Privacy policy – Plamako I Anderstorp AB

Last updated 2th of February 2025

Plamako gives high priority to confidentiality and data security. This privacy policy applies to our processing of personal data and establishes guidelines for the way Plamako processes your personal data.

This Privacy Policy provides you with the information that you are entitled to receive under applicable data protection laws.

You should read the privacy policy before you hand over your personal data to Plamako I Anderstorp AB.

  1. Data controller and contact information

Bearing this in mind the data controller of your personal data is referred to as the “Plamako I Anderstorp AB.” “we”, “us” or “our”):

Plamako I Anderstorp AB.
Ågatan 13
33432 Anderstorp
Org.nummer 556463-3401

Info@plamako.se

  1. If you visit our websites 

2.1. Cookies and social media tools 

Types of personal data

Plamako uses cookies and social media tools regarding YouTube, Facebook, Lined and Instagram on the website and in this connection processes your personal data. Plamako may collect the following personal data about you when you visit our website:

  • IP address
  • MAC address
  • Session duration
  • Heatmaps
  • Conversion tracking
  • Browsing History
  • Information about your use of our website, including click-behaviour
  • Timestamp
  • Button click data
  • Form fields information regarding purchases and newsletters
  • Pixel ID when Meta, LinkedIn and Google Pixels are accepted

We use cookies and social media tools to collect the above-mentioned personal data.

The purposes of the process 

Your personal data may be processed for the following purposes:

  • Marketing in general, including personalization and targeted advertising
  • Product and service development
  • Statistics and analysis

Legal basis for processing

Plamako processes your personal data on the following basis:

  • Consent: We base the processing of your personal data on a consent (Article 6(1)(a) of the General Data Protection Regulation).

You have the right to withdraw your consent at any time.

Retention period

Cookies are deleted in accordance with our cookie retention periods shown in the cookie pop up window.

However, the information may be stored for a longer period in anonymised form.

Joint controllership

When you accept social media tools (pixels) for marketing, Plamako may transfer information about your web browser, page location, IP address, pixel ID/cookie ID, pages visited, interests, interaction with ads, filled in data when making purchases and moving around the website to our social media partners.

The purposes of Plamako processing and transfer are to:

  • Measure the effectiveness of our ads
  • See if the ads are relevant to the target audience
  • Deliver targeted content
  • Building customer groups for marketing
  • Target people with ads who have visited the website
  • Target people who look like current customers
  • Exclude ads for people who have recently purchased products

The purpose of the social media’s processing of your personal data is to improve and streamline the social media’s advertising platform.

For the following social media, Plamako, together with the social media providers, are joint data controllers for the processing of personal data collected for the purposes mentioned:

  • Facebook (Meta Platforms Ireland Ltd.)
    • Facebook’s privacy policy is available here
  • Google Ads (Google Ireland Ltd.)
    • Google’s privacy policy is available here
  • LinkedIn (LinkedIn Ireland Unlimited Company)
    • LinkedIn’s private policy is available here

The legal basis for Plamakos transfer of your personal data for these purposes is your prior consent, cf. Article 6(1)(a) of the General Data Protection Regulation.

2.2. If you use the contact form or chat function on the websites, contact customer service or otherwise communicate with us

Types of personal data

When using the contact form or the chat feature on the website, contact customer service or otherwise communicate with Plamako. Plamako collects and processes your personal data. Plamako collects, processes, and stores the following types of your personal data:

  • Name, e-mail address, phone number
  • What your inquiry is about
  • Country
  • Date of your inquiry
  • Other information you provide in connection with your inquiry.
  • We encourage you not to provide sensitive personal data to us unless it is strictly necessary for the processing of your inquiry. In this context, the information should only be sent in a highly encrypted form if you send the information by e-mail.

The objectives of the process

Your personal data will be processed for the following purposes:

  • Handling of your inquiry
  • General communication
  • Statistics and analysis
  • Enter into agreement with you

Legal basis for processing

Plamako processes your personal data on the below-mentioned bases. The basis depends on the nature of your inquiry.

