PRIVACY POLICY

The following policy applies to the processing of personal data and the use of cookies by Bolon AB.

The following information is provided by Bolon AB (below also referred to as ”Bolon”, ”we” or ”us”) to enable our visitors of www.bolon.com, any connected sub-domains as well as our profiles on Facebook (https://www.facebook.com/bolonofficial), Instagram (https://www.instagram.com/bolonofficial/), LinkedIn (https://www.linkedin.com/company/bolon), Pinterest (https://www.pinterest.com/bolonflooring/) and YouTube (https://www.youtube.com/bolonflooring), as well as our customers and cooperation partners to be fully informed of how we process personal data.
 

In this privacy policy (“Privacy Policy”), we outline what personal data we may process and the purposes of the processing of this personal data. We also explain how we may process this personal data. Lastly, we explain your choices and rights in relation to the processing. Therefore, we kindly ask you to read our Privacy Policy, which is in line with the EU General Data Protection Regulation (“GDPR”) and Swedish complementary data protection legislation, carefully and familiarise yourself with its content.


If you are under 16, we require that you inform a parent or guardian about Bolon’s Privacy Policy and obtain their consent, where necessary, to the processing of personal data in accordance with this Privacy Policy before registering or placing an order or request with Bolon.

 

This Privacy Policy does not apply to websites maintained by other companies or organisations to which we link. Please ensure that you read the privacy policy of such other companies or organisations before submitting your details.


Who is the controller of personal data?
 

Bolon AB, reg.no 556202-4363

Address: Industrivägen 12, 523 90 Ulricehamn, Sweden

Email address: info@bolon.com
 

Joint Controllership with Meta for the Facebook and Instagram business profile, with LinkedIn for the LinkedIn business profile and with Pinterest for the Pinterest business profile
 

We operate various presences on social networks and platforms as mentioned above in order to communicate with our customers and interested parties about our products.
 

For detailed information on the processing and use of data by the providers on their website, as well as a contact option and your rights and setting options in this regard to protect your privacy, in particular objection options (opt-out), please refer to the privacy notices of the providers linked below. If you still need help in this regard, you can contact us.
 

With regard to Facebook and Instagram Insights data as well as processing in the context of Facebook Custom Audiences, we are joint controllers together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). The data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR, which you can access here. You can contact Meta’s data protection officer via this form.
 

With regard to LinkedIn Page Insights, we are controllers together with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR, which you can access here. You can contact LinkedIn’s data protection officer via this form.
 

With regard to Pinterest’s Activity Data, we are controllers together with Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). The data processing takes place on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR, which you can access here. You can contact Pinterest’s via privacy-support@pinterest.com.
 

The data protection authority responsible for the above mentioned services is the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, www.dataprotection.ie.
 

The purposes and the legal basis for each processing
 

The purposes pursued with our data processing are explained below.
 

Personal data in relation to product purchase
 

If you are a customer, respectively a representative of a company customer of Bolon, we may process different personal data for the processing of orders and requests. Such data includes:
 

·      Name

·      Email address

·      Telephone number

·      Delivery address

·      Company

·      Position

·      Payment details

·      Delivery information
 

The processing is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract (Art. 6.1 (b) GDPR), respectively, if you are a representative of a company customer, if processing is necessary for the purposes of the legitimate interests pursued by us (Art. 6.1 (f) GDPR), namely to get in contact with a company customer in order to enter into a contract. Your personal data is kept as long as required for the fulfilment of a contract.
 

Certain personal data, which is necessary for accounting operations, will be processed as such processing is necessary for compliance with a legal obligation to which we are subject, and will be stored up to and including the seventh year following the expiry of the calendar year in which the accounting year was closed, in order to comply with Swedish accounting legislation. The legal basis for such processing is Art. 6.1 (c) GDPR.
 

Personal data in relation to the order of product samples
 

If you are a customer, respectively a representative of a company customer of Bolon, we may process different personal data for the processing of orders of product samples and to be able to follow up on requests for interest, such as
 

·      Name

·      Email address

·      Telephone number

·      Company name

·      Position

·      Delivery address

·      Delivery information.
 

