This privacy policy describes how Hexagem AB (hereinafter referred to as “Hexagem”) processes personal data collected via our website, in connection with customer, supplier and partner relationships, and in response to business enquiries. Personal data refers to any information that can be directly or indirectly linked to an identifiable natural person, such as name, address, telephone number or email address. This policy applies to suppliers, customers, partners and others who interact with Hexagem. Please read this policy carefully to understand how we process and protect your personal data.
About Hexagem
Hexagem AB is a company registered in Sweden (reg. no. 559039-4465) with its registered office at Ole Römers Väg 1 H, SE-223 63 Lund. Hexagem is the data controller for the processing of personal data described in this policy.
Processing of personal data
All processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, GDPR) and other applicable data protection legislation. We take appropriate technical and organisational measures to protect your personal data and apply systematic security procedures to prevent unauthorised access. We work continuously with organisational and technical security measures to ensure an appropriate level of protection for personal data.
Categories of personal data
We may collect and process the following categories of personal data:
- Data related to business relationships, including if you enter into an agreement with us or act as a supplier or partner. This may include name, email address, telephone number, address, company details, digital user identity, payment and billing details, and authorisation details such as signatory rights and powers of attorney;
- Communication data, if you contact us via email, telephone or by other means. We may store such correspondence and the contact details you provide;
- Automatically collected data, including information about your use of our website and any digital collaboration tools and project management systems, such as IP address, browser type, browser language, pages visited, time spent on pages, number of clicks, and date and time of access.
Purposes and legal basis
We process personal data for the following purposes and on the following legal bases:
Performance of a contract: We process personal data where necessary to perform a contract with you or to take steps at your request prior to entering into a contract, for example to manage customer, supplier or partner relationships, deliver products and services, and handle orders and invoicing.
Legitimate interest: We process personal data on the basis of legitimate interest to respond to and follow up on business enquiries from customers, suppliers and partners, to provide information about products and services relevant to your enquiry, and to ensure that the content on our website is presented in an appropriate manner. We may also use your contact details for limited and relevant follow-up communications, such as information about product updates, offers and invitations to events. Where we rely on legitimate interests, we have carried out a balancing test to ensure that our interests do not override your rights and freedoms. You have the right to object to such processing at any time.
Legal obligation: We process personal data where necessary to comply with legal obligations, for example under applicable accounting and financial reporting legislation.
Retention period
We retain your personal data for as long as is necessary for the purposes for which it was collected. Personal data processed for the performance of a contract is retained for the duration of the contract and thereafter in accordance with applicable limitation periods. Data processed on the basis of a legal obligation is retained for the period required by law, for example under the Accounting Act (normally seven years). If you contact us without entering into a contractual relationship, we normally retain your contact details and enquiry details for a maximum of 18 months from your last interaction with us. Thereafter, the data is deleted or anonymised, unless a longer retention period is necessary to handle an ongoing matter or to establish, assert or defend legal claims. We carry out regular reviews to ensure that personal data is not retained for longer than necessary.
Recipients and transfers
We do not sell your personal data to third parties. However, we may disclose personal data to third parties where necessary to comply with legal obligations, to protect Hexagem’s rights or security, or to fulfil our contractual obligations. Hexagem may share and store personal data with service providers acting as data processors on our behalf, such as IT and system providers (e.g. hosting, cloud services and business systems), communication service providers (e.g. email distribution tools) and other administrative service providers. Such processing is carried out in accordance with applicable data protection legislation. When transferring personal data to a country outside the EU/EEA, we use the European Commission’s standard contractual clauses or other approved safeguards in accordance with the GDPR.
Changes to this policy
We may update this privacy policy from time to time. The latest version is always available on our website.
Your rights
Hexagem is the data controller for the processing of personal data described in this policy. You have the right to obtain information about what personal data Hexagem holds about you. If you wish to receive a copy of the data we hold about you, please contact us using the contact details at the bottom of this page. If you believe that information about you is incorrect or misleading, you should contact us immediately. Under certain circumstances, you also have the right to request that data be erased and to withdraw your consent if the processing is based on consent. We want to ensure that your personal data is accurate and up to date. You may request that we correct or delete information that you consider to be incorrect by contacting us. Furthermore, under certain circumstances, you have the right to request a restriction on the processing of your personal data, as well as the right to receive your personal data in a structured, commonly used and machine-readable format and to transfer this data to another data controller. You have the right to object at any time to the processing of your personal data for direct marketing purposes under the GDPR. This right applies regardless of whether the processing is based on your consent or on our legitimate interest. If you object to the processing of your personal data for direct marketing purposes, we will immediately cease using your personal data for such purposes.
Contact
If you have any questions, comments or complaints regarding Hexagem’s processing of your personal data or this privacy policy, please contact us by email at info@hexagem.se or by post to:
Hexagem AB
Ole Römers Väg 1 H,
SE-223 63 Lund, Sweden.
If you believe that Hexagem’s processing of your personal data contravenes applicable data protection legislation, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), www.imy.se.