Privacy Policy

Introduction

On this page you can read:

How we process your personal data for Subscriptions

How we process your personal data at Events

Press releases and subscriptions

The e-mail address or address or name you give when you subscribe to press releases or financial reports will be transferred to the supplier of the subscription service, Cision (which may change over time), to administrate the service on our behalf. We have entered into a Data Processor Agreement with the suppliers to ensure your personal data is secured.

The data collected in order to send annual reports is stored internally at Clas Ohlson only until the report has been sent.

The legal foundation for data processing is consent.

If you want to end your subscription of press releases and financial reports, please follow the link that you will find in every press release or financial report that you receive from us.

If you have any questions regarding how we process your personal data, or need help ending an subscription, you can find more information in our Privacy Statement or contact us directly using the details below:

Postal address: Clas Ohlson, 793 85 Insjön, Sweden
Email: contact@clasohlson.se
Telephone: +46 (0)247 444 00You may also contact our
Data Protection Officer directly by emailing: privacy@clasohlson.se

Events

Who is the Data Controller?

Clas Ohlson AB, company registration number 556035-8672, is the data controller for the processing of your personal data in relation to events organised by Clas Ohlson.

What personal data do we collect and process?

During events organised by Clas Ohlson – such as store openings and annual general meetings – we may record video and take photographs, which involves the collection of audio and visual data in which you may be identifiable. If we intend to photograph or record an event, you will be notified accordingly.

If an event requires registration, we will also collect your contact details, such as your name, address, email address and telephone number.

What is the purpose of processing your personal data?

When we record audio and visual content at events, Clas Ohlson processes such material for the purposes of informing about, documenting, and promoting Clas Ohlson and its events, as well as for planning and publicising future events. The material may be used both internally and externally via our website, social media channels, marketing materials, and press releases. In some instances, the material may also be archived for the purpose of documenting the history of Clas Ohlson.
If we intend to photograph or record at an event, you will be informed in advance.

When we collect your contact information in connection with a registered event, we process your personal data in order to manage and administer the event – for example, to confirm attendance, provide relevant information, and grant you access to the venue.

What is the legal basis for processing your personal data?

The legal basis for our processing of your personal data is our legitimate interests. This means that we have assessed that our interest in processing your data for the aforementioned purposes outweighs any potential intrusion into your privacy.
This assessment particularly considers the fact that you will be informed of any photography or filming in advance, will have the opportunity to opt out or inform a photographer not to include you, and that we typically take wide-angle shots and avoid focusing on identifiable individuals.
With regard to contact details collected for registered events, the processing is deemed beneficial to you, as you have voluntarily registered to attend.

How long do we retain your personal data?

We retain your personal data only for as long as necessary to fulfil the stated purposes. As a general rule, audio and visual recordings are deleted from our systems after one year. However, selected images may be retained for longer on the basis of our legitimate interest in documenting historical events, preserving company history, or for similar purposes.

Contact details collected for registered events are retained only until the conclusion of the event.

What rights do you have?

You have the right to request a copy of all personal data we process about you. You also have the right to receive your personal data in a structured, commonly used, and machine-readable format (data portability), enabling you to transfer your data to another data controller.
You may also request correction or deletion of your personal data, or request restrictions on how we process your data.

Furthermore, you have the right to object to our processing of your personal data based on our legitimate interests. Should you raise such an objection, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. In the absence of such grounds, we may only continue to process the data to establish, exercise or defend legal claims.

If you believe we have processed your data in an unlawful or inappropriate manner, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).

Do we share your personal data with third parties?

Your personal data may be shared with the following categories of recipients:

• Public authorities, such as the police, where required by law or for the investigation of criminal offences;
• Third-party partners managing the printing and distribution of our communications and marketing materials;
• Partners and service providers supporting our internal and external communications and marketing, including on social media platforms;
• IT consultants and service providers contracted for the maintenance and development of our IT systems.

Some of our service providers are located outside the EU (e.g. the United States), where the level of data protection may not be deemed adequate under EU standards. In such cases, we conduct a thorough assessment to ensure all legal requirements are met, and implement technical and organisational safeguards to ensure the security and integrity of your personal data. These safeguards include the use of the European Commission’s Standard Contractual Clauses (SCCs), which are available at:
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

In cases where we transfer your data to third-party processors acting on our behalf, we enter into data processing agreements with strict instructions concerning data handling, confidentiality, and security.

Questions?

If you have any questions regarding how we process your personal data, you can find more information in our Privacy Statement or contact us directly using the details below:

Postal address: Clas Ohlson, 793 85 Insjön, Sweden
Email: contact@clasohlson.se
Telephone: +46 (0)247 444 00
You may also contact our Data Protection Officer directly by emailing: privacy@clasohlson.se

More information about data protection

Who is the controller?
Clas Ohlson AB is the controller for the personal data that we collect and process within the scope of this Policy.

How do we store and protect the information collected?
Your personal data is stored in our databases which are protected by physical, technical and process-related measures. Our information systems are protected by firewall software in order to segregate them from the access of other networks that are connected to the internet. Only those employees, which need the information to fulfil a certain assignment, are granted access to personal data. Our personnel are constantly informed about our security and data protection policies.

For how long do we store your personal data?
As a general rule, personal data should not be retained for a longer period than is necessary in relation to the purposes for which they were collected or for which they are further processed.

Clas Ohlson will only store and process information when necessary in order to fulfil the obligations described in this policy.

Moreover, you have the right to request the erasure of your personal data (“the right to be forgotten”) by contacting us (please see contact details further below).

Do we transfer your personal data to third parties?
In addition to the specific sections on transfers of personal data to third parties outlined above, we will transfer your personal data to:

• The police, when obligated by law, to investigate a serious crime.
• IT consultants which we hire from time to time for service and development of our IT: Our current web partner is Inderes AB.

In any case where we transfer your personal data to a third party which processes personal data on our behalf, we will enter into data processor agreements containing strict instructions on the processing of personal data, confidentiality and security.

What are your rights as a data subject?
As a data subject you have the following rights with respect to our processing of your personal data.
You are entitled to request a copy of all personal data that we retain about you, as well as the right to extract your personal data in a structured, commonly used and machine-readable format for the purpose of transferring your data to another personal data controller (’data portability’).

You also have the right to request correction or deletion of personal data and request limitation of the personal data processing that concerns you. However, if the processing of your personal data that you wish to limit or delete is necessary to comply with these terms, the usage of the Website may materially altered as a consequence of the restriction or deletion.

To request access or correct the personal data that we process about you or exercise any other rights, please contact us (see contact information below).

If you have complaints about our processing of your personal data, you have the right to submit a complaint to the Swedish Data Protection Authority.

Contact information
This Policy may be amended from time to time. Changes will be addressed on the Website.

If you have any questions regarding this policy or our use of cookies or personal data in general, please contact us at the contact details below.

Email: contact@clasohlson.se

Address: Clas Ohlson AB, 793 85, Insjön

Tel: +46 (0)247-44500

DPO: privacy@clasohlson.se