The processing is based on our legitimate interest (Art. 6.1 (f) GDPR) to reply to your inquiry.
 

Your personal data will be kept until the product sample has been delivered to you and thereafter as long as required in order to be able to follow up on requests for interest.
 

Cooperation partners
 

If you are a Bolon cooperation partner, or a representative of such cooperation partner, e.g. a supplier or a transport service, we will process your personal data, such as
 

·      Name

·      Email address

·      Telephone number

·      Company name

·      Company address

·      Position

·      Address.
 

The processing is based on Art. 6.1 (b) GDPR, if a contract is entered into with you or if steps are necessary prior to entering into a contract, respectively, if you are a representative for a cooperation partner, on Art. 6.1 (f) GDPR, if processing is necessary for the purposes of the legitimate interests pursued by us, namely to have a business relationship with a cooperation partner. We will keep your personal data as long as the processing purposes exist.
 

Account registration for distributors
 

If you are a representative of a Bolon distributor, you can create a log in-access on our website in order to download marketing materials, see stock check information and My cross Border Projects/registration. We will process personal data, which includes
 

·      Username

·      Email address

·      First and last name

·      Website

·      Password

·      Role.
 

The processing is based on our legitimate interest (Art. 6.1 (f) GDPR) to facilitate our business relationship.
 

We will store your personal data as long as you have a registered account. We will, however, delete your account after the business relationship ends.
 

Communication with Bolon (contact via contact form on website or email)
 

We process personal data such as
 

·      Name

·      Email address

·      Telephone number

·      Company name

·      (Company) Address

·      Other information provided
 

In order to answer your inquiry via our website’s contact form or via email. The processing is based on our legitimate interest (Art. 6.1 (f) GDPR) to provide contact channels and to give prompt replies.
 

We will store your personal data as long as required in order to satisfactorily deal with your inquiry.
 

Newsletter
 

We have a newsletter that you can sign up to at our website. Such newsletters alert for new products, features, enhancements, special offers, upgrade opportunities, contests, events of interest, and one-off marketing promotion and may include marketing information about Bolon, our subsidiaries or selected business partners.


To be able to send our newsletter, we need to process the following personal data:
 

·      Name

·      Email address.
 

The purpose of the processing is to market our products and services.
 

The processing is based on your prior consent (Art. 6.1 (a) GDPR).
 

The data will be stored for as long as we have your consent.
 

Marketing activities
 

From time to time Bolon may employ third party business partners to collect personal information or to undertake marketing activities on Bolon’s behalf. In such cases, these third parties will be subject to confidentiality agreements and instructed by Bolon to comply fully with this Privacy Policy.
 

The processing is based on your prior consent (Art. 6.1 (a) GDPR).
 

The data will be stored for as long as we have your consent.
 

Processing on our social media profiles
 

When you visit one of our company profiles on the platforms mentioned above, your personal data will be processed by the respective platforms. Please see the respective platform’s privacy policy for more information about the purposes and legal bases of processing:
 

·      Meta (Facebook and Instagram): https://www.facebook.com/privacy/policy/

·      LinkedIn: https://se.linkedin.com/legal/privacy-policy?

·      Pinterest: https://policy.pinterest.com/en/privacy-policy

·      YouTube: https://policies.google.com/privacy
 

We draw your attention in particular to the fact that user data may also be transmitted by the respective service to servers in a third country and thus processed outside the area of the EU. The services mentioned above use standard contractual clauses for this purpose or rely on adequacy decisions issued by the European Commission regarding certain countries.
 

Insofar as we process your personal data on Facebook, Instagram, LinkedIn, Pinterest or Youtube, e.g. when we share your post on our profile, respond to your posts or carry out other intended social media actions, this is done solely for the purpose of presenting our company on the respective platform mentioned above and presenting it to a broad public. The processing is based on our legitimate interest (Art. 6.1 (f) GDPR) to have public relation activities and to present our company. We store your personal data as long as the processing purposes exist.
 

