This Privacy Policy (the “Privacy Policy”) has been prepared to meet the requirements of the General Data Protection Regulation (the “GDPR”), and it only relates to the collection, protection, disclosure and use of personal data belonging to living individuals. It does not relate to data which emanates from companies or other entities, although the general principles regarding our collection and use of data is broadly the same irrespective of whoever is the user of our website, or our customers.

This Privacy Policy sets out the ways in which any personal data (your personal information) that we, Perimed AB (“us”, “our” or “we”) collect in relation to you, or that you provide to us, will be processed by us. It also explains what rights you have to access or change your personal data. Please read the following carefully to understand our views and practices regarding your personal data.

1. ABOUT US

1.1 We are a company registered in Sweden under company number 556196-6903, with our registered address as set out below.

1.2 You can contact us as follows:

Address: Datavägen 9A, 175 43 Järfälla, Sweden

Email: mail@perimed-instruments.com

2. INFORMATION WE MAY COLLECT ABOUT YOU

2.1 Information that you provide to us

2.1.1 We may collect and process any information that you provide to us when you:

1. fill in forms on our website www.perimed-instruments.com (“our Site”). This includes our email forms or when you request further services or information from us;
2. request quotations or place orders for our products or services;
3. contact our Customer support;
4. apply for a job with us;
5. subscribe to our mailing lists;
6. report a problem with our Site;
7. contact or otherwise correspond with us;
8. complete surveys (which we may ask you to complete, although you do not have to respond to them).

2.1.2 The information you provide to us might include your name, address, email address, phone number. If you are submitting a job application you may also provide your CV, additional information about your academic and work history, references, and any other such similar or related information as may be supplied.

2.2 Information that we collect about you

2.2.1 We may collect any information contained in any correspondence between us. For example, if you contact us using a form on our Site or by email or telephone, we may keep a record of that correspondence.

2.2.2 We may collect details of your visits to our Site, the resources that you access, and the device that you use to access our Site (including, but not limited to, traffic data, location data, weblogs and other communication data, your IP address, device information (such as your hardware model, mobile network information, unique device identifiers), browser type, referral source, length of visit to the website, number of page views, the search queries you make on the website and similar information. This information may be collected by a third party website analytics service provider on our behalf and/or may be collected using cookies, GIFs, and other web tools. For more information on this please read section 3 below.

2.3 Information that we receive from third parties

2.3.1 In certain circumstances, we will receive information about you from third parties. For example, if you are a job applicant we may contact your referees to provide information about you.

2.3.2 If you have indicated to a third party that you would like to receive our marketing emails and have provided your name and email address for this purpose, we will receive this data, add you to our marketing list and your data will be handled in accordance with this Policy and you will be able to unsubscribe at any time as set out in this Policy.

3. COOKIES, GIFS, AND OTHER WEB TOOLS

3.1 COOKIES.
3.1.1 We might use cookies for system administration and to ensure that you get the most out of our Site. A “cookie” is a small electronic file that collects information when someone visits a website. A cookie can identify the pages that are being viewed, and this can assist us to select the pages that the viewer sees. Some cookies only exist whilst viewers are online, but “persistent” cookies – which are not session-based – remain on the viewer’s computer, so that he or she can be recognised as a previous visitor when he or she next visits our Site. This allows us to collect information about a viewer’s browsing habits whilst on our Site, and this can be useful in assisting us to monitor and improve our services.

3.2 GIF AND OTHER WEB TOOLS.
3.2.1 In addition to using cookies, we might also use GIFs and other web tools to collect information about your browsing activities whilst on our Site. In this respect the information that is provided is similar to the information supplied by cookies, and we use it for the same purposes.

3.3 Any information that we acquire about you using cookies, GIFs or other web tools is subject to the same restrictions and conditions as any other information we collect about you.

3.4 You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. For more information about how to reject cookies using your internet browser settings please consult the “Help” section of your internet browser (or alternatively visit http://www.aboutcookies.org). However, please note that if you set your internet browser to reject cookies you may be unable to access certain parts of our Site. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to our Site.

4. WHERE WE STORE YOUR PERSONAL DATA

4.1 Our company is located in Sweden.

4.2 All information we collect about you is stored on secure servers in Sweden.

4.3 The information that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) by data processors providing some of our administrative systems. We and the data processors in question will take all steps reasonably necessary to ensure that your information is adequately protected and processed in accordance with this Privacy Policy, including but not limited to by using all appropriate cross-border transfer solutions such as the European Commission’s Standard Contractual Clauses or the EU-US Privacy Shield Framework:

4.4 Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to us over the internet; any transmission is at your own risk. Once we have received your personal data, we will use strict procedures and security features to try to prevent unauthorised access.

