Sortera comply with the below guidelines in order to ensure that your privacy is protected in connection with the processing of your personal data.
- We ensure that all data is safely stored.
- We delete the data we are no longer in need of.
- We do not use the data for any other purposes than those provided by us.
- We do not sell data to any third party.
Below you can read a more detailed description of how we process the data we collect.
2. Collection of personal data, purposes, legal basis and storage period
When you become one of our customers, we collect the following information directly from you: name/company name, registration number/social security number, name of contact persons (for company customers), address, e-mail and telephone number as well as payment information. We process such personal data in order to deliver and invoice ordered services and products to you. The data is processed in order to fulfill the agreement and deliver the service to you. We also store your personal data for a period up to seven years after the service or product has been delivered to you in order to fulfill our legal obligations, such as accounting.
When you become our customer, we also save the above-mentioned personal data in our business system for seven years in order to be able to fulfill future orders and inquiries in a smooth and efficient manner. The processing is based on our legitimate interest in being able to administer the customer relationship.
In order to assess a customer’s financial possibilities to pay for our products or services and offer possible payment methods, we also collect credit information on new customers, which information is stored for three years. The processing is based on our legitimate interest in being able to ensure the customer’s ability to pay prior to placing an order.
2.2 Others who contact Sortera
If you contact our customer service, the call will be recorded and stored. The conversations are recorded for educational purposes and in order to be able to investigate what was said between Sortera and the customer/caller, should a misunderstanding arise. The processing is based on our legitimate interest in being able to train staff and prevent, investigate and protect us from legal disputes. The calls are saved for 90 days and only a limited number of people have the opportunity to partake of the calls.
If you contact anyone at Sortera by mail or at email@example.com, Sortera receives your e-mail address and other personal data provided by you in the e-mail. Sortera deletes incoming e-mails as soon as the conversation is over if the content of the e-mail has no relevance in a matter or to a customer relationship. If the e-mail conversation is relevant, for example if it contains a complaint about a service performed, the e-mail is saved for as long as is necessary in order to fulfill the purpose for which it is saved. The processing is based on Sortera’s legitimate interest in dealing with issues that arise in and about our services and operations.
3. Access to your personal data
Sortera has taken appropriate technical and organizational security measures to protect your personal data against i.a. loss and unauthorized access. The number of people who have access to your personal data is limited. Only persons at Sortera who need to process the personal data in accordance with the purposes stated above have access to your personal data.
We may share your personal data within the Sortera Group as well as with suppliers and partners who perform services on our behalf. Sortera always signs personal data processor agreements with suppliers who process personal data on behalf of Sortera.
Sortera does not transfer any personal data to entities outside of the EU/EEA.
4. Data security
Sortera is careful as regards the security of personal data. All personal data is processed in a way that meets the requirements set out by law for the secure processing of personal data.
The routines processed by Sortera within the GDPR framework:
- Identify databases and systems in which certain personal data occurs.
- As necessary, inform a person what data is saved about him or her.
- Possibility to rectify or delete personal data.
By using the name and/or e-mail address of a customer, Sortera can identify the database which stores the relevant personal data.
5. Your rights
Sortera Group AB, reg. no. 559051-3288, with address Box 92151, 120 08 Stockholm is the personal data controller for the processing of personal data described in this policy. This means that we are responsible for ensuring that your personal data is processed correctly and in accordance with the applicable personal data legislation.
You have the right to know which personal data we process about you and can request a copy of such data. You have the right to rectify incorrect personal data and may in some cases request that we delete your personal data (e.g. if the personal data is no longer required in order to fulfill the purpose for which it is being processed). You also have the right to object to certain processing of your personal data and request that the processing of your personal data is limited. Please note that limiting or deleting your personal data may mean that we will not be able to fulfill our commitments. You also have the right to obtain your personal data in a machine-readable format and transfer the data to another personal data controller.
If you are dissatisfied with how we process your personal data, you have the right to report such dissatisfaction to the Swedish Authority for Privacy Protection, which is the supervisory authority for our personal data processing.
Should you have any questions regarding this information, please contact us at firstname.lastname@example.org or by mail at the above address.
In order to disclose information to you in a secure manner, we may ask you to verify your identity. We will send the information digitally to you, unless otherwise requested by you.