Close
Back
Close
Back
Close
Back
Close
Back
Close
Back
Close
Back
Close
Back
Close

Detailed information on the processing of personal data

When we process your personal data

See below for detailed information on the categories of personal data we process, the legal basis for this processing, and how long we store the data for each purpose.

Processing orders of goods and services

Personal data

  • Identity information
  • Communication
  • Contact information
  • Order information
  • Organisational information

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of managing orders of goods and services.

Fulfilment of agreements. If the order is made by an individual firm, we process the data to fulfil our agreement with you.

Retention period: Personal data is retained for this purpose for as long as is necessary in order to process your order and for a period of 6 years thereafter in order to manage and defend legal claims. Personal data in accounting material is stored for 7 years calculated from the end of the calendar year in which the relevant financial year ended in order for us to fulfil our legal obligations.

Managing the customer or supplier relationship

Personal data

  • Identity information
  • Communication
  • Contact information
  • Order information
  • Organisational information

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of managing our customer or supplier relationships.

Fulfilment of agreements. If the agreement has been concluded with an individual company, we process the data to fulfil our agreement with you.

Retention period: Personal data is retained for the period of the customer or supplier relationship and for a period of 6 years thereafter in order to manage and defend legal claims.

Following up and evaluating the customer or supplier relationship

Personal data

  • Identity information
  • Order information
  • Organisational information

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of following up on and evaluating our customer or supplier relationships or collaborations.

Retention period: Personal data is retained for the period required for it to be de-identified in order to produce statistics. Statistics which do not contain personal data are stored indefinitely or until the statistics are deleted.

Communication between employees and external parties

Personal data

  • Identity information
  • Audio and video material
  • Communication
  • Contact information
  • Order information
  • Organisational information

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of facilitating business communication between employees and external parties.

Retention period: Personal data is retained for this purpose for a period of 1 year calculated from the most recent communication in each conversation and thereafter for a period of 6 years in order for us to fulfil our legitimate interest of managing and defending any legal claims.

Communication what we offer and providing offers via various channels

Personal data

  • User-generated data
  • Audio and video material
  • Identity information
  • Contact information
  • Order information
  • Technical data

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of communicating and distributing offers, via various channels, regarding our products and services.

Retention period: Personal data is retained for this purpose throughout the customer relationship and for a period of 12 months thereafter in order for us to fulfil our legitimate interest of re-recruitment. If there is no customer relationship, the data is retained for this purpose for a period of 3 months calculated from when the data was collected.

Managing our newsletters

Personal data

  • Identity information
  • Contact information

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of managing our newsletters.

Retention period: Personal data is retained for this purpose until further notice and until you unsubscribe from the newsletter.

Carrying out training, events, and other activities

Personal data

  • Audio and video materials
  • Health data
  • Identity information
  • Communication
  • Contact information
  • Organisational information
  • Training information

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of carrying out training, events, and other activities.

Explicit consent. Any special categories of personal data relating to health are processed only on the basis of your explicit consent, which is obtained when you register for training, an event, or an activity carried out by us.

Retention period: Personal data is retained for this purpose for the time necessary to carry out the activity and for a period of 12 months thereafter to fulfil our legitimate interest in following up and evaluating the activity, as well as to invite you to new activities. Personal data in accounting material is stored for 7 years calculated from the end of the calendar year in which the relevant financial year ended in order for us to fulfil our legal obligations . Any health information collected for this purpose is retained only for the period necessary in order to carry out the activity and is subsequently deleted. Audio and video material that is collected is retained until further notice and until the material is deleted if this is necessary for us to fulfil our legitimate interest of documenting the activity. 

Answering questions

Personal data

  • Identity information
  • Communication
  • Contact information
  • Order information
  • Organisational information

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of responding to your question.

Retention period: Personal data is retained for this purpose throughout the customer relationship and for a period of 6 years thereafter in order to manage and defend legal claims. If there is no customer relationship, personal data is retained for this purpose for a period of one month from the most recent communication in each conversation.

Conductiong surveys

Personal data

  • Identity information
  • Contact information

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of carrying out surveys for the purpose of collecting your views on our business, products, and services.

Retention period: Personal data is retained for this purpose during the period that the survey is carried out and for a period of 3 months thereafter in order for us to compile the responses in a report. Statistics which do not contain personal data are stored indefinitely or until the statistics are deleted.

Providing our apps and services

Personal data

  • Identity information
  • Communication
  • Contact information
  • Organisational information
  • Profile data
  • Technical data

Legal basis

Fulfilment of agreements. Processing is necessary in order to fulfil the applicable terms for the app or service.

Retention period: Personal data is retained for this purpose for as long as your user account is active, after which the data is deleted.

Communication about our apps and services

Personal data

  • Identity information
  • Contact information
  • Profile data
  • Technical data

Legal basis

Fulfilment of agreements. Processing is necessary in order to fulfil the applicable terms for the app or service.

Retention period: Personal data is retained for this purpose for as long as your user account is active, after which the data is deleted. 

Enabling functionallity on our websites

Personal data

  • Technical data

Legal basis

Legitimate interest. Processing is necessary in order to fulfil our legitimate interest of enabling the functionality of our websites for the purpose of providing a better user experience.

