Camfil privacy policy

Updated 1 July 2025

1. Introduction

In this privacy notice, we at Camfil (”Camfil”, “we”, ”our” and ”us”) explains how we process your personal data. Your privacy is important to us. We therefore encourage you to take the time to read this privacy notice carefully. We process different data about you depending on the relationship we have with you, as explained below.

If you are a Chief Airgonomics Officer or otherwise involved with the Chief Airgonomics Officer initiative, please read our specific privacy notice regarding the initiative here.

2. Summary

We process your personal data in the following situations:

In some cases, our processing of your personal data means that we transfer your personal data outside of the EU/EEA. Such transfer only takes place when we can ensure an appropriate level of protection of your personal data.

Depending on the relationship we have with you, we process your personal data for all or only some of the above stated purposes. A detailed description of our processing of your personal data is provided in the charts below.

Your rights

In short you have the right to lodge a complaint with a supervisory authority, right to withdraw your consent, right of access, right to object, right to rectification, right-to-erasure (“the right to be forgotten”), right of restriction of processing, and right to data portability.

If you have any questions about these rights, or wish to exercise any of your rights, you are more than welcome to contact us.

Below you can read more about:

By clicking on the links below you can read more about how we process your personal data.

  1. Introduction
  2. Summary
  3. Camfil is responsible
  4. Our contact details
  5. From where we collect your personal data
  6. The personal data you need to provide to us
  7. A detailed description of how we process your personal data
  8. How long we store your personal data
  9. Recipients of your personal data
  10. Transfer of your personal data outside the EU/EEA
  11. The legal basis “legitimate interests”
  12. Your rights when we process your personal data
  13. Cookies and similar technology

When we refer to “your company” in this privacy notice, we refer to your employer or the organisation that you represent. We will only process data about you in your business role, which means, for example, that we will only send marketing to your company and not to you in your capacity as a private individual.

3. Camfil is responsible

Camfil has several companies that are responsible for the processing of your personal data in different situations. We describe this below. However, we would like to point out that you can always contact us through the contact details stated below, regardless of which company that is listed below as responsible for the processing of your personal data.

  • Camfil AB (with company registration number 556538-8344) is responsible for how your personal data is processed when you visit the website.
  • In other cases, the Camfil company or the Camfil companies which you or your organization is in contact with, have an agreement with or have an understanding with is responsible for the processing of your personal data (data controller). Relevant companies are listed here.

4. Our contact details

If you have any questions regarding the processing or if you wish to exercise any of your rights, you are welcome to contact us by e-mail datarequest@camfil.com or by mail to the Global Data Protection Manager at Camfil AB, Sveavägen 56 e, 111 34 Stockholm, Sweden.

5. From where we collect your personal data

We collect your personal data directly from you, for example when you contact us. We may also collect your personal data from your company if they identify you as their representative. We will also collect your personal data from other sources in the following situations:

  • If you use our website, we will use Google and other services to collect information on your browsing of our website to analyse your use of our website.
  • If you represent a potential customer, supplier or partner (i.e. a business lead), we may collect your personal data from the internet or a third-party service. By doing this, we can receive industry news. For example, we may learn that your company will start a large construction project, in which case we may contact you with information about our filters that are relevant for your project.
  • If you attend an event, webinar or training that we arrange together with partners, we may receive your personal data from the partner.
  • If you subscribe to our newsletters, we provide some personal data ourselves by analysing how you use our newsletters.
  • If you have provided your contact details to Healthy Indoors and your questions relate to Camfil, we will get your personal data from Healthy Indoors in order to answer any questions that you have.
  • We will process information from your social media account, if you use such an account to communicate with us.

6. The personal data you need to provide to us

In general, you are not required to provide your personal data to us. You can find a description of when you need to provide your personal data in the charts below when the so-called legal basis is stated to be a “Legal obligation”. If you don’t provide such personal data to us, we at Camfil will not be able to manage our relationship with your company.

