About integrity, GDPR and cookies

Information about privacy issues when visiting Nolato's website

Your privacy is very important to Nolato, which means that unless you submit your personal data to us, you will remain anonymous.

When you visit our website, our web system automatically stores information, including details of which pages you have viewed (find out more below under ‘Cookies’). But unless you submit your personal data to us of your own accord, for example by completing a form, you will remain anonymous and the stored information is only processed for the purposes of general visitor analysis and statistics.

If you complete a form, you will no longer be anonymous

If you complete a form on our website and send it to us, the personal data you submit in the form will be automatically linked with the previously stored, hitherto anonymous information about your visits. We may then use this data to send you marketing material about Nolato’s customer offerings based on the areas you have shown an interest in. However, this will only happen if the way you use our website indicates that you are interested in receiving such information. We will never use the data outside our business, for example by giving it to a third party.

You will therefore be asked to give your consent to our processing of your data when you complete a form on our website.

Deletion of personal data

Your data will be automatically deleted if you have not visited our website for 3 months. You can also request that your data be deleted (pseudonymized) by contacting us at [email protected]. Note that a deletion of any personal data on the website does not delete any other possible data about you in Nolato that we have a legitimate reason for processing in order to manage you as a customer, employee, shareholder, etc.

Storing of personal data

Personal data submitted via a form may be forwarded to Nolato units in countries outside the EU if the content requires this. The database in which the website’s personal data is stored is in Sweden and owned by Nolato.

Information about Nolato’s processing of personal data at the website

Controller

Company: Nolato AB

Reg. no. 556080-4592

Contact details:

Mailing address: 269 04 Torekov, Sweden

Phone number: +46 431 - 44290

E-mail: [email protected]

Website: nolato.com

Categories of Data subjects

The Company is processing personal data concerning the following categories of data subjects:

• Visitors at the web site of the Company that complete a form sheet and thereby them-selves provide personal data.

Object/types (categories) of personal data that is processed

The information that the Data subject itself has provided when completing a form sheet.

The nature of the processing

The Company processes personal data in the following ways:

• Personal data is collected, structured, processed, stored and sorted out.

The purpose of the processing

The Company is processing personal data with the purpose that:

• The Company shall execute the requests of Data subjects for instance to obtain information.
• The Company shall be able to administrate events that the Data subject is registered for.
• The Company shall be able to perform direct marketing.

The basis for the processing

The Company is processing personal data on the following basis:

• The Company is processing personal data on a basis related to the Company’s legitimate interests, for instance to provide the Data subject with requested information.
• The Company is processing personal data on the basis of its legitimate interest of marketing the products of the Company (about blocking of direct marketing – see below).
• The Company is processing personal data on the basis of consent from the Data subject.

Withdrawing of consent

If personal data is processed on the basis of consent from the Data subject, the Data subject may withdraw its consent at any time.

Sources

Personal data is collected from one or several of the following sources:

• At the Data subject’s visit at the web site of the Company.

Demand of information and lack of information

As a starting point, the Data subject is providing the personal data voluntarily.

Recipients within the EU/EEA

Personal data may be transferred to the following recipients:

• Subsidiaries of the Company within EU/EEA
• Data processers contracted by the Company such as IT companies or printing firms.

Recipients are located in Sweden, Switzerland, United Kingdom and Hungary. In certain cases, recipients may be located in another EU country.

Recipients outside EU/EEA and international organisation

The Company may transfer personal data to the following companies outside EU/EEA or to an international organisation:

• The Company’s subsidiaries outside EU/EEA.

Automated decision-making and profiling

Automated decision-making and profiling (automated processing and evaluation of personal data) related to Data subjects may occur. Automated decision-making and profiling relates primarily to

• Selection of Data subjects that are of particular interest for the Company to contact for marketing purposes.

Term that the personal data is processed

Personal data is automatically deleted when the Data subject has not been active on the web site for three months. Applications for events are deleted within reasonable time after the event.

The Data subjects right to information and the Data subject’s rights

The Data subject is entitled to receive information from the Company about what personal data related to the Data subject that the Company is processing and what type of processing that is done. A request shall be e-mailed to [email protected].

The Data subject has a right to request rectification of personal data related to the Data subject that the Company is processing. The Data subject has also a right the demand erasure or restriction of processing or object to processing of personal data to the extent allowed by applicable rules (primarily the EU regulation concerning processing of personal data). The same applies to get access to information in digital form (data portability).

Blocking of direct marketing

Direct marketing by the Company will take place at a limited scope and only business to business. Still, if the Data subject wants to ensure to not receive direct marketing, Data subject shall contact the Company and requests that personal data is deleted.

Right to lodge a complaint with a supervisory authority

The Data subject is entitled to lodge complaint concerning the Company’s processing of personal data to a supervisory authority.

Information about personal data that is processed

Information about personal data related to the Data subject is received in a separate document. Such information

• Is delivered vie email if the identity of the Data subject is secured, or
• Is sent via surface mail to the Data subject’s domiciled address according to the national registration office.