Privacy Policy
For us at O.S.S Optik Stockholm Söder AB (hereinafter: Hultins Optik), it is important that your personal data is handled securely and appropriately.
Here, we explain how and why we store your data. This is something we do, for example, when you choose to have an eye test, place an order in our online shop or are in contact with us.
This is how we view the updated privacy policy
- We only collect the personal data we need to provide our services and carry out our business activities
- We protect the personal data we have collected
- We only use the personal data we collect for the purpose for which it was collected
- We delete any personal data that we no longer need
- We will inform relevant parties, such as data subjects and designated authorities, should an incident arise relating to our processing of personal data
General
This privacy policy explains how Hultins Optik processes your personal data.
We respect your right to privacy and are committed to complying with applicable data protection regulations and safeguarding your rights. We want to ensure that you are aware of the type of information we collect from you, how this information is used and how we protect it.
This policy also sets out your rights and how you can contact us if you have any questions regarding the use of your personal data.
Data Controller
O.S.S Optik Stockholm Söder AB (Hultins Optik) is the data controller responsible for the processing of your personal data in accordance with this privacy policy.
Contact
details:
Hultins Optik
, Renstiernas gata 13
, 116 28 Stockholm
Email: info@hultinsoptik.se
How do we process your personal data?
Hultins Optik collects personal data in a number of different ways and on a number of different occasions, including when you use our website, when you book an eye test or when you contact us.
Data that we may process:
1. When you have an eye test with us
Hultins Optik is subject to the Patient Data Act (PDL) and, during an eye test, we will process your personal data in accordance with the Act.
This means that we keep medical records and process information such as names, personal identification numbers, health status, and planned and completed treatments. There are strict documentation requirements, and we also record who made the entries in the medical records and when they were made.
Only staff with the appropriate
authorisation have access to the medical records, in order to carry out
their work.
By law, we are required to disclose certain information from the medical records, for example when assessing
suitability for different types of driving licences.
Under the PDL, medical records must be retained for 10 years after the last entry has been made.
2. When you purchase a product or service from us via our online shop
Personal
data:
Name, email address, telephone number, address, product/service purchased.
The purpose of
the processing
The purpose of
the processing is to enable us to fulfil our obligations to you as a customer and to
collect payment for the product or service. We also need to be able to comply with
laws and regulations.
Legal basis
for the processing
:
Contract and legal obligation.
Retention period
We retain your data for as long as is necessary to fulfil the purpose.
(Klarna is the data controller responsible for the processing of your personal data carried out via Klarna Check-Out.)
3. When you contact us regarding our products or services
Personal
data:
Name, email address, telephone number, address.
The purpose of
the processing
: To be able to answer enquiries, offer the right products and services, and
provide relevant information.
Legal basis
for the processing
:
Legitimate interest or consent.
Retention period
We retain your data for as long as is necessary to fulfil the purpose.
4. When you visit our website
Personal
data: Language settings, browser settings, use of our website, time zone, geographical information, operating system, platform and screen resolution (via analytics tools and marketing systems). Please also read about how we handle cookies here.
The purpose of
the processing
:
To provide, deliver and improve services.
Legal basis
for processing
:
Legitimate interest.
Retention period
:
We store your data for as long as is necessary to fulfil the purpose.
5. When you’re in a photo or video
Personal
data:
Images, video.
The purpose of
the processing
: For example, when you attend an event, we may take photographs and film for
marketing purposes.
Legal basis
for processing
:
Legitimate interest.
Retention period
:
We store your data for as long as is necessary to fulfil the purpose.
6. When you act as a reference or provide a statement
Personal
data:
Video, photograph, name, role.
The purpose of
the processing
:
To market and provide information about the company’s products and services, for example through
interviews.
Legal basis
for processing
:
Consent.
Retention period
:
We store your data for as long as is necessary to fulfil the purpose and
consent has been given.
7. When you apply for a job or an assignment with us
Personal
data:
Name, address, telephone number, email address, photograph, previous experience and
any other information you have chosen to include in your CV.
The purpose of
the processing
:
Recruitment and necessary documentation.
Legal basis
for processing
:
Legitimate interest and legal obligation.
Retention period
:
We store your data for a maximum of 2 years in accordance with our legal
obligation.
8. When you are a supplier to us
Personal
data:
Name, company, address, email address, telephone number and any other information relevant to the assignment.
The purpose of
the processing
:
To ensure the smooth running of the organisation.
Legal basis
for processing
:
Contract and legal obligation.
Retention period
:
We store your data for as long as is necessary to fulfil the purpose.
Who might we share your personal data with?
We use
products and services from various suppliers for our IT infrastructure. This
means that these suppliers may process your personal data. Hultins
Optik may also share your personal data with subcontractors in order
to deliver the agreed service or product.
Subcontractors and suppliers are therefore our data processors and
may only process your personal data in accordance with our instructions.
Hultins Optik may, in certain cases, be required by law or court order to provide information to the authorities.
Where do we process your personal data?
We endeavour to always store your personal data within the EU/EEA. However, in certain situations, it may be processed outside the EU/EEA by a third party, such as a technology provider or subcontractor. We will always take all reasonable legal, technical and organisational measures to ensure that your information is handled to the same standard as the protection offered within the EU/EEA.
Your rights
Right to withdraw consent
You have the right to withdraw your consent to the processing of certain personal data at any time. If you withdraw your consent, we will cease the processing for which you gave your consent, and delete the personal data that was processed solely on the basis of that consent.
Right of access
You have the right to be informed about what personal data we hold about you and how we process that data. You also have the right to receive a copy of this information.
Right to rectification and erasure
You have the right to have inaccurate data corrected and supplemented. In certain cases, you also have the right to have your personal data erased, for example if it is no longer necessary for the purpose for which it was collected.
Right to object and right to restriction of processing
You have the right to object to the processing of your data for purposes such as direct marketing and in cases where we process the data on the legal basis that we have a legitimate interest. You also have the right to restrict the processing, for example if you believe the data is inaccurate.
Right to data portability
In certain cases, you have the right to obtain the personal data you have provided to us. The data will be provided in a structured and machine-readable format, and you also have the right to have the data transferred to another data controller where this is technically feasible.
Enquiries and complaints
If you have any questions regarding the processing of your personal data, please contact Hultins Optik at info@hultinsoptik.se. If you are not satisfied with the response you have received, you have the right to lodge a complaint with the Swedish Data Protection Authority.