1. Privacy notice
MilDef consists of MilDef Group AB, MilDef Products AB and MilDef AB in Sweden, MilDef Ltd. in the UK, MilDef AS in Norway and MilDef Inc. in the USA.
To MilDef, it is of outmost importance that your personal data is processed in a correct and safe way. In this privacy notice we describe how, and why we process your data. Processing of your data may occur when you purchase or request information about our products/services or when you contact us.
This is how MilDef is approaching the updated General Data Protection Regulation
- We only collect the personal data needed to provide our products and services and to conduct our business.
- We protect the data we collect
- We only use the collected data for the purposes they were collected for
- We delete the data we no longer need
- We inform the data subjects about how and when personal data is collected
- We inform relevant parties, such as data subjects and authorities, in the event of personal data breach
2. General
This Privacy notice describes how MilDef process your personal data.
We respect your right to integrity, and we are committed in complying with current data protection legislation. We want to make sure you are aware of what sort of data we collect from you, how this data is used, and how we protect it.
This notice also describes your rights and how you can contact us if you have any questions regarding the processing of your personal data.
Responsibility of the controller
The MilDef company collecting your personal data is responsible as Controller.
For details about each MilDef company, see “Contact details” at the end of this notice.
If it is not clear who is the Controller of your personal data, please contact MilDef Group AB (Head office).
How do we process your personal data?
MilDef collects personal data in several ways, and at several occasions, for instance when you use or website, purchase or request information about our products/services or when you contact us.
3. Data that we may process
3.1 When you purchase a product or service from us
Personal data
Name, e-mail, telephone number, company, delivery- and invoicing address, role.
Purpose of processing
The purpose of the processing is for MilDef to fulfil its commitment towards you as a customer as well as to be able to send an invoice for the product or service. We also need to comply with laws and regulations.
Lawfulness of processing
Performance of a contract and legal obligation.
Retention period
We will store your data for as long as necessary to fulfil the purpose.
3.2 When you contact us regarding our products or services
Personal data
Name, e-mail, telephone number, company, address, role.
Purpose of processing
To be able to answer your questions, provide the correct products and services as well as to provide relevant information.
Lawfulness of processing
Performance of a contract or to take steps towards entering a contract, legitimate interests or consent.
Retention period
We will store your data for as long as necessary to fulfil the purpose.
3.3 When you visit our website
Personal data
General data such as language settings, browser settings, use of our website, time zone, geographic information, operating system, platform and screen resolution (via statistical tool).
Additionally, we may collect;
- Name, company, delivery address, e-mail and telephone number if you fill in a service request form (RMA).
- Name, company and e-mail if you sign up for our newsletter
- Name and e-mail if you contact us through our website
Purpose of processing
Provide, execute and improve our services.
Lawfulness of processing
Performance of a contract or to take steps towards entering a contract, legitimate interests or consent
Retention period
We will store your data for as long as necessary to fulfil the purpose.
3.4 When you visit our offices/sites
Personal data
Name, company and telephone number is entered into our visitor’s log
Purpose of processing
For emergency preparedness i.e. to know what visitors are present in the building in case evacuation is needed.
Lawfulness of processing
Legitimate interest and consent.
Retention period
The visitors log is deleted within maximum 12 months.
3.5 When you apply for a job
Personal data
Name, address, telephone number, e-mail, gender, birthdate, citizenship and other information that you choose to provide in your CV/application documents.
If you are employed, we will also process data necessary for payroll management, such as salary and bank details. This personal data is collected in the hiring process, through your employer contract.
Purpose of processing
Necessary for the recruitment/employment process and documentation.
Lawfulness of processing
Performance of a contract or to take steps towards entering a contract, legitimate interests, legal obligation and/or consent
Retention period
Applications are stored for a maximum of 300 days.
If you are employed, your data will be stored during your employment period + 1 year, unless otherwise required by other legislation (accounting, tax).
- When you are employed by uss
Personal data
Name, address, telephone, e-mail adress, gender, year of birth, citizenship and other information contained in your contract of employment.
