Toolbox Sweden AB Privacy Policy for Customers

Toolbox Sweden AB (hereinafter “we,” “us,” or “our”) processes your personal data in accordance with the new General Data Protection Regulation (GDPR) that comes into effect on May 25, 2018 (hereinafter referred to as the Privacy Policy).

In this document, we inform you of your rights as a registered customer with us, as well as how we process and protect your personal information.

1. Personal Data

1.1 We only process the personal data that you provide to us in order to fulfill our contract, or personal data that we receive from others according to 1.2. The collected personal data usually includes:

Contact information; first name, last name, address, email, and phone number.
Personal identification number
Photo documentation as part of our quality assurance.

1.2 We may receive information about you from others whom you have asked for assistance. This could, for example, be a tool retailer or a craftsman from whom you have ordered work.

1.3 We also process relevant information about your transactions with us (purchases, returns, invoicing, etc.).

2. Use of Your Personal Information

2.1 The purpose of collecting your personal information is to fulfill and maintain the contract we have entered into with you for the delivery of products and/or services to you and your household.

2.2 We only handle personal information about you and your household that is relevant and necessary for us to fulfill the Purpose.

2.3 We process your contact information to keep you updated on our offerings and promotions, provided that you have not objected to this.

3. Storage of Your Personal Information

3.1 Your personal information is stored with an external provider selected by us. The company is called Visma (www.visma.se) and will hereinafter be referred to as the “Data Processor.”

3.2 The information is stored on a server within the EU, and your personal information is therefore protected by the General Data Protection Regulation.

3.3 We are responsible for ensuring that your personal information is stored with the Data Processor.

3.4 Together with the Data Processor, we continuously ensure that all necessary technical and organizational security measures are taken to ensure that your personal information is not illegally destroyed or lost. Additionally, we ensure that unauthorized persons do not gain access to process or misuse the information in a manner that violates applicable regulations for the processing of personal information.

4. Sharing

4.1 We may share your personal information with other suppliers and partners, such as shipping companies or your bank, if it is necessary for us to fulfill our contract with you.

4.2 Additionally, we may share your personal information if we need to disclose or share information about you with government institutions.

5. Deletion of Personal Data

5.1 We only store personal data as long as it fulfills the Purpose or is required by law.

5.2 We delete your data when we no longer need it. The information is deleted no later than when the statute of limitations has expired for our liability for completed work, which is currently seven years (according to the Accounting Act).

6. Your Rights

6.1 You always have the right to be informed about the personal information we have registered about you. If you wish to obtain this information, please contact us by email or post. Mark your letter with “GDPR.”

6.2 You also have the right to object to or restrict the processing of your personal data.

6.3 If you have any complaints regarding our processing of your personal data, this should be addressed to the Swedish Data Protection Authority via phone: +46 8-657 61 00 or email: datainspektionen@datainspektionen.se