Privacy Policy

The protection of your personal data is of the utmost importance to us. In this privacy policy, you can read about how we process your personal data and what rights you have regarding personal data.

Data Controller

The data controller responsible for processing your personal data is:

Victory Stockholm Rentals AB
Company registration number: 559455-2696
Markvardsgatan 14
113 53 Stockholm

What personal data do we collect and where do we collect it from?

When you interact with us, for example when making a purchase, filling in a form or visiting our website, we collect personal data about you. The data we collect may include your name, personal identity number, address, email address, phone number, purchase, order and usage history, IP address, and information you provide to our customer service.

Definitions

Personal data means any information relating to an identified or identifiable natural person. Such data may include, for example, name, image, personal identity number, email address, home address, IP address, information about skills, education or previous experience. Even if a single piece of information may not be enough to identify you, it may still constitute personal data if, in combination with other information, it can be linked to you.

“Processing” of personal data means, in essence, any action or set of actions relating to personal data, such as collection, registration, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

What personal data is collected and why?

We collect information when, for example, you use our services, register for courses or seminars, subscribe to our newsletter, apply for a job, participate in surveys or contact us regarding various matters.
We also collect personal data necessary to manage your customer relationship with us and to provide services in accordance with our mutual agreement. This usually includes information such as your name, telephone number, address and email address, but may also include other information, such as your IP address. We may collect personal data about you from various sources.

Data collected automatically when you visit our website.
We (and third-party service providers acting on our behalf) use cookies and other tools, such as web analytics tools and pixel tags, to automatically collect information about you when you use our website, subject to the terms of this Privacy Policy and applicable laws and regulations. The types of data collected automatically may include:

• Information about the type of browser you use
• User behaviour and interaction data for the pages you have viewed
• Your IP address
• Your browser language
• Your geographic location (limited to city and country)
• Your network operator

Information that may be collected from other sources

We may receive personal data about you from other legitimate sources, including commercially available sources such as public databases and data aggregators, as well as information from third parties. The types of personal data we may obtain from such sources include:

• Name
• Address
• Email address
• Phone number
• Fax number
• Job title and workplace
• References (during recruitment processes)

For what purposes is personal data processed?

The personal data we collect about you may be used for:

• Complying with legal requirements or lawful requests from authorities
• Administrative and internal business purposes
• Providing you with products and services and informing you about new products, services and events
• Evaluating and improving our offering to, and communication with, customers
• Developing our business and services
• Data processing for advertising purposes
• Statistics

Processing of personal data due to legal obligation

Processing of personal data is also permitted when required, requested or allowed by national legislation. The type and scope of the processing must be necessary for the legally permitted data processing activity and must comply with applicable legal provisions.

Processing of personal data based on legitimate interests

Personal data may also be processed where necessary for our legitimate interests.
Legitimate interests are generally legal in nature, for example the collection of outstanding claims, or commercial in nature, such as the prevention of breaches of contract. For example, we may consider that we have a legitimate interest in fulfilling our obligations towards you and administering your customer account.

User data and the internet

Where personal data is collected, processed and used on websites or in apps, data subjects must be informed of this in a privacy notice and, where applicable, informed about cookies. Privacy notices and any cookie information must be integrated so that they are easy to identify, directly accessible and consistently available to data subjects. If user profiles (tracking) are created in order to evaluate the use of websites and apps, data subjects must always be informed of this in the privacy notice. Personal tracking may only be carried out if permitted under national legislation or after obtaining the data subject’s consent. If websites or apps can access personal data in an area restricted to registered users, the identification and authorisation of the data subject must provide sufficient protection for such access.

How long is personal data stored?

The information we collect about you will be stored during our business relationship with the customer. However, we will delete your personal information three (3) years after the business relationship has ended. Please note that certain data must be stored for a longer period, even after a business relationship has ended, where required by national legislation. Such requirements may, for example, arise from tax or accounting laws. Please also note that certain domain name registrations may require certain data to be stored for a longer period.

No information about you will be stored for longer than necessary or in a manner contrary to law.

Disclosure of personal data

We are entitled to engage sub-processors to process personal data on your behalf. We undertake to inform you of any plans to engage and/or replace a sub-processor, thereby giving you the opportunity to object to such changes.

If we engage sub-processors to process personal data on your behalf, we remain fully responsible to you for such sub-processors.
Companies that process personal data on our behalf will always enter into a data processing agreement with us to ensure that a high level of protection for your personal data is maintained by our partners. In relation to non-EU/EEA partners, special safeguards are adopted, such as the execution of agreements containing standard contractual clauses for data transfers adopted by the European Commission.

Your personal data may also be disclosed to third parties when (i) required by law, other statutory or governmental decisions, or (ii) information is disclosed to insurance companies, banks or benefit partners as described above.
We may also disclose personal data to third parties, such as the police, the tax authority or any other public authority, in connection with a criminal investigation or where we are otherwise required to provide such information by law or by an authority decision.
We will not disclose your personal data to any greater extent than described herein.

Your rights under applicable data protection laws

In accordance with applicable data protection laws, you have the right at any time to request access to the personal data processed about you. You also have the right to have inaccurate personal data corrected, request that we erase your personal data, restrict our processing of your personal data, exercise your right to data portability and object to the processing of your personal data. Where processing is based on consent, you have the right to withdraw your consent to such processing at any time. You also have the right at any time to lodge a complaint with a supervisory authority if you believe that your personal data is being processed in violation of applicable data protection legislation.