When you are hired, we vill process data neccessary for payroll, such as salary and bank details, insurance and pension contributions.
Purpose of the processing
Necessary documentation on order to handle the employment.
Lawfullness of processing
Employment contract, legitimate interests, legal obligation and/or consent
Retention period
As an employee, ypur data is saved during the employment period+ 1 year, provided that there is no other legislation that requires longer retention ( e.g accounting and tax rules).
3.7 As a supplier to MilDef
Personal data
Name, company, address, e-mail, telephone number and relevant information for the specific contract.
Purpose of processing
To maintain effective business operations.
Lawfulness of processing
Performance of a contract or to take steps towards entering a contract, legal obligation
Retention period
We will store your data for as long as necessary to fulfil the purpose.
4. To whom may we disclose your personal data?
We use various suppliers/providers products and services to our IT-infrastructure. This means that these suppliers/providers may process your personal data. MilDef may also disclose your personal data to sub-suppliers, to be able to provide the agreed product or service.
Suppliers and sub-suppliers are in such instance’s processors of personal data and may only process the data according to MilDef´s instructions.
MilDef may, in some cases, be obliged to disclose information to authorities as required by law or court rulings.
5. Were do we process your personal data?
MilDef strives to always process your personal data within the EU/EES. However, in some circumstances processing might take place at a third party outside the EU/EES, for example an IT-system provider or sub-supplier. MilDef will always implement necessary legal, technical and organizational measures to ensure your personal data is processed with at least the same level of protection that is provided within the EU/EES.
6. Your rights
Right to revoke your consent
If you have provided us with personal data on the legal basis of consent, you have the right to revoke your consent to certain processing, at any time. If you revoke your consent, we will cease the processing of data covered by the consent and erase it.
Right of access
Upon request, you have the right to obtain confirmation as to whether or not personal data concerning you are being processed by MilDef, and, where that is the case, access to that personal data. Unless otherwise requested, the information will be provided as an electronic copy. MilDef will then respond to your request within 30 days and provide you with the registred information stored.
Right to rectification and erasure
You have the right to obtain rectification of any personal data that is inaccurate. In some cases, you also have the right to obtain erasure of personal data (“to be forgotten”) as long as the processing is no longer necessary in relation to the purposes for which they were collected. MilDef will then promptly rectify and/or reace your personal data without unnecessary delay. MilDef may also be forced to retain certain information in order to comply with legal obligations.
Right to object and the right to restriction of processing
You have the right to object to the processing of your personal data, e.g. for direct marketing purposes and, in case we process your data on the legal basis of legitimate interests.
You also have the right to restrict the processing, for example if you consider the data to be inaccurate.
Right to data portability
In certain cases, you have the right to receive the data you have provided to us. In such cases, MilDef will provide the data in a structured and machine-readable format. You also have the right to request that the data is transmitted to another controller, where technically feasible.
7. Questions and complaints
If you have any questions regarding the processing of your personal data, you are welcome to contact MilDef, see further details below. If you are not satisfied by the answers provided by MilDef you have the right to leave a complaint with the supervisory authority.
8. Contact details
| MilDef Group AB (Group Head office) Box 22079 250 22, Helsingborg Sweden E-mail: Privacy@mildef.com | MilDef Ltd. CBTC Senghennydd Road Cardiff, CF24 4AY United Kingdom E-mail: Privacy@mildef.com |
| MilDef Products AB Box 22079 250 22, Helsingborg Sweden E-mail: Privacy@mildef.com | MilDef AS Brynsengveien 2 0667 Oslo Norway E-mail: Privacy@mildef.com |
| MilDef AB (Helsingborg office) Box 22079 250 22, Helsingborg Sweden E-mail: Privacy@mildef.com | MilDef Inc. 630 W Lambert Road Brea, CA 92821 United States of America E-mail: Privacy@mildef.com |
| MilDef AB (Nacka office) Gamla Värmdövägen 6 131 37, Nacka Sweden E-mail: Privacy@mildef.com |