Privacy Policy Midland AB Version 2, April 2020

Midland AB protects the individual's personal integrity and ensures that personal data is processed in a secure, correct and legal manner. Midland AB has adopted this Privacy Policy for the purpose of informing you about how we handle your personal information. If you are in any way to provide personal information to us at Midland AB, we encourage you to first read this Privacy Policy. This Privacy Policy covers all of our processing of personal data, regardless of how it was collected.

Personal information that we collect

Midland AB processes different categories of personal data in a number of different contexts. Depending on your relationship with Midland AB, for example, one of the following categories of personal information may be collected:

identification details: name and social security number.
contact information: address, telephone number, email addresses,
CV with completed educations, grades, references (for job applications),
insurance information,
such information as is obtained at the commencement and execution of a purchase agreement / service agreement.
IP address, cookies and other traffic data, as well
pictures.
vehicle details such as registration number. These information may also include any sensitive information and social security numbers. The personal data is in some cases collected with you as the informant. They can also come in via Midland as a personal data assistant to a service workshop or vehicle dealer who in that case is responsible for personal data. In addition, personal data may be supplemented, collected and checked through the use of public and other registers such as the population register, credit information companies, company registers, etc.

The use of personal data

Midland AB only processes such personal data that we have a legal basis for processing. The purpose of the treatment is to fulfill obligations within our business towards employees, customers, suppliers and jobseekers. Personal data may also be used in marketing on the basis of our legitimate interest in communicating with our contacts, inviting to events and developing the business. The personal data may also be processed in order for us to be able to fulfill the obligations that are incumbent on us by law.

If you are applying for employment at Midland AB, we will handle your personal information in connection with the recruitment. If we intend to save your application documents for later recruitment, we will ask for your consent.

If, on the other hand, you only visit our website, no personal data other than cookies is collected and processed. A cookie is a small text file that is sent from our web server and that is saved by your browser. We use as few cookies as possible on our website to maintain a good service. There are two types of cookies, "regular" cookies and session cookies. Session cookies disappear when you close your browser and are therefore not saved, while regular cookies are stored on your computer for a longer period of time. We use cookies to be able to count the number of users and the extent of the traffic on our website. By understanding how the website is used, we can develop and improve it. As a user, you can turn off the ability to save cookies on your computer via your browser settings. If you want more information, you can visit the Swedish Post and Telecom Agency's website (www.pts.se).

Consent

The processing of personal data may in some cases be based on a given consent for a specific purpose. If you have given consent to a certain processing of personal data, you are free to revoke the consent by contacting us. If the consent is based on another person responsible for personal data, for example a service workshop, you can contact us or them (preferably both). Even if the consent is revoked, Midland AB has the right to process such information as is necessary to continue processing on the basis of other legal grounds, such as fulfilling an ongoing agreement between you and Midland AB, for example Midland Garanti På Väg (Engine guarantee and roadside assistance for 10 years or 50 000 miles, whichever comes first).

Recipient of personal data

Midland AB may disclose personal data to the data subject himself, to third parties such as companies with which Midland AB has a business relationship and authorities. The majority of the above recipients are to be regarded as independent data controllers. The fact that the company is independently responsible for personal data means that we are not in control of how the information provided to the company is to be processed. When your personal data is shared with a company that is independently responsible for personal data, the company's or authority's privacy policy and personal data management apply.

In some cases, personal data may be disclosed to a party outside the European Economic Area (EEA) and the personal data may therefore be processed outside the EEA. Midland AB only shares personal data with companies in third countries that have an adequate level of protection or companies that through approved methods are considered to achieve an adequate level of protection.

Midland AB may also share information with its personal data assistants where it is necessary for us to be able to carry out our assignments. A personal data assistant is a company that processes the information on our behalf and according to our instructions. When your personal data is shared with personal data assistants, it is only for purposes that are compatible with the purposes for which we have collected the information. Midland AB has written agreements with its personal data assistants and conducts ongoing checks of personal data assistants to ensure that they can provide sufficient guarantees regarding security and confidentiality of personal data and complies with our restrictions and requirements regarding the transfer of personal data to third parties outside the EEA.

Security measures

Midland AB has taken appropriate technical, administrative and organizational security measures in order to ensure that personal data is only processed by authorized personnel and to prevent personal data incidents from occurring.

Your rights as treated