Version 1.0
Last updated November 2025

Information about Froda’s processing of contact person, user, and external person personal data

 

‍

1.     Introduction

 

Froda offers business to apply for loans and financing through Froda’s digital platform making the loan process fast and efficient.

 

This information describes Froda’sprocessing of personal data relating to contact persons of suppliers andbusiness partners, users of our website and digital channels and externalpersons that we interact with, including for which purposes we process personaldata, which legal basis that we rely on for the processing, with whichrecipients that we, where necessary, share personal data and your rights inrelation to the processing of your personal data.

 

If you have any questions inrelation to our processing of your personal data as a customer, please feelfree to contact us using the contact details outlined in Section 18 below.

 

The contents of this information

This information about our processing of contactperson, user and external person personal data is divided in the differentsections to make it easier for you to find the information that you are lookingfor. You can click on the headings in the list below to directly access thesection that you have clicked on:

‍

You can use the following list of sections as a guide:

‍2. Processing of personal data


Personal data means any information that, directly or indirectly, relates to an identified or identifiable individual. Examples of personal data include your name, email address, or the IP address that your device uses.

‍

Processing means any action taken in relation to personal data, for example collection, storage and transmission for one or more specific purposes.

3. Who is covered by this information


This information covers you:

  • who is a representative of a supplier or business partner to us,
  • who is a user and visits and uses our website and digital channels, and
  • other external persons that we interact with in the course of the business.

4. Controllership for the processing of customer personal data


Froda AB, company registration number 556999-3388 (“Froda”, “we”, “us”) is the controller for the collection and processing of your personal data as described in this information, unless otherwise is stated. Contact details to us can be found in Section 18 below.

5. Sources from which we collect personal data


We collect personal data about you from various sources as outlined below.


Yourself

We collect your personal data directly from you when you provide your personal data to us, for example when you interact with us.


The company or organisation that you work for

We collect your personal data from the company or organisation that you represent or that you work for, which share your personal data with us.


Business partners

We collect your personal data from business partners that share your personal data with us, for example in connection with communication, events or meetings.


Social media platforms

We collect your personal data from social media platforms, for example if you follow or interact with us on such platforms, such as on our page on LinkedIn.


Publicly available information

We collect your personal data from publicly available sources, for example websites or from public records and databases through information service companies, when necessary for any of the purposes described in this information, such as to procure and manage relationships with suppliers and business partners.


External persons

We also collect your personal data from external persons that share your personal data with us and with whom we communicate or otherwise interact with for the purposes described in this information.


Public authorities

We collect personal data that public authorities share with us, for example in connection with legal requests or in case of a dispute.

6. Our processing of customer personal data

‍

Below we describe for which purposes we process personal data about you as a representative or contact person of a supplier or business partner, user of our website and digital channels, and other external persons that we interact with in the course of the business.


Below we also describe which categories of personal data that are being processed for each purpose, which legal basis that we rely on for the processing, and for how long the personal data is stored for each purpose.


External recipients in the tables below means such recipient with which we, where necessary for the specific purpose, share your personal data and which process the personal data received as a separate controller. As such, external recipient does not include service providers which we have engaged and that process personal data on our behalf as processors.

7. Business customers

‍

You are a contact person of a supplier or business partner if you represent a business or organisation that provide, or intend to provide, products and services to us or which we otherwise collaborate with. The information below also covers, in relevant parts, representatives of businesses or organisations that have expressed an interest for our products and services or a collaboration, or which we believe may be interested in our products and services or a collaboration or partnership.


Procure and manage relationships with suppliers and business partners

We process your personal data to procure and manage the relationship with the business or organisation that you represent, for example to register you as a contact person for the business or organisation, to send out and respond to procurement documents, to negotiate and enter into agreements, manage invoices and communicate with you and other representatives of the business or organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Image and audio material
  • Communication

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of entering into agreements and collaborations with suppliers and business partners (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored during the procurement process and during the relationship and for ten (10) years thereafter to manage, defend and exercise legal claims.


External recipients:

  • The company or organisation you work for
  • External persons that we interact with for the same purpose
  • External advisors


Follow up and evaluate relationships with suppliers and business partners

We process your personal data to follow up and evaluate the relationship with the company or the organisation that you represent or work for and which is a supplier or business partner to us, for example to compile statistics, analyse the performance of the relationship and how it develops, communicate with you or the organisation for which you work for the same purpose.

Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Audio and image information
  • Communication


Legal basis:

When your personal data is further processed for this purpose, the processing of personal data relies on the same legal basis as the purpose for which the personal data was collected, please see Procure and manage relationships with suppliers and business partners above.


Storage period:

Personal data is stored when further processed for this purpose for a period of up to twelve (12) months to carry out and enable analyses.

Personal data in communication for this purpose is stored for the period outlined in Communicate in the course of the business below.


External recipients:

  • The company or the organisation that you work for
  • External persons that we interact with for the same purpose


Provide offers and marketing for the use of our products and services

We process your personal data to provide offers and marketing for the use of our products and services, collaborations and partnership with the company or organisation that you represent or work for if the company or organisation has expressed an interest or if we otherwise believe that the company or organisation that you represent or work for may be interested in the use of our products and services, a collaboration or a partnership.


We can provide offers and marketing via email or through communication in other digital channels, such as by interacting with you on social media platforms.


You can always unsubscribe from our marketing communications by clicking on the unsubscribe link in the email or by contacting us.

‍‍

Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Activity information
  • Order information

‍

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of promoting our products and services, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Where your consent to send digital marketing communications is needed, we only send you digital marketing communications if you have provided your consent. In such a case, we also rely on the consent as a legal basis for the processing of personal data for this purpose (Article 6(1)(a) of the GDPR).