Protection of our rights
 

We may process your personal data (all categories mentioned in this Privacy Policy) to enforce our rights. The processing is necessary for our legitimate interest in defending ourselves against any claims brought against us, Art. 6.1 (f) GDPR.
 

The data is kept for as long as necessary to defend our rights, defend against and make any claims.
 

Use of cookies on our website
 

We use cookies on our website, including sub-domains.
 

A cookie is a small data file that is stored on your device. Cookies are used to analyse user interest and to make our website more user-friendly. In principle, you can also use our website without cookies. However, if you want to use the full functionality of our website in the most user-friendly way, you should accept the cookies that enable the use of certain functions or provide comfort features.
 

We use four types of cookies:
 

Technically necessary cookies
 

These cookies are technically necessary to provide the following core functions of the website and cannot be disabled by you.
 

The legal basis for the storage of the cookie is chapter 9 section 28 (2) in the Swedish Act (2022:482) on Electronic Communication (LEK). The legal basis for the processing of personal data based on the cookie, i.e. traffic data such as an IP-number, is Art. 6.1 (f) GDPR. Our legitimate interest is to provide you with the functions of our website.
 

Preference cookies (functional cookies)
 

Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region where you are.
 

The legal basis for the storage of the cookie is chapter 9 section 28 (1) LEK. The legal basis for the processing of personal data based on the cookie, i.e. traffic data such as an IP-number, is Art. 6.1 (a) GDPR. The purpose of the data processing is to enable you to use our website as comfortably as possible. You can revoke this consent at any time by withdrawing your consent to the storage of the respective cookie in your browser settings.
 

Statistics cookies (performance cookies)
 

Statistic cookies help us to understand how visitors interact with our website by collecting and reporting information anonymously.
 

The legal basis for the storage of the cookie is chapter 9 section 28 (1) LEK. The legal basis for processing of personal data based on the cookie, i.e. traffic data such as an IP-number, is Art. 6.1 (a) GDPR. You can revoke this consent at any time by withdrawing your consent to the storage of the respective cookie in your browser settings.
 

Marketing cookies
 

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
 

The legal basis for the storage of the cookie is chapter 9 section 28 (1) LEK. The legal basis for processing of personal data based on the cookie, i.e. traffic data such as an IP-number, is Art. 6.1. (a) GDPR. You can revoke this consent at any time by withdrawing your consent to the storage of the respective cookie in your browser settings.
 

You can find more information about different types of cookies, individual cookies, their purpose and storage duration here.
 

You can set your browser to notify you before accepting cookies, to accept or reject only certain cookies, or to reject all cookies. In additions, you can delete cookies from your storage device at any time.
 

Information on deleting or controlling cookies is available here. Please note that by deleting our cookies or disabling future cookies you may not be able to access certain areas or features of our site.
 

Categories of recipients
 

Your personal data may be transferred to the following categories of recipients:
 

·      Our website hosting provider;

·      Our service provider for transactional emails;

·      Our affiliates;

·      Our distributors and other cooperation partners;

·      Transport companies;

·      Social media companies;

·      Marketing agencies;

·      Credit reference or fraud prevention agencies;

·      External advisors;

·      Competent authorities (e.g. tax authorities).
 

If you have any specific questions about recipients of the personal data, please contact us at the email address stated below.
 

Third country transfers
 

Your personal data is stored within the EU/EEA and is in principal not transferred to a third country. However, upon request we may transfer your personal data to distributors in third countries. Furthermore, personal data can be transferred to third countries by means of the use of cookies.
 

Transfers to third countries are only made on the basis of an adequacy decision, i.e. where the European Commission has decided that the third country, a territory or one or more specified sectors within that third country, or the international organisation in question ensures an adequate level of protection, or where transfers are subject to other appropriate safeguards. In the absence of an adequacy decision pursuant to Art. 45.3 GDPR, or of appropriate safeguards pursuant to Article 46 GDPR, transfers to third countries are only made if
 

a) you have explicitly consented to the proposed transfer, after having been informed of the possible risks of such transfers for you due to the absence of an adequacy decision and appropriate safeguards;
 

b) the transfer is necessary for the performance of a contract between you and the controller or the implementation of pre-contractual measures taken at your request;
 

c) the transfer is necessary for the conclusion or performance of a contract concluded in your interest between the controller and another natural or legal person.
 

