Information on Östenssons interior design studio AB:s policy for processing personal data

Östenssons interior design studio, org. nr. 559141-3082 (hereinafter ”Östenssons”, ”we”, ”us” or ”our”), is responsible for the personal data that we receive in connection with assignments or which are otherwise processed when the assignment is being prepared or administered, as well as personal data that we receive from suppliers and other external parties.

Personal information is any kind of information that can be used to identify an individual. The purpose of this information is that you should receive information including about how we collect and process personal data, what we use them for, who can access them and what rights you as registered have. We handle the information in accordance with the applicable data protection regulation and we want you to feel safe when you submit your personal information to us.

The personal information is usually provided directly to us from you as a registered person, but can also be obtained from others. We may also supplement personal data by obtaining information from private and public registers. Data can also be collected for our business that is not directly related to a comission (eg in contact with suppliers and partners). Personal data that can be processed by us are, for example, name, telephone number, address and e-mail address.

We process the tasks to perform and administer assignments, to safeguard your and our interests, and for accounting and billing purposes. Processing of information attributable to suppliers and their representatives and other external parties is based on our legitimate interest in managing the relationship and our contractual obligations. The information in the context of our business is processed on the basis that the treatment is necessary to fulfill an agreement with you, that the treatment is permitted after a balance of interests (eg when you are the representative or contact person for a legal person who is a customer of us) or that the processing is necessary to fulfill a legal obligation (eg accounting obligation). If none of these grounds apply, treatment can be made if consent has been provided.

The data can also be used for business and method development, market analysis, statistics and risk management. The data that is processed for the purpose of developing and analyzing the business is processed on the basis of our legitimate interest in developing the business and communicating with our contacts.

We will not disclose personal information to outsiders except when (i) it has been specifically agreed upon, (ii) where, within the framework of a particular assignment, it is necessary to exercise your or our rights, (iii) if necessary to fulfill our statutory obligation or to comply with governmental decisions or court decisions, or (iv) in the event that we employ third-party service providers who perform assignments on our behalf. If we have a supplier operating in a country outside the EU / EEA or if it is necessary for the fulfillment of the assignment, your personal data may be transferred to a country which does not have a corresponding level of personal data protection. We will then take appropriate safeguards to protect your personal data in connection with such transfer.

The personal data is saved during the time required for the completion of the assignment and during one year from the date of completion of the assignment, or the longer time required.

You have the right to request information from us free of charge about the use of the personal data that concerns you. We will, at your request or on your own initiative, correct or delete data that is incorrect or if you raise objections regarding that process or limit the processing of such data, unless there are obstacles, for example, accounting purposes. In the event that your data is processed with the aid of consent, you have the right at any time to withdraw your consent with future effect. We will then not process any further personal data or update previously submitted personal data in this regard. You also have the right to request that your information is not processed for direct marketing purposes. You also have the right in some cases to access your personal data in a machine-readable format and transferred to a third party that you direct. If you are dissatisfied with our processing of your personal data, you can submit a complaint to a supervisory authority, which in Sweden is the Data Inspectorate (www.datainspektionen.se)