Storage period:

Personal data is stored for this purpose for as long as there is an active relationship with the company or organization you represent or work for, and for a period of twelve (12) months thereafter.


If we have no relationship with the company or organization that you work for, personal data for this purpose is stored during the time that we interact with you, and otherwise for a period of twelve (12) months from the time of collection.


The above applies unless you have previously objected to our processing of your personal data for marketing purposes.


External recipients:

  • The company or organisation that you work for

7. Business customers

‍

You are a contact person of a supplier or business partner if you represent a business or organisation that provide, or intend to provide, products and services to us or which we otherwise collaborate with. The information below also covers, in relevant parts, representatives of businesses or organisations that have expressed an interest for our products and services or a collaboration, or which we believe may be interested in our products and services or a collaboration or partnership.


Procure and manage relationships with suppliers and business partners

We process your personal data to procure and manage the relationship with the business or organisation that you represent, for example to register you as a contact person for the business or organisation, to send out and respond to procurement documents, to negotiate and enter into agreements, manage invoices and communicate with you and other representatives of the business or organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Image and audio material
  • Communication

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of entering into agreements and collaborations with suppliers and business partners (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored during the procurement process and during the relationship and for ten (10) years thereafter to manage, defend and exercise legal claims.


External recipients:

  • The company or organisation you work for
  • External persons that we interact with for the same purpose
  • External advisors


Follow up and evaluate relationships with suppliers and business partners

We process your personal data to follow up and evaluate the relationship with the company or the organisation that you represent or work for and which is a supplier or business partner to us, for example to compile statistics, analyse the performance of the relationship and how it develops, communicate with you or the organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Audio and image information
  • Communication

Legal basis:

When your personal data is further processed for this purpose, the processing of personal data relies on the same legal basis as the purpose for which the personal data was collected, please see Procure and manage relationships with suppliers and business partners above.


Storage period:

Personal data is stored when further processed for this purpose for a period of up to twelve (12) months to carry out and enable analyses.

Personal data in communication for this purpose is stored for the period outlined in Communicate in the course of the business below.


External recipients:

  • The company or the organisation that you work for
  • External persons that we interact with for the same purpose


Provide offers and marketing for the use of our products and services

We process your personal data to provide offers and marketing for the use of our products and services, collaborations and partnership with the company or organisation that you represent or work for if the company or organisation has expressed an interest or if we otherwise believe that the company or organisation that you represent or work for may be interested in the use of our products and services, a collaboration or a partnership.


We can provide offers and marketing via email or through communication in other digital channels, such as by interacting with you on social media platforms.


You can always unsubscribe from our marketing communications by clicking on the unsubscribe link in the email or by contacting us.

‍
‍

Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Activity information
  • Order information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of promoting our products and services, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Where your consent to send digital marketing communications is needed, we only send you digital marketing communications if you have provided your consent. In such a case, we also rely on the consent as a legal basis for the processing of personal data for this purpose (Article 6(1)(a) of the GDPR).


Storage period:

Personal data is stored for this purpose for as long as there is an active relationship with the company or organization you represent or work for, and for a period of twelve (12) months thereafter.


If we have no relationship with the company or organization that you work for, personal data for this purpose is stored during the time that we interact with you, and otherwise for a period of twelve (12) months from the time of collection.


The above applies unless you have previously objected to our processing of your personal data for marketing purposes.


External recipients:

  • The company or organisation that you work for

7. Business customers

‍

You are a contact person of a supplier or business partner if you represent a business or organisation that provide, or intend to provide, products and services to us or which we otherwise collaborate with. The information below also covers, in relevant parts, representatives of businesses or organisations that have expressed an interest for our products and services or a collaboration, or which we believe may be interested in our products and services or a collaboration or partnership.


Procure and manage relationships with suppliers and business partners

We process your personal data to procure and manage the relationship with the business or organisation that you represent, for example to register you as a contact person for the business or organisation, to send out and respond to procurement documents, to negotiate and enter into agreements, manage invoices and communicate with you and other representatives of the business or organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Image and audio material
  • Communication

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of entering into agreements and collaborations with suppliers and business partners (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored during the procurement process and during the relationship and for ten (10) years thereafter to manage, defend and exercise legal claims.


External recipients:

  • The company or organisation you work for
  • External persons that we interact with for the same purpose
  • External advisors


Follow up and evaluate relationships with suppliers and business partners

We process your personal data to follow up and evaluate the relationship with the company or the organisation that you represent or work for and which is a supplier or business partner to us, for example to compile statistics, analyse the performance of the relationship and how it develops, communicate with you or the organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Audio and image information
  • Communication

Legal basis:

When your personal data is further processed for this purpose, the processing of personal data relies on the same legal basis as the purpose for which the personal data was collected, please see Procure and manage relationships with suppliers and business partners above.


Storage period:

Personal data is stored when further processed for this purpose for a period of up to twelve (12) months to carry out and enable analyses.

Personal data in communication for this purpose is stored for the period outlined in Communicate in the course of the business below.


External recipients:

  • The company or the organisation that you work for
  • External persons that we interact with for the same purpose


Provide offers and marketing for the use of our products and services

We process your personal data to provide offers and marketing for the use of our products and services, collaborations and partnership with the company or organisation that you represent or work for if the company or organisation has expressed an interest or if we otherwise believe that the company or organisation that you represent or work for may be interested in the use of our products and services, a collaboration or a partnership.


We can provide offers and marketing via email or through communication in other digital channels, such as by interacting with you on social media platforms.


