Booking inquiry for AstaZeros test tracks

Processing of personal data - clients and business partners

AstaZero, as data controller, processes personal data regarding contact persons of AstaZero customers and business partners (hereinafter referred to as the “Contact person”), due to the circumstance that the Contact person or its employer or principal has or has had a business relation with AstaZero, and/or has or has had discussions or negotiations regarding such business relation.

Personal data processed by AstaZero
The basic personal data of the Contact person that AstaZero processes may include name, address, phone number, e-mail address, in some cases personal security number (swe: personnummer), and other personal data transferred to AstaZero from the Contact person or its employer or principal.

From which sources the personal data is collected
In addition to the information transferred to AstaZero from the Contact person or its employer or principal, AstaZero may collect personal data from public records or from third parties cooperating with AstaZero within the framework of the overall mission of AstaZero.

Purpose and lawful basis
Based on Contract or AstaZero legitimate interest, AstaZero processes personal data for the following purposes:
• Implementation, management, administration, follow-up, etc. of the current business relation and its deliveries and associated communication by telephone, e-mail, text message or other communication channels, and the invoicing and payment procedure.

This processing is needed for AstaZero to be able to fulfill its contractual rights and obligations according to the contract entered or negotiated with AstaZero. If the contract is entered into or negotiated between AstaZero and the employer or principal of the Contact person, and the Contact person could reasonably expect the processing which is not deemed to cause unjustified harm, the personal data is processed based on the legitimate interest of AstaZero, which is to fulfill its contractual rights and obligations towards the contracting employer or principal.

Based on AstaZero legitimate interest, AstaZero processes personal data for the following purposes:
• Management, follow-up, evaluations and administration of customer satisfaction surveys.
• Marketing of AstaZero business, projects and various events.
• Comply with applicable laws, e.g. Bokföringslagen (1999:1078).
• Safeguard and exercise legal rights of AstaZero.

If the Contact person could reasonably expect the processing which is not deemed to cause unjustified harm, the personal data is processed based on the legitimate interest of AstaZero.

To whom the personal data is disclosed
AstaZero applies appropriate technical and organizational security measures to protect personal data against e.g. loss, misuse and unauthorized access. Only persons within AstaZero who need to process the personal data in accordance with the above stated purposes will have access to the data.

AstaZero may transfer personal data to third parties within the AstaZero company group, for the purpose of AstaZero being able to use the same IT system (e.g. financial system, customer register etc.) in order to be able to coordinate its assignment in an efficient manner.

AstaZero may transfer personal data to third parties acting as personal data processors, e.g. supplier of the supply-, support and maintenance of IT- and cloud services, suppliers of market and customer satisfaction surveys, etc.

AstaZero may transfer personal data to third parties acting as independent data controllers, if such transfer is required by applicable law, or if AstaZero has a legitimate interest for such transfer, e.g. third parties cooperating with AstaZero within the framework of the overall mission of AstaZero, Boverket for certification purposes, insurance companies in the event of insurance matters, etc.

Storage and disposal
AstaZero processes the personal data as long as it is necessary for the purposes for which the personal data was collected.

Personal data processed for contractual and business relation purposes will be processed as long as AstaZero may have any contractual rights and obligations towards the Contact person or its employer or principal, and as long as necessary in order to comply with any legal obligations.

Personal data processed for marketing purposes will be processed for 18 months from the latest sent newsletter or other marketing material.

Transfer to third countries
AstaZero strives to process personal data within the EEA. In cases where AstaZero is transferring or processing personal data outside the EEA, AstaZero will ensure an adequate level of protection in accordance with applicable legislation.

Legal rights as a contact person
The Contact person has the right to receive information regarding its personal data processed by AstaZero, and to request for rectification, limitation or deletion of these, by contacting the Data Protection Officer at RISE, at dpo@ri.se. The Contact person also has the right to file a complaint to the Swedish Data Protection Authority.

The personal data processor for the processing is AstaZero AB (company registration number 556802-4946), with mailing address: Box 8077, 402 78 Gothenburg, Sweden.