Safeguarding your personally identifiable information
 

We will take reasonable steps to maintain appropriate safeguards to ensure the security, integrity and privacy of the information you have provided us with. We take reasonable steps to ensure that third parties to whom we transfer any data will provide sufficient protection of that personal information.
 

Your rights
 

As a data subject, you have certain rights in relation to our processing according to GDPR, which we briefly explain below.
 

The right to information
 

You can request information about whether your personal data is being processed. If this is the case, you can request further information, in particular on the purposes of the processing, the categories of personal data processed, the recipients, the storage period or, if this is not possible, the criteria for determining the period, as well as further information.
 

You can request a copy of your personal data, which will be provided to you in the event of a request by email in a common electronic format, provided that this does not affect the rights or freedoms of other persons. For this purpose, please specify exactly which data you require.
 

The right to rectification
 

You have the right to have inaccurate personal data concerning you rectified. Depending on the purposes of the processing, you also have the right to have incomplete personal data about you completed.
 

The right to restriction
 

You can request the restriction of the processing of your personal data, in particular if
 

·      you dispute their accuracy and the data is verified,

·      the processing is unlawful and you object to the erasure,

·      the data is no longer required, but you need it for the assertion, exercise or defense of legal claims, or

·      you have objected to the processing.
 

In the event of the restriction of the processing, your personal data may in principle only be stored and in particular only be processed with your consent or for the assertion or exercise as well as for the defense against legal claims.
 

The right to deletion
 

You have the right to request the erasure of your personal data, in particular if the data is no longer necessary for the purposes for which it was processed. Your data will be erased immediately unless an exception applies and your data may continue to be stored. This is the case, for example, if there is an obligation to store it for tax or commercial law reasons. In this case, processing will be restricted and will then only take place for this purpose.
 

The right to make objections
 

Where the legal basis for the processing is our legitimate interest, you are entitled to object to the processing at any time. If you do this, we must provide compelling legitimate grounds for the processing, which outweigh your interests, rights and freedoms, in order to proceed with the processing of your personal data.
 

The right to object to direct marketing
 

At all times, we will offer you the opportunity to unsubscribe out of any service or update to which you have subscribed, if you change your mind. Any email we send you will contain an easy automated unsubscribe link so that you can opt-out of that particular mailshot. Simply follow the indications in the email. Alternatively, you can contact a Bolon customer care representative by email: info@bolon.com.
 

If you have exercised your right to object to our processing of your personal data for direct marketing as described above, we will no longer process your personal data for that purpose.
 

We do not sell or otherwise pass your details to third parties for marketing purposes. Marketing communications you subscribe to will only be sent by Bolon.
 

The right to withdraw your consent
 

Where the processing is based on your consent, you are entitled to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
 

The right to data portability
 

You may request to receive the personal data concerning you that you have provided in a structured, common and machine-readable format so that you can transfer it to another controller. You also have the right to have this data transferred directly to another controller. However, the prerequisite for this right is that the processing of your data is based on consent, the implementation of pre-contractual measures or the performance of a contract.
 

The right to file a complaint
 

If you have any comments on our processing of your personal data, you are welcome to contact us. You also have the right to lodge a complaint to the Swedish Data Protection Authority (Sw. Integritetsskyddsmyndigheten) or any other relevant European Data Protection Agency.
 

Contact us
 

If you require further information about our Privacy Policy, please go to the “Contact Us” section of the web site and send a message to the Bolon Customer Service department, alternatively send an email to info@bolon.com
 

Changes to this Privacy Policy
 

From time to time, this Privacy Policy will be updated; changes or additions will be published here. We therefore recommend that you check this page regularly.
 

Status: October 2023