You can always unsubscribe from our marketing communications by clicking on the unsubscribe link in the email or by contacting us.

‍
‍

Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Activity information
  • Order information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of promoting our products and services, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Where your consent to send digital marketing communications is needed, we only send you digital marketing communications if you have provided your consent. In such a case, we also rely on the consent as a legal basis for the processing of personal data for this purpose (Article 6(1)(a) of the GDPR).


Storage period:

Personal data is stored for this purpose for as long as there is an active relationship with the company or organization you represent or work for, and for a period of twelve (12) months thereafter.


If we have no relationship with the company or organization that you work for, personal data for this purpose is stored during the time that we interact with you, and otherwise for a period of twelve (12) months from the time of collection.


The above applies unless you have previously objected to our processing of your personal data for marketing purposes.


External recipients:

  • The company or organisation that you work for

7. Business customers

‍

You are a contact person of a supplier or business partner if you represent a business or organisation that provide, or intend to provide, products and services to us or which we otherwise collaborate with. The information below also covers, in relevant parts, representatives of businesses or organisations that have expressed an interest for our products and services or a collaboration, or which we believe may be interested in our products and services or a collaboration or partnership.


Procure and manage relationships with suppliers and business partners

We process your personal data to procure and manage the relationship with the business or organisation that you represent, for example to register you as a contact person for the business or organisation, to send out and respond to procurement documents, to negotiate and enter into agreements, manage invoices and communicate with you and other representatives of the business or organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Image and audio material
  • Communication

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of entering into agreements and collaborations with suppliers and business partners (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored during the procurement process and during the relationship and for ten (10) years thereafter to manage, defend and exercise legal claims.


External recipients:

  • The company or organisation you work for
  • External persons that we interact with for the same purpose
  • External advisors


Follow up and evaluate relationships with suppliers and business partners

We process your personal data to follow up and evaluate the relationship with the company or the organisation that you represent or work for and which is a supplier or business partner to us, for example to compile statistics, analyse the performance of the relationship and how it develops, communicate with you or the organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Audio and image information
  • Communication

Legal basis:

When your personal data is further processed for this purpose, the processing of personal data relies on the same legal basis as the purpose for which the personal data was collected, please see Procure and manage relationships with suppliers and business partners above.


Storage period:

Personal data is stored when further processed for this purpose for a period of up to twelve (12) months to carry out and enable analyses.

Personal data in communication for this purpose is stored for the period outlined in Communicate in the course of the business below.


External recipients:

  • The company or the organisation that you work for
  • External persons that we interact with for the same purpose


Provide offers and marketing for the use of our products and services

We process your personal data to provide offers and marketing for the use of our products and services, collaborations and partnership with the company or organisation that you represent or work for if the company or organisation has expressed an interest or if we otherwise believe that the company or organisation that you represent or work for may be interested in the use of our products and services, a collaboration or a partnership.


We can provide offers and marketing via email or through communication in other digital channels, such as by interacting with you on social media platforms.


You can always unsubscribe from our marketing communications by clicking on the unsubscribe link in the email or by contacting us.

‍‍

Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Activity information
  • Order information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of promoting our products and services, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Where your consent to send digital marketing communications is needed, we only send you digital marketing communications if you have provided your consent. In such a case, we also rely on the consent as a legal basis for the processing of personal data for this purpose (Article 6(1)(a) of the GDPR).


Storage period:

Personal data is stored for this purpose for as long as there is an active relationship with the company or organization you represent or work for, and for a period of twelve (12) months thereafter.


If we have no relationship with the company or organization that you work for, personal data for this purpose is stored during the time that we interact with you, and otherwise for a period of twelve (12) months from the time of collection.


The above applies unless you have previously objected to our processing of your personal data for marketing purposes.


External recipients:

  • The company or organisation that you work for

7. Business customers

‍

You are a contact person of a supplier or business partner if you represent a business or organisation that provide, or intend to provide, products and services to us or which we otherwise collaborate with. The information below also covers, in relevant parts, representatives of businesses or organisations that have expressed an interest for our products and services or a collaboration, or which we believe may be interested in our products and services or a collaboration or partnership.


Procure and manage relationships with suppliers and business partners

We process your personal data to procure and manage the relationship with the business or organisation that you represent, for example to register you as a contact person for the business or organisation, to send out and respond to procurement documents, to negotiate and enter into agreements, manage invoices and communicate with you and other representatives of the business or organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Image and audio material
  • Communication

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of entering into agreements and collaborations with suppliers and business partners (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored during the procurement process and during the relationship and for ten (10) years thereafter to manage, defend and exercise legal claims.


External recipients:

  • The company or organisation you work for
  • External persons that we interact with for the same purpose
  • External advisors


Follow up and evaluate relationships with suppliers and business partners

We process your personal data to follow up and evaluate the relationship with the company or the organisation that you represent or work for and which is a supplier or business partner to us, for example to compile statistics, analyse the performance of the relationship and how it develops, communicate with you or the organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Audio and image information
  • Communication

Legal basis:

When your personal data is further processed for this purpose, the processing of personal data relies on the same legal basis as the purpose for which the personal data was collected, please see Procure and manage relationships with suppliers and business partners above.


Storage period:

Personal data is stored when further processed for this purpose for a period of up to twelve (12) months to carry out and enable analyses.

Personal data in communication for this purpose is stored for the period outlined in Communicate in the course of the business below.


