our partners, if we have shared your data with any of them.

You have the right to receive confirmation as to whether Lifts All handles your personal data, and if so, to receive a copy over personal data in question. In most of Lifts All’s systems, your email address serves as your identifier, so we will normally send you a digital copy of the data to your email address.

Lifts All strives to ensure that all information processed by us is accurate. If you discover that there are inaccuracies in your data, you can request that we correct the incorrect data. We will then correct the errors.

If you want to obtain your personal data from Lifts All in order to use it elsewhere, you may have the right to obtain it in a structured, commonly used and machine-readable format and transfer it to another controller. However, this requires that the transfer is technically feasible, that the other party accepts the formats we provide and that it can be done with reasonable effort for us. Given the limited amount of personal data that Lifts All processes, in almost all cases it will be easier for you to provide the other party with your personal data yourself. Please also note that this right is limited to data processed on the basis of your consent or to fulfill a contract with you, and only applies to personal data that you have provided yourself.

If you want Lifts All to process your personal data only for certain limited purposes, you can request a restriction of processing. This applies, for example, if you believe that the data is incorrect, that our processing is unlawful, that we no longer need the data for the purposes, or when you have objected to processing with legitimate interest pending verification of whether our interest outweighs yours. We will then mark the data to ensure that it is not subject to further processing and cannot be amended.

If you want us to cease all processing of your personal data, you can, in some cases, request its erasure. We will then delete all data that can be linked to you as a person. When the deletion is completed, you will receive a confirmation of this via e-mail, and then we will also delete the sent e-mail.
Please note that deletion means that we remove all information about you, including the information that you once wanted to be forgotten. If you wish, we can instead keep your email address in one place, namely on the Forgotten List of people who do not want to appear in our systems at all. If at some point in the future we receive your e-mail address from another source, for example from an organization of which you are a member, we can immediately see that you do not want any mailings from Lifts All. You will then not have to request deletion of your data again.

If you believe that Lifts All is processing your personal data in violation of applicable law, or that we have handled a request from you incorrectly when you wanted to exercise your rights as described above, you can report this to the Data Inspectorate (Integritetsskyddsmyndigheten).

Do you want to know if we have any personal data stored about you? Or have you noticed that something is wrong with the data we hold about you? You can use our data protection service to submit a request, for example to correct or delete your personal data. Contact privacy@liftsall.se.