If we intend to use personal data for a new purpose, beyond what is described in this policy, you will be informed of such use before or at the time of collection of the personal data and we will ask for your permission or, where required, your consent.

Alternatively, we will ask for your permission and/or consent after such collection has taken place, but before we would use your personal data for a new purpose.

Reasons why we share your personal data

It may sometimes be necessary for us to share your information with parties who carry out services on our behalf so that we can provide you with our services.

Where we share information about you with others, we have ensured that these companies comply with our data protection requirements and they are not allowed to use personal data they receive for any other purpose.

We also share information with parties we have engaged to provide customer service, support or assistance in protecting and securing our systems and services where they need access to personal data to provide these services.

Finally, we may need to disclose or retain your information when we believe it is necessary to:

1. comply with the law or legal process and disclose information to police and other competent authorities
    
2. protect our customers and employees, for example to prevent spam or fraud attempts
    
3. managing and maintaining the security of our products and features, including preventing or
   stop an attack on our systems or networks,
    
4. protect the rights or property of Autocirc, including enforcing the terms governing your
   use of the Services, but if we receive information that someone is using our Services to trade
   stolen intellectual or physical property belonging to Autocirc, we will not ourselves investigate an
   individual's private content, but we may refer the matter to a law enforcement agency.

Please note that our website may contain links to products and features of third parties whose privacy policies differ from Autocirc's. If you enter personal data in any of these products and features, your data will be processed according to their respective privacy policies.

How to access and control your personal data

You can find out how to manage your rights under the Data Protection Act for Autocirc in the "Contact us" section.

Your individual rights

Autocirc complies with current data protection laws in the European Union, which where applicable include the following rights:

• You have the right to request, free of charge, an extract from the register (as defined in the legislation) and
  access to a copy of your personal data and to request rectification and, in certain circumstances, erasure
  of your personal data,
• You have the right to request restriction and object to processing of your personal data that is carried out on the basis of
  our legitimate interests,
• You have the right to lodge a complaint with a data protection authority. The Swedish Data Protection Authority (IMY) is the
  authority in Sweden that supervises how we as a company comply with the law,
• If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time
  your consent for future processing of your personal data at any time.

Security of your personal data

Autocirc uses a range of security technologies and practices to protect your personal data from unauthorized access, unwanted alteration and loss of data. For example, personal data you provide is stored on computer systems that have restricted access and are located in secure premises. When highly sensitive data (e.g. credit card numbers and passwords) is transmitted over the internet, this data is protected by encryption.

Where we store and process personal data

Personal data handled by Autocirc may be stored and processed in the region where you live, in Sweden, or in other countries where Autocirc, our partners or suppliers operate. We take steps to ensure that data we collect under this Privacy Policy is processed in accordance with the provisions of this Policy and in accordance with applicable law where the data is held.

If, for reasons explained in the section "Reasons for sharing your personal data", we transfer your personal data to a controller or processor in a third country, i.e. outside the EU/EEA, we will enter into agreements and take other steps in accordance with applicable legal requirements. We will use EU standard contractual clauses as appropriate safeguards where possible.

Our conservation of personal data

Autocirc retains personal data for as long as necessary to provide the products, features and services, fulfill the transactions you have requested and authorized, or for other necessary purposes, such as complying with our legal obligations, resolving disputes and enforcing our agreements. Because these needs may vary for different types of data and for different types of products, services and contexts, actual retention periods may vary. Criteria that determine the length of time we retain data include:

• How long is the personal data needed to provide the products, services and functionalities? This includes
  includes maintaining and improving the performance of the products, services and features
  protecting our systems and administering necessary business and accounting information. This is the
  general rule that underpins the calculation of most retention periods.
• Is the personal information of a particularly sensitive nature? If so, a shorter
  retention period is usually used.
• Have you agreed to the use of a longer retention period? If so, we will store the information in accordance with
  your authorization.
• Is Autocirc legally, contractually or otherwise obliged to retain the information? Examples
  may be mandatory data retention legislation in certain jurisdictions, government orders
  to retain data relevant to investigations, or data that must be retained for the purpose of
  resolve a dispute.

Cookies och similiar technology 

For information on what cookies autocirc.com uses and how, see our cookiepolicy.

Changes to this privacy policy

We will update our privacy policy when necessary to reflect user feedback and changes to our products, services and features. When a policy is updated, the date of the last update will be changed at the top of the policy and the changes will be described in the "Change History" section. If there are major changes to the policy or to how Autocirc uses your personal data, you will be notified by web posting or email before the changes take effect to the extent required by law. Please review this Privacy Policy from time to time to stay informed about how Autocirc protects your personal data and privacy.

Contact us

If you have any questions, or if you want to get in touch with Autocirc's Data Protection Coordinator, please send an e-mail to hanna.wadsten@autocirc.com.

History of changes

May 2018: Clarifications due to the entry into force of the new General Data Protection Regulation (GDPR) on May 25, 2018. The updated Privacy Policy will automatically take effect for all existing users and visitors on May 25, 2018. Your continued use of our products, services and features from that date will be subject to the new Privacy Policy. The policy has also been revised to be concise, clear, understandable and easier to absorb and understand.

November 2021: Further updates and changes to the policy to more clearly reflect how we operate and process personal data, what your rights are and how to request them, transfer of personal data to third countries and to be more concise, clear, understandable and easier to access and understand.