Privacy policy
1. What is personal data?
Personal data is information that can be linked to an individual directly or indirectly. Examples include names, addresses, phone numbers, ID numbers, email and IP addresses, or a combination of these which makes it possible to identify an individual.
All use of personal data is considered processing of personal data, including collection, registration, compilation, storage and transfer, or a combination of these.
Biltema Sweden AB, hereafter Biltema, is the controller of personal data that is processed in conjunction with the use of our services and products, as well as personal data that we collect and process for the purposes described in this document. That Biltema is the personal data controller means that Biltema assumes responsibilities and obligations pursuant to the EU's General Data Protection Regulation (GDPR).
All processing of personal data is carried out in accordance with applicable data protection laws.
2. How do we collect information about you and how is it used?
Biltema only collects personal data that is necessary for the purposes described in the specific terms and conditions for the relevant service and in the Privacy Policy.
The only information we have about you is information that you provide when creating an account with Biltema or data that is generated when you use our services. This includes page views and information about your device. In addition, we occasionally receive data from other sources and partners. The personal data to which we have access is primarily used to formulate agreements with you, but also to understand and improve our services, optimise our range, create personalised page views, store statistics, understand market trends, and personalise advertisements.
Pursuant to applicable data protection laws, personal data may only be collected for "specific, explicitly stated, and justified purposes". Personal data may not be processed in way that does not conform to these purposes. Furthermore, pursuant to data protection laws, there must be grounds for processing personal data, i.e. a lawful basis.
In order for us to lawfully process your personal data, one or more of the following grounds must exist:
- processing is necessary for us to fulfil our contract with you,
- processing is necessary for us to fulfil our lawful duties (i.e. if we have a legal obligation to do something according to the law),
- processing is necessary for Biltema's legitimate interests provided that your interests for protection do not override these, or
- in specific cases, after you have consented to the processing in question.
In order for us to provide our services and products to you, we need to handle and process your personal data. The purposes for which we process your personal data and the lawful basis for doing so are described in examples below.
Certain personal data processing may require consent as a lawful basis. In such cases, we will request your consent for the processing in question before any processing commences.
Information is collected in several different ways:
Information that you provide to us and information that is collected through the use of services as follows:
Creating an account
When you create an account with us, you provide information such as your name, postal code, email address and phone number. In order to receive electronic receipts you need to register your credit card. The electronic receipts service is delivered in cooperation with Storebox AB. We will also record your purchases so as to provide you with an electronic receipt and to analyse purchasing histories and trends in order to present you with relevant special offers and shopping lists containing frequently purchased products. The information is stored in our database, primarily to provide the service you have ordered but also to improve our services.
You can log in to our website via your Facebook account if you have one. The only information we collect about you from your Facebook account is your email address and your name. We will never post anything to your Facebook account.
Purchases on Biltema Online
When you purchase on Biltema Online, you provide information such as your name, phone number and email address. The information together with order history, is stored in our database, primarily to provide the service you have ordered but also to improve our services and to be able to present relevant products to you, as well as to handle any possible claims. If you are logged in with your account the order history is saved to your account.
The online checkout service is provided in partnership with Qliro AB, which serves as the personal data controller of this information and therefore also the owner. No personal data is saved by Biltema, and enquiries pertaining to the payment and related personal data must be addressed to Qliro AB.
Pay and Collect Drive in
When you use our service Pay and Collect Drive in you provide us with your car license plate number. The information is stored in our database to provide the service you have ordered and also as a receipt that your goods were delivered to you.
Applying for a Biltema card
When you apply for a Biltema card, you provide personal data such as your name, ID number, email address, phone number, annual income and employer. The service is provided in partnership with Resurs Bank AB, which serves as the personal data controller of this information and therefore also the owner. No personal data concerning the Biltema card is saved by Biltema, and enquiries pertaining to the Biltema card must be addressed to Resurs Bank AB.
