Last updated 2021-03-02.
Who handles your personal data? Who is the Data Controller?
Hexatronic Group AB (556168-6360), along with each individual subsidiary included in the Group which processes your personal data, is the Data Controller.
Hexatronic Group AB (publ) is a group that develops, commercialize and delivers products, components, moreover specializes in system solutions with the main focus on the fiberoptic market. Hexatronic features a wide range of innovative system and product solutions for infastructure within mainly passive fiber optics with global trademarks like Matrix, Viper, Stingray, Raptor, InOne, Drytech™, Lightmate®, and Wistom®. The Group has its headquarters in Gothenburg, Sweden and has sales offices and/or subsidiaries in Sweden, Norway, Denmark, Finland, United Kingdom, Italy, Estonia, Latvia, Lithuania, Germany, China, New Zealand, Australia, US and Canada. The Group is listed on Nasdaq Stockholm under the ticker HTRO. For more information, visit www.group.hexatronic.com.
How we collect personal information
Types of personal information that is collected
IP-addresses, geo-location (roughly estimated), email address, name, phone number, submitted texts from message boxes, eventual files (attachments) containing personal information, pictures or video clips.
Does Hexatronic share my data with third parties or other recipients?
Hexatronic does not share your personal data with third parties or other recipients without a valid reason or if we by law are required to do so.
If you are a customer or supplier to Hexatronic we may share your data (contact details) with third parties to fulfil the terms of the contract. Here we use the legal basis: performance of contracts or in some cases legitimate interest.
Marketing materials containing your personal data such as pictures or video clips may be shared with third parties on Hexatronic websites, advertisement space, intranets or social media platforms. Here we use the legal basis: legitimate interest as a rule of thumb.
When we apply the legal basis: legitimate interest we weigh the intrusion into personal integrity against the benefit to Hexatronic. This is a wholly objective assessment which is carried out on a case-by-case basis.
For what purpose is the information used?
Personal data that you share with Hexatronic is used to carry out our business operation at Hexatronic and to develop or sell our products and communicate relevant information to you.
Personal data you provide along with a job application is only used to determine if an available or future job fits your profile and to communicate that information back to you.
Otherwise, Hexatronic only uses your information to contact you in the context that you request and in your interest in our products or our business (legal basis: legitimate interest and / or your consent).
How long we store your personal information
We only process your information regarding newsletters until you unsubscribe from future mailings.
Hexatronic will only save your information and attached files that you send to us regarding job applications for 2 years due to the Discrimination Act, thereafter all related information attached to your name is automatically removed. Automatic deletion does not apply if your job entry should lead to employment.
If you are a customer or supplier, we will store your information for as long as necessary to fulfil our agreement to you (legal basis: performance of contracts). Upon termination of the agreement, your data will be stored for 1 year before deleting if you are not still showing interest in our products.
Otherwise, Hexatronic only processes your data if we have a valid reason and legal basis, your documented consent, or where the law requires that we do so.
How we secure your personal information
When you visit any of our websites, your traffic is protected by a so-called SSL certificate (industrial standard). This protects your information by encryption when you click the button send, register for any of our newsletters or use the website in general. We have also ensured that our service providers and data controllers process your information safely through agreements and technical measures.
All registries that are stored with your personal information are protected with login and permissions and are only available to people sharing your and Hexatronics mutual interest in the treatment, for example. HR department in connection with a job application.
In the case of data controllers, there is always an underlying agreement that ensures access and that no unauthorized disclosure of your personal data is made.
We also have internal policies and routines for example:
- Incident management
- Risk analysis
- Information security
Service providers and assistants that get access to your personal information
|Service providers||Shared personal information|
|MailChimp||Name, email address|
|Microsoft Office 365 (European datacentres||Name, company name, email address, phone number and submitted messages from contact forms|
|Nasdaq Corporate Solutions (for press releases and newsletters)||Email address|
|Hubspot||3rd part cookies, IP address, name, company name, email address, phone number and submitted messages from contact forms|
|Google Analytics||Analysis data via third-party cookie for marketing and web analysis (IP-addresses and roughly estimated geo-location)|
|Mouseflow||Analysis data via third-party cookie for marketing and web analysis (IP-addresses)|
|Data controllers||Shared personal information|
|Hubspot||See section ”Types of personal information that is collected"|
How do I unsubscribe from the newsletter?
You can unsubscribe from the newsletter at any time, unsubscribe your newsletter by clicking on the link "email preferences" at the bottom of the message. When you opt-out you will also be deleted from our registry for newsletter entirely.
Your rights and how you can invoke them
As a citizen in an EU/EEA country, you have various rights under the GDPR.
Hexatronic is careful to ensure that your data is used in an appropriate manner.
You, therefore, have the right to request the following from Hexatronic:
- the right of access
- the right to amend personal data
- the right to the erasure of personal data (formerly known as the right to be forgotten)
- the right to limitation of data processing
- the right to data portability (machine-readable where possible)
- the right to decline consent to the processing of personal data
To invoke your rights, you can send your request to the Hexatronic Privacy Coordinator at email@example.com. Please feel free to contact Hexatronic at the above e-mail address if you have any questions. You can also file a complaint with the Swedish Data Protection Authority or another supervisory authority within the EU.