External recipients:

  • The company or the organisation that you work for
  • External persons that we interact with for the same purpose


Provide offers and marketing for the use of our products and services

We process your personal data to provide offers and marketing for the use of our products and services, collaborations and partnership with the company or organisation that you represent or work for if the company or organisation has expressed an interest or if we otherwise believe that the company or organisation that you represent or work for may be interested in the use of our products and services, a collaboration or a partnership.


We can provide offers and marketing via email or through communication in other digital channels, such as by interacting with you on social media platforms.


You can always unsubscribe from our marketing communications by clicking on the unsubscribe link in the email or by contacting us.

‍‍

Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Activity information
  • Order information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of promoting our products and services, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Where your consent to send digital marketing communications is needed, we only send you digital marketing communications if you have provided your consent. In such a case, we also rely on the consent as a legal basis for the processing of personal data for this purpose (Article 6(1)(a) of the GDPR).


Storage period:

Personal data is stored for this purpose for as long as there is an active relationship with the company or organization you represent or work for, and for a period of twelve (12) months thereafter.


If we have no relationship with the company or organization that you work for, personal data for this purpose is stored during the time that we interact with you, and otherwise for a period of twelve (12) months from the time of collection.


The above applies unless you have previously objected to our processing of your personal data for marketing purposes.


External recipients:

  • The company or organisation that you work for

7. Business customers

‍

You are a contact person of a supplier or business partner if you represent a business or organisation that provide, or intend to provide, products and services to us or which we otherwise collaborate with. The information below also covers, in relevant parts, representatives of businesses or organisations that have expressed an interest for our products and services or a collaboration, or which we believe may be interested in our products and services or a collaboration or partnership.


Procure and manage relationships with suppliers and business partners

We process your personal data to procure and manage the relationship with the business or organisation that you represent, for example to register you as a contact person for the business or organisation, to send out and respond to procurement documents, to negotiate and enter into agreements, manage invoices and communicate with you and other representatives of the business or organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Image and audio material
  • Communication

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of entering into agreements and collaborations with suppliers and business partners (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored during the procurement process and during the relationship and for ten (10) years thereafter to manage, defend and exercise legal claims.


External recipients:

  • The company or organisation you work for
  • External persons that we interact with for the same purpose
  • External advisors


Follow up and evaluate relationships with suppliers and business partners

We process your personal data to follow up and evaluate the relationship with the company or the organisation that you represent or work for and which is a supplier or business partner to us, for example to compile statistics, analyse the performance of the relationship and how it develops, communicate with you or the organisation for which you work for the same purpose.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Competence information
  • Activity information
  • Order information
  • Audio and image information
  • Communication

Legal basis:

When your personal data is further processed for this purpose, the processing of personal data relies on the same legal basis as the purpose for which the personal data was collected, please see Procure and manage relationships with suppliers and business partners above.


Storage period:

Personal data is stored when further processed for this purpose for a period of up to twelve (12) months to carry out and enable analyses.

Personal data in communication for this purpose is stored for the period outlined in Communicate in the course of the business below.


External recipients:

  • The company or the organisation that you work for
  • External persons that we interact with for the same purpose


Provide offers and marketing for the use of our products and services

We process your personal data to provide offers and marketing for the use of our products and services, collaborations and partnership with the company or organisation that you represent or work for if the company or organisation has expressed an interest or if we otherwise believe that the company or organisation that you represent or work for may be interested in the use of our products and services, a collaboration or a partnership.


We can provide offers and marketing via email or through communication in other digital channels, such as by interacting with you on social media platforms.


You can always unsubscribe from our marketing communications by clicking on the unsubscribe link in the email or by contacting us.

‍‍

Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Activity information
  • Order information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of promoting our products and services, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Where your consent to send digital marketing communications is needed, we only send you digital marketing communications if you have provided your consent. In such a case, we also rely on the consent as a legal basis for the processing of personal data for this purpose (Article 6(1)(a) of the GDPR).


Storage period:

Personal data is stored for this purpose for as long as there is an active relationship with the company or organization you represent or work for, and for a period of twelve (12) months thereafter.


If we have no relationship with the company or organization that you work for, personal data for this purpose is stored during the time that we interact with you, and otherwise for a period of twelve (12) months from the time of collection.


The above applies unless you have previously objected to our processing of your personal data for marketing purposes.


External recipients:

  • The company or organisation that you work for

‍8. Users of our website and digital channels

‍

You are a user if you visit and use our website and digital channels, for example our pages on social media.


Follow up and evaluate the use of our website and digital channels

We process your personal data to follow up and evaluate the use of our website and digital channels, for example to collect and compile click and visitor statistics and to visualize anonymised user interactions on our website.


This helps us better understand how the website and our digital channels are used, which helps us to develop and improve for example the website to provide you with an even better user experience.


For this purpose, we use cookies and similar technologies, please see our Cookie Policy for more information.


Categories of personal data:

  • Identification information
  • Technical information
  • Activity information

Legal basis:

The processing is carried out with the consent that you provided by accepting our use of cookies on the website for analytics purposes (Article 6(1)(a) of the GDPR).


Storage period:

For information on how long cookies and similar technologies, including personal data, are stored for this purpose, please see our Cookie Policy.


External recipients:

No external recipients.


Provide digital advertisements in digital channels

We process your personal data to provide you with digital advertisements in digital channels, for example on social media platforms or on websites that use online advertisement platforms to display digital advertisements. This means that if you have visited our website, digital advertisements regarding our business, products and services can be displayed in your feeds on social media platforms or on websites that you visit.


