Contact

Privacy Policy

MIAB handles your personal data with the utmost respect and in accordance with applicable data protection legislation. We are continuously working to improve and develop our services and products, whereby the content of this notice may change. 

We store personal data about our customers and partners to manage customer or other contractual relationships. We process the data in accordance with the EU General Data Protection Regulation (2016/679; “GDPR”) and complementary national legislation. We use the data for the following purposes:
  • Hanter customer or partner relationships.
  • Fulfill rights and obligations under customer or partner agreements.
  • Handling of complaints.
  • Collection.
  • Ledger.
  • Purchase ledger
  • Participation in events.

The legal basis for storing personal data is the contractual relationship, i.e. the legitimate interest of the controller.

  • Name.
  • Address.
  • Social security number.
  • Email.
  • Phone number.
  • Account number.

The data is mainly collected when establishing customer or other collaboration agreements. Information about potential customer representatives is obtained from public sources, such as websites.

Data is generally not disclosed to third parties. In rare situations, information necessary for billing may be disclosed to a debt collection agency for the collection of unpaid invoices. Data is not disclosed outside the EU or EEA.

Contact information for customer representatives is maintained throughout the customer relationship. The customer notifies any changes to the contact person's information, whereby the information is updated and the old information is deleted.

The use of personal registers is instructed within the personal data controller's organization and access to personal registers is limited so that only registered employees who have the right to do so by virtue of their work can access and use the information contained in both manually stored and electronically stored personal registers. Access to each electronic system requires each user to enter a defined username and the correct password. A list with more detailed information on different systems is provided upon request.

The data subject has the right, after providing the necessary information for information retrieval, to know what information about them has been stored in this register or to know that no information about them is stored in the register. The data subject has the right to request that the controller correct inaccurate and inaccurate personal data concerning the data subject without undue delay. The data controller shall, on its own initiative or at the request of the data subject, correct, delete or supplement personal data contained in the personal data system if they are incorrect, unnecessary, incomplete or out of date for the purpose of processing and collecting data. A data subject who wishes to review, correct or delete their data as described in the previous paragraph must submit a request to the contact person mentioned above. Before the data can be deleted or changed, MIAB must be able to reliably verify the identity of the data subject. In some situations, this can be done by contacting the contact details mentioned in the application.

If the legal basis for processing personal data is the consent given by the data subject, the data subject also has the right to withdraw his or her consent. A request to withdraw consent or to object to processing should be submitted to the data controller.

The processing of personal data does not include automated decision-making or profiling.

If requests from the data subject are manifestly unfounded or excessive, in particular if they are made repeatedly, the controller may either:

  • Charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the requested action or refuse to act on the request.

If you believe that our processing of personal data violates the General Data Protection Regulation, we ask you to first contact us through the previously mentioned communication channels. You also have the right to contact the supervisory authority in the country where you reside or in the country where you suspect a possible data breach has occurred and file a complaint.

The contact details for the Swedish supervisory authority, the Swedish Data Protection Authority (IMY), are as follows:

website: https://www.imy.se/

Phone: 08-657 61 00

Email: imy@imy.se

Postal address: Box 8114, 104 20 Stockholm