With this Privacy Policy, MerxTeam (“Merx", “we", “our", “us") wants to explain how we process your personal data and how we ensure that personal data processing is conducted responsibly and in compliance with applicable data protection legislation.

The General Data Protection Regulation (GDPR) comes into force in the EU/EEA on 25 May 2018.

1. GENERAL

1.1 We at The Company respect the privacy of our customers and suppliers and other individuals and have adopted this policy with the aim of achieving strong protection for the personal data we process. We are keen to protect and respect your privacy and strive for a high level of security in all processing of personal data.

1.2 We have taken the necessary and appropriate technical and organizational security measures to protect your personal data from improper access, use, alterartion and erasure. One example of such security measures is authorisation control.

1.3 This policy regarding privacy ("Privacy Policy") describes how “Merx" collects, uses, discloses and stores your personal data.

1.4 The Privacy Policy applies when “we" provides services and products in connection with purchasing, service matters and other contact with “Merx”, such as website visits, contact with our staff on visits and by phone, fax, chat and mail.

2. Data controller

2.1 "Merx" is the data controller for the processing performed by us or on our behalf. This means that we determine the purpose and means of processing personal data, i.e. why we process your personal data as well as how we process it.

2.2 If you have any questions about how your personal data is processed, please contact us via the contact details provided below.

3. Why do we process your personal data?

3.1 So that you can purchase our prodcuts, supply our products and services, visit our website or contact us for service or information, we must collect and process personal data about you.

3.2 "We" collect and process personal data about you when you make a purchase, sell to "us", use "our" support, visit “our” website, visit "us" at trade fairs or when you have any other form of contact with “us".

3.3 The data collected from you during a purchase or delivery is required so that you can enter into a contract with "us" and so that "we" can provide our services and offers.

 

 

 

4. What personal data do we process about you?

4.1 For those of you who work at a MerxTeam supplier

The personal data "we" collect and process about you as an employee of a customer is:

• Name
• Telephone and e-mail
• Position
• Information about which of our products or offers you have been interested in, how you interact with our newsletters and which of our events you have signed up for

4.2 For those of you who work at a MerxTeam customer

The personal data "we" collect and process about you as an employee of a supplier who supplies products and/or services is:

• Name
• Telephone and e-mail
• Position

4.2 For those who work with a MerxTeam prospect

The personal data "we" collect and process about you as an employee of a prospect is:

• Name
• Telephone number and e-mail
• Position
• Information about which of our products or offers you have been interested in, how you interact with our newsletters and which of our events you have signed up for

5. Why do we process your personal data?

5.1 For those of you who work with a MerxTeam business customer

MerxTeam processes your personal data for various purposes. Mainly, “we” process your personal data to:

• Meet our obligations to you as a customer, e.g. the execution of purchases, delivering our goods, invoicing and providing support;
• Enable general customer care and customer service, e.g. answering questions and correcting incorrect data;
• Provide information by post, e-mail, crm mailing, SMS / MMS, chat and phone, in relation to MerxTeam’s products and services;
• Manage our relationship with customers;
• Provide you with relevant information and custom offers in newsletters, at fairs and on “our” webpages;
• Improve our customer offers, such as the development of products and functions;
• Prevent fraud and carry out risk management; and
• Follow applicable legislation, for example, accounting laws.

 

 

5.2 For those of you who work with a MerxTeam supplier

MerxTeam processes your personal data for various purposes. Mainly, “we” process your personal data to:

• Meet our obligations to you as a supplier, e.g. the execution of purchases, delivery of goods, payment providing support;
• Enable general supplier care and service;
• Provide information by post, e-mail, SMS / MMS, chat and phone, in relation to MerxTeam’s purchased products and services;
• Manage our relationship with suppliers;
• Improve our offers, such as the development of the services, products and functions we buy from our suppliers
• Prevent fraud and carry out risk management; and
• Follow applicable legislation, for example, accounting laws.