7. A detailed description of how we process your personal data

The below charts describe in detail why we process your personal data, what personal data we process, when you need to provide the personal data to us and the legal basis for our processing. The legal basis is the basis for processing your personal data according to the GDPR. You will also find information about how long we process your personal data.

You can also click on the links below if you want to read about how we process your personal data in a certain situation in which you encounter us:

If you visit our website or use our webshop

If you visit our website (including any portal or app) or use our webshop we collect personal data from your device and the services we work with. To protect your privacy, we have taken measures to avoid identifying you when you visit our website. For instance, we only store an encrypted version of your IP address to reduce the risk of being able to identify you.

We gather personal data by using cookies and similar technical functionality. Our cookie policy describes how we do this and you can control your cookie choices through our Privacy Preference Center on our website and webshop.

To analyse how our website and webshop are used – if you consent
Purposes Personal data Legal basis
  • Analyse how you use our website and webshop to improve our website, webshop and services. To do this, we use analytics services such as Google Analytics

    The analytic services we use means that we place a random ID on your device to distinguish your device from other visitors and to acknowledge patterns in how our website and webshop are used. We will, however, not know who you are

    The personal data we gather will be used, e.g. to optimise functions and to adapt the website and webshop to suit our visitors
  • An encrypted version of your IP address, which we at Camfil can’t connect to you as an individual
  • Information about your device/browser (which area in the country you use our website and webshop from and which screen resolution you have)
  • Information about your activities on the website and webshop

Consent (Article 6.1 (a) GDPR)

We will only process your personal data for this purpose if you consent through our Privacy Preference Center.

You can prevent Google Analytics from using your personal data by downloading and installing this browser add-on.

You have the right to withdraw your consent at any time by contacting us.
To show you marketing on other websites
Purposes Personal data Legal basis
  • We show marketing tailored to you on other websites and social media platforms that you visit by using marketing services from for example Google or Meta

We can customize our marketing to better suit you by using information collected from your previous interactions and visits to our website through marketing services. This process is known as profiling. Profiling allows us to present you with marketing that are most relevant to your interests. Without profiling, you would receive generic adverts that are not specifically tailored to you. You have the right to object to profiling at any time
  • Encrypted IP address (we at Camfil cannot associate this with you as an individual)
  • Information about how you interact with our website and advertisements (for example, information about which pages you visited after clicking on our advertisement and analysis of how and when you use our website)
  • The region of the country you are using our website from
  • Information that the marketing services have about you from before

Consent (Article 6.1 (a))

We will only process your personal data for this purpose if you consent through our Privacy Preference Center.

You have the right to withdraw your consent at any time by contacting us.

Here you can make choices about the marketing You see from Google. On the Meta Account center, under the heading “Ad settings” you can choose which marketing you want to see on Facebook and Instagram.
To provide a functioning website and webshop
Purposes Personal data Legal basis
  • Make sure that our website, webshop, portal or app that you use work in a satisfying and secure manner and adapt it to your device
  • Enable you to play videos
  • Ensure that the webshop functions satisfactorily and securely, e.g. remember what you have placed in your shopping cart and adapt the online store to your use of it
  • Verify that you are not a robot when you visit the webshop, i.e. to make sure that the webshop works securely and is not ruined by robots that autofill fields
  • Improve and maintain the functionality of our webshop, portal and app through gathering and analyzing of information about crashes or bugs that you encounter

To do this we use cookies and/or similar technologies that collect information regarding your device

  • IP-address including which country the internet connection is from
  • Information about your device, such as the type of device, e.g. mobile phone, computer or tablet
  • A pseudonymized account- ID that identifies you as a unique visitor
  • Information about your use of our videos
  • Technical information about any crashes or bugs that you encounter when using the webshop, portal or

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest to provide a functioning website, webshop, portal and app.
To remember your choices
Purposes Personal data Legal basis
  • We use cookies and similar technologies to save and remember information about your choices, for example if you have chosen to consent to cookies or not and to remember which products you have added to the cart

Do you want to read more about how we use cookies? You find a more detailed description of this in our cookie policy 
  • Information about your choices/preferences, for example if you have chosen to consent to the use of cookies or not

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest to remember your choices.

