Data privacy policy

Middlecon values the protection of personal data, and we therefore place great emphasis on protecting your privacy. This Privacy Policy explains and clarifies how we, as data controller, treat our visitor’s and customer’s personal data according to (EU) 2016/679, the General Data Protection Regulation (GDPR). This policy will apply in situations where Middlecon (hereinafter “middlecon”, “we”, “us” and “our”) treats personal information collected from the site. By using our site, you agree that your personal information is processed in accordance with this Privacy Policy.

What is personal data?

Personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Where do we store your personal data?

Personal data that we collect from you is stored within the European Economic Area (EEA) but may also be transferred to and processed in a country outside EU/EEA. Middlecon uses vendors for mail, cloud services, antimalware, firewalls etc. when personal data may be transferred to and processed in a country outside EU/EEA. Any each such transfer of your personal data is carried out with accordance with applicable laws. For transfers outside EU/EEA Middlecon uses Standard Contractual Clauses as appendix to our data processing agreements according the Chapter V of the GDPR.

Recipients of personal data

We may disclose your personal information to all companies in our group (i.e. subsidiaries, our ultimate holding company and all its subsidiaries) insofar that it is reasonably necessary for the purposes stated in this privacy policy.

We do not sell, trade or otherwise transfer your personal information to third parties. Exceptions are trusted third parties that help us to run the site, conduct our business, deliver the goods you order or provide service, if these parties agree to keep the information confidential and not use it for other purposes that not agreed upon.

Why do we collect your personal data?

We collect your personal data only when have legal basis for it. For every specific process of personal data, we collect from you, we inform you whether the provision of personal data is statutory or required to enter a contract and whether it is an obligation to provide the personal data and possible consequences if you choose not to.

Retention policy

We will only store your personal data for as long as it´s necessary to perform our contractual obligations and if required by statutory storage time. When we store your personal data for purposes other than our contractual commitments, such as consent when you sign up to our events or receive newsletter via email, we save the data only if necessary and / or statutory for the purpose.

When there is no longer a purpose or legal obligation of storing the personal data, it is deleted or anonymized.

Personal data that is only collected for a specific purpose is kept to a minimum to be able to perform the purpose, also known as data minimization.

Your personal rights

If you have questions about the privacy policy, how we process personal data or want to exercise any of your rights, such as requesting registry extracts or corrections, this can be made free of charge once a year, you are welcome to contact us at the contact details below. To submit any request, please contact us at info@middlecon.se for more information.

You have the right to submit eventual complains about processing of your personal data to the national supervisory authority.

Transfer to third Country

Information we collect about you can be processed, stored and transferred between all Middlecon subsidiaries in the countries we operate in. All Middlecon subsidiaries have signed an internal Data Processing Agreement having unified data protection across all subsidiaries. However, Middlecon will not transfer the personal data you provide us to countries outside the European Economic Area (EEA) without explicitly informing you about that transfer.

Links to third parties

We may, at our discretion, publish or offer third-party products on our website at our discretion. These third-party websites have their own, independent privacy rules. We therefore take no responsibility for the content and activities of these linked sites. However, as we want to protect the privacy of our site, we welcome comments on these websites.

Last update to Data privacy policy

Middlecon reserves the right to update or change this Policy at any time and you should visit this site regularly to obtain the latest version.

2020-01-16

How to contact us

If you have any questions regarding this privacy policy or our processing of personal data, or want to contact us regarding your personal data, please contact info@middlecon.se