Plant - Privacy Policy


INFORMATION ON OUR PROCESSING OF PERSONAL DATA

Plant an Idea AB ("Plant") values that you feel confident that we process your personal data in a safe and legal manner. We want to be as open and transparent as possible about how we collect and otherwise process your personal data when you are in contact with us. This information focuses on the personal data processing that relates to, among other things:

  • Users of our platform, our website and other digital channels such as social media;
  • Contacts or other representatives of our customers, suppliers or partners; and
  • External persons who have contact with, or otherwise communicate with us or are otherwise affected by our personal data processing and are not covered by the categories above, for example if you contact us by email, submit an expression of interest in one of our projects or subscribe to our press releases.


Who is the data controller for the processing of your personal data?

Plant is the data controller for the processing of your personal data.


Which of your personal data do we process?

Plant collects personal data about you, for example, when you register as a user on our platform, for a mailing on our website, participate in various sales activities, fairs and events, when you contact Plant's switchboard or otherwise come into contact with us.

Plant only processes the personal data that is necessary to fulfill certain specific purposes, which means that Plant processes different personal data in different situations. Examples of personal data that Plant processes can be name, e-mail address, telephone number, postal address, correspondence, user-generated data, and/or other information that you have provided to us or that is otherwise necessary for us to fulfill our commitments or conduct our business.


Where do we collect your personal data from?

As a general rule, we collect your personal data from you when you provide it to us and our staff when you use our platform, our website or contact us through other social channels.


PARTNERS

Sometimes we collect personal data from partners and other external persons, for example when we carry out activities together with our partners.
‍.

PUBLIC REGISTERS AND DATABASES

We may collect personal data from public registers and databases, authorities for example to manage the relationship with the company you represent.

On what legal basis do we process your personal data?

Plant processes your personal data for different purposes in different situations. Mainly to fulfill our commitments, to provide good service and well-functioning, efficient and simple services.

In order for Plant to process your data, there must be a legal basis for the processing. This means that for our processing to be legal, it is required, for example, that it is necessary to fulfill a contract with you or necessary to fulfill a legal obligation. Processing of your personal data may also be based on a balance of interests where we have assessed that our interest in processing your personal data outweighs your interest or fundamental rights and freedoms. In some cases, Plant may need your consent to process your personal data. When you give your consent in these cases, you will always receive clear information about what you are consenting to and how to withdraw your consent.

MANAGING AND MEETING LEGAL REQUIREMENTS

We process personal data if it is necessary to establish, exercise and defend legal claims, for example in the context of a dispute.

Personal data processed

  • Name and contact details
  • Communication
  • Technical information
  • Other information necessary in the specific case

Legal basis for processing

  • Legitimate interest
  • The processing is carried out for the purposes of Plant's legitimate interest in establishing, exercising and defending legal claims.
  • Where criminal data is involved, it is processed to comply with legal obligations and to assert and defend legal claims.

TO ENSURE COMPLIANCE WITH OUR POLICIES, GUIDELINES AND APPLICABLE LEGISLATION

We process personal data if it is necessary to be able to ensure that our suppliers and partners comply with the requirements and guidelines that we have established together with the legislation in force at any given time.

Personal data processed

  • Name and contact details
  • Communication
  • Information on suspected misconduct or crime
  • Data related to routine controls
  • Other information necessary in the specific case

Legal basis for processing

  • Legal obligation and legitimate interest
  • The processing is carried out to meet Plant's legitimate interest in ensuring compliance with policies, guidelines and legislation.
  • Where criminal data is involved, it is processed to comply with legal obligations and to assert and defend legal claims.

TO DEVELOP AND IMPROVE OUR ACTIVITIES

We process personal data when we carry out overall analyses to monitor, develop and improve our operations in general. Processing also takes place when we archive agreements, decision-making documents, presentations, etc.

Personal data processed

  • Name and contact details
  • Communication
  • Other information necessary in the specific case

Legal basis for processing

  • Legitimate interest
  • The processing is carried out to meet Plant's legitimate interest to continuously improve its operations and to archive important documentation.

TO MONITOR USAGE AND DEVELOP OUR WEBSITES

We process personal data when someone visits our websites in order to monitor their use and to develop and improve them.

Personal data processed

  • User-generated data
  • Technical data

Legal basis for processing

  • Legitimate interest
  • The processing is carried out to meet Plant's legitimate interest in improving and developing our websites.

TO PROVIDE INFORMATION AND COMMUNICATE NEWS

We process personal data if you subscribe to our mailings and press releases, or if you order reports or other information on an occasional basis. The same applies if you communicate with us by email to enable us to respond to you.