If you attend our events, webinars or training

Below, we describe how we process your personal data if you sign up for or attend any of our events, webinars or training.

To arrange events
Purposes Personal data Legal basis
  • Handle your event registration, including to collect information about food preferences when needed
  • Arrange events that you participate in
  • Communicate with you before and during the event
  • Track attendance at events
  • Name
  • Contact information, (e-mail address, business phone)
  • If applicable, information about your role (company, position at your company, office location)
  • If you communicate via our social media channels, we also process information from your profile on the social media in question (username and any picture you have chosen for your account)

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest in inviting you to events that we organise and that we believe are of interest to you, and to handle your participation.

Consent (Article 6.1 (a) and 9.2 (a) GDPR)

If you send sensitive personal data to us, e.g., information about allergies or dietary preferences, we will process this personal data based on your consent.

You have the right to withdraw your consent at any time by contacting us.

To host and provide webinars and training
Purposes Personal data Legal basis
  • Manage your registration to our webinars and training
  • Provide recordings of our webinars and training on our website
  • Information you or your company provide to us, e.g. name, organizational affiliation, telephone number and e-mail address

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest to host and provide you with our webinars and training.
To market us through photos and videos from the events
Purposes Personal data Legal basis
  • Photograph and film during our events, which means that you may appear in images and films or be heard on audio recordings from your visit, e.g. in images that show people in general or mingling images. However, we never take pictures or film with focus on you as an individual unless you have given your consent
  • With your consent, publish photos and videos at our website and our social media channels for marketing purposes. Your personal data will only be processed for this purpose after you have chosen to participate in the footage

Before and during our events, we clearly inform you about photography, filming, and audio recording. We never want you to be surprised by this – please do not hesitate to ask us if you have any questions about our image, film and audio recordings
  • Images, films and audio recordings in which you as a participant may appear

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest of being able to market us and inform about our business.

We will also gather a consent according to the Swedish Act on Names and Pictures in Advertising (1978:800).

Consent (Article 6.1 (a) GDPR)

In cases where we want to process footage where you are clearly depicted or publish footage of you for marketing purposes, we will obtain your consent.

You have the right to withdraw your consent at any time by contacting us.

To contact you for future events, webinars or training and market our products
Purposes Personal data Legal basis
  • Contact you with invitations to future events
  • Market ourselves and our products towards you that have signed up for or participated in an event, webinar or training
  • Name
  • Position at your company
  • E-mail address
  • Telephone number
  • Other information you have provided to us

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest in contacting and marketing our events and products towards individuals who we believe may be interested in our events, webinars, training and products.

If you subscribe to our newsletter

The chart below describes how we process your personal data if you subscribe to our newsletters.

To send newsletters
Purposes Personal data Legal basis
  • Send information about news, marketing, offers and invitations (“newsletters”) to you who have chosen to subscribe to our newsletters
  • Improve and develop our newsletters by analysing how you open them and what you click on in the newsletters

Do you want to read more about this type of analysis? You can find a more detailed description of this in our information about cookies
  • Information about how you open our newsletters and what you click on
  • IP-address
  • E-mail address

Consent (Article 6.1 (a) GDPR)

The personal data will be processed based on your consent.

You have the right to withdraw your consent at any time by contacting us.

If you represent our current or potential customer, supplier or partner

The charts below describe how we process your personal data in the scenario where you represent a current or potential customer, supplier or partner. If you log in to a portal, app or use our webshop, read also the section above “If you visit our website or use our webshop”.

