Privacy policy
This policy explains how and why we collect and use your personal data, including processing carried out through camera surveillance at the STOP128 site. It also describes your rights in relation to us and how to exercise them. If you have any questions about this policy or our data protection practices, you can contact us by email.
To provide you with our services and products, we need to process your personal data as set out in this policy. We always ensure that the information we collect about you—and the processing we carry out—is handled responsibly and securely, with your privacy in mind.
Before using our services or systems, please read this policy and contact us if anything is unclear. By continuing to use our services, you acknowledge that you understand this policy and agree that we may contact you electronically.
This policy applies to all services we provide, including camera surveillance. We may also provide additional privacy notices for specific services.
What personal data do we collect?
Information you provide to us. When you create an account or use our services, you may directly or indirectly provide personal data to us and/or our processors, such as:
-
Identity information — name, personal identity number, date of birth, nationality and other identifiers
-
Contact information — delivery and billing address, email address, phone number
-
Payment information — bank account numbers, card details (card number, issuing bank, expiry date, CVV), invoicing details
Information vi collect about you when you use our services. När du använder några av de tjänster som vi tillhandahåller kan följande information samlas in:
- Personal and contact information — name, date of birth, personal identity number, billing and delivery address, email, mobile number
- Information about past purchases — details of transactions and purchases
- Historical information — your purchase, payment and credit history
- Financial information — credit reports including income, credits/loans, negative payment history
- Usage information — how you interact with our services, response times, errors, how you arrived and left, delivery notices when we contact you
- Device information — e.g., IMEI and other unique identifiers, MAC address, IP address, language, browser settings, screen resolution, time zone, OS, platform
- Geographical information — your location
- Social network information — where you have connected such services
- Camera surveillance — image and video footage from cameras at the STOP128 site, which may include identifiable persons or license plates.
The data you provide and the data we collect is necessary to enter into or perform our contract with you, or necessary for the purposes described below.
Why and how do we use your information?
All data is used to deliver, operate and improve the services we provide. Where “automated decision-making” is mentioned below, it refers to computer-made decisions that have, or may have, legal or similar significant effects on you (for example, approval or rejection of an account application). We process your data on the following legal bases:
|
Purpose of processing |
Legal basis |
| To confirm your identity and verify/update your personal and contact details |
Performance of contract |
|
to administer your purchases and payments and manage the customer relationship (including fulfilling our obligations and providing information, products and services you request) |
Performance of contract |
|
To determine which payment methods we can offer you (e.g., internal/external credit assessments) |
Performance of contract and compliance with law |
|
For analysis such as troubleshooting, testing, data and customer analytics, development and administration of STOP128’s services, and for statistical purposes |
Performance of contract and legitimate interests |
|
To ensure our services are presented appropriately and effectively for you and your device |
Performance of contract |
|
To provide our services securely and prevent misuse |
Performance of contract and compliance with law |
| To maintain safety and order at the site through camera surveillance; to prevent and investigate crime, vandalism or other incidents; to protect drivers, vehicles and facilities; and to ensure that access and parking rules are followed and that the area remains clean and safe | Compliance with law and legitimate interests |
|
To carry out risk analysis to prevent fraud and manage risk |
Compliance with law and legitimate interests |
|
To improve our services and for general business development (e.g., improving credit-risk models, developing new products/features and business opportunities) |
Legitimate interests |
|
To communicate with you about services used or other services and products we believe may interest you |
Legitimate interests |
|
To comply with applicable laws (e.g., anti-money-laundering, bookkeeping and capital adequacy requirements) |
Compliance with law |
Automated decision-making and profiling
Automated decision-making may be used in our processes to assess credit risk. These decisions may be based on a combination of your transaction history and information from external credit reference agencies. You always have the right to contact us to have your case reviewed manually.
We use profiling based on your personal data and transaction history to analyze which types of services we should offer and to tailor our marketing messages. You may opt out at any time by emailing us. No automated processing is used for camera surveillance. Footage is reviewed only manually and when needed (e.g., suspected crime, vandalism, security or access/parking incidents), and always in accordance with applicable data-protection and camera-surveillance laws.
Communicating with you
We may use your data to communicate relevant information about services used, promotions, competitions, customer surveys or other services we believe may interest you, via electronic channels or phone. You will always be offered the option to decline further marketing, or you can email us at any time to opt out.
Who might we share your information with?
We may transfer or share your information with selected third parties as described below. We take appropriate legal, technical and organizational measures to ensure your data is handled securely and with adequate protection when transferred to or shared with such parties. We will not sell your personal data to third parties without your permission.
-
Suppliers and subprocessors. To perform our contractual obligations and for other purposes stated in this policy.
-
Credit reference agencies and similar providers. When you apply for a payment method, to assess creditworthiness and confirm identity/address.
-
Debt collection agencies. In connection with assignment of claims.
-
Authorities. Where required by law or with your consent (e.g., AML/CTF obligations).
-
Camera surveillance. Footage may be shared with competent authorities (e.g., the police) and, where applicable, insurers in the event of suspected crime, damage, accidents or other security incidents. Footage is never disclosed to unauthorized parties and is handled in accordance with the law and this policy.
-
Others. Logistics and transport companies in connection with deliveries to you.
-
Business transfers. In the event we sell or buy a business or assets, or if a substantial part of our assets is acquired by a third party, customer data may be shared as part of such transaction.
Where do we process your personal data?
Processing takes place within the EU/EEA. While we take reasonable steps to protect your information, no system, network or website is completely secure. All handling of camera footage takes place within the EU/EEA, stored on secure servers with access controls and reviewed only by authorized personnel when needed (e.g., suspected crime or security incidents).
How long do we keep your personal data?
We keep your data only as long as necessary to perform our contractual obligations and as required by statutory retention periods. Where data is stored for other purposes (e.g., AML, bookkeeping, capital requirements), it is retained only as long as necessary and/or required by law. Camera footage is normally retained for no more than 30 days, unless needed to investigate crime, accidents or other security-related events, in which case it is kept only as long as necessary and then securely deleted.
Your rights
-
Right of access. You may request a copy of your data free of charge and verify the information we hold.
-
Right to rectification. You can have inaccurate or incomplete data corrected.
-
Right to object (legitimate interests). You may object to processing based on legitimate interests; we will balance your interests against ours and may continue where we have compelling grounds.
-
Right to complain. If you believe we process your data incorrectly, contact us (see below). You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
-
Right to data portability. You may obtain a copy of your data in a structured format.
-
Right to erasure. You may request deletion where the data is no longer necessary for the purpose collected. Legal obligations (e.g., bookkeeping, tax, AML, consumer laws) may prevent immediate deletion; in such cases we will block the data from other uses. Requests for access to or deletion of camera footage in which you can be identified are assessed on a case-by-case basis in accordance with applicable data-protection and camera-surveillance legislation.
How we use cookies and similar technologies
Cookies, web beacons and similar tracking help us provide the best possible service. To learn more, see our cookie information. Cookies are not used to link to camera surveillance; recorded footage is handled separately under this policy.
Contact details
Stop128 AB is a Swedish limited company registered with the Swedish Companies Registration Office. Corporate ID: 556773-5443.
If you have questions about this policy or our processing of your personal data or camera footage, contact:
Stop128 AB
Noachsgatan 1B
633 41 Eskilstuna
info@stop128.se
Stop128 AB is the data controller for the processing described above. We comply with Swedish data protection law.
Effective date
This policy is effective 25 May 2018. Stop128 reserves the right to amend this policy at any time by publishing the revised version on this website.
____________________________________________________
Dygnet runt