5.1 For those who work with a MerxTeam prospect

MerxTeam processes your personal data for various purposes. Mainly, “we” process your personal data to:

• Meet our obligations to you as a prospect, e.g. sending out product information;
• Enable general customer care and customer service, such as answering questions and correcting incorrect information;
• Provide information by post, CRM, e-mail, SMS / MMS, chat and phone, in relation to MerxTeam’s products and services;
• Provide you with relevant information and custom offers in newsletters, at fairs and on “our” webpages;
• Improve our customer offers, e.g. the development of services, products and functions;
• Prevent fraud and carry out risk management; and
• Follow applicable legislation, for example, accounting laws.

6. The legal grounds for our processing of your personal data.

6.1 "Merx" bases the processing of your personal data on several legal grounds. These are described in this section.

6.2 We process your personal information, for example, to fulfill the contract with you as a customer or supplier, for example, for executing purchases, and for simplified administration and the order records.

6.3 Part of the processing of personal data that “we” carry out is based on a weighing up of interests. This applies, for example, to the processing we perform to market ourselves e.g. sending out offers to you about our products and services, information about our events and to carry out a limited segmentation of customers, for example, based on total purchaing sum.

6.4 "We" do not process any sensitive personal data

6.5 In some cases, "we" may have a legal obligation to process your personal data. This applies, for example, to the processing of personal data we perform to meet the requirements of the accounting laws.

 

 

7. Summary of our data processing

 

Purpose	Legal basis:	Categories of personal data
To administer, develop and deliver our products and services and provide support	Completion of contract	Name Contact details (e.g. e-mail och telephone). Position
Storage period:  24 months after you were last active with “us”, for example, by shopping with us or by contacting our customer support.

 

Purpose	Legal basis:	Categories of personal data
To administer, develop and purchase products and services and provide support	Completion of contract	Name Contact details (e.g. e-mail och telephone). Position
Storage period:  24 months after you were last active with “us”, for example, by shopping with us or by contacting our customer support.

 

Purpose	Legal basis:	Categories of personal data
To ensure that legal requirements are complied with, e.g. accounting laws	Legal obligation	Name Contact details (e.g. e-mail och telephone). Position
Storage period:  As long as we are required to store the data in accordance with applicable law

 

Purpose	Legal basis:	Categories of personal data
To market "us" and our products and services via for example fairs, post, email, telephone, CRM and SMS / MMS.	Balancing of interests	Name Contact details (e.g. e-mail och telephone). Position Information on which of our offers you were interested in, which of our newsletters you interacted with and which of our events you signed up for
Storage period:  24 months after you were last active with “us”, for example, by shopping with us or by contacting our customer support.

 

 

 

 

 

 

8. Profiling

8.1 “We” can process your personal data via profiling. If you are a customer, information is analysed about which of our products, services and offers you have been interested in, which of our newsletters you interacted with and which of our events you have signed up for, to provide you with offers that we think might suit you and to invite you events we think you would want to attend.

8.2 You may at any time object to the processing of your personal data via profiling. You do so by contacting “us” by sending an e-mail to: privacy@merxteam.com

When MerxTeam has received your notification, "we" will cease to process your personal data for this purpose.

 

9. For how long do we store your personal data?

9.1 Your personal information will only be stored if there is a need to save it to fulfil the purposes for which the data was collected in accordance with this Privacy Policy.

9.2 MerxTeam may store the data for longer if necessary to comply with legal requirements or to safeguard MerxTeam’s legal interests.

9.3 MerxTeam stores data about customers and suppliers for a maximum of 24 months after the time the customer last completed a purchase. Or if a supplier has delivered goods

10. Categories of personal data

10.1 “We” may disclose your personal data to third parties, for example, those handle logistics for your purchase/delivery and other partners, as well as suppliers of IT, ordering communications services.

10.2 We may also disclose your personal data to third parties when it is a requirement of legislation, other statute or an authority decision.

10.3 We may also disclose personal data to third parties, e.g. the police, the Swedish Tax Agency or any other authority, in the event of a criminal investigation or if we are otherwise required to disclose such information due to legislation or authority decision.