To enter into an agreement with your company and manage our relationship
Purposes Personal data Legal basis
  • Negotiate and enter into an agreement with your company
  • Manage our relationship with your company (e.g. communicate)
  • Manage any purchases that you make for your company, for example deliver your order and send order confirmation, invoice and other necessary information, such as terms and conditions of purchase and updated privacy notice
  • Share any necessary information with distributors or other partners that handle your purchases together with us
  • Information you or your company provide to us, e.g. name, organisational belonging, position at your company, telephone number and e-mail address
  • Information about your company as a customer, e.g. your company’s CamCards where you are listed

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest to negotiate and enter into an agreement with your company and to manage the agreement, including to provide secure and functioning technical solutions and manage your or your company’s purchase.
  • Give you the possibility to log in to any of our portals, apps, services etc.
  • Provide a secure log in
  • Enable you to create an account at our webshop

If you use our webshop to make purchases, we will also process your personal data as stated above
  • Log in details, if you have an account at our webshop or any of our portals or apps

To create your account at our webshop, we process the following personal data:

  • Name
  • Title, if you have added this
  • Information about your company
  • Phone number
  • E-mail address
  • Any comments that you added when creating your account
To market our products towards the company you represent
Purposes Personal data Legal basis
  • Market us towards the company you represent
  • Store information about customers, suppliers or partners as well as interesting business leads and potential partners and suppliers
  • Name
  • Contact information, such as phone number and e-mail address
  • Information about which organisation you represent
  • Your language preference
  • Information you provide to us during our contacts
  • Your preferences for marketing

Consent (Article 6.1 (a) GDPR)

In cases where you fill out any of our contact forms or you in other ways represent a customer prospect for us, we will obtain your consent before processing your personal data for marketing purposes.

You have the right to withdraw your consent at any time by contacting us.

Legitimate interest (Article 6.1 (f) GDPR)

If your company is a customer or previous customer to us, your personal data will be processed based on our legitimate interest to market our products towards the company you represent which we consider could be interested in our products or to have a business relationship with us.

If your company is one of our customers, your personal data will be processed based on our legitimate interest to provide relevant marketing towards your organization.
To gather feedback by sending surveys and conducting interviews
Purposes Personal data Legal basis
  • We process your personal data to send you as a representative of our customer invitations to participate in surveys or interviews concerning your use of our products and to gather feedback on how we work together
  • Manage any responses you provide in our surveys and/or interviews and compile statistics based on the results
  • Name
  • E-mail address
  • Any information you provide in your answers

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest to gather feedback from representatives of our customers.

If you visit our facilities

We have camera surveillance in and around facilities controlled by Camfil. If you were to enter our facilities, you will be filmed and the data from our cameras will be stored.

To maintain security for our property and employees
Purposes Personal data Legal basis
  • Gather footage from our security camera, to keep our property and employees safe
  • Data consisting of images and films of you in our camera surveillance footage

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest to protect our employees and our facilities from any unauthorized person trying to enter areas controlled by Camfil.

If you participate in our podcast, articles or similar

If you choose to participate in our podcast, articles on the website or similar publishing we will process your personal data as stated below.

To market us
Purposes Personal data Legal basis
  • Market our products and initiatives through publishing our podcast, articles and similar
  • Name
  • Audio recording (if you participate in our podcast)
  • Picture (if you provide a picture or we take a picture of you)
  • Other information that you provide

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest in marketing our products.  

If you use our social media or otherwise interact with us without having a business relationship with us

If you are in contact with us without having a business relationship with us, for example by sending us an e-mail or a message, on our social media account or if you use a form on our website, we will process your personal data as we describe in the charts below.

When contacting us through a social media platform, we recommend that you also review the privacy information of that platform.