For this purpose, we use cookies and similar technologies, please see our Cookie Policy for more information. With your consent we use the Meta pixel for this purpose. For the collection and sharing of personal data with Meta, we are joint controllers with Meta Platforms Ireland Limited. For more information on Meta’s processing of your personal data, please see Meta’s Privacy Policy. Moreover, Meta’s controller addendum applies for the processing of personal data that we together with Meta are jointly responsible for.


Categories of personal data:

  • Identification information
  • Technical information
  • Activity information

Legal basis:

The processing is carried out with the consent that you provided by accepting our use of cookies on the website for marketing purposes (Article 6(1)(a) of the GDPR).


Storage period:

For information on how long cookies and similar technologies, including personal data, are stored for this purpose, please see our Cookie Policy.


External recipients:

  • Social media platforms (such as Facebook and LinkedIn)
  • Video platforms (such as Vimeo)
  • Online advertisement platforms (such as Microsoft Advertising and Google Ads)


Enable functionality on our website

We process your personal data to enable functionality on our website, for example to remember settings you have made on the website, such as language preferences.


For this purpose, we use cookies and similar technologies, please see our Cookie Policy for more information.


Categories of personal data:

  • Identification information
  • Technical information
  • Activity information

Legal basis:

The processing is carried out with the consent that you provided by accepting our use of cookies on the website for analytics purposes (Article 6(1)(a) of the GDPR).


To the extent that the processing of your personal data is necessary to enable strictly necessary functionality, such as providing the content of the website in an efficient and secure way, the processing of your personal data for this purpose is necessary to satisfy this legitimate interest, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

For information on how long cookies and similar technologies, including personal data, are stored for this purpose, please see our Cookie Policy.


External recipients:

No external recipients.


Communicate and interact with you in our digital channels

We process your personal data to communicate and interact with you in our digital channels, for example if you comment on our posts, write on our pages, or otherwise mention us on social media.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Activity information
  • Communication
  • Image and audio material

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest in communicating and interacting with you in our digital channels, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose until further notice or until deleted on the relevant social media platform.


External recipients:

  • Social media platforms


Follow up and evaluate marketing campaigns in digital channels

We process your personal data to follow up and evaluate campaigns that you have interacted with in our digital channels, for example if you have clicked on a marketing message or an advertisement on an external website or in social media.

Categories of personal data:

  • Identification information
  • Technical information
  • Activity information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest in following up and evaluating marketing campaigns that we carry out. This is so that we can better understand how our marketing campaigns are performing, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose for the duration of the campaign and for a period of three (3) months thereafter in order to compile reports. Thereafter your personal data will be deleted or anonymized.


External recipients:

No external recipients.

9. All categories of individuals above and external persons‍

‍

The processing activities described below covers all categories of individuals above and other external persons.


Examples of external persons are persons that do not represent a customer, supplier or a business partner, but who we interact with in the course of the business.


Respond to questions and inquiries

We process your personal data to respond to questions and inquiries when you contact us.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Image and audio material
  • Matter information
  • Activity information

If you represent a company or organisation that is a supplier to us, we also process the following category of personal data for this purpose where relevant:

  • Order information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of responding to your questions and inquiries when you contact us, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose for a period of two (2) years from the time when the matter was closed or the last communication in the same conversation or correspondence.


If the question or inquiry relates to a relationship with a supplier or business partner, personal data is stored for the storage period described in Procure and manage relationships with suppliers and business partners above.


External recipients:

  • The company or organisation that you work for


Develop and improve our business, our offerings, products and services and our business strategies, practices and methods

We process your personal data to develop and improve our business, our offerings, products and services and our business strategies, practices and methods.


The processing of your personal data for this purpose makes it possible for us to for example develop and improve our internal procedures and processes by carrying out analysis of our business strategies, practices and methods, develop and improve the tools and services that we use to provide our products and services, make our products and services easier to use, improve our ways of interacting, and to develop new products and services.


We do not carry out profiling as a part of the processing of personal data for this purpose, since we are not interested in your specific behaviour or interests.


Moreover, if it is possible to achieve the purpose of the processing with anonymised personal data, we first make sure to anonymise your personal data.


Categories of personal data:

  • Identification information
  • Profile information
  • Matter information
  • Activity information
  • Audio and image information

Legal basis:

Since your personal data is further processed for this purpose, the processing of personal data relies on the same legal basis as the purpose for which the personal data was collected, please see for example Procure and manage relationships with suppliers and business partners or Respond to questions and inquiries above.


Storage period:

The personal data further processed for this purpose is stored during a period of twelve (12) months to carry out the analysis and to facilitate future analyses. Results on an aggregated level which do not include any personal data are stored until further notice or until deleted.


External recipients:

No external recipients.


Communicate about us, our business and our products and services

We process your personal data to communicate with you about our business and our products and services, for example to provide you with updates on our products and services offerings and to inform you about things that happen in our business in different channels, such as via email or on social media platforms.


You can always unsubscribe from our marketing communications by clicking on the unsubscribe link in the email or by contacting us.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Activity information
  • Communication

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of communicating with you about our business and products and services to create interest for our business and products and services, and to build our brand, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Where your consent to send digital marketing communications is needed, we only send you digital marketing communications if you have provided your consent. In such a case, we also rely on the consent as a legal basis for the processing of personal data for this purpose (Article 6(1)(a) of the GDPR).


Storage period:

Personal data is stored for this purpose during a maximum period of twelve (12) months from the date that we collected your personal data or, if you interact with us, during a maximum period of twelve (12) months from the date of the last interaction.


The above applies unless you have previously objected to our processing of your personal data for marketing purposes.


External recipients:

No external recipients.


Follow up and evaluate our communication

We process your personal data to better understand how you interact with our communications. This is done through tracking techniques that enable us to analyse open and click statistics for our communications.