10.4 "We" always strive for your personal data to be processed within the EU / EEA and all our own IT systems are located within the EU / EEA. However, in the case of systematic support and maintenance, we may have to transfer the information to a country outside the EU/EEA, for example, if we share your personal data with a data processor who is, either her/himself, or through a subcontractor, established in or stores information in a country outside the EU/EEA. In these cases, the data processpr will only have access to the information relevant to the purpose (e.g. log files). Regardless of the country in which your personal data is processed, we take all reasonable legal, technical and organizational measures to ensure that the level of protection is the same as within the EU / EEA. In cases where personal data is processed outside the EU / EEA, the level of protection is guaranteed either by a decision of the EU Commission that the country concerned ensures an adequate level of protection or by the use of so-called appropriate protection measures. Examples of appropriate protection measures are an approved code of conduct in the recipient country, standard contract clauses, binding internal company rules or a privacy shield.

 

10.5 We will not sell your personal data to third parties.

 

11. Amendments to the Privacy Policy

11.1 "We” have the right to alter the Privacy Policy at any time MerxTeam will with reasonable notice notify you of any changes to the Privacy Policy.

12. Protection of your personal data

12.1 You should always be able to feel safe when you submit your personal data to "us". We have therefore taken the security measures necessary to protect your personal data from improper access, use, alterartion and erasure. For example, all data about customers is stored in a database that is protected by authorisation controls and a firewall.

 

13. What rights do you have?

13.1 You have the right, at any time, in accordance with the requirements of applicable data protection legislation, to request access to the personal data processed about you. You also have the right to have any incorrect personal data about you corrected, that we should stop processing and erase your personal data, to limit processing of your personal data, exercise your right to data portability, and to object to the processing of your personal data.

13.2 You also have the right to information about where the data has been retrieved from if your personal data has not been collected from you, about the existence of automated decision-making (including profiling) and about the predicted period for which the data will be stored and about the criteria used to determine that period.

13.3 If you do not want us to process your personal data for direct marketing you have the right to object to such processing by sending an e-mail to privacy@merxteam.com. When we have received your objection, we will cease processing your personal data for marketing purposes.

13.4 You also have the right at any time to lodge complaints with the appropriate regulatory authority if you believe that your personal data is being processed in violation of applicable data protection legislation.

13.5 In the event that you wish to exercise any of your rights, please contact us by sending an e-mail to privacy@merxteam.com

 

 

14. What are cookies and how do we use them?

14.1 Cookies are small text-files consisting of letters and numbers sent from our web server and stored on your browser or device. We use the following cookies:

1) Session cookies (a temporary cookie that expires when you close your browser or device).

2) Durable cookies (cookies that stay on your computer until you delete them or they expire).

3) First party cookies (cookies set by the websites you visit).

4) Third party cookies (cookies set by a third-party website). These are primarily used by us for analyses, e.g. Google Analytics.

5) Similar techniques (techniques that store information on your browser or device in a manner similar to cookies).

The cookies we use usually improve the services we offer. Some of our services need cookies to work properly, while others improve services for you. We use cookies for overall analytical information regarding your use of our services and for saving functional settings, such as language and others.

 

14.2 Can you control the use of cookies yourself?

Yes, your browser or device allows you to change the settings for the usage and scope of cookies. Go to the settings for your browser or device to learn more about adjusting the settings for cookies. Examples of things you can adjust are the blocking all cookies, accepting first-party cookies, or deleting cookies when you close your browser. Keep in mind that some of our services might not work if you block or delete cookies. You can read more about cookies on the website of the Swedish Post and Telecom Authority, www.pts.se.

 

15. CONTACT DETAILS

15.1 Please do not hesitate to contact us if you have any questions about this Privacy Policy, the processing of your personal data or if you want to request an extract from our records. You will find our contact details below.

MerxTeam AB, Galvaniseringsgatan 5, 417 07 Göteborg

e-mail: privacy@merxteam.com