To communicate with you
Purposes Personal data Legal basis
  • Communicate, e.g. via e-mail or chat
  • Communicate via social media, e.g. if you comment on our site or our wall
  • Communicate if you have used a form on our website
  • Answer your questions and give you the best service
  • Information you provide to us, e.g. name and contact information
  • If you visit our social media accounts (e.g. our LinkedIn page) we also process:
  • Information from your profile on the social media in question (username and any picture you have chosen for your account)
  • Other information regarding the matter for which you contact us

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest in communicating with you who have contacted us.

If you participate in one of our contests

If you participate in a contest that we arrange we will process your personal data as described below.

To arrange contests
Purposes Personal data Legal basis
  • Manage your registration to one of our contests and communicate with you before and during the contest
  • Communicate with you after the contest, e.g. to deliver your prize if you have won
  • Information that you provide in the contest, e.g. name, organizational affiliation, job title, telephone number and e-mail address

Legitimate interest (Article 6.1 (f) GDPR)

The personal data will be processed based on our legitimate interest to be able to arrange contests.

The charts below describe how we process your personal data in the scenario where you or your company have any questions or queries, as well as to comply with our legal obligations.

To handle any questions, complaints or claims
Purposes Personal data Legal basis
  • Handle any questions, complaints or claims
  • To defend ourselves against claims and complaints
  • To initiate any claims
  • Name
  • Organisational belonging
  • Position at your company
  • Contact details (telephone number and/or e-mail address)
  • Any information you or your company provide to us in your questions
  • Information concerning your company’s complaint or claim

Legitimate interest (Article 6.1 (f) GDPR)

The personal data is processed based on our legitimate interest to handle a question, complaint and/or legal dispute in which you are the representative of a customer, supplier or partner.
To comply with marketing legislation
Purposes Personal data Legal basis
  • If you have stated that you do not wish to receive marketing from us, we will store such information in an “unsubscribe-list” to make sure we do not send any marketing to you
  • Name
  • E-mail address

Legal obligation (Article 6.1 (c) GDPR)

The processing is necessary to comply with legal obligations which we are subject to, i.e. marketing laws which require us to not send marketing material to individuals who have objected to receiving such marketing.

You need to provide the personal data to us. Otherwise, we cannot ensure that you will not receive any more marketing from us.
To comply with bookkeeping and accounting legislation
Purposes Personal data Legal basis
  • Store information forbookkeeping and accounting purposes
  • Name, history regarding payments made and other information that constitutes accounting records

Legal obligation (Article 6.1 (c) GDPR)

The processing is necessary to comply with legal obligations to which we are subject, i.e. bookkeeping and accounting legislation.

You need to provide the personal data to us. Otherwise, we cannot comply with our legal obligations.

8. How long we store your personal data

We will store your personal data for as long as necessary, depending on the purpose for which we process the personal data. For example, we generally only store information from your visit to the website during the time you use the website.

If you receive marketing from us, you can at any time withdraw a consent you have provided, unsubscribe to our newsletters or object to the processing of your personal data. We will accommodate your request. If you object to receiving marketing from us, we will keep this on record in our unsubscribe register until further notice to avoid sending you further marketing material.

You can always ask us to remove your personal data. In addition, your comments and communication with us on social media can be deleted by you at any time. We will remove posts or comments which are in breach of the rules of the platform or in conflict with legislation as soon as possible.

We will store any document constituting bookkeeping material and personal data included therein according to bookkeeping and accounting legislation. In Sweden, legislation requires us to store bookkeeping material until and including the seventh year after the end of the calendar year for the fiscal year to which the personal data relates.

If we have any complaints or claims, we will store your personal data from the time the matter was initiated and for the duration of the potential dispute. If you are an active customer, we will store your personal data related to your questions to our customer service for as long as you are an active customer.

9. Recipients of your personal data

Your personal data is primarily processed by us at Camfil. This means that your personal data will be handled by our employees, but only by those personnel who need such access to perform their work.

