This policy regarding personal data describes how Ortivus AB, as a personal data controller, collects, uses, discloses and stores the personal data that Ortivus manages. The policy complies with the GDPR, General Data Protection Regulation, which commenced on May 25, 2018.
What tasks do we treat?
Ortivus AB keeps records of its customers and users who have registered or bought something at Ortivus. The registries are focused on the company relationship, that is, Ortivus relation to the customer in the form of a county council or subcontractor, but contains contact information on each company. The registry contains personal information such as the contact person’s name and electronic addresses, which are used as login data for Ortivus Service and Support Systems. Delivery and payment and purchase information is only related to legal entities not physical. The information is used by Ortivus for billing, information and delivery of products, as well as marketing.
Ortivus AB also processes personal information which is provided by consent on Ortivus website via the contact form. The information includes name, company, e-mail, telephone and electronic address.
In addition to the above, Ortivus has a register containing private addresses, social security numbers, family information, linked to Ortivus own staff in order to handle payroll and tax information. The employees are informed about the treatment. The salary processing is carried out by a subcontractor where agreements regulating personal data are prepared.
For what purposes and for what reasons do we process the data?
The information provided via the contact form is used to handle any questions that the user has submitted to Ortivus.
Ortivus customers and registered users agree that marketing can be via mail, phone, or e-mail and text as well as other digital channels. Marketing via e-mail and sms is regulated by the Marketing Act.
How long do we keep data?
Personal data is retained only as long as there is a need to preserve them to fulfill the purpose for which the data was collected in accordance with this policy.
Who do we leave the data for?
Ortivus AB only handles personal data for registered users within the company. Personal data will never be disclosed to third parties without consent. Personal data are disclosed to the Authority only where required by law or by authority decision. Registered users are entitled to withdraw consent, request a registry extract or rectification / deletion of any incorrect data in writing at no cost. You can also block data against marketing.
Ortivus AB is responsible for the processing of registered personal data in accordance with applicable legislation. Registered users are entitled to receive information from Ortivus AB about which of the data has been processed and how they are processed, as well as the recipients who have taken part in the information. You also have the right to request that data that are incorrect, incomplete or not treated with data protection laws in good time be corrected, blocked or deleted. You also have the right to object to or request a limitation of the above treatment or to invoke your right to data deprivation by contacting Ortivus AB Data Protection Officer. In addition to this, you also have the right to lodge any complaints regarding the above-mentioned processing to the Data Inspection.