Retention period: Personal data is retained for this purpose throughout your visit and for a period of 12 months thereafter in order for us to fulfil our legitimate interest of providing a better user experience. 

Following up and evaluating the use of our websites, digital channels, apps and services

Personal data

  • User-generated data
  • Technical data

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of following up on and evaluating the use of our websites, digital channels, apps, and services.

Retention period: Personal data is retained for this purpose for a period of 3 months. Statistics which do not contain personal data are stored indefinitely or until the statistics are deleted.

Recording phone calls for training and quality purposes

Personal data

  • Audio and video materials
  • Identity information
  • Communication
  • Contact information
  • Organisational information

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of ensuring the necessary technical functionality of our websites, apps, and services.

Retention period: Personal data is retained for this purpose for a period of 1 month from the time of the conversation.

Ensuring necessary technical funtionality and sercurity

Personal data

All relevant categories of personal data.

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of ensuring the necessary technical functionality and security of our websites, apps, and services.

Retention period: Personal data is retained for this purpose for as long as your user account is active. Personal data in logs is retained in order to fulfil our legitimate interest of troubleshooting and incident management for a period of 12 months from the log entry time.

Managing and defending legal claims

Personal data

All categories of personal data that are necessary for managing and defending a legal claim in an individual case.

Legal basis

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of managing and defending legal claims.

Retention period: Personal data is retained for the period required in order for us to manage and defend the legal claim.

Fulfilling legal obligations

Personal data

All categories of personal data as are necessary for fulfilling the legal obligation.

Legal basis

Fulfilling a legal obligation. Processing is necessary in order for us to fulfil our legal obligations.

Retention period: Personal data is retained for the period required in order for us to fulfil each of our legal obligations. By way of example, personal data in accounting material is retained for 7 years from the end of the calendar year in which the relevant financial year ended.

When we share your personal data with different recipients

See below for detailed information on the categories of personal data we share with different categories of recipients for various purposes and on which legal basis we do this.

Group companies

Processing orders of goods and services

Personal data

  • Identity information
  • Communication
  • Contact information
  • Order information
  • Organisational information

Legal basis for the transfer

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of managing orders of goods and services.

Communicating what we offer and providing offers via various channels

Personal data

  • Identity information
  • Contact information

Legal basis for the transfer

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of communicating and providing offers, via various channels, regarding our products and services.

Partners

Carrying out training, events, and other activities

Personal data

  • Identity information
  • Communication
  • Contact information
  • Organisational information

Legal basis for the transfer

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of carrying out training, events, and other activities.

Social networking platforms

Communicating what we offer and providing offers via various channels

Personal data

  • User-generated data
  • Identity information
  • Contact information
  • Technical data

Legal basis for the transfer

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of communicating and distributing offers, via various channels, regarding our products and services.

Communicating about our apps and services

Personal data

  • Identity information
  • Contact information
  • Technical data

Legal basis for the transfer

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of communicating about our apps and services.

External parties

Communication between employees and external parties

Personal data

  • Identity information
  • Audio and video material
  • Communication
  • Contact information
  • Order information
  • Organisational information

Legal basis for the transfer

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of facilitating business communication between employees and external parties.

Other recipients

Purpose

To manage a merger or sale of the business

Only the personal data that is necessary for this purpose is shared with the recipient.

Legal basis for the transfer

Legitimate interest. Processing is necessary in order for us to fulfil our and the buyer’s legitimate interest of completing the sale or merger.

Managing and defending legal claims

Only the personal data that is necessary for this purpose is shared with the recipient.

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest of managing and defending legal claims.

Fulfilling legal obligations

Only the personal data that is necessary for this purpose is shared with the recipient.

Fulfilling a legal obligation. Processing is necessary in order for us to fulfil our legal obligations.

To respond to a legal request

Only the personal data that is necessary for this purpose is shared with the recipient.

Legitimate interest or to fulfil a legal obligation. To the extent that we are obliged to respond to a legal request, personal data is processed in order to fulfil this legal obligation. Otherwise, processing is based on a balance of interests when it is necessary to fulfil our and the requester’s legitimate interest in our responding to the enquiry.

Categories of personal data

In the table below you will find further information on the categories of personal data we process.

Category of data

Example of data

User-generated data

Data that you provide when using our websites, digital channels, apps, and services.

Data on clicks, visits, and your behaviour on our websites, digital channels, apps, and services

Audio and video materials

Data such as your image when photographed or your voice when recorded.

Photography, film, audio file.

Health data

Data on your health.

Allergies or other intolerances.

Identity information

Data that makes it possible to identify you.

Name, personal identity number, username, IP address.

Communication

Data included in communications with us.

E-mail content.

Contact information

Data that enables us to contact you.

Address, phone number, e-mail address.

Order information

Data on an ordered product or service.

Product, service, delivery time, price.

Organisational information

Data related to your organisation.

Title, name of company or organisation, address of the person or organisation.

Profile data

Data about your user profile when using our apps and services.

Profile settings.

Technical data

Technical data related to the device you use when using our websites, apps, and services.

App version, device information, operating system, browser, screen size, internet connection.

Training information

Data related to training you have taken part in.

Data about completed training.

Back to store
Close