From 25 May 2018, the Personal Data Act (PUL) has been replaced by the new General Data Protection Regulation (GDPR). The purpose of PUL has been to protect individuals from their personal integrity being violated when processing their personal data. The GDPR introduces stricter requirements for how we as an organization handle your personal data and gives you improved opportunities to influence our processing.
In the policy, we describe what personal data we process, why we process your personal data, what legal basis we support the processing of personal data and how long the data is stored. We also describe how you can influence the processing by exercising your rights. We also provide you with information on where to turn if you are not satisfied with our handling. It is important that you understand and read the privacy policy. You can always contact us if you have any questions.
You can contact us in the following ways:
Creative Home Solutions Stockholm AB
oleg@creativehomesolutions.com
What the change means for you
In short, GDPR means that…
… You have the right to receive more detailed information about how we process your personal data. We provide such information in the privacy policy below,
… You will be given the opportunity, under certain conditions, to request that your personal data be transferred or that we restrict the processing;
… that you are given enhanced opportunities to access your personal data and, under certain conditions, to have it corrected or deleted;
… that you have the opportunity to either approve or object to specific processing that we carry out, such as sending information such as newsletters via email.
1. Information about personal data
In this privacy policy, we are referred to as the Company and are the data controller. Personal data is information through which we can directly or indirectly identify you, e.g. your name, your telephone number, your e-mail address.
2. Processing of personal data
Everything we do with your personal data is considered processing. This applies regardless of whether we use automated systems or not. We process your personal data in connection with sending information, handling payments, taking care of complaints, to comply with current legislation such as the Accounting Act and to send newsletters, etc.
3. Personal data processed
The information we collect about you is customer information. These include information such as your name, email address, telephone number, address details and other information that you have provided.
4. What the data is used for
In order for us to be able to process your personal data, we need to have clearly and legitimately defined the purpose of the processing. Thereafter, the personal data may not be processed in a way that is not in accordance with the original purpose. In addition, we must have a legal basis, a so-called legal basis, to process personal data.
The processing of personal data that we carry out is based on the following legal bases and consent:
a) Processing of your personal data is necessary for the performance or conclusion of the agreement with you (the tenant-owner association that you represent in your capacity as a board member, auditor or trustee).
b) The processing of your personal data is necessary for us to be able to comply with a legal obligation, for example to save personal data for accounting purposes.
c) We assess, after a so-called balancing of interests, that our interests in processing your personal data outweigh your right to privacy protection.
In order to be able to fulfil the agreement with you, we need to process and process your personal data. Below are examples of the purposes for which we process your personal data and the legal basis on which we base it.
Provision of services
We process your personal data to the extent necessary to be able to identify you as a customer. In addition, we need to process your personal data for invoicing in accordance with the agreement and to take debt collection measures if necessary to ensure payment of our claim.
Legal basis of the above as follows: Performance of contract under item 1 and Legitimate interest under item 3. Our legitimate interest in the processing in this part is that we ensure payment in accordance with the agreement with you.
Other communication about services
We process personal data in connection with other communications with you, for example to provide information. This can be in the form of newsletters sent via email. In addition, we process personal data that we receive from you when you have chosen to respond to customer surveys that we have sent to you or that you have taken part in in other ways.
Legal basis of the above as follows: Performance of contract under item 1 and Legitimate interest under item 3. Our legitimate interests in the processing of personal data in customer surveys are that we want to receive your opinions in order to improve our offer based on that.
Compliance with laws
We process your personal data in order to be able to fulfil the statutory obligations that are incumbent on us, e.g. the Accounting Act’s requirements for the storage of accounting material.
Legal basis for the above as follows: Legal obligation under paragraph 2.
5. How we collect the data
We collect personal data in connection with your registration on the website, communication with our financial manager, by telephone or through personal visits to us.
6. How long the data is stored
We will not retain your personal data for longer than necessary for the purpose for which we process it. We never store personal data solely because it may be “useful to have”, but we always have a clearly defined appropriate basis that is supported by legislation or agreements.
As the data we collect is processed for different purposes, it is also stored for different lengths of time. It may therefore be the case that personal data about you is stored in one system, but deleted in another.
7. To whom the data is disclosed
In certain situations, we share your personal data with third parties. Below we describe when and why this happens. It is important to emphasize that we never share your personal data unless it is necessary to carry out the processing mentioned above, which has a clear purpose and a lawful basis. We also do not disclose your personal data to others for further dissemination or sale.
Suppliers and other data processors who process personal data on our behalf
In order to provide our services, we use various suppliers. When we cooperate with suppliers who process personal data on our behalf, we stipulate in agreements that the supplier (data processor) may only process personal data for purposes that we define and only according to specific instructions from us. Our suppliers are therefore not authorised to handle your personal data in any way that we have not clearly informed them of. In addition, we require that the supplier’s handling of personal data must be secure and correct.
8. Your rights
You have the right to receive information about how we process your personal data. Such information is provided in this policy. If you have any further questions about our processing of personal data, you are welcome to contact us. Contact details can be found at the bottom of this policy.
In addition to the right to information, you also have other rights regarding your personal data. For example, you can influence our processing by requesting extraction, correction, deletion and restriction. You also have the right to object to certain processing that we carry out and to request that your personal data be transferred or that it be transferred.
Your right to erasure requires that the data is no longer necessary for the original purpose, if the processing is based on a balancing of interests and there are no stronger legitimate reasons, if the personal data has been processed unlawfully or if you object to the processing for direct marketing. The right to erasure does not apply if we are required by law (e.g. the Accounting Act) to retain the data.
You have the right to request an extract free of charge once a year, and you can also request correction, deletion and/or restriction of the personal data we process about you. As it is important that we do not disclose your personal data to anyone else, such a request should be made in writing and signed by you. Please also specify what the request is for. Send us your request in a letter, stating your name and social security number, your address and attaching a signed copy of a valid ID document.
The register extract will be sent to you within 30 days of our receipt of the request. If the extract is extensive and we need more time or if we are unable to complete your request for any reason, we will notify you.
Please send us your request:
oleg@creativehomesolutions.com
9. Security
We protect your personal data through a combination of technical and organisational solutions. Access systems are required for access to all of our systems that handle personal data. Our employees, as well as personal data processors and sub-processors, must comply with our internal information security policy.
10. Cookies
We use so-called cookies on the website www.creativehomesolutions.com
The purpose is for the website to function in the best way, to give you access to certain functions and to obtain information about visits to the website. A cookie is a small text file that is stored on the visitor’s computer and contains information. There are two types of cookies; On the one hand, permanent cookies that save a file on the visitor’s computer until the file is deleted, and on the other hand, session cookies that disappear when you close your browser. On our website, third-party cookies are also used for e.g. Google Analytics.
We use cookies to improve your experience on the website in the following ways:
Monitors how the website is used by analyzing traffic patterns.
Collects and analyzes behavioral data based on the use of the website and services to improve the user experience.
11. Complaints
If you believe that we are processing your personal data in violation of applicable rules, you should report this to us as soon as possible. You can also contact the Swedish Data Protection Authority directly and file your complaint.
12. Indemnification
If you have suffered damage due to your personal data being processed in violation of applicable regulations, you may be entitled to damages. In such cases, you may, upon written request, claim damages from us or bring an action for damages in court.
13. Data Controller
The Company is responsible for the processing of personal data and is responsible for the personal data processed within the framework of the Company brand. We determine the purposes of the processing and how it is carried out. In addition, we decide how personal data is processed when we cooperate with subcontractors.
14. Contact information
Creative Home Solutions Stockholm AB
Oleg Diakiv
