Privacy Policy for Boards on Fire AB

This Privacy Policy is effective as of August 16th 2023.

Index

  1. Background
  2. Definitions
  3. Data controller
  4. Why do we Process Your Personal Data?
  5. What Personal Data is Processed on what legal ground?
  6. Social media platforms
  7. Cookies
  8. How long is Your Personal Data stored?
  9. Your rights
  10. Consent to the Processing of Personal Data
  11. To whom do we transfer Your Personal Data?
  12. How do we protect Your Personal Data?
  13. Supervision and compliance
  14. Third party’s terms and conditions
  15. Changes to the Privacy Policy
  16. How do You contact us?

1. Background

Your integrity is important to Boards on Fire AB (“Boards on Fire”, “we”, “us”). We ensure that Boards on Fire process Your Personal Data in accordance with the rules in the EU’s General Data Protection Regulation (GDPR) (EU) 2016/679 with associated statutes of implementation and supplementary statutes on data protection (the “Data Protection Rules”).

This privacy policy (“Privacy Policy”) is addressed to You who work for, represent or work on behalf of a company or organisation that we have a relationship with (existing, previous or potential customer, supplier, partner or housing association), visit our website https://boardsonfire.com/ (the “Website”) or our social media account, attend an event, or in other ways has been in contact with us, e.g. such as an employee at an authority or as an employment- seeker.

In this Privacy Policy, we describe how and why we collect, process, share and store Your personal data in the above mentioned cases. You can also read more on the rights You have when we process Your personal data, and our contact details.

2. Definitions

In this Privacy Policy, the term "personal data" refers to any information which can be attributable to an identified or identifiable natural person, such as e.g. name, address, personal registration number, e-mail address, phone number, IP-address and photo (“Personal Data”).

The term "processing" refers to any operation or set of operations which is performed by us on Your Personal Data or on sets of Personal Data in such a manner as is described in this Privacy Policy, e.g. our collection, registering, storing, disclosure, erasure and any other using of Your Personal Data (“Processing”).

3. Data controller

Boards on Fire AB, Reg. No. 559241-3735, with address Taptogränd 14, 352 36 Växjö, is the data controller for the processing of Your Personal Data which is carried out in accordance with this Privacy Policy. Boards on Fire is therefore responsible to ensure a correct, safe and legal Processing of Your Personal Data.

4. Why do we Process Your Personal Data?

Boards on Fire only collects and Processes Your Personal Data for specific purposes. We Process Your Personal Data for the following purposes:

  • to provide services and fulfil the agreement entered into with the company or organisation You represent or work for, or the company or organisation You work on behalf of
  • to provide seminars, workshops, courses, and other events
  • to enable general customer relationships management
  • to inform and market our business
  • to leave information regarding events and news, and address marketing information
  • to process a job application
  • to prevent fraud, money laundering and financing of terrorism, and carry our risk management
  • to comply with applicable legislation

We only collect the Personal Data which is necessary for the purposes described in this Privacy Policy. What Personal Data we collect and Process depends, inter alia, on how You come in contact with us, and which of our services we provide for You or the company or organisation You represent or work for or on behalf of.

In addition to the Personal Data You provide to us, or that we collect when providing our services, we may also collect Personal Data from third parties. These third parties vary from time to time but include inter alia suppliers of public record information, such as address information in order to ensure we have the correct address information, as well as credit rating agencies (CRA’s) or banks from where we obtain information regarding creditworthiness or information in order to conduct anti-money laundering controls or fulfil our obligations to prevent financing of terrorism.

When You are asked to provide us with Personal Data, e.g. upon the purchase of a service or participation in an event, You may choose not to do so. If You choose not to provide necessary information, this may lead to us not being able to fulfil our commitments towards You or the company or organization You represent.