5. HOW WE LOOK AFTER YOUR PERSONAL DATA AND HOW LONG WE KEEP IT FOR

5.1 We operate a policy of “privacy by design” by looking for opportunities to minimise the amount of personal information we hold about you and only to use your information in ways which are respectful of your rights.  We use appropriate technological and operational security measures to protect your information against any unauthorised access or unlawful use, such as:

5.1.1 ensuring the physical security of our offices and other sites;

5.1.2 ensuring the physical and digital security of our equipment and devices by using appropriate password protection;

5.1.3 maintaining an internal data protection policy for, and delivering data protection training to, our employees; and

5.1.4 limiting access to your personal information to those in our company who need to use it in the course of their work.

5.2 We will retain your information for as long as is necessary to provide you with the services that you have requested from us or for as long as we reasonably require to retain the information for our lawful business purposes (such as for the purposes of exercising our legal rights), or for as long as laws and regulations require or otherwise permits.

5.3 We operate a data retention policy and look to find ways to reduce the amount of information we hold about you and the length of time that we need to keep it. For example:

5.3.1 we archive our email and paper correspondence regularly and destroy information no longer needed for commercial purposes unless we are required to retain it for evidential or legal purposes; and

5.3.2 we retain information relating to orders, customer queries and repairs as long as we are required to retain it for evidential or legal purposes;

and;

5.3.3 we maintain a suppression list of email addresses of individuals who no longer wish to be contacted by us, so that we can comply with their wishes, we must store this information permanently.

6. USES MADE OF THE INFORMATION

6.1 We will use your information for the purposes listed below either on the basis of:

6.1.1 performance of your contract with us and the provision of our services to you;

6.1.2 your consent (where we request it); or

6.1.3 our legitimate interests (see section 6.3 below).

6.2 We use your information for the following purposes:

6.2.1 to provide you with access to our Site in a manner convenient and optimal and with personalised content relevant to you including sharing your information with our website hosts and developers (on the basis of our legitimate interest to ensure that content from our Site is presented in the most effective manner);

6.2.2 to carry out our obligations arising from any communications between you and us;

6.2.3 to provide customer service and support (on the basis of our contract with you), to notify you about changes to our service, deal with enquiries or complaints about our Site and share your information with our website developer, IT support provider, delivery service provider as necessary to provide customer support (on the basis of our legitimate interest in providing the correct products and services to our Site users and customers);

6.2.4 to provide you with information about our news, products, events, special offers, new website features, or other services which may be of interest to you, provided that we have the requisite permission to do so (either on the basis of your consent where we have requested it, or, alternatively, our legitimate interests to provide you with marketing communications where we may lawfully do so), and provided that you have not asked us to not contact you;

6.2.5 to share your information with selected third parties, to enable them to contact you with information about things that may interest you (where we have your consent to do so), provided that you have not asked us not to share your data in this way;

6.2.6 to carry out, and share with third parties, aggregated and anonymised research and statistical analysis about general engagement with our Site (on the basis of our legitimate interest in providing the right kinds of products and services to our Site users and customers and to conduct marketing). We may, for example, perform statistical analyses of the behaviour of the users of our Site in order to measure interest in the various areas of our Site. This information, and any other general information about our users that we share with other partners, will be always aggregated and anonymised;

6.2.7 to process any job applications you submit to us (on the basis of your consent where we have requested it, or, alternatively, our legitimate interests to consider job applications, or where we have a legal obligation to process certain information about our job applicants);

6.2.8 to protect, investigate, and deter against fraudulent, unauthorised, or illegal activity, including identity fraud (on the basis of our legitimate interests to operate a safe and lawful business, or where we otherwise have a legal obligation to do so); and

6.2.9 to enable us to comply with our policies and procedures and enforce our legal rights, or to protect the rights, property or safety of our employees, and share your information with our technical and legal advisors (on the basis of our legitimate interests to operate a safe and lawful business, or where we otherwise have a legal obligation to do so).

6.3 Where we refer to using your information on the basis of our “legitimate interests”, we mean our legitimate business interests in conducting and managing our business and our relationship with you, including the legitimate interest we have in:

6.3.1 personalising, enhancing, modifying or otherwise improving the services and/or communications that we provide to you, such as sending you marketing likely to be of interest to you;

6.3.2 detecting and preventing fraud and operating a safe and lawful business;

6.3.3 improving security and optimisation of our network, Site and services; and

6.3.4 confirming information that you provide to us in a CV or application, by reference to past employers and/or publicly available employment or business profiles.