Personal data processed

  • Name and contact details
  • Communication

Legal basis for processing

  • Legitimate interest and consent
  • The processing is carried out to meet Plant's legitimate interest in providing information to you and to respond to your written requests.
  • For example, by subscribing to our press releases, you consent to the processing of your contact details. You can withdraw your consent at any time by unsubscribing.

MEET A LEGAL OBLIGATION

We process personal data in order to fulfill legal obligations, for example in the field of tax and accounting.

Personal data processed

  • Name and contact details
  • Communication
  • Invoicing data
  • Other information necessary in the specific case

Legal basis for processing

  • Legal obligation
  • The processing is done to fulfill our legal obligation in the field of tax and accounting.

QUOTES. PURCHASE REQUESTS. ORDERS, ETC.

We process personal data if you contact us to request a quote, to purchase our services or to enter into a similar agreement with us.

Personal data processed

  • Name and contact details
  • Personal number
  • Communication
  • Invoicing data
  • Organization number
  • Order details
  • Other company-specific and financial information that is available and necessary in the specific case.

Legal basis for processing

  • Performance of contractual obligations and legitimate interest
  • We process your personal data to fulfill the contract concluded between you or the company you represent and Plant.
  • Plant has a legitimate interest in responding to and managing requests for quotes and orders.


Who has access to your personal data?

In the event that personal data is shared by us and the personal data processing takes place in accordance with our instructions, the recipient acts as a personal data processor to us and we are responsible for the processing.

We may also share your personal data with our service providers, such as IT providers, who process your personal data on behalf of us as our personal data processor. Our service providers will only process your personal data according to our instructions in order to fulfill their respective obligations towards us.


Where do we process your personal data?

We always strive to ensure that your personal data is processed within the EU/EEA. In some cases, your personal data is shared with recipients outside the EU/EEA, for example with service providers engaged by us. We ensure that your personal data is protected even in these cases by ensuring that appropriate safeguards are in place with all service providers that process personal data outside the EU/EEA. If you would like further information about which countries we may transfer your personal data to (outside the EU/EEA) and what safeguards we have put in place to protect your personal data, please contact us at the email address below.


How long will your data be kept?

Plant retains your data for as long as it is necessary for the purposes for which we collected it or for as long as we are obliged to do so by law, regulation or official decision or otherwise by industry practice. To determine the length of time we can and may keep your personal data, we use the following criteria, among others.

  • As long as we have an ongoing relationship with you and/or the company where you are employed.
  • For as long as necessary to enable Plant to meet its legal obligations, including those imposed by tax legislation.
  • As long as appropriate to ensure our legal position, such as applicable statutes of limitations.
  • As long as it is necessary for legitimate business reasons.


How do we protect your personal data?

Plant has strict internal policies and guidelines on how we protect your personal data. Furthermore, we use appropriate and reasonable technical and organizational security measures, including information technology security measures, to properly protect your personal data.


Your rights

You have certain rights in relation to our personal data processing and these are exemplified below. The rights applicable to you depend on the specific personal data processing operation.

RIGHT TO WITHDRAW CONSENT

If you have given your consent to a particular processing of your personal data, you can withdraw all or part of your consent at any time.


RIGHT OF ACCESS

You have the right to obtain confirmation as to whether we are processing your personal data and, if so, you have the right to obtain information about how the personal data is being processed (for example, information about the purposes of the processing and the categories of personal data being processed). You also have the right to receive a copy of the personal data we are processing.

RIGHT OF RECTIFICATION AND RIGHT TO OBJECT TO PROCESSING

You have the right to obtain without undue delay the rectification of inaccurate personal data and the completion of incomplete personal data (e.g. if you have changed your telephone number). You can also object at any time to the processing of personal data based on a legitimate interest.


RIGHT TO ERASURE AND RIGHT TO RESTRICTION OF PROCESSING

Under certain conditions, you have the right to request the erasure of your personal data. Such conditions exist, for example, if the personal data is no longer necessary for the purposes for which it was collected or processed, or if the personal data has been processed unlawfully. You also have the right to request that the processing of your personal data be restricted, for example if you believe that we are processing incorrect personal data.


RIGHT TO COMPLAIN

You have the right to complain about our processing of your personal data to the competent supervisory authority. Such a complaint should be submitted to the authority of the EU/EEA Member State where you have your habitual residence, where you work or where a breach of applicable data protection laws and regulations is alleged to have occurred. The competent supervisory authority in Sweden is the Integritetsskyddsmyndigheten (IMY).


RIGHT TO DATA PORTABILITY

In certain cases, you have the right to obtain from us your personal data in a structured, commonly used and machine-readable format. You also have the right to have your personal data transferred to another company when technically possible (data portability).


Contact us

If you have any questions about our processing of your personal data or if you wish to exercise any of your rights in relation to our processing of your personal data, please contact us at info@plant.se.

Last updated: February 27, 2024