  • Legitimate interests: We may process your personal data on the basis of our legitimate interests in handling your inquiry, communicating with you, and developing our products and services (Article 6(1)(f) of the General Data Protection Regulation).
  • Contractual obligations: If your inquiry concerns a (potential) formation of contract, we process your data to implement measures before the formation of contract (Article 6(1)(b) of the General Data Protection Regulation).

Disclosure

We may disclose your personal data to external suppliers who, in agreement with us, make sure to provide the service you order. The disclosure is based on our legitimate interest in being able to provide the service you are requesting (Article 6(1)(f) of the General Data Protection Regulation).

Retention period

Your personal data will be stored in 3 years from last contact or 3 years after termination of an agreement. However, the data can be stored for a longer period in anonymised form.

If you are a customer or an employee of one of our customers, suppliers, or other business partners, we refer to the section below.

2.3. If you use our web shop or enter into subscription agreement 

Types of personal data

When you use our B2B web shop or enter into subscription agreements with us, Plamako processes your personal data. Plamako may collect, process, and store the following types of your personal – data:

– Your name
– Your e-mail address
– Your user name
– Your password
– Your country
– Your phone number
– Your address
– Your payment information
– Products your company has purchased
– Digital footprints (e.g., information on how to use Plamakos web shop)

The purposes of the process

Your personal data will be processed for the following purposes:

– Creating a user account
– Completion of orders in Plamako web shop and entering into the subscription agreement
– Managing of shipments, complaints, and returns
– Statistics and analysis
– Sending satisfaction or market surveys

Legal basis for processing

Plamako processes your personal data on the following basis: 
– Legitimate interests: We process your personal data based on our legitimate interest in marketing us to you in cases where consent is not required as well as our legitimate interest in being able to conduct statistics and analysis with the purpose of developing and improving our services as well as forwarding surveys (Article 6(1)(f) of the General Data Protection Regulation).

– Contractual obligations: We process your personal data to fulfil the contract of purchase or subscription agreement with you, including to be able to deliver the ordered goods, handle complaints, returns, etc. (Article 6(1)(b) of the General Data Protection Regulation).

– Legal obligation: We may process your personal data to comply with our or the manufacturers’ legal obligations including bookkeeping laws, safety laws and sales laws  (Article 6(1)(c) of the General Data Protection Regulation).

Retention period

As a general rule, we will store your personal data for 3 years after your last purchase. If you have purchased products covered by a warranty, we will delete your personal data at the end of the warranty period.

Information relating to accounting material is kept for 5 years from the end of the financial year to which the data relate. 

However, we can process your personal data for a longer period in anonymised form.

  1. If you sign up for our newsletter(s)

Types of personal data

Plamako collects, processes, and stores your personal data for marketing purposes when you sign up for newsletter(s). Plamako may collect, process, and store the following types of your personal data:

  • Name and e-mail address
  • Your interests, including downloaded e-books and landing pages
  • Your consent
  • Through acceptance of pixels and cookies, personal data regarding your click behaviour, IP-address, interaction with the newsletter and associated links will be obtained

The purposes of the processing

Your personal data may be processed for the following purposes:

  • Marketing and tailored marketing
  • Analysis and statistics
  • Optimizing products and services 

Legal basis for processing

Plamako processes your personal data on one or more of the following grounds:

  • Consent: Plamako will only use your personal data for direct marketing, including for sending out newsletters, if you have given your prior and explicit consent to this (Article 6(1)(a) of the General Data Protection Regulation).
  • Legitimate interests: The processing of your personal data will, in connection with analysis and statistics as well as tailoring the newsletters, be based on our legitimate interests in being able to improve, develop our service and market our products and services (Article 6(1)(f) of the General Data Protection Regulation

Retention period

Your personal data will be stored as long as your consent to receive newsletters is active.

You can always withdraw your consent by clicking on the unsubscribe link at the bottom of each e-mail or by contacting us as described below. However, withdrawing your consent does not affect the legality of the processing that preceded the withdrawal. 

Documentation of your marketing consent is kept for 2 years from the time you have withdrawn your consent to receive direct marketing material. The retention period is determined based on Plamako legitimate interest in being able to document that direct marketing has been carried out in accordance with the applicable legislation (Article 6(1)(f) of the General Data Protection Regulation).

In addition, the information can be stored for a longer period in anonymised form.

