Privacy Policy - DEKRA Quality Management AB

DEKRA wants you to feel safe with how we process your personal data.

If you are a customer or individual who works or has worked for a company that is a customer or business partner of ours, we may process personal data about you.

The personal data controller for your personal data is DEKRA Quality Management AB, org. No. 556661-2551.

The personal data we process, and the purposes of the processing vary depending on the relationship you have with us. Below you will find a description of the most common personal data we process and the purpose of the processing.

The purposes of the treatment

We process your personal data when it is necessary to enable:

Provision of our products and services (including providing access to information about inspection objects, time for inspection, etc.);
An updated record of customer representatives in our CRM system;
The use of our customer-related IT services and applications;
Make advertising and marketing mailings;
Customer surveys; and
Management and follow-up of our contractual obligations.

We only process your personal data if the processing is permitted according to applicable data protection legislation. This means i.a. that we must have support for the purposes of the processing in the form of a so-called legal basis, which for our part mainly means one of the following grounds:

Fulfillment of contracts;
Fulfillment of legal obligations and exercise of rights;
Balancing of interests (more information about the balancing of interests can be found in our full Integration Policy for customers, business partners and their representatives); and
Consent.

What personal data we process

We process personal data provided by yourself, your employer or third parties with whom we have a business relationship. In some cases, we also collect data from publicly available registers, authorities or institutions.

Personal data that we may process includes:

Contact information (such as name, telephone number, address and e-mail address and requests for contact method);
Organizational information (such as company name, title and workplace);
IT-related information (such as login details, passwords and data and logging of your use of our IT services and applications);
Social security number (when required for secure identification when paying on credit); and
Contract data (such as quotations, orders, confirmations and agreements with us).

Google Analytics

To the extent that you have given your consent, this website uses Google Analytics, a web analysis service provided by Google LLC. The responsible party for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the US and saved there.

We use the technical enhancement "Google Signals", which allows cross-device tracking. This enables an assignment of an individual website visitor to different end devices. However, this only happens if the visitor has logged into a Google service when visiting the website and at the same time has activated the "personalized advertising" option in their Google account settings.

IP address anonymization is enabled. Due to IP anonymization, your IP address will be truncated by Google within the Member States of the European Union or another state party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Purpose and legal basis of the processing

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Storage period

The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached, takes place automatically once a month.

Recipients

Recipients of the data are/could be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR).
Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that US authorities may access the data stored by Google.

Third country transfer

Where data is processed outside the EU/EEA and there is no level of data protection equivalent to the European standard, we have concluded EU standard contractual clauses with the service provider to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. A transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The USA is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU/EEA. You may not be entitled to any legal remedies against access by authorities.

Right to withdrawal

You can withdraw your consent at any time with effect for the future by changing the DATA PRIVACY SETTINGS. The lawfulness of the processing carried out based on the consent until the revocation, remains unaffected.

You can also prevent the storage of cookies by changing your browser settings to prevent the saving of cookies. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by

a. Not giving your consent to the setting of the cookie or

b. downloading and installing the browser add-on to disable Google Analytics HERE .

For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and

https://policies.google.com/?hl=en

Hotjar

We use Hotjar, an analysis software of Hotjar Ltd. ("Hotjar"), to better understand the interests of our users and to tailor our web offer accordingly. We use this analysis tool on the basis of your consent, which we asked for when you accessed our website.

Hotjar works with cookies and other technologies to collect information about the behavior of our users and about their end devices (in particular, IP address of the device (collected and stored only in anonymized form), screen size, device type (unique device identifiers), information about the browser used, location (country only), language preferred to view our web offer, mouse events (movement, position and clicks), keyboard strokes, but no specific text). Hotjar stores this information in a pseudonymized user profile. The information is not used by Hotjar to identify individual users or merged with other data about individual users.

The service allows us to create so-called heatmaps of the use of our website. This records scroll, cursor movement and clicks/taps and, on this basis, creates a graphical representation of the use of our website by all users. Heavily used areas are displayed in a different color than areas that are used less. This tool also allows us to create so-called Visitor Recordings. The live recordings of activity capture

HTML changes (our website and usage)
Cursor and scroll movement
Changes in browser display (size)

It is also possible to make these recordings across sites. The recording will then start on the first website where Hotjar is embedded. Texts that you enter are not recorded by us. We suppress the recording of these texts.

For the purpose of analyzing certain technical data and for data processing and/or storage functions, Hotjar works with a limited number of trusted external service providers. These service providers have been carefully selected by Hotjar and meet high data protection and security standards. To the extent that these service providers process personal data in a third country, Hotjar enters into EU standard contractual clauses on our behalf and, if necessary, agrees on further contractual measures with these service providers. Data is disclosed to the service providers only to the extent necessary to provide the services offered, and Hotjar contractually obligates them to keep confidential all data disclosed to them by Hotjar and to use personal data only in accordance with Hotjar's instructions. For more information, please see

Hotjar's privacy policy here: https://www.hotjar.com/legal/policies/privacy/

The cookies that Hotjar uses have different "lifetimes"; some remain valid for up to 365 days, and some remain valid only during the current visit.

Right to withdrawal

You can withdraw your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. Furthermore, you have the option to determine in our privacy settings which types of cookies you allow or reject on this website.

Who we share your personal data with

DEKRA is part of a global group with offices and operations in several countries. Your personal data may therefore be transferred and made available to other companies within our group. We may also disclose the information to authorities when required by law, regulation or authority decision, as well as to our trusted third-party suppliers.

When we disclose your data to a third party, we establish personal data processing agreements when required and take other appropriate measures to ensure that your personal data is processed in a manner that complies with current legislation.

We aim to always process your personal data within the European Union (EU)/European Economic Area (EEA). If, despite this, we need to transfer your personal data outside the EU/EEC, we have an obligation to ensure that the transfer takes place in accordance with applicable data protection legislation before the data is transferred, e.g. by assuring us that the country to which the data is transferred meets requirements for an adequate level of protection according to the EU Commission's decision, or by ensuring that the transfer is covered by appropriate protective measures in the form of e.g. standard contract clauses decided by the EU Commission.

How long we save your personal data

We store your personal data for as long as it is necessary to fulfill the purposes for which the data was collected. The period is determined by, among other things with regard to the personal data in question, contractual periods and obligations as well as legal reporting obligations.

Your rights

You have rights in relation to us and our processing of your personal data. This includes, among other things:
The right to access our processing;
The right to correction of incorrect information;
The right to erasure (for example, if the data is not needed for the purposes for which it was collected or if the processing is based solely on your consent and you withdraw the consent);
The right to object to your personal data being processed for direct marketing;
The right to withdraw given consent;
The right to limitation in certain situations; and
The right to data portability.

To exercise your rights, we ask you to contact us, which is easiest to do by e-mail. Contact details can be found below.

If you believe that your data is being processed in a way that violates existing regulations, we also ask you to report this to us as quickly as possible. You also have the right to register a complaint with the Swedish Privacy Protection Authority.

This message contains basic information about how we at DEKRA process your personal data.

Contact:
GDPR-responsible
DEKRA Quality Management AB
Fältmätargatan 15, 721 35 Västerås, Sverige
Email: gdpr.industrial.se@dekra.com