Privacy Policy
Background
- ALTI AB processes customers’ personal data through their registration on ALTI’s website https://www.alti.se. According to the Swedish Personal Data Act (1998:204) and corresponding legislation in other countries, the processing of personal data is limited and may only take place in accordance with the applicable Personal Data Act.
- To ensure that ALTI AB complies with the applicable personal data law, the following privacy policy has been drawn up (“Privacy Policy”). All employees at ALTI AB must follow this Privacy Policy when processing personal data.
Definitions
“Personal Information” means name, date of birth, address, email address, telephone number and other personal information about customers.
“Processing” of personal data means any action taken in respect of such information, e.g. collection, registration, storage, use, disclosure, transmission, etc. of personal data when these documents are fully or partially electronic.
“The registered person” means the customer whose personal information is processed by ALTI AB.
“Sensitive data” means personal data that reveals ethnic origin, political opinions, religion, trade union membership or such personal data relating to health or sexual life.
“Unstructured material” means text, images, e-mail, etc. that are not part of or intended to be part of a document, customer management system or other database.
Which personal data is processed?
In relation to the customers, ALTI AB mainly processes the customers’ names, telephone numbers, addresses, and e-mail addresses. This information is used for the following purposes: (i) delivery of ALTI AB’s products, (ii) maintenance of a customer database with the customers’ contact details.
Basic requirements for the processing of personal data
If the personal data consists of unstructured material, this data can be processed freely, except that the processing must not involve a violation of the data subject’s personal integrity.
When a document, a customer management system or other database contains personal data, the processing of this information must take place in accordance with the applicable personal data law. This means e.g. to;
- personal data may only be processed if it is legal, e.g. in accordance with the provisions of the Personal Data Act or other applicable law;
- personal data must be processed correctly and in accordance with good practice, e.g. SWEDMA’s rules on direct marketing;
- personal data may only be collected for specific, explicitly stated and justified purposes and may not be processed for any purpose that is incompatible with the purpose for which the data was collected. A legitimate interest can e.g. be customer administration;
- personal data that is processed must be adequate and relevant in relation to the purposes of the processing, i.e. that no information that is not necessary for the purposes may be processed;
- personal data may only be processed to the extent necessary with regard to the purposes of the processing;
- personal data processed must be true and up-to-date and if this is not the case, the data must be corrected, blocked or deleted; and
- personal data must not be kept for a longer period of time than is necessary with regard to the purposes of the processing.
Access to personal data
ALTI AB will not sell, rent or lease the personal data collected except in the cases expressly stated in this Privacy Policy. If necessary, ALTI AB may transfer personal data to [an accounting firm/a factoring company] that handles invoicing, a company that handles credit card payments, a web hosting company and a company that is responsible for ALTI AB’s marketing activities.
Sensitive data
Sensitive data will not be processed unless the data subject has given his express consent to the processing or if the processing is necessary to fulfill obligations or exercise rights under applicable law.
Children’s personal data
ALTI AB does not intentionally collect personal data from children under the age of 18 and the website is not aimed at children under the age of 18. ALTI AB recommends parents and guardians to take an active part in their children’s activities and interests online.
Transfer of personal data to third countries
Personal data may not be transferred to a country outside the EU unless special measures have been taken to ensure that the recipient of personal data takes appropriate measures to ensure an adequate level of protection for the data.
Guidelines for employees at ALTI AB
Unless the processing of personal data is necessary to invoke ALTI AB’s rights or to perform ALTI AB’s obligations under an agreement, ALTI AB’s employees must consult their lawyer before (a) processing personal data; or (b) transfer personal data to third countries/countries outside the EU.
Information to the registered person
The registered person always has the right to be informed about the treatment. If data is collected from the data subject himself, information about how the data will be processed etc. must be provided at the time the data is collected. In addition to this, the registered person has the right to annually request information, free of charge, about which personal data about him or her is processed and in what way this is done.
In order to protect the data subject’s personal integrity, ALTI AB undertakes to implement reasonable measures to check the data subject’s identity using a password, before the data subject is given access to his personal information. To review and change the personal information provided to ALTI AB, the registered person can go to the website where the personal information was provided or contact ALTI AB at the address shown in section 18 below.
Correction
Incorrect data shall, if requested by the data subject, be corrected, blocked or deleted as soon as practicable.
Storage
Information is stored no longer than necessary, taking into account the initial purpose of the data treatment. This means that data is deleted as soon as it has expired or is no longer necessary for analysis or direct marketing, or the purposes for which it was initially collected.
Security
An employee who processes personal data must do so in accordance with this Privacy Policy, applicable law and other policies and instructions that ALTI AB may have adopted from time to time. ALTI AB is obliged to ensure that all subcontractors and other external parties who are given access to personal data enter into an agreement that, in applicable parts, contains the same provisions as this Privacy Policy, unless the provision of such information is mandatory according to the applicable law, regulation or judgment.
ALTI AB has implemented the technical and organizational security measures that ALTI AB considers sufficient to protect the personal data that is processed.
ALTI AB uses a payment intermediary that uses encrypted communication (Secure Sockets Layer, SSL) when collecting and transferring sensitive information such as credit card information. SSL makes the information inaccessible to anyone except the payment intermediary. This security feature is activated when the unopened key symbol or a closed lock (depending on the browser) is visible at the bottom of the browser window.
Use of cookies
ALTI AB provides information about its use of cookies in the “Explanation regarding the use of cookies” below.
Training
All employees or other persons who process personal data must participate in ALTI AB’s internal training or equivalent in order to fully understand the obligations incumbent on ALTI AB with regard to the processing of personal data. Such training is held for new hires and when required to keep employees updated on the requirements for processing personal data.
Links to external websites
This website may contain links to websites provided by legal entities other than ALTI AB (“External Websites”). These External Websites are not under ALTI AB’s control and ALTI AB is not responsible for the content or privacy policies of any of these External Websites, including, without limitation, any link contained in an External Website or other changes and updates to an External ALTI Website AB provides links to External websites only as a service and ALTI AB takes no responsibility for Internet services, products or services on External websites.
Changes to the privacy policy
If the general conditions in this Privacy Policy change, ALTI AB will publish the adjusted Privacy Policy on this website with information about when the changes come into effect. If ALTI AB implements any significant changes in the Privacy Policy, ALTI AB may also choose to inform the registered in another way, e.g. via e-mail or by posting a message on the ALTI AB website https://www.alti.se.
Contact information
Comments or questions regarding this Privacy Policy or questions regarding ALTI AB’s processing of personal data should be sent to the following address:
ALTI AB
Bågevägen 90
85652 Sundsvall
asa@alti.se
Explanation regarding the use of cookies
This website contains two different types of cookies; permanent cookies, which are a text file sent from ALTI AB and stored on the hard drive of your computer, and temporary cookies that are only stored temporarily and disappear when you close your browser.
Cookies are used to optimize the website’s functionality and adapt it to your preferences. The website’s functionality is to some extent dependent on temporary cookies.
Temporary cookies are used when you navigate the website and in the online store. Persistent cookies are used when you log into your account. Your computer will then remember the information for the next visit.
Temporary cookies are necessary to navigate the website, but if you want to avoid these cookies, you can configure your browser so that cookie files are not downloaded to your computer. More information on how to proceed may be available in your browser’s help section.