In general, we will share your personal data with the following recipients:

  • Our IT suppliers will have access to personal data and other information when developing and supporting our IT system to ensure good and secure IT operations. One of our most important IT suppliers is Microsoft. The IT suppliers that we rely on will process your personal data on our behalf and on our instructions to ensure sound and secure IT operations. We only share your personal data with our IT partners if it's necessary for them to fulfil their obligations towards us according to our contract with them.
  • Your personal data will also be processed by companies within the Camfil group of companies, as these entities cooperate and use the same IT systems, marketing department and share information needed for the group of companies' cooperation, such as information on sales, projects, installations and operations.

In addition, we will share your personal data with specific recipients in the following cases:

  • If you visit our website, we will use suppliers listed in our cookie policy and they get access to information about our website visitors. In most cases they will however not be able to understand which individual that relates to a specific website visitor device. If you consent, we will share your personal data with Google, Meta and other analytics and marketing services which provide the service to analyse the website and webshop.
  • If you attend our events, webinars or training, we will share your personal data with third party photographers and event organisers, when we use these.
  • If you receive our newsletters, we share your personal data with Click Dimensions which helps us send newsletters. Click Dimensions process your personal data on our behalf and on our instructions, help us manage our marketing and, therefore, will have access to your personal data.
  • If your company makes a purchase, we share your personal data with distributors, logistics suppliers and other partners that are part of providing the purchase to your company.
  • If you use the webshop and make a payment to us with a credit card, we will also share any personal data stated on the credit card with our payment provider Stripe. Stripe is responsible for the processing of payment information and will not share such information with us.
  • If you visit our facilities that have camera surveillance, the data we collect from our camera surveillance will be processed by us and our camera surveillance service supplier. When required by law or a decision by an authority, we may need to disclose your data to public authorities and other organisations. We may also need to disclose your data if it is necessary to exercise, establish or monitor our legal claims.
  • If you interact with us on our social media account, the social media platform that you use will process personal data about you as a user. These social media platforms will continue to process your personal data as independent controllers. Information about how long they store your personal data can be found in their respective privacy information. The social medias we use are for example Facebook, LinkedIn and X. You can read more about their respective processing of your personal data by clicking on the links.

If you have any questions about how we share your personal data or want to know more about who we share your personal data with, please feel free to contact us.

10. Transfer of your personal data outside the EU/EEA

As a general principle, Camfil only processes your personal data within the EU/EEA. However, as an international company with a global presence, we sometimes need to transfer your personal data outside the EU/EEA during our processing activities.

Your personal data will be transferred outside the EU/EEA in the following cases:

  • We will transfer your personal data outside of the EU/EEA to our IT suppliers that process personal data as our data processors and according to our instructions. Such transfer only takes place in accordance with applicable data protection legislation, meaning that we will transfer your personal data outside the EU/EEA when we can ensure an appropriate level of protection of your personal data.
  • Camfil employs staff in its offices located outside the EU/EEA. As we collaborate closely within our organization at Camfil, our offices outside the EU/EEA will also have access to your personal data if necessary to manage our relationship with you.
  • If you visit and communicate with us on our social media channels (for example LinkedIn) your personal data will be transferred outside the EU/EEA. Not because we transfer your personal data for this specific purpose, but because the social media platform that you use will be able to access and process your personal data as independent controllers from outside the EU/EEA. Many of these companies are based in the United States. You can read more about this in their respective privacy information by clicking on the links above.
  • If you use our website and webshop your personal data may be considered transferred outside of the EU/EEA, since we use service providers such as Google and Meta. These parties may transfer your personal data to the United States since they are located there.

If your personal data will be processed outside the EU/EEA, then we will find a transfer mechanism for such processing. We rely on either a decision from the Commission establishing that the country in question ensures an adequate level of protection or appropriate safeguards that ensure that your rights are protected or based on another ground for such transfer in accordance with the GDPR.

