Privacy policy
This is a description of how personal data is processed in accordance with the EU General Data Protection Regulation (2016/679) (GDPR).
Definitions
Controller means:
The natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor means:
The natural or legal person who processes personal data on behalf of the controller.
Personal data means:
Any information relating to an identified or identifiable natural person (hereinafter also referred to as the data subject), where an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing of personal data means:
Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Controller
MOMO Bygg Teknik AB
Organization number: 559274-0384
Address: Siktgatan 3, 16250 Vällingby, Sweden
Phone: +46 (0) 730 960 334
Email: info@momodevelopment.com
Contact for data protection matters
Michal Okonski
Phone: +46 (0) 730 960 334
Email: info@momodevelopment.com
Data subjects are encouraged to contact the person named above on all matters relating to the processing of personal data and when exercising their rights.
Name of the register
Personal data is collected in the MOMO register.
Legal basis and purposes of processing
The legal basis for processing personal data is Article 6(1)(b) GDPR for responding to enquiries and preparing offers at the individual’s request; Article 6(1)(f) GDPR for handling general enquiries and communicating with company representatives, based on the controller’s legitimate interest in managing business enquiries; and Article 6(1)(a) GDPR, together with applicable national electronic marketing rules, for sending consent-based marketing communications concerning the controller’s modular buildings.
Retention period
The controller processes personal data for as long as necessary to handle the enquiry and ongoing pre-contractual discussions and, for marketing purposes, for as long as consent remains valid and the data remains necessary for that purpose, subject to annual review and earlier withdrawal of consent or objection. After this period, the controller deletes or anonymizes the data within 30 days, without undue delay, in accordance with its deletion procedures. The controller may be required to process certain personal data held in the register for longer than stated above in order to comply with legislation or requirements from authorities.
Rights of the data subject
Right of access
The data subject has the right to obtain confirmation as to whether their personal data is being processed and, if so, the right to receive a copy of their personal data.
Right to rectification
The data subject has the right to request that incomplete or inaccurate personal data concerning them be corrected. The data subject also has the right to have incomplete personal data completed by providing the necessary supplementary information.
Right to erasure
The data subject has the right to request erasure of their personal data if:
a. the personal data is no longer needed for the purposes for which it was collected, or
b. the personal data has been processed unlawfully.
Right to restriction of processing
The data subject has the right to restrict the processing of their personal data if:
a. the data subject contests the accuracy of the personal data,
b. the processing is unlawful and the data subject opposes erasure of the personal data and requests restriction of its use instead, or
c. the controller no longer needs the personal data for the original purposes of the processing, but the data subject needs it for the establishment, exercise or defense of legal claims.
Right to data portability
The data subject has the right to receive the personal data they have provided in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller.
Right to lodge a complaint with the supervisory authority
The national supervisory authority for personal data matters in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten). The data subject has the right to lodge a complaint with the supervisory authority if they consider that the processing of their personal data infringes applicable legislation.