Biltema serves as an agent for Resurs Bank AB when a member of staff in a Biltema store assists a customer with an application via the store's online application Butiksservice with immediate approval/denial.
Applications and using Biltema Business
When a company applies for a credit account at Biltema or logs in to Biltema Business, login with BankID (electronic identification) is required to confirm that the applicant/user is an authorised signatory of the company for which he/she is making an application for credit and/or is the appointed administrator of the company, BankID identification is carried out in partnership with Trust Combinator AB, which serves as the personal data assistant. Personal data is only processed in order to identify your login.
The company also provides information such as names, phone numbers, email addresses, birth dates of the contact persons and persons authorised to make purchases on behalf of the company, for verification purposes when making purchases at stores.
We also store information about the company's receipts and invoices, as well as shopping lists and online orders.
The information is stored in our databases mainly in order for us to provide a complete service, but also to analyse purchase history and to be able to provide your company with relevant offers and suggestions for shopping lists containing frequently purchased products
Purchasing electronic gift vouchers
When you purchase an electronic gift voucher from us, you provide information such as the name, phone number, and email address of both the giver and recipient of the digital gift voucher, payment card details and, if required, a photo. The information is stored in our databases mainly in order for us to provide the services ordered, but also to improve our services and to combat fraud. Biltema itself does not save any payment card details; the purchase is processed by Resurs Bank AB. Resurs Bank will also save your address. Personal data is only processed in order to complete the transaction.
Use of the recommendation program for vehicle registration numbers
When searching for spare parts, you can elect to provide your vehicle registration number to make it easier to find spare parts relevant to your vehicle. In order to provide this service, we maintain a database of Nordic vehicle registration numbers, through which the search is performed. We do not save your registration number when you perform a search, and the database is only used to be able to match our products to your needs.
Newsletter subscription
When you subscribe to our newsletter, we save your name and email address in order to send out the newsletter to you. The information is stored in our databases mainly in order for us to provide the services ordered, as well as to provide you with relevant offers and information about special offers and promotions. Personal data is only processed in order to distribute the newsletter. We utilise a third party to distribute our newsletter.
Contact with Customer Service
We save information when you contact us, such as when you send an email, contact us by telephone or through one of the features on our website or via social media. We do this so as to save your enquiry.
Video surveillance (CCTV)
Biltema strives to be a safe place for our employees and customers. For this reason, we use CCTV in our stores. The purpose of CCTV is to prevent, detect and investigate crimes. We adhere to requirements stipulated in the Swedish Camera Surveillance Act.
On CCTV signs, the person/company responsible for the CCTV is provided along with contact details. We save CCTV video for up to 30 days, after which it is automatically deleted. The data is only processed to ensure the safety and security of our customers and employees, and to prevent, detect and investigate crimes. This processing is necessary in terms of Biltema's legitimate interests. CCTV video is not shared with other businesses.
Biltema reserves the right to save CCTV video for a longer period if there is a suspicion of impropriety and will hand over the video to authorities upon request.
Returns and claims
When making a return or claim in our stores, we will ask you for your name, phone number, and ID number, as well as your email address if making a damage claim. We request this information so as to be able to contact you if you have returned a product for repair, or for documentation requirements from authorities in conjunction with monetary compensation, and to be able to process your damage claim. The information is stored locally in the store and in our databases in order to combat fraud. The data is not shared with any other companies.
Information collected through the use of our services
When you make a purchase and use our services, we record information pertaining to which products you have purchased and which products are of interest to you. This makes it possible for us to improve our services, combat fraud, and personalise content and advertisements according to your interests and patterns of use.
The information can be categorised as follows:
Technical data about your device and internet connection
By means of service logs and other tools, we record information about your device and connection to our services, e.g. operating system, web browser, IP address, network operator, cookies, and unique identification files.
If advertising ID is activated on your Android or Apple device, this information is sent from our app for personalised advertisements. Example of use: customisation of our services for the device you are using so that you, for example, access the mobile version of our website when using your mobile phone.