  • When your personal data is transferred to the UK, we and our suppliers rely on an adequacy decision regarding the UK recognized by the European Commission for the transfer of personal data outside of the EU/EEA. An adequacy decision means that the European Commission has assessed that a particular country has an adequate level of protection for your personal data under Article 45 GDPR. You can find the adequacy decision for the UK here.
  • We also rely on an adequacy decision regarding most transfers to the United States, when our American suppliers are certified under the EU-US Data Privacy Framework. This is the case when we use Microsoft, services from Meta, LinkedIn, or similar social media platforms as well as if you pay by credit card through Stripe in our webshop. This is an adequacy decision regarding the United States recognised by the European Commission, which means that the European Commission has assessed that a particular country has an adequate level of protection for your personal data under Article 45 GDPR. You can find the adequacy decision for the United States here. By searching on their company names here (for example Microsoft, Google and Meta), you will be taken to the certificate of the respective company.
  • In other cases, we will rely on Standard Contractual Clauses (Article 46.2 c GDPR) for the transfer of personal data outside of the EU/EEA. The use of Standard Contractual Clauses is an effort to provide a safe transfer of your personal data. You can find the Standard Contractual Clauses here. We do for example rely on the European Commission's standard contractual clauses Module I and II (Article 46.2 c GDPR) together with supplementary measures when transferring personal data to our offices in the United States.

If you want to know more about where your personal data will be processed, please feel free to contact us.

11. The legal basis “legitimate interests”

As we state above, for some purposes, we process your personal data based on our “legitimate interest”. After conducting a balancing test regarding our processing of your personal data, we have determined that our legitimate interest of processing your personal data outweighs your interests or rights that require protection of your personal data.

If you want more information in relation to our balancing of interests assessments, please do not hesitate to contact us.

12. Your rights when we process your personal data

In accordance with the GDPR, you have certain rights that you can exercise to affect how we process your personal data– see below for more information.

If you have any questions regarding your rights or want to exercise any of your rights, please contact us by using the contact details above. You can also find more detailed information about your rights and when they apply at the Swedish Authority for Privacy Protection (IMY).

·  Right to complain – Article 77 of the GDPR

You have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data violates the GDPR. In Sweden, the competent supervisory authority is

You have the right to withdraw your consent at any time by contacting us. You can always withdraw the consent you give on the website directly on the website. Your withdrawal of consent shall not affect the lawfulness of the processing before its withdrawal.

·  Right of access – Article 15 of the GDPR

You have the right to obtain confirmation as to whether we are processing your personal data or not. You can make a request by contacting us. If we are processing your personal data, you also have the right to obtain a copy of the personal data processed by us as well as information about our processing, such as the purposes of the processing and for how long your personal data is stored.

·  Right to object – Article 21 of the GDPR

You have the right to at any time object to our processing of your personal data for direct marketing purposes (including profiling) and to processing of your personal data that is based on a legitimate interest.

·  Right to rectification of processing – Article 16 of the GDPR

You have the right to have inaccurate personal data concerning you rectified without undue delay. You also have the right to have incomplete personal data completed.

·  Right to erasure (“the right to be forgotten”) – Article 17 of the GDPR

Under certain conditions, you have the right to have your personal data erased by us without undue delay. For example, if you withdraw your consent and there is no other legal basis for the processing or if the personal data is no longer necessary for the purposes for which they were collected or processed.

·  Right to restriction of processing – Article 18 of the GDPR

Under certain conditions, you have the right to request that we restrict our processing of your personal data. For example, if you contest the accuracy of the personal data, or if the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction on the use of the personal data.

·  Right to data portability – Article 20 of the GDPR

If we process your personal data based on your consent, you have the right to receive personal data concerning you. This right applies to personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit those personal data to another controller, where technically feasible.

13. Cookies and similar technology

Like many other websites, we use cookies and similar technology to obtain certain types of information when you visit our website, receive our newsletters, log in to any of our portals, apps or use our webshop. Cookies in themselves do not identify the individual user, just the device that you use. You find more information about our use of cookies in our cookie policy.