6.4 Where we use your information for our legitimate interests, we make sure that we take into account any potential impact that such use may have on you. Our legitimate interests don’t automatically override yours and we won’t use your information if we believe your interests should override ours unless we have other grounds to do so (such as your consent, or a legal obligation we have). If you have any concerns about our processing please refer to details of “Your Rights” in section 8 below.

6.5 As we outline in section 8 below, you will have the right to object to our using your information for our legitimate interests. However, please keep in mind that your objection to this sort of processing may affect our ability to carry out the tasks that we have set out above.

7. DISCLOSURE OF YOUR INFORMATION

7.1 In connection with the purposes and on the lawful grounds described above and in addition to the recipients of your information as described above, we may disclose your personal information to:

7.1.1 third parties we work with to prepare or send any communications to you, or to assist us in connection with any of our administrative or business functions, or in the provision of any of our products or our services to you (including for example, hosting or operating the website and our databases and site analytics);

7.1.2 any selected third party that you consent to our sharing your information with for marketing purposes;

7.1.3 in the event that we sell or buy any business or assets, to any prospective seller or buyer of such business or assets;

7.1.4 if Perimed AB, or substantially all of its assets, is acquired by a third party, to that third party;

7.1.5 other third parties (including legal or other advisors, regulatory authorities, courts and government agencies) if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or if necessary to enable us to enforce or apply our “Terms and Conditions”, and other agreements; or to protect the rights, property, or safety of Perimed AB, our subsidiaries, affiliates, employees or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

7.2 Where we do share your information with third parties, we will require such third parties to maintain appropriate security to protect your information from unauthorised access or processing, unless we have no ability to do so (for example, where we are sharing information with regulatory authorities or courts).

8. SALE AND SUPPLY

8.1 We shall comply with the following restrictions in relation to your personal information:

8.1.1 we shall not sell your personal information to anyone else; and

8.1.2 subject to the exceptions in sections 5 and 6 above, we shall not supply your personal data to anyone else so that they can use it for their own purposes.

9. YOUR RIGHTS

9.1 Overview of your rights

9.1.1 You have certain rights in respect of the information that we hold about you, including:

1. the right to be informed of the ways in which we use your information (we seek to do this in this Privacy Policy);
2. the right to ask us not to process your personal data for marketing purposes;
3. the right to request access to the information that we hold about you;
4. the right to request that we correct or rectify any information that we hold about you which is out of date or incorrect; and
5. in certain circumstances, the right to ask us to stop processing information about you.

9.1.2 Please note that, notwithstanding these rights, we reserve the right to retain certain information for our own record-keeping and to defend ourselves against any claims.

9.2 Your future rights

9.2.1 You have certain additional rights in respect of the information that we hold about you, including:

1. the right to lodge a complaint about us to the Swedish Information Commissioner’s Office (http://www.datainspektionen.se/) or the relevant authority in your country of work or residence;
2. the right to withdraw your consent for our use of your information in reliance of your consent (refer to section 5 above to see when we are relying on your consent), which you can do by contacting us using any of the details at the top of this Privacy Policy;
3. the right to object to our using your information on the basis of our legitimate interests (refer to section 5 above to see when we are relying on our legitimate interests);
4. the right to receive a copy of any information we hold about you in connection with the performance of our contract with you or on the basis of your consent (or request that we transfer this to another service provider) in a structured, commonly-used, machine readable format; and
5. the right to ask us to limit or cease processing or erase information we hold about you in certain circumstances.

9.3 How to exercise your rights?

9.3.1 You may exercise your rights above by contacting us using the details in section 1 of this Privacy Policy, or in the case of preventing processing for marketing activities also by checking certain boxes on forms that we use to collect your data to tell us that you don’t want to be involved in marketing.

9.3.2 If you wish to remove yourself from our marketing circulation lists so that you do not receive our marketing emails, you may unsubscribe by scrolling to the bottom of an email received from us and clicking the ‘unsubscribe’ button.

9.3.3 We will comply with your requests unless we have a lawful reason not to do so.

10. ACCESS TO INFORMATION

10.1 As outlined above, you have the right to access information held about you. You may submit a request to access information we hold about you in any form, for example, by sending us an email to mail@perimed.se.

11. CHANGES TO OUR PRIVACY POLICY

11.1 Any changes we may make to our Privacy Policy in the future will be posted on this page. Any changes will come into effect the next time you engage with us after the changes have been notified.

12. CONTACT

12.1 Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to mail@perimed-instruments.com

This Privacy Policy was last updated on 25 May 2018.