5. What Personal Data is Processed on what legal ground?

The Personal Data listed below is Processed by us for the purposes explained under section 3 above:

  • Name
  • address for invoicing and delivery
  • phone number
  • e-mail address
  • title of profession and place of work
  • personal identification number (sole trader)
  • resumé
  • information regarding health in connection with, for example, registration of food preferences and allergies
  • customer references
  • technical information such as information about Your visit at our Website (e.g. IP-address)
  • payment information
  • information in correspondence with You

The Processing of Personal Data is necessary in order for Boards on Fire to conduct its business through providing sale and delivery of services and thereby fulfil the agreement that has been entered into with You (if You are a sole trader). In situations where You act as a representative or contact person for a company or organisation that is a customer of Boards on Fire, or in any other way collaborates with Boards on Fire, we Process Your Personal Data based on our legitimate business interest. For this Processing, we have conducted a balancing of interests where we have, inter alia, taken into account that the Processing does not include any sensitive Personal Data and that we have a clear commercial interest in being able to provide our services to the company or organisation You represent or work for or on behalf of in an efficient manner.

The Processing of Personal Data is also necessary in order for Boards on Fire to provide good service via our customer service and support and in order to be able to investigate potential complaints, and thereby meet our legitimate interest of handling customer service matters, developing our business and communicate our contacts in an efficient and customer friendly manner.

The Personal Data can also be Processed regarding other contacts with You, for example through newsletters and other dispatches, such as invitations to events, information regarding seminars and educations or other information which we consider to be relevant for You or the company or organisation You represent or work for or on behalf of. We Process Your Personal Data based on our legitimate business interest of being able to provide You, who are already an existing customer, or who used to have a business relation with us, relevant marketing and information. For this Processing, we have conducted a balancing of interests where we have, inter alia, taken into account that the Processing does not include any sensitive Personal Data and that we have a clear commercial interest in being able to provide our services to the company or organisation You represent or work for or on behalf of in an efficient manner.

If You are in contact with us in connection with seeking employment with us, we base our Processing of Your Personal Data on Your consent or on our legitimate business interest. We may also process Your Personal Data with Your consent, e.g. when You sign up to receive our newsletter, when you register for an event or consent to our publishing of customer references on our Website or other marketing purposes. In the event that we can no longer Process Your Personal Data for marketing purposes based on our legitimate business interest we may come to obtain Your consent to e.g. send You information. Consent can also be obtained if we wish to store incoming resumés for future recruitment purposes. We will always document whether You have given Your consent to our Processing of Your Personal Data.

Your Personal Data is also Processed, in applicable cases, in order for Boards on Fire to comply by its obligations stemming from applicable legislation, court rulings and decisions taken by the authorities. Such obligations may e.g. follow from the Accounting Act (1999:1078), the Money Laundering and the Financing of Terrorism (Prevention) Act (2017:630).

6. Social media platforms

Boards on Fire uses Instagram, Facebook and LinkedIn as platforms to get in contact with our customers, potential customers and other business partners, as well as market and inform about our business and our services. In connection with this, Boards on Fire is the data controller for publications and information that contain Personal Data and are made by You as a user in the form of e.g. comments, photos and video clips. Boards on Fire does not allow offensive content to be published or made available on our platforms. We ask our users to report unfit content to us in order for us to ensure that such content does not occur. Boards on Fire may also, based on what we deem necessary, remove content that has been published on our social media platforms.

7. Cookies

We use cookies on our Website. More information on how we treat cookies can be found in our Cookie Policy.

8. How long is Your Personal Data stored?

Your Personal Data is stored only as long as necessary in order to fulfil the purposes for which the Personal Data was gathered in accordance with this Privacy Policy. For example, it can be situations when we are in contact with You via e-mail, when You participate in an event or as long as we have a business relationship with You or the company or organisation You represent or work for or on behalf of.

If You have given Your consent to the Processing of Your Personal Data, Boards on Fire Processes Your Personal Data for the specific purpose, until You withdraw Your consent. You can withdraw Your consent at any time by (i) contacting us and objecting to this or (ii) following the link in the mailings, if the consent regards receiving marketing information or other information.