Categories of personal data:

  • Identification information
  • Technical information
  • Activity information


Legal basis:

The processing of your personal data collected from your device relies on the consent you provide when you sign up for our communications (Article 6(1)(a) of the GDPR).


Storage period:

Personal data is stored for this purpose for a period of twelve (12) months from the time of collection.


External recipients:

No external recipients.


Carry out surveys

We process your personal data to, where relevant, carry out surveys, for example to decide which target group should receive the survey, what questions should be included in the survey, to send out surveys and to collect and analyse the results of a survey.


Your opinions about our business, and our products and services are important and necessary for us to enable us to develop and improve our business, products and services.


Where necessary to conduct the specific survey, we also process personal data that we have previously collected (for example, to manage the relationship with the company or organisation that you work for or represent) for this purpose.


You can always unsubscribe from our survey communications by clicking on the unsubscribe link in the email or by contacting us.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Image and audio material
  • Matter information

If you represent a company or organisation that is a supplier to us, we also process the following category of personal data for this purpose where relevant:

  • Order information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of carrying out surveys to collect information to enable us to develop and improve our business, products and services, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose for the duration of the survey and for a period of three (3) months thereafter in order to compile the responses in a report. Thereafter your personal data will be deleted or de-identified. Final reports which do not include your personal data are stored until further notice or until deleted.


External recipients:

No external recipients.


Carry out meetings, events, and similar activities

We process your personal data to carry out meetings, events and similar activities, both digital and physical meetings and events, for example to register your participation, carry out the activity and communicate with you about the activity.

Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Image and audio material (for example in connection with digital meetings)
  • Special categories of personal data, for example health data


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest in carrying out meetings, events and similar activities (Article 6(1)(f) of the GDPR).


Special categories of personal data:

We only process information about any food allergies on the basis of your explicit consent that you provide separately, for example in connection with registration (Article 9(2)(a) of the GDPR).


Storage period:

Personal data is stored for this purpose during the time that the meeting, event or activity is carried out.


If the activity is recorded to document the meeting for traceability, the recording is stored, as a starting point, until further notice.


If the recording is published in our digital channels to communicate about us and our business, the recording will also be stored, as a starting point, until further notice.


External recipients:

  • Business partners (that we arrange the relevant activity together with)


Follow up and evaluate activities carried out

If you have participated in an activity that we have carried out, we process your personal data to follow up and evaluate the activity, for example to compile statistics on the number of participants in the activity and to plan future activities.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Activity information

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest in following up and evaluating completed activities. This to, among other things, better understand how we can improve future activities, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose for a period of twelve (12) months from the time of the relevant activity.


External recipients:

No external recipients.


Communicate in the course of the business

We process personal data that you and others share with us in connection with internal and external communication in the course of the business, for example when our employees communicate with each other and external persons via email to perform their working duties.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Communication
  • Activity information
  • Order information
  • Image and audio material

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest in our employees communicating internally and externally in their work in order to perform their duties, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose for a period of two (2) years from the date of the last communication in the same conversation or correspondence.


If the communication is for some other purpose outlined in this information, the communication is stored for the storage period specified for the relevant purpose.


External recipients:

  • Representatives of customers, suppliers, and business partners
  • External persons that we interact with


Document and record decisions and supporting information in the course of the business for traceability

We process your personal data when it is necessary to document decisions, including supporting information for decisions, in the course of the business, for example in connection with internal and external meetings or otherwise when employees perform their working duties. This is to ensure that there is traceability for decisions made in the business.


Categories of personal data:

  • Identification information
  • Contact information
  • Profile information
  • Matter information
  • Activity information
  • Communication
  • Image and audio material
  • Order information
  • Competence information

Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest in ensuring traceability in the business with regard to the decisions made in the business, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose until further notice.


External recipients:

No external recipients.


Manage the sale and restructuring of all or parts of the business

In the event that all or part of our business is sold, or otherwise transferred or restructured, we process your personal data when it is necessary for this purpose.


Should the business be transferred to a buyer, your personal data would also be transferred or disclosed to the buyer. In such a case, the buyer would be responsible (controller) for its subsequent processing of your personal data and that the processing takes place for the same purposes as stated in this information, unless you receive other information in connection with the transfer.

Categories of personal data:

Categories of personal data concerned that are strictly necessary to manage the sale or restructuring of all or part of the business in the individual case are processed for this purpose.


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest in managing a sale or restructuring of, where applicable, all or part of the business, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose for the time necessary to manage the sale or restructuring in the individual case.


External recipients:

  • Buyer
  • Potential buyers
  • External advisors
  • Public authorities


Manage, defend and exercise legal claims

We process your personal data when it is necessary to manage, defend and exercise legal claims in an individual case, for example in connection with a dispute or a court process.

Categories of personal data:

Categories of personal data concerned that are necessary to manage and respond to the legal requirement in the individual case are processed for this purpose.


Normally, the following categories of personal data are processed:

  • Identification information
  • Contact information
  • Profile information
  • Matter information
  • Activity information
  • Communication
  • Image and audio material
  • Order information
  • Competence information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest in managing, defending and exercising legal claims in an individual case, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose for the period necessary to manage, defend or exercise the legal claim in the individual case.


External recipients:

  • Counterparties
  • External advisors
  • Public authorities
  • Courts
  • Debt collection agencies
  • Arbitration tribunals
  • Insurance companies


Fulfil legal obligations

We process your personal data when it is necessary for us to comply with our legal obligations, such as accounting requirements and obligations under the GDPR.