Information about the use of services
When you visit one of our websites, your activity is automatically recorded in our measurement tool. We use this information to, for example, improve our services and provide you with personalised marketing according to your patterns of use.
Example of use: we collect traffic history in order to see which pages you have visited and for how long you stayed on the page so as to present products that are relevant to you. If you are logged in, we link the search history to your profile so that we can present products and content relevant to you.
Information about position
We record your geographic position based on your IP address or other forms of geolocation. If you consent to sharing your location in our app, your GPS position will be collected when using the app.
Examples of use: display offers in stores near you or provide relevant advertisements based on a position in which you have been.
Cookies and local storage
When you use Biltema's services, cookies and other data are stored locally (hereafter referred to as local storage of data) on your device. These are text files that are stored in your web browser which can be read by our services.
Locally stored data is used to simplify the use of our services and to provide you with relevant information when you visit our website, which improves your user experience. This is also used to gauge traffic on our website, collect statistics, track behaviour to formulate target audiences for marketing, simplify advertisement management, and to improve our services.
Examples of use: we use cookies in order to recognise your device, which means you do not have to log in each time you use our services, or to provide personalised product displays so that you do not have to search. Cookies are also used to record the advertisements you have seen and clicked on.
Information from other sources
We receive information from other sources, such as measurement tools or other third-party tools, which help us or the other party to understand user activity and preferences, or to improve the service we offer in general.
Sending out marketing materials
In certain cases, we have a legitimate interest to process personal data in order to send out addressed marketing materials to you. We do so to afford you an opportunity to find out about special offers and products in our range.
When we send out addressed marketing materials, we purchase address registers from third parties. The information we purchase constitutes names and addresses. The information is only used so that it can be printed on catalogues, and the address register is deleted afterwards.
3. Storage duration periods
Biltema does not store personal data longer than is necessary to fulfil the purpose of the processing and our legal obligations, e.g. as relates to the Swedish Bookkeeping Act and other regulations concerning statutory limitations.
4. With whom is personal data shared?
Biltema Birgma Group
We may share information with other companies within the group to be used for purposes of the same nature as those for which the information was collected, and as described in this Privacy Policy.
External companies
In certain cases, we use a personal data assistant for the processing of personal data, e.g. in order to enter into contracts or provide services. In such cases, Biltema implements the requisite measures to ensure that the personal data assistant processes the personal data pursuant to our stipulations and in accordance with applicable laws, and we require adequate security measures to be in place.
Personal data may also be shared with various authorities as required by law.
Transfer to a third country
In general, we do not transfer customer information to countries outside of the EU/EES (so-called "third countries"). In the event that this is necessary, we implement appropriate security measures and ensure that the transferred personal data is processed pursuant to applicable data protection regulations. We ensure that the provider enters into a legal agreement with us in which they undertake to adhere to decisions approved by the EU Commission concerning the protection of personal privacy.
Other
If suspicions arise that a crime has been committed in conjunction with the use of Biltema's products or services, the information may be shared with authorities upon request.
We never forward, sell, or disseminate your personal data in any way other than that described in this Privacy Policy.
5. Security
We implement appropriate technical and organisational security measures, conforming to industry standards, to ensure that all the information we process is protected from being accessed by unauthorised parties. Only a limited number of employees has access to the information about you, and the way in which they process the information is strictly controlled.
We have implemented technical and organisational measures to protect your information from loss, manipulation, and unauthorised access. We regularly adapt our security measures in line with technological progress and development.
6. Your rights as a registered data subject
Pursuant to the EU's General Data Protection Regulation, you have the right to know what we do with your personal data, such as when, how and why your personal data is processed. Furthermore, you have the right, in certain cases, to access your personal data or have it moved, rectified, erased, or restricted. If, for any reason, we cannot fulfil your wishes, we will provide justification for our failure to do so. Note that we can only provide information that we indubitably know belongs to you.
Your rights are listed below along with how you may exercise them.
