PRIVACY NOTICE

RECORD OF PROCESSING ACTIVITIES

About this privacy notice

Data privacy is of high importance for Iron Wheels AB and we want to be open and transparent with our processing of your personal data. We therefore have a policy setting out how your personal data will be processed and protected. Iron Wheels AB (556988-3647), Bönekullevägen 2, 417 46 Gothenburg, is the personal data controller and responsible for your personal data under applicable data protection law. If you have any questions regarding the processing of your personal data, please contact us using the details below.

Website: http://www.ironwheelsab.com/

Phone: +46 720 330 330.

Contact: Bahaa Karim

Iron Wheels AB is not joint controller with any other company and don’t have a data protection officer.

Purpose of data processing

Iron Wheels AB processes personal data for a variety of purposes, including to carry out our our statutory and contractual obligations with our customers and to manage our customer relationships. Additionally we process personal data to fulfill our labor law obligations for our employees.

Categories of data subjects and the categories of personal data

Iron Wheels AB only process personal data about people over the age of 18. In addition to this we only processes the personal data that is required to comply with our statutory and contractual obligations to maintain our obligations to our customers and employees. Iron Wheels AB processes as few privacy-sensitive data as possible and when such privacy-sensitive data is being processed we have obtained the consent of the registered person.

Categories of recipients to whom the personal data have been disclosed

Iron Wheels AB has no intentions on disclosing personal data to third parties, unless the registered person has consented to it or the disclosure is necessary to fulfill our statutory or contractual obligations. In cases where we disclose personal data to third parties, we make sure that the other party is bound by confidentiality and we also make sure that the personal data is processed in a secure manner.

Transfers of personal data to a third country

The personal data that we process is stored within the European Economic Area (“EEA”) but may also be transferred to and processed in a country outside of the EEA. Any such transfer of your personal data will be carried out in compliance with applicable laws. For transfers outside the EEA, Iron Wheels AB will use Standard Contractual Clauses and Privacy Shield as safeguards for countries without adequacy decision from the European Commission.

Time limits for erasure of the different categories of data

Iron Wheels AB strives not to process personal data for a longer time period than necessary to achieve the purpose of the data processing. When personal data is no longer relevant to us or if we no longer have a legal basis to process the personal data in question, the personal data is destroyed or anonymized as soon as possible and no later than 1 month from that date and in all cases after 24 months.

General description of the technical and organisational security measures

Iron Wheels AB prioritizes the use of IT systems that internationally are critically acclaimed for their high standard of security and who continuously work to improve their built-in security and who do their utmost to comply with the requirements of the General Data Protection Regulation. Our IT systems are developed with the principles of data protection by design and data protection by default and they therefore have the registered persons’ integrity in focus and ensures that the personal data is adequately protected and secured. In particular, reasonable security arrangements will be taken to prevent any unauthorized access, collection, use, disclosure, copying, modification, leakage, loss, damage and/or alteration of the personal data. However, Iron Wheels AB cannot assume responsibility for any unauthorized use of your personal data by third parties which are wholly attributable to factors beyond our control.