Categories of personal data:

Categories of personal data concerned that are necessary to fulfil the legal obligation in the individual case are processed for this purpose.


Normally, the following categories of personal data are processed:

  • Identification information
  • Contact information
  • Profile information
  • Activity information
  • Communication
  • Image and audio material
  • Order information
  • Competence information


Legal basis:

The processing of your personal data is necessary to fulfil our legal obligations (Article 6(1)(c) of the GDPR).


Storage period:

Personal data is stored for this purpose for the time necessary for us to comply with respective legal obligation to which Froda is subject.


By way of example, personal data is stored in accounting material for seven (7) years calculated from the end of the calendar year in which the relevant financial year ended in accordance with the Accounting Act (1999:1048).


External recipients:

  • Public authorities
  • Law enforcement authorities


Respond to legal requests

We process your personal data when it is necessary to respond to legal requests from public authorities, such as law enforcement authorities, tax authorities and other regulatory authorities, such as the Financial Supervisory Authority.

Categories of personal data:

The categories of personal data necessary to respond to and evaluate the request in the individual case are processed for this purpose.


Normally, the following categories of personal data are processed:

  • Identification information
  • Contact information
  • Profile information
  • Activity information
  • Communication
  • Image and audio material


Legal basis:

When there is a legal obligation for Froda under law or regulation to respond to the legal request, the processing is carried out to fulfil the legal obligation in the specific case (Article 6(1)(c) of the GDPR).


If there is no explicit legal obligation for us to respond to the legal request or if we need support in order to properly respond to the legal request from external advisors, the processing is carried out in order to satisfy our legitimate interest of responding to the legal request if we assess that this legitimate interest under a balancing test outweighs your interests or the potential impact on your fundamental rights and freedoms in the individual case (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose for the time necessary to respond to the legal request, and for a period of ten (10) years thereafter in order to document and be able to show that the request has been answered.


External recipients:

  • Public authorities
  • Law enforcement authorities
  • External advisors


Protect and ensure the safety of our staff and assets

We process your personal data when it is necessary to manage, investigate and document incidents involving our employees, other persons and our assets, for example to file a police report or report an incident to the relevant public authority, including law enforcement authorities.

Categories of personal data:

All categories of personal data that are necessary to protect and ensure the safety of our employees and the protection of our assets in the individual case are processed for this purpose.


Normally, the following categories of personal data are processed:

  • Image and audio material
  • Identification information
  • Communication
  • Contact information
  • Profile information
  • Matter information
  • Activity information


Legal basis:

The processing of your personal data is necessary to satisfy our legitimate interest of protecting and ensuring the safety of our employees and protection of our assets, which we consider under a balancing test outweighs your interest and the potential impact on your fundamental rights and freedoms (Article 6(1)(f) of the GDPR).


Storage period:

Personal data is stored for this purpose for such time that is necessary to investigate the incident and take necessary measures in relation to the incident, such as filing a police report or filing a report with another relevant public authority.


Personal data included in recorded decisions or the supporting information for decisions made for this purpose is stored until further notice for traceability.


External recipients:

  • External advisors
  • Public authorities
  • Law enforcement authority
  • Courts
  • Insurance company

‍

10. Where we process your personal data


We store your personal data on servers within the EU/EEA.


In certain cases, we transfer your personal data to recipients in third countries outside the EU/EEA, for example to service providers that we engage in such third countries.


In order to ensure an essentially equivalent level of protection for your personal data when transferred (or otherwise made available) to recipients in third countries outside of the EU/EEA, which do not provide an adequate level of protection, we normally use the EU Commission’s adopted standard contractual clauses for international transfers according to decision 2021/914 and implement, in light of the law and practices of the third country, necessary supplementary measures to ensure an essentially equivalent level of protection of the personal data transferred. This to ensure that your personal data is protected regardless of where it is processed.


We also rely on so-called adequacy decisions issued by the European Commission where personal data is transferred to countries and recipients covered by such decision, please see the European Commission’s website for more information on which countries that are covered by an adequacy decision. As an example, we rely on the EU-U.S. Data Privacy Framework for transfers to service providers in the United States that are certified under the framework, please see the framework website.


For more information on the safeguards that we have taken to protect your personal data, please contact us, please see contact details in Section 18 below.

11. Protection of your personal data


Froda implements appropriate technical and organisational measures to protect the confidentiality, availability and integrity of your personal data. As such, we take measures to protect your personal data against unlawful or unauthorised access, alteration, loss and destruction.


Your personal data is processed, when necessary, for this purpose. Personal data is stored for this purpose for such period that is outlined in relation to each purpose outlined in this information.


The legal basis for the processing of your personal data to protect your personal data in our IT systems and tools is that the processing is necessary in order for us to fulfil our legal obligation under Article 32 of the GDPR to implement appropriate technical and organisational measures to protect and safeguard your personal data (see Article 6(1)(c) of the GDPR). Personal data in logs for troubleshooting and error and incident management is stored for a period of up to 24 months from the time of the log event.

12. Your rights


You have certain rights in relation to the processing of your personal data under the GDPR.


You have the right to:

  • Access to and obtain a copy of your personal data together with additional information about our processing of your personal data (please see Article 15 of the GDPR).
  • Rectification of or request that we supplement your personal data if you consider that your personal data is incorrect, incomplete, or misleading (please see Article 16 of the GDPR).
  • Erasure of your personal data (please see Article 17 of the GDPR).


