DEKRA is committed to ensuring you feel secure about how we handle your personal data.
If you are a customer or an individual working for or who has worked for a company that is a customer or business partner of ours, we may process your personal data.
The data controller for your personal data is DEKRA Industrial AB, Reg. No. 556033-5977.
The types of personal data we process and the purposes for doing so depend on your relationship with us. Below is a description of the most common types of personal data we process and the purposes behind this processing.
PURPOSES OF PROCESSING
We process your personal data when necessary to enable:
-
The provision of our products and services (including access to inspection object data, scheduling, etc.);
-
An up-to-date registry of customer representatives in our CRM system;
-
The use of our customer-related IT services and applications;
-
Marketing and promotional communications;
-
Customer surveys; and
-
Management and follow-up of our contractual obligations.
We only process your data when it is permitted under applicable data protection laws. This means we must have a legal basis for the processing, which for us generally includes:
-
Performance of a contract;
-
Fulfillment of legal obligations and exercise of rights;
-
Legitimate interest (more details on our legitimate interests are available in our full Privacy Policy for customers, business partners, and their representatives); and
-
Consent.
WHAT PERSONAL DATA WE PROCESS
We process data provided by you, your employer, or a third party with whom we have a business relationship. In some cases, we also collect data from public records, authorities, or institutions.
The personal data we may process includes:
-
Contact information (such as name, phone number, address, email, and preferred contact method);
-
Organizational information (such as company name, job title, and workplace);
-
IT-related information (such as login credentials, passwords, and logs/data from use of our IT services and apps);
-
Personal identity number (when required for secure identification in credit transactions); and
-
Contractual information (such as quotes, orders, confirmations, and agreements with us).
GOOGLE ANALYTICS
If you have given your consent, this website uses Google Analytics, a web analysis service provided by Google LLC. For users in the EU/EEA and Switzerland, the responsible entity is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (“Google”).
SCOPE OF PROCESSING
Google Analytics uses cookies to analyze your use of our website. The information generated by the cookie is usually transferred to a Google server in the USA and stored there.
We use the enhanced feature “Google Signals”, which allows linking a single website visitor across multiple devices. However, this only occurs if the visitor is logged into a Google service during the website visit and has activated “personalized advertising” in their account settings.
IP anonymization is enabled. This means your IP address is shortened by Google within the EU or EEA before being transmitted. In exceptional cases, the full IP address may be sent to a Google server in the USA and shortened there. According to Google, the IP address transmitted from your browser will not be merged with other Google data.
PURPOSE AND LEGAL BASIS FOR PROCESSING
On behalf of this website’s owner, Google uses the information to evaluate your use of the site, compile reports on website activity, and help us analyze performance and marketing effectiveness.
RETENTION PERIOD
Data we send and link to cookies is automatically deleted after 14 months. Deletion of expired data occurs monthly.
RECIPIENTS
Recipients of the data include or may include:
-
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (data processor under Article 28 of the GDPR);
-
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
-
Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
It cannot be ruled out that U.S. authorities may access data stored by Google.
DATA TRANSFERS TO THIRD COUNTRIES
If data is processed outside the EU/EEA and no equivalent data protection level exists, we have entered into EU Standard Contractual Clauses with the service provider to ensure adequate data protection. The parent company of Google Ireland, Google LLC, is based in California, USA.
From a data protection perspective, the USA is currently considered a third country. You do not have the same rights there as within the EU/EEA and may not have access to the same legal remedies against governmental access.
RIGHT TO WITHDRAW CONSENT
You can withdraw your consent at any time with future effect by changing your cookie settings. The legality of the processing carried out based on your consent before the withdrawal is not affected.
You may also prevent the storage of cookies by adjusting your browser settings. However, if you configure your browser to reject all cookies, this may result in limited functionality on this and other websites. Additionally, you can prevent the collection of data generated by cookies related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by:
a. Not giving your consent to the setting of cookies, or
b. Downloading and installing the browser add-on to disable Google Analytics here.
For more information about the terms of use for Google Analytics and Google’s privacy policy, please visit:
HOTJAR
Who We Share Your Personal Data With
DEKRA is part of a global group with offices and operations in several countries. Therefore, your personal data may be transferred to and made accessible by other companies within our group. We may also disclose the data to authorities when required by law, regulation, or governmental decision, and to our trusted third-party service providers.
When we disclose your data to a third party, we enter into a data processing agreement where required and take other appropriate measures to ensure your personal data is handled in accordance with applicable legislation.
We aim to always process your personal data within the European Union (EU)/European Economic Area (EEA). If, despite this, we need to transfer your personal data outside the EU/EEA, we are obligated to ensure that the transfer is made in accordance with applicable data protection laws before the data is transferred, for example by ensuring that the destination country has an adequate level of protection as determined by the EU Commission or by ensuring the transfer is covered by appropriate safeguards such as the EU Commission’s Standard Contractual Clauses.
HOW LONG WE STORE YOUR PERSONAL DATA
We retain your personal data for as long as necessary to fulfill the purposes for which the data was collected. The retention period is determined based on the type of personal data, the duration of contracts and obligations, and legal reporting requirements.
YOUR RIGHTS
You have certain rights in relation to us and our processing of your personal data. These include, among others:
-
The right to access information about how your data is processed;
-
The right to rectification of incorrect data;
-
The right to erasure (e.g., if the data is no longer needed for its intended purpose or if the processing is based solely on your consent and you withdraw that consent);
-
The right to object to the processing of your data for direct marketing purposes;
-
The right to withdraw previously given consent;
-
The right to restriction of processing in certain situations; and
-
The right to data portability.
To exercise your rights, please contact us—email is the simplest method. You can find our contact details below.
If you believe your data is being processed in violation of existing regulations, please report this to us as soon as possible. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten).
This notice contains basic information about how DEKRA processes your personal data. If you wish to know more about our processing, please read our full Privacy Policy for customers, business partners, and their representatives, or contact us directly.