Privacy Policy

This privacy policy intends to inform about the processing of personal data that takes place on this website (www.bastaonline.se, hereinafter referred to as the "Website"), as well as to inform about the principles that govern when BASTAonline AB ("BASTA" or "We") processes personal data for example when sending by e-mail. Information on how to contact us can be found below under point 5.6, as well as at the bottom of the webpage.

1. Introduction

1.1: BASTA collects personal data partly when registering a user account and during the use of the BASTA system and if you register to receive our newsletters or sign up for one of our courses, webinars or other events. If you have accepted the use of cookies, these are also collected. Cookies may contain personal data to some extent.

2. Newsletter and events

2.1: When you register to receive newsletters or register for training, courses, webinars or other events that BASTA organizes, we collect and process the information you provide in our forms. The information BASTA collects in such cases is name, e-mail address, telephone number and, where applicable, title, employer and billing address. This processing is based on your consent to the processing when you submit your personal data to us.

3. The BASTA-system

3.1: When connecting a company to the BASTA system, the user is asked to create a user account, which means that we collect and process personal data in the form of name, company name, email address, title and username. The e-mail address specified for the user account will also be used when BASTA sends out information regarding the BASTA system. These mailings are not the same as the newsletters referred to above, but contain information related to the use of the BASTA system.

3.2: Registration of a user account is a necessary part of using the BASTA system, and constitutes a contractual condition for use. This is so that we can identify which users have registered in our system, so that we can invoice or contact the respective companies responsible for the use.

3.3: If you choose to use Logbook service, we also store personal data in the form of name, company name, e-mail address and telephone number. The e-mail address specified for the user account will also be used when BASTA sends out information regarding the Logbook Service. These mailings are not the same as the newsletters referred to above, but contain information connected to the use of the Logbook Service.

3.4: Registration of a user account is a necessary part of using the Logbook service and is a prerequisite for the tool to function as intended. We also need to be able to identify which users have registered in our system and be able to send out invoices when this becomes relevant.

3.5: The mailings we make to users of the BASTA system and the Logbook service form part of the service we offer. Through these mailings, we can help our users get the most out of our system and we can inform about updates and new features. These mailings do not constitute marketing, but merely a tool for using the BASTA system and the Log Book service. However, users who do not wish to receive further mailings can unsubscribe from future mailings by following the instructions provided at the end of each email.

3.6: We encourage our users not to enter any sensitive information into our systems and reserve the right to delete any personal information entered there if it conflicts with this policy or our terms in general.

4. Google analytics and use of the website

4.1: We use the Google Analytics tool to measure traffic on the Website and to evaluate the functionality of the Website. This means that personal data in the form of your IP address is collected, as well as indirect data about you in the form of information about how long you are on the website and what you click on is collected and transferred to Google Inc. ("Google"). Prior to this treatment, a balance of interests has been made and we have made the assessment that this treatment is necessary for us to be able to evaluate our business and offer the best possible experience. More information on how Google uses the transmitted personal data can be found, among other things, at https://policies.google.com/privacy?hl=sv and there is also information on how to prevent Google Analytics from collecting data about you.

4.2: We sometimes publish photographs on the Website from events we arrange or participate in. These photographs may in some cases be of such a nature that they constitute personal data. Before publication, however, we always carry out a review and assessment of whether the photograph may in any way be sensitive to privacy. When we judge that this is not the case, we publish the photograph, to inform about the event or similar during which the photograph was taken.

4.3 The Website also uses so-called cookies, in accordance with our policy on cookies.

5. The treatment

5.1: BASTA is part of a group, in which IVL Svenska Miljöinstutet AB ("IVL") is the group parent. This group also includes eBVD i Norden AB ("eBVD"), EPD International AB ("EPD") and Möbelfakta. BASTA, IVL, eBVD, EPD and Möbelfakta are jointly responsible for the processing of personal data regarding the above section 2 - that is, regarding the processing of personal data for sending newsletters and registrations for courses, seminars and other events. This means that your personal data is shared within the group and stored jointly. However, you will only receive the mailings that you have signed up for. You can of course assert your rights against all companies, and what is said in this policy about BASTA also includes IVL, eBVD, EPD and Möbelfakta.

5.2: For all other processing of personal data according to this privacy policy, BASTA is solely responsible for personal data.

5.3: BASTA cares about your privacy and it is therefore important to BASTA that all processing takes place correctly, in accordance with applicable laws and in a way that ensures safe and appropriate processing. All processing of your personal data takes place solely for the purposes specified when the personal data was collected, unless you receive clear information about otherwise, and where applicable, are asked to approve other use.

5.4: If you want to know which personal data about you BASTA processes, you have the right to request access to this personal data. You also have the right to request correction or deletion of incorrect personal data. If you believe that BASTA's processing of your personal data takes place in an incorrect manner, you have the right to request a limitation of the processing. In order to use any of your rights, you are very welcome to contact us, contact details appear below under 5.6.

5.5: In addition to what is stated above, BASTA will not release your personal data to anyone else or transfer it to any country other than Sweden without you having received clear information about this and, where applicable, given the opportunity to consent to such disclosure. For newsletters and other mailings, we always use technology that does not show addresses to other recipients.

5.6: If you have comments on the processing, want to use any of your rights in 5.4 above or for any other reason want to get in touch with us, we can be reached at the following details

BASTAonline AB
Org. no: 556719-5697
Box 210 60
100 31 Stockholm
bastaonline@ivl.se
010 – 788 65 00

5.7: You also have the right to turn directly to the Data Inspectorate, which is the competent supervisory authority for the processing of personal data, to make a complaint. You can find contact information for the Swedish Data Protection Authority at www.datainspektionen.se.

6. How long do we store personal data?

6.1: The period for how long we save personal data depends on the type of processing in question - the processing generally takes place until we have achieved our purpose with the processing, which follows these principles.

6.2: Processing of personal data for sending newsletters we want to send to you as long as you want to receive them. The easiest way for us to find out is for you to unsubscribe from future mailings should you decide you no longer want them. However, we follow up all our mailings internally, and should it turn out that you have not opened the mailings or otherwise behaved passively towards them during a continuous period of one year, we reserve the right to delete your personal data from our systems. However, you are always welcome to register again.

6.3: We need the personal data we collect for seminars, courses or other events in order to administer the event in question, and, where applicable, to send out information or any handouts before or after the event. We therefore store your personal data up to sixty days from the end of the event.

6.4: For personal data linked to affiliated companies and their contact persons, these are saved as long as the company is active. When a registered contact person leaves the affiliated company, it is possible to delete the personal data on the company-specific pages at www.bastaonline.se. The logbook service's personal data is saved until the responsible user chooses to delete uploaded projects. Invited project members connected to the Logbook service can choose to unregister, which is done by contacting BASTA.

6.5: Personal data collected via our website, via cookies or Google Analytics, is stored by us only during the time you are on the Website.

7. Miscellaneous

7.1: BASTA may update and change this Privacy Policy. If this happens, you will receive a notification about this from BASTA, and be given the opportunity to accept the new terms.