You also have the right to:

  • Object to our processing of your personal data, for example our processing of your personal data for direct marketing purposes or when we rely on a legitimate interest as the legal basis for the processing (please see Article 21 of the GDPR).
  • Request that our processing of personal data is restricted, which means that you can, at least for a certain period, prevent us from processing your personal data (other than storing your personal data) (please see Article 18 of the GDPR).
  • Receive a copy of the personal data that you have provided to us in a structured and commonly used format and, where it is technically feasible, request that the personal data is transferred directly to an external recipient (data portability) (please see Article 20 of the GDPR).
  • Withdraw your consent to the processing of personal data based on your consent (please see Article 7 of the GDPR).
  • Lodge a complaint with your supervisory authority. In Sweden, we are under the supervision of the Swedish Authority for Privacy Protection (IMY).


Please note that certain rights only apply in certain situations, and that there are several exceptions to certain rights. For more information about your rights under the GDPR, please see the information available on IMY’s website.


Automated individual decision-making

We do not carry out any automated individual decision-making that produces legal effects or otherwise significantly affects you in relation to the processing of personal data covered by this information.

13. How you exercise your rights


Contact us

If you wish to exercise your rights, please see the contact information in Section 18 below.


If possible, please use the email address that you may have registered with us or used when you have been in contact with us. This makes it easier to handle your request.


We respond to your request as soon as possible and normally within one month

We will respond to your request as soon as possible and normally within one (1) month of receiving your request. However, if your request is complex or if you have made multiple requests, we may need additional time to manage your request. In such a case, we will inform you of this and the reason for the extension no later than one (1) month from the date we received your request.


If for any reason we are unable to comply with your request, in whole or in part, we will inform you of this and the reason why we are unable to comply with your request. You will receive such information within one (1) month from the time we received your request. If you have submitted your request electronically, for example by contacting us by email, we will respond to the request electronically, unless you specifically request otherwise.


We will verify your identity before responding to your request

When you make a request to exercise your rights, we need to confirm your identity to ensure that you are no other person than who you claim to be. This is to avoid, for example, us disclosing personal data to someone unauthorised or wrongly deleting personal data.


If we do not have sufficient information to confirm your identity, we may request that you provide additional information about yourself to confirm your identity. We may also ask you to confirm your identity using a digital identity verification service, for example BankID. We only request the information that is reasonable and necessary to confirm your identity. The time to respond to your request will begin once we have confirmed your identity.

14. Use of cookies and similar technologies


We use cookies and similar technologies on our website. This to, among other things, collect statistics in order to better understand how the website is used. This enables us to develop and improve the website in order to create a better user experience.


In our Cookie Policy, you can find more information about which cookies we use on the website, and for what purposes.

15. Use of AI systems and tools


We use, where relevant, AI systems and tools to process personal data for the purposes outlined in this information. This is to streamline and automate working tasks and processes that we otherwise would perform manually, to create better supporting information for decision and to improve and ensure the quality of our operations.


We also, when necessary, further process your personal data to train AI systems and tools that we use in the business, please see the purpose Develop and improve our business, our offerings, products and services and our business strategies, practices and methods above.

‍

If you have questions regarding our use of AI systems and tools, please contact us by using the contact information in Section 18 below.

16. Updates to this information


If our processing of personal data changes, for example if we collect and process personal data for new purposes, collect additional categories of personal data or share your personal data with additional recipients than those outlined in this information, we will update the information. At the top of this information, you can see when the information was last updated.

‍

Version history

‍

Version 1.0

The first version of this privacy notice. The version that you are currently reading is the latest version.

17. Categories of personal data in this information

‍

elow we describe the categories of personal data that are referenced in this information, together with examples.


Activity information

Information about your activity and interactions on our website, in our digital channels, when you contact us or otherwise interact with us, for example participate in a meeting or an event.

Examples: clicks, visits and behaviour on the website and in our digital channels, settings and preferences when using functionality on the website and in our digital channels, date and time for your contact or interaction with us, participating in an event or a meeting.


Communication

Information included in communications, for example in emails.

Examples: content of emails or other correspondence, published posts and comments in digital channels.


Competence information

Information relating to your skills and qualifications.

Examples: education, professional experience, language skills, certifications.


Contact information

Information that can be used to contact you or your business.

Examples: address, email, telephone number.


Identification information

Information that can be used to identify you.

Examples: name, personal identification number or social security number, customer identification number.


Image and audio material

Image and audio material in which you appear.

Examples: video, photographs, audio recordings, streaming video and audio (for example in digital meetings).


Matter information

Information relating to a matter as a result of a question or inquiry from you or the company or organisation that you work for.

Examples: matter number, type of matter, matter event, and date and time for the event.


Order information

Information relating to an order of a product or service.

Examples: type of order, time, price and discounts, order history.


Profile information

Information about your profile.

Examples: title, role, username or social media account, the company or organization you represent or work for, gender, age, PEP status, sanctions status, marital status, level of authorization, beneficial owner, guarantor, board member, ownership in relevant company, tax residency, engagements in other businesses.


Special categories of personal data

Special categories of personal data according to Article 9 of the GDPR.

Examples: information relating to your health and health status.


Technical information

Information relating to your device or software on your device.

Examples: type of device, IP address, browser type and version and operating system.

‍

18. If you have questions


Contact us if you have any questions about this information, how we handle your personal data or if you want to exercise your rights, please see below for contact information.


Froda AB

(reg. no.: 556999-3388)

Katarinavägen 9, 116 45

Stockholm, Sweden

Email: info@froda.se


Moreover, Froda has designated a data protection officer (DPO). The DPO is responsible, among other things, for monitoring and reviewing that Froda’s processing of personal data complies with applicable laws and regulations. You can contact the DPO by email at dpo@froda.se or by sending a letter to the address above with attention to “DPO”.