In order to ensure Boards on Fire’s compliance with the legal obligations stemming from applicable legislation or in order to safeguard our legal interests we may store Your Personal Data for a longer period of time than what is stated above. The Personal Data is however never stored for longer than is necessary or statutory for each respectively purpose.

9. Your rights

You have a right to receive information regarding the Processing of Your Personal Data we carry out. Below You find a statement of the rights You can claim by contacting us. Our contact information can be found at the very end of this Privacy Policy.

Right to access

You have a right to, free of charge, request information regarding our Processing of Your Personal Data. You also have a right to receive a copy of Your Personal Data that we Process. Such a request shall be submitted to us in writing. We will respond to Your request as swiftly as possible. If we cannot grant You access to the information Your request concerns, we will provide a reason as to why. The copy of Your Personal Data will be sent to Your registered address unless otherwise is agreed with You in writing. In order to ensure that the right person receives the information, we may come to request more information from You.

Right to rectification

The main responsibility to ensure that the Personal Data we Process is correct lies with Boards on Fire. If You inform us that the Personal Data You have provided to us is no longer correct, we will promptly correct, block or erase such Personal Data.

Right to erasure

You have the right to request that Boards on Fire, without unnecessary delay, erases Your Personal Data. Personal Data shall be erased in the following cases:

  • if the Personal Data is no longer necessary for the purposes for which it was collected;
  • if You withdraw Your consent and the Processing was based solely on consent;
  • if Processing is carried out for purposes of direct marketing and You oppose Your Personal Data being used for such purposes;
  • if You oppose the Processing of Personal Data after a balancing of interests has been carried out and Your interest outweighs ours;
  • if Your Personal Data has not been Processed in accordance with the Data Protection Rules; or
  • if erasure is necessary in order to comply with a legal obligation.

There may be obligations which hinder us from immediately erasing all Your Personal Data. These obligations stem from applicable legislation regarding inter alia accounting. If certain Personal Data cannot be erased due to applicable legislation or other rules of conduct that we are obligated to apply, we will inform You of this as well as ensure that Your Personal Data will be used solely for the purpose of complying with such legal obligations and not for any other purposes.

Right to restriction

You have a right to request that Boards on Fire temporarily restricts the Processing of Your Personal Data. Such a restriction can be requested in the following cases:

  • if You consider the Personal Data we have about You to be incorrect and in connection with this have requested rectification;
  • when the Processing of Your Personal Data which is carried out is not compliant with the Data Protection Rules, but You still do not want Your Personal Data to be erased but rather restricted; and
  • when we no longer need Your Personal Data for the purposes of our Processing but You need it in order to establish, exert, or defend a legal claim.

If You have objected against the Processing of Your Personal Data, the use of Your Personal Data may be restricted during the time of the investigation. Upon the restriction of Your Personal Data, Boards on Fire will only store Your Personal Data and for further Processing obtain Your consent.

Right to data portability

You have a right to, in the cases where we Process Your Personal Data with Your consent or in order to fulfil contractual obligations toward You, require that we provide You with all Personal Data we have about You and which is Processed in an automated manner, in a machine-readable format, which may be inter alia an Excel-file or a CSV-file. If it is technically possible, You further have the right to require that we transfer Your Personal Data to another data controller.

Right to object

You have a right to object to our Processing of Your Personal Data if the Processing is based on our legitimate interest. Boards on Fire will in such a case ask You to specify which Processing You object to. If You object to any Processing we will only continue our Processing of the Personal Data if there are legitimate interests for Processing which outweigh Your interests. We will also inform You about our decision.

10. Consent to the Processing of Personal Data

If You have consented to Processing of Your Personal Data, You decide if and when Your wish to withdraw the voluntary consent that You have given to the Processing of Your Personal Data. You can withdraw Your consent by (i) contacting us and object to this in writing, or (ii) following the link in the mailings if the consent regards receiving marketing information and other information.