  1. If you are a supplier, collaborator etc.  

This section contains the policy for Plamako processing of personal data of sole proprietorship owners or contacts of suppliers and other business partners working with Plamako

Collection of personal data

Plamako may collect, process, and store your personal data in the following cases:

  • When your company or the company you work at enters into an agreement with Plamako
  • When you have shown interest in Plamako products and services, e.g., by providing Plamako with your business card
  • When collaborating and communicating with Plamako

Types of personal data

Plamako may collect, process, and store the following types of personal data about you:

  • Name, e-mail address, phone number, and corresponding contact information
  • Individual information, e.g., preferred languages
  • Organisational information such as the name and address of the company, job title, employment area, primarily place and country of work
  • Contractual information such as orders, invoices, contracts, and other agreements between your company (or your employer) and Plamako that may contain e.g., your contact information
  • Financial information such as payment terms, bank details and credit ratings (in the case of a sole proprietorship)

We may receive such information directly from you (primarily through e-mails and other correspondence with you) or from a third party such as your employer.

The purposes of the processing

Your personal data may be processed for the following purposes:

  • General planning, fulfilment, and the management of collaborations, including contracts
  • Administration such as the processing of payments, rating evaluations, accounting, auditing, as well as providing support
  • Newsletters and other marketing communication
  • Conducting inquiries from you
  • General communication
  • Product and service development
  • Statistics and analysis
  • Compliance with applicable laws and regulations, e.g., fulfilment of our obligations to prevent illegal activities
  • Managing conflicts

Legal basis for processing

Plamako primarily processes your personal data on one or more of the following grounds:

  • In certain cases, the processing of your personal data is necessary to fulfil a contract (Article 6(1)(b) of the General Data Protection Regulation).
  • Legitimate interests: We may process your personal data on the basis of our legitimate interests in, for example, managing day-to-day operations in accordance with legitimate and fair business practices, including planning, execution and management of the cooperation or our legitimate interest in, for example, performing credit ratings, statistics, analyses, marketing activities (where consent is not required), provide support and as well as improvement and development of our products and services. The processing may also be necessary for our legitimate interest in preventing fraud or establishing, defending, or asserting legal claims (Article 6(1)(f) of the General Data Protection Regulation).]
  • Legal obligation: The processing of your personal data will in some cases be necessary for compliance with legal obligations, such as our obligation to prevent illegal activities (Article 6(1)(c) of the General Data Protection Regulation).

Retention period

Your personal data will be stored for 3 years from last contact. However, the information can be stored for a longer period in anonymised form.

  1. If you visit our social media profiles

This section contains the policy for Plamako’s processing of personal data collected through Plamako’s profiles or social media pages that you may be directed to if you accept social media tools on the website or visit separately.

Plamako and the social media providers are jointly responsible for the processing of personal data collected in connection with your visit to Plamako profile or page on the individual social media platform. Plamako complies with the General Data Protection Authorities guidelines on shared data liability and, using available tools and means, tries to ensure that you receive information about the processing of your personal data when you visit Plamako’s profiles or pages on social media.

Plamako has profiles or pages on the following social media platforms:

  • Facebook (Meta Platforms Ireland Ltd.)
    • Facebook’s private policy is available here
    • You can customise your privacy settings on Facebook here
  • YouTube (Google Ireland Ltd.)
    • Google’s private policy is available here
    • You can customise your privacy settings on YouTube here
  • LinkedIn Ireland Unlimited Company
    • LinkedIn’s private policy is available here
    • You can customise your privacy settings on LinkedIn here
  • Instagram (Meta Platforms Ireland Ltd.)
    • Instagram’s private policy is available here
    • You can customise your privacy settings on Instagram here

Collection of personal data

When you visit or interact with our social media profiles, Plamako and the social media provider may collect, process, and store the following types of personal data about you:

  • Information available on your profile, including your name, gender, civil status, workplace, interests, image, and your city
  • Whether you “like” or have applied other reactions to our profile
  • Comments you leave on our posts
  • That you have visited our profile

The purposes of the processing

Plamako processes your personal data for the following purposes:

  • Improving our products and services, including our social media profiles and pages
  • Statistics and analysis
  • To be able to communicate with you if you comment on a post, make a review, or send us a message
  • Marketing in general

Social media providers process your personal data for the following purposes:

  • Improving their ad system
  • To provide Plamako with statistics which the social media providers produce based on your visit to our profiles and pages
  • Advertising and customising the activities on the page.