Pursuant to the General Data Protection Regulation, as a private person you have a host of rights. Your rights are as follows:
- You have the right to be informed of the personal data Biltema processes about you.
- You have the right to have the personal data Biltema processes about you rectified and updated.
- You have the right to request the personal data Biltema processes about you be erased. If you wish for your personal data to be erased, Biltema will delete all personal data that Biltema is not required by law to save.
- If the processing of personal data is based on consent provided by you, you have the right to withdraw your consent, which means that processing will then cease, except in cases where Biltema has a legal obligation to process the personal data.
- It is important for us that the information we have about you is accurate and up-to-date. If you discover any discrepancies in your personal data, we request that you contact us in order for this to be rectified.
All communication pertaining to your rights will be in writing. To exercise your rights as a registered data subject, use this link: gdpr.biltema.se
User data settings in our app
You can, at any time, make changes to data processing in our app via the telephone's settings. You can activate and deactivate notifications, activate and deactivate search history, turn GPS data for location services on and off. This can affect possibilities for receiving notifications and location-based services and offers.
Deleting cookies
You can select whether to accept local storage of data through your browser settings. Here you can normally specify whether you accept cookies from the websites you visit, from third parties linked to the websites, and whether you wish to be notified each time a cookie is saved.
The exact procedure will depend on your device and the web browser you use. More information about cookies can be found here.
If you choose to deactivate local storage of data from Biltema, it may prevent our websites from functioning optimally, e.g. you may be required to log in each time.
Complaints
If you feel that our processing of your personal data contravenes the General Data Protection Regulation, you should report this to us as soon as possible. You are also able lodge a complaint directly with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten).
All communication pertaining to your rights will be in writing. To exercise your rights as a registered data subject, use this link: gdpr.biltema.se
7. Our analysis tools
We utilise analysis tools to collect information on how our services are used. For example, we calculate the number of visitors, which pages are visited, the duration of each visit, and similar.
Statistics about users and traffic are chiefly used in an aggregated form, which is why the statistics do not contain any type of information that can be linked directly to you as an identifiable person.
However, information on products purchased is linked to personal information in certain contexts in order for us to provide better customer service and targeted communication, such as in our customer management system and analysis system for sales pages. IP addresses and geodata are used to create statistics based on geographic criteria.
Hotjar: We use Hotjar to improve the customer experience on our websites. Hotjar collects anonymised information about behaviour on our websites, including the pages visited. Hotjar does not collect data that is sent via forms or any personal information. Learn more about Hotjar's privacy policy here.
8. Personal data of children
Biltema does not collect or process the personal data of children under 16 years of age. If a child under the age of 16 provides us with personal information, we will delete this information as soon as we become aware of its existence. Parents/guardians can contact us as indicated below.
9. Changes to terms and conditions and the Privacy Policy
Biltema reserves the right to change terms and conditions for consent and in the Privacy Policy in order to fulfil new legal requirements and in line with our own practices for the collection and processing of personal data. For changes that require consent, you will be requested to give your consent to the new terms and conditions when you log in to the site/service to which the change pertains.
Information about changes is communicated on our website www.biltema.se/en-se as well as via the relevant services.
10. Contact information
Biltema has elected to appoint a data protection officer (DPO) who will be involved in all questions concerning the protection of personal data. It is the responsibility of the DPO to inform and offer advice in actual cases, as well as to assess whether the business complies with the GDPR in general.
Biltema has also elected to make the DPO the contact person for all internal and external communication concerning the processing of personal data.
If you have questions regarding our Privacy Policy or data protection, kindly contact us on: dataprivacyBTS@biltema.com
Biltema Sweden AB (Corp. ID no. 556297-3320)
Data Protection Officer
Södra Långebergsgatan 13-15, 2 tr
436 32 Askim
All communication must be in writing.
All communication concerning data subject rights, i.e. requests pertaining to your personal data such as access, rectification, erasure, portability, processing restriction, must be carried out via the following link: gdpr.biltema.se