This External Privacy Notice has been adopted by Ahlsell AB (publ) and applies to our and/or other companies in the Ahlsell Group (together "Ahlsell") processing of personal data relating to you as a (i) visitor of our websites or social media profiles/pages or subscriber to our newsletter or other information from us, (ii) job applicant and (iii) representative of our business customers and suppliers.
1.1 Your privacy is important to us and we strive for a high level of protection in all processing of personal data. Within the EU/EEA, the General Data Protection Regulation (GDPR) applies from May 2018.
1.2 In accordance with applicable data protection legislation, Ahlsell AB (publ), or the Ahlsell Group company otherwise specified as data controller, is responsible for the processing of your personal data as set out below. If you have any questions about this information, or if you wish to exercise any of your rights as set out below, please contact Ahlsell via the contact information listed under Section 6 below.
2. COLLECTION AND PROCESSING OF PERSONAL DATA, INCLUDING LEGAL GROUNDS
2.1.1 The term 'personal data' refers to such information which, directly or indirectly, may refer to you as an individual. Examples of such data are name, image, personal ID number, contact details, IP address, competition entries, selections made, behavior as well as skills, experience and qualifications. Personal data processing refers to any action that we or a third party that we have engaged take with the personal data, such as collection, registration and storage.
2.1.2 Personal data may only be processed for specified and explicitly stated purposes and may not be subsequently processed for any purpose that goes beyond these purposes.
2.2 Websites and social media
2.2.1 We collect personal data such as name, e-mail address and other information which you voluntarily provide. We also automatically receive and store information from your web browser, such as IP address, cookie information and the pages you visit, to log files on our server. We use the information collected to respond to your requests regarding products and services, to improve the content on our websites and the services and newsletters we provide and to develop anonymous usage statistics.
2.2.2 We also use personal data for direct marketing in accordance with law and market practice. We use the information we collect with regard to how you, as a user, use of the websites so that we can analyse search behaviour and be able to provide you with personalised content. Personal data may also be processed indirectly in connection with the development and administration of Ahlsell's IT systems.
2.2.3 We delete collected personal data when the purpose of the processing has been completed.
2.3.1 In addition thereto, we process personal data that you have provided to us in your application for employment with a company of the Ahlsell Group for the purpose of administering the application and contact you during the application period. For example, this may concern name, contact details, personal identity number and information in relation to employment history as well as skills, qualifications and cover letter.
2.3.2 Legal ground: (i) performance of a contract where you ask us to review and administer your application and (ii) legitimate interest to administer the current recruitment process, including for future recruitment purposes.
2.4 Business customers/supplier
2.4.1 We also process personal data that you have provided to us for the purpose of (a) administering the relationship with you in your capacity as signatory or representative of an entity registered as a business customer or supplier with us and (b) sending relevant marketing, invitations and information to the business customer or supplier that you represent. For example, this may concern name, contact details, personal identification number (if the customer/supplier is a sole trader), preferences/interests as well as the history of purchased products and services (for the purpose of providing relevant marketing, invitations and information). The data will be kept until we have been notified that there is a new person and/or representative appointed.
2.4.2 Legal ground: legitimate interest of maintaining the relation with our business partners (business customers/supplier).
3. SECURITY FOR THE PROTECTION OF PERSONAL DATA
3.1 We protect your personal data from unauthorised access, amendment, dissemination or destruction, by implementing appropriate technical and organizational security measures.
4. RESTRICTIONS ON THE DISCLOSURE OF PERSONAL DATA
4.1 We may appoint external partners to perform tasks on our behalf, such as providing IT services or helping with marketing and recruitment, administration of press releases, data analysis or statistics. The performance of these services may mean that our partners, both within and outside the EU/EEA, are able to gain access to your personal data. Companies that process personal data on our behalf must always sign an agreement with us so that we are able to ensure a high level of protection of your personal data even with our partners.
4.2 Special safeguards are taken with regard to partners outside the EU/EEA, such as signing agreements that include the standardized model clauses for data transfers adopted by the EU Commission and which are available on the EU Commission’s website.
4.3 We may also disclose your personal data to third parties, for example the police or other public authorities, if it concerns criminal investigations or if we are otherwise required to disclose such data by law or public authority decision. We will not disclose your personal data to any extent other than described in this section.
5. YOUR RIGHTS AND THE RIGHT TO FILE A COMPLAINT
5.1 Under applicable data protection legislation you are entitled, at any time, to request access to the personal data that is processed about you, to have erroneous personal data corrected, to request that we shall stop processing and delete your personal data, to request that the processing of your personal data is restricted, to exercise your right to data portability, to withdraw consent to particular processing (where such consent has been obtained) and to object to the processing of the personal data. In such event, please contact Ahlsell via the contact details listed below. You are also entitled, at any time, to file a complaint with the relevant supervisory authority if you consider that your personal data has been processed in contravention of applicable data protection legislation.
6. DATA CONTROLLER AND CONTACT DETAILS
6.1 Data controller 6.1.1 Websites, social media and newsletters: The Ahlsell Group company that provides the specific website, social media profile/page or the newsletter is the data controller.
6.1.2 Recruitment: The Ahlsell Group company to which the vacancy relates is the data controller.
6.1.3 Business customers/suppliers: The Ahlsell Group company that has entered into an agreement with the business customer or supplier is the data controller.
6.2 Contact details
6.2.1 If you have any questions on how we process your personal data or want information about further contact details for the data controllers above, please contact us by e-mail or post.
Ahlsell AB (publ) att: Karin Wickström Stümer Rosterigränd 12 117 61 Stockholm
6.3 Our websites may sometimes contain links to external websites or services that we do not control. If you follow a link to an external website, you are encouraged to review the principles for processing of personal data and information about cookies that apply to the website in question.
7. INFORMATION ABOUT COOKIES AND HOW YOU CAN AVOID THEM
7.1.2 Certain cookies from third parties are also used on the websites. Such third party cookies are primarily used to improve your user experience, select language, aggregate statistics about the number of visitors to the websites and obtain data about how the websites are being used, although it may in certain cases be used by a third party for its own purposes.
7.1.3 The table at the end of this External Privacy Notice lists the types of cookies placed on our websites, their function, the purposes for which the data are collected and how long data collected by cookies are kept.
7.2 How to avoid cookies
7.2.2 If your web browser rejects cookies, this may reduce the functionality of the websites.
Last updated: 19 April 2018