Data security and processing of personal data
Your privacy and Tapwell’s handling of your personal data are important to us. On 25°May 2018, the General Data Protection Regulation (GDPR) came into force in Sweden and the rest of the EU/EEA. To ensure that you feel comfortable with how we at Tapwell process your data,° we want to explain the terms and conditions, and how we handle your personal data.
Who is the data controller?
Tapwell AB, ("we", “us”) is the controller of the personal data that we process about you, and is responsible for your personal data in accordance with applicable law.
Renstiernas gata 31°
Corporate ID number: 556578-4807
Authorised representative: Anders Gustafsson
VAT registration number: SE556578480701
What personal data does Tapwell AB store, and why?
In connection with your contact with Tapwell AB, we collect and process information provided to us. Some of this information may contain personal data, and is used for the purposes described below.
At the time of sale and delivery
Tapwell AB registers a contact person on the customer card of its corporate customers. We then store the contact person’s name, telephone number and email address. This information is necessary for us to be able to fulfil our obligations to you as a customer, e.g. when ordering products, making a complaint or dealing with other service issues.
When ordering from a business customer with direct delivery to a private individual, Tapwell AB saves the name, delivery address and telephone number to be able to deliver the order. The telephone number and email address are used for notification purposes only.
Some sales to private individuals take place at Tapwell, e.g. in the case of staff purchases by Tapwell’s corporate customers. Tapwell will then save your name, address and any private email address and telephone number in order to deliver your order. The email address and telephone number are only used for invoicing, order recognition and notification.
When goods are picked up from our warehouse, Tapwell asks for identification, and stores the personal ID number of the order in our business system. This has proven necessary to safely operate the service with retrieval from the warehouse and to confirm the correct identity. The personal ID number is only used to identify the individual on the relevant order, and is deleted once this purpose no longer applies.
When contacting us
When you contact us by phone or email, for example, we store the contact details you provide so that we can respond to your enquiry and contact you.
If you apply for employment with Tapwell, we will process the information you provide to us that is relevant for recruitment purposes. In the case of a current recruitment process, we will store your personal data for the duration of the ongoing recruitment process. If we wish to store your personal data for future recruitment purposes, we will ask you for your consent. You can withdraw your consent at any time, and Tapwell will no longer store your personal data for recruitment purposes.
If you are our supplier or business partner
If you are a supplier or partner of ours, we process the necessary personal data of the contact persons we need in order to administer the agreement.
When visiting our website
Where do we store this data?
The data we collect from our customers is stored within the European Economic Area (EEA).
Who do we share your data with?
To administer our business, we may need to share your information with companies within the Tapwell Group. To fulfil our obligations to you, we may also need to share data with our partners where necessary. We may also share information with government agencies when required by applicable law. Tapwell AB does not use your information for marketing purposes and does not sell personal data to third parties. For more information about who has access to your data, please contact firstname.lastname@example.org
How long do we store your personal data?
Tapwell never stores personal data for longer than is necessary for the purpose of storage. Once the purpose no longer applies, the personal data will be securely deleted. In some cases, we are obliged to store personal data in order to comply with applicable legislation. Names, orders and invoicing history are therefore saved for seven years in order for Tapwell to fulfil its legal obligations under the Swedish Bookkeeping Act.
Your legal rights
Right to withdraw consent:
Where the processing is based on your consent, you have the right to withdraw your consent at any time by contacting us.
Right of access and data portability:
You have the right to request information about the personal data Tapwell AB holds about you and how it is used, and to receive a copy of all personal data we hold about you. Under certain conditions, you also have the right to have the data transferred to another party (data portability).
Right of rectification, restriction of processing and right to object:
If your data is incorrect, you have the right to request its rectification and the right to complete any incomplete personal data. You also have the right, under certain conditions, to request restriction of the processing of your personal data and to object to the processing of your personal data at any time.
Right to erasure:
Under certain conditions, you have the right to request that your personal data is erased. However, we cannot delete personal data we need in the following situations:
* you have an ongoing case
* you have an unpaid debt to Tapwell
* information we need for accounting purposes
How to exercise your rights:
If you wish to exercise any of your rights above or ask any other questions, please contact us by email at email@example.com. We will normally respond to your request within one month. In the event of a request, we are obliged to check your identity and may therefore request additional identification data before we can process your request.
Right to complain to a supervisory authority:
If you believe that Tapwell AB is processing your personal data incorrectly, you can of course always contact us at firstname.lastname@example.org. You also have the right to lodge a complaint with the Swedish Data Protection Authority, email@example.com.
Changes to our policy:
We reserve the right to make amendments to this policy in light of changes in legislation or practices. New versions will be published on this page.