Legal basis for processing

The processing of your personal data is based on the following basis:

– Legitimate interests: Plamako bases the processing of your personal data on our legitimate interests in being able to communicate with and market us to you on our social media profiles, as well as our legitimate interest in improving our products and services (Article 6(1)(f) of the General Data Protection Regulation).

Social media providers base the processing of your personal data on their legitimate interests, including their interest in improving their ad system and providing statistics to Plamako, which the social media provider, for example, prepares based on your visit to Plamako profile or social media page. In addition, the social media providers have a legitimate interest in providing an innovative, individually adapted, secure and profitable service (Article 6(1)(f) of the General Data Protection Regulation).

– Consent: The social media providers process some of your personal data in accordance with your consent, which you can withdraw at any time through your social media privacy settings (Article 6(1)(a) of the General Data Protection Regulation).

Retention period

Your personal data will be stored until deleted by you when publicly available and private messages 3 years after last contact. However, the information can be stored for a longer period in anonymised form.

Please refer to the privacy policy of the provider for each of the social media platforms for information on how long they store your personal data.

Who do social media providers share your personal data with?

Social media providers may, among other things, share your personal data with the following categories of recipients:

  • Other devices in the group of which the social media provider is a part of
  • External partners providing analysis- and survey services
  • Advertisers
  • Other individuals visiting our social media profile or page (to the extent that your information is publicly available)
  • Researchers and other academics

You can find more information about who the social media providers share your personal data with, in each provider’s privacy policy. 

The social media providers may transfer their personal data to recipients outside the EU/EEA in accordance with applicable data protection legislation. You can read more in each provider’s privacy policy.

You can read more about who Plamako shares your personal data with, in the Section Disclosure to other data controllers and hand over to data processors below.

  1. Transmission to other controllers and entrustment to data processors

To achieve the above purposes, we may give third parties access to your personal data, which, based on a contractual relationship with Plamako, provides relevant services, this could be IT suppliers, provider of our B2B web shop platform, Plamako companies or other suppliers that process personal data for us. Such suppliers will only process personal data in accordance with our instructions according to the signed data processing agreements.

In the context of Plamako’s development, the corporate structure may change, e.g., by the total or partial sale of the company. In the case of a partial transfer of assets containing personal data, the processing basis for the related transfer of personal data is, as a rule, Article 6(1)(f) of the General Data Protection Regulation, since Plamako has an interest in transferring parts of its assets and making commercial/structural changes.

In addition to what is described above, your personal data is generally not disclosed to a third party without your consent. However, in certain circumstances and under the law, it may be necessary to disclose your personal data to e.g. the police, lawyers, accountants, courts, other public authorities, potential buyers, manufacturers of the products we sell and group-linked companies.

If your personal data are transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection, such a transfer will only take place once a transfer basis is secured. In addition, the transfer will be based on the EU Commission’s standard contracts or EU/US Privacy Framework when recipients in the US are certified. If you have any questions about the basis for transfers to countries outside the EU/EEA, please contact us.

  1. Your rights
  • You have the right to access the personal data we process about you
  • You have the right to object to our collection and further processing of your personal data
  • You have the right to rectification and deletion of your personal data, however there are certain statutory exceptions, including the Bookkeeping Act
  • You have the right to ask us to restrict the processing of your personal data
  • In certain circumstances, you may also request to receive a copy of your personal data and to transmit the personal data you have provided to us to another data controller (data portability)
  • You can withdraw any consents you may have given at any time. We will then delete your personal data unless we may continue the processing on another basis. You can cancel our newsletter by clicking on the link at the bottom of the newsletter
  1. Questions and complaints

If you have any questions about this privacy policy or if you wish to complain about the way we process your personal data, please feel free to contact us:

E-mail: info@plamako.se

If your complaint is not resolved by us and you want to proceed with the case, you can complain to the applicable data protection authority. You may find your local relevant data protection authority and associated contact details here