Privacy policy

At AVA, various personal data is processed relating to employees, customers and potential customers, suppliers, job applicants, business contacts, or others who have been in contact with us. Personal privacy is important to AVA. We strive for a high level of data protection. In this policy, we explain how we collect and use personal data. We also describe your rights and how you can exercise them. You are always welcome to contact us if you have questions about how we process your personal data. Contact details can be found at the end of the policy.

​

What is personal data and what is processing of personal data?

Personal data is any information about a living natural person that can be directly or indirectly linked to that person. This includes not only names and personal identity numbers, but also, for example, images and email addresses.

Processing of personal data is anything that happens with the personal data. Every action taken with personal data constitutes processing, regardless of whether it is carried out automatically or not. This includes, for example, collection, registration, structuring, storage, handling, and transfer. In some cases, manual records may also be covered.

 

Data Controller

The data controller is the entity that determines why and how personal data is to be processed. For the processing carried out within AVA, AVA Corporate Communications AB (559303-8697) is the data controller.

 

What personal data do we handle and why?

Your personal data is used solely to fulfill our legitimate interest in informing about AVA's business, as well as to fulfill agreements and statutory obligations. Our goal is to safeguard the protection of personal privacy and to take all technical and organizational measures required to protect personal data and ensure that processing takes place in accordance with applicable data protection legislation and internal guidelines, policies, and procedures for handling personal data. This means that only those who need access to the data in order to perform their duties have access to it.

 

The personal data we store is:

• Name
• Contact details (for example, address, billing address, email, and phone
• number)
• Job title
• Organization type
• Billing and payment information

 

To whom do we disclose your personal data?

AVA never sells your personal data to third parties. In some situations, however, it is necessary for us to engage external parties, for example various IT suppliers for HR systems or electronic driving logs. These parties then act as data processors on our behalf. In such cases, we establish data processing agreements that ensure personal data is handled securely and that processing otherwise takes place in accordance with data protection legislation. When data processors are engaged, this is done only for purposes consistent with the purposes we ourselves have for the processing.

 

Parties that are independent data controllers

We also share your personal data with certain other parties that are independent data controllers, such as authorities like the Swedish Tax Agency, when we are required to disclose such information under law or a government decision. When your personal data is shared with a party that is an independent data controller, that organization's privacy policy and data handling practices apply.

 

How long do we retain your personal data?

We retain information about you for as long as necessary considering the purposes of the processing, and for as long as required under statutory retention periods.

 

Your rights

As a data subject, you have a number of rights under applicable data protection legislation:

• The right to obtain information about how your personal data is processed.
• The right to request that your personal data be corrected. You also have the right to supplement any relevant personal data that is missing for the purpose of the processing.
• The right to have data erased. There are exceptions, however; we may still retain your personal data for legal reasons.
• The right to restricted processing, meaning you can require that the processing of personal data be restricted, for example if you dispute the accuracy of the data.
• The right to object to the data controller's processing of the personal data.
• The right to data portability, meaning that in certain cases you can ask us to return your data to you or have it transferred to another company. This applies only to personal data that you, as an employee, have provided yourself.
• The right not to be subject to automated decision-making. There are exceptions to this right, however, for example when a particular law permits it.

 

About cookies

When visiting our website, we may also collect information and data about you through the use of so-called cookies. You can read more about our cookie policy here.

 

Contact us with questions about how we process personal data

If you have questions about how we process personal data, please contact [email protected], which is responsible for personal data matters.

 

Changes to the Privacy Policy

We may make changes to our privacy policy. The most recent version of the privacy policy can always be found here on the website.