11. To whom do we transfer Your Personal Data?

In order to provide some of our services we appoint selected third parties. This entails that we share some of the Personal Data we have collected with them, e.g. to other companies within our group for i.e. exchange of information and knowledge and to collaborative partners such as suppliers of IT-systems or which supply printing and distribution.

In connection with such transfer of Your Personal Data, Boards on Fire takes organisational and technical measures in order to ensure that Your Personal Data is handled in a safe and secure manner. These selected third parties will only process Your Personal Data in manners which follow from this Privacy Policy and in order to fulfil one or more of the purposes listed in this Privacy Policy. When such third parties are data processors for Boards on Fire, we are responsible towards You for that the Processing of Your Personal Data carried out by these third parties is carried out in a correct and legal manner. In such cases, we also have agreements with the third parties containing instructions for the Processing of Personal Data in accordance with the Data Protection Rules.

Boards on Fire may transfer Your Personal Data to countries outside the EU/EES, if any of our suppliers or business partners are located there. If Personal Data is transferred to a country outside the EU/EES, Boards on Fire will ensure that the Personal Data will remain protected as well as take measures needed in order to transfer Personal Data to a country outside the EU/EES in a legal manner. Boards in Fire will not transfer any Personal Data collected through our SaaS-tool to any country outside the EU/EES.

We will disclose Your Personal Data if it is required by law or if we, as a company, reasonably deem it to be necessary in order to protect our rights, e.g. by disclosing Personal Data to Boards on Fire’s liability insurance provider and/or to comply with a court ruling or abide by the verdict of a legal process.

As the business is conducted today, Boards on Fire will not sell Your Personal Data to a third party unless we have previously obtained Your consent. However, we may, in the case that Boards on Fire decides to divide, sell, buy, merge with another company or organisation, or in any other way reorganise the business, transfer Your Personal Data to potential or actual buyers and their potential advisors.

12. How do we protect Your Personal Data?

In order to protect Your personal integrity, discover, prevent and limit the risks of a hacking attack etc., Boards on Fire takes several technical and organisational information safety measures. Boards on Fire also takes measures in order to protect Your Personal Data against unauthorised access, misuse, reveals, changes and damages. Boards on Fire ensures that access to Your Personal Data is only granted to employees who need to Process it in order to fulfil their work assignments, and that they abide by confidentiality in accordance with Boards on Fire’s applicable policies and routines.

13. Supervision and compliance

If You are dissatisfied with how Your Personal Data has been processed or believe that Your Personal Data has been Processed contrary to the Data Protection Rules You can at first-hand contact us. You can also always turn to the supervisory authority in the Member State where You have Your place of residence or where the alleged breach has been conducted to file a complaint. The supervisory authority in Sweden is Integritetsskyddsmyndigheten, see www.imy.se. Boards on Fire annually reviews this Privacy Policy.

14. Third party’s terms and conditions

Boards on Fire’s services may in some cases be subject to third party’s terms and conditions. Boards on Fire is not responsible for such a third party’s use of Your Personal Data as they themselves are data controllers and responsible for the Processing of Your Personal Data. Hence, it is important that You observe and read through the terms and conditions of such third parties. The same applies if there is a link on our Website to other websites.

15. Changes to the Privacy Policy

Boards on Fire reserves the right to change this Privacy Policy when we deem it to be necessary. Such changes are usually warranted upon potential changes to applicable legislation, due to statements from the supervisory authority or other authorities issuing statements pertaining to the Data Protection Rules. Further, this Privacy Policy will be updated when it is necessary due to changes in our business activities.

If Boards on Fire makes comprehensive changes to this Privacy Policy or changes concerning how we Process Your Personal Data, You will be informed of this before such a change come into force.

16. How do You contact us?

If You have questions pertaining to this Privacy Policy or the current Processing of Your Personal Data, wish to file a request in accordance with this Privacy Policy or wish to report a violation of this Privacy Policy etc., You are welcome to contact us via e-mail, phone or letter.

Boards on Fire AB
Storgatan 82A,
352 46 Växjö
E-mail: info@boardsonfire.com