Johnér Bildbyrå AB’s Integrity Policy
The purpose of this policy is to inform you that Johnér Bildbyrå AB processes personal data in accordance with the General Data Protection Regulation (GDPR) – in effect as law in all of the EU member states as of May 25, 2018.
It is important to us that you feel secure in how we process your personal data.
Personal Data Controller
Johnér Bildbyrå AB (referred to as “Johnér”, “we” or “us” below) is the personal data controller responsible for the processing of your personal data when Johnér provides and markets images and services as well as in other contact with Johnér such as visits to the website and communications via chat mediums, e-mail and phone. It is Johnér’s responsibility, as personal data controller, to process your data correctly and in accordance with current legislation.
Company information:
Johnér Bildbyrå AB
Åsögatan 140
116 24 Stockholm
Sweden
Corporate ID number 556579-6082
Authorized representative: Mårten Johnér
VAT: SE556579608201
Personal data that Johnér processes
Johnér collects and processes your personal data as a current or potential customer, which may include:
- Contact information such as name, title, e-mail address, invoice address, street address and phone number.
- Account information such as customer number, user name and password.
- Corporate identity number.
- Order information, e.g. ordered images or services.
- Data you generate by using our services which can include Johnér's websites and marketing communications such as IP address, device information (if you use computer, mobile or other device), location information and click and browsing history.
How Johnér collects your customer data
Johnér collects your personal data when you contact us regarding quotes, order an image, visit Johnér's website, click links in digital marketing communications or contact our customer service. Your personal data is collected in order that we can offer you the best services and that you can enter an agreement with Johnér.
In addition to the data that Johnér collects about you, we can collect data from a third party. We may collect updated data, e.g. information from the Swedish Companies Registration Office to ensure that we have correct information on you and/or your organization.
Johnér also collects certain information from cookies, which log information on how you use our website. See Johnér’s Cookies Policy for more information on how we use cookies.
Why Johnér processes personal data
Johnér collects and processes your personal data for various purposes. Below, we will describe the reasons and purposes for processing and give examples of a number of processing activities:
- Johnér manages quotes, orders and invoices
Processing of personal data for this purpose includes identification activities such as identifying you, sending quotes, confirming orders and managing payment of images and services. Without this data, Johnér cannot fulfill its obligations and will be forced to deny your order for copyright and tax reasons.
- Johnér provides and manages user accounts
Johnér processes personal data to enable you to log in to your account, ensure your identity, maintain correct contact information and facilitate online shopping via defaulted information and saved checkout details as well as to allow you to view albums, orders and download history.
- Johnér provides information, benefits and offers regarding images and services
Johnér strives to give you the best possible experience when you visit our website. For this purpose, we process personal data to enable us to improve your user experience with the aim of creating and offering relevant content. We do this by communicating with you via mail, e-mail, SMS/MMS and telephone to offer benefits and provide information that we believe is relevant to you. In order to enable this, Johnér may analyze the collected data.
- Johnér manages issues that are submitted to its support functions
Personal data processing for this purpose includes such activities as communicating, ensuring customer identities and answering questions posed to customer services by e-mail, phone or digital channels.
- Johnér is required to fulfill legal obligations
Johnér stores certain information that can be attributed to an individual in order to comply with accounting legislation. Without the data that Johnér collects for this purpose, Johnér cannot fulfill its legal obligations.
- Johnér improves services, products and systems
Personal data processing for this purpose includes such activities as making our website and other services more user-friendly. In order to fulfill this purpose, Johnér conducts general analyses of such things as click, browsing, search and image/motif purchasing behaviors.
Legal grounds for Johnér’s personal data processing
In order to collect and process your personal data, Johnér must have legal grounds for the purpose of processing the data. The legal grounds on which Johnér’s processing is based are described below:
- Legal obligation
This entails that processing is required to enable Johnér to meet legal obligations. It includes such things as saving an invoice to fulfill the requirements of accounting legislation.
- Agreement obligations
This entails that processing is necessary to enable Johnér to meet an agreement with you, the customer, or to enable entering into an agreement at a later date. When you purchase an image or service, we process your data to fulfill Johnér's obligations. For example, Johnér may be required to register your e-mail address in order to deliver a purchased image or service to you.
- Legitimate interest
This entails that our processing is based on a weighing of legitimate interest. This means that Johnér processes data because we deem that we have a legitimate interest in processing your personal data that outweighs your interest in not having your data processed.
- Consent
This entails that you have given consent to Johnér's processing of your personal data for one or more purposes.
How long does Johnér store personal data
Johnér will store your personal data for as long as necessary to fulfill the purposes for which the data is processed. How long this is depends on the purpose for processing the data. We regularly delete personal data that is no longer needed.
Who we transmit your personal data to
Johnér cooperates daily with its sister company Plattform Johnér AB, which owns and markets the Scandinav Bildbyrå brand. Therefore, Johnér may transmit your data to other companies in the Johnér Group.
Johnér also transmits necessary personal data to companies that provide services to Johnér. This can, for example, include suppliers of bank or credit card payment solutions if you select such payment methods on our website. It can also include collection companies that ensure that Johnér receives payment for images or services you have ordered but not paid on time according to Johnér's payment conditions.
Johnér may also transmit your data to government agencies if necessary for complying with legislation, regulations, authority decisions or criminal investigations.
Johnér will not sell your personal data to a third party without your express consent.
Your rights
You have the right to transparent information regarding how we process your personal data. Your rights include:
- Access to your personal data
- Correction of your personal data
- Deletion of your personal data
- Data portability within the EU
- Processing limitations
- Objections to certain types of processing
In cases in which Johnér processes your personal data based on weighted interest of legitimate interest as legal grounds for direct marketing, you have the right to object to the processing. For example, you are given the right to object to marketing through newsletters each time it is digitally sent by unsubscribing to all newsletters from Johnér.
Read more about your rights at Datainspektionen, the regulatory agency responsible for personal data processing in Sweden. You can also contact us if you should have objections to how we process your personal data. It is also your right to turn to Datainspektionen should you have complaints regarding Johnér’s processing of your personal data.
Your personal data is protected
In order to protect your personal data, Johnér has taken suitable technical and organizational security measures. For example, all customer information is stored in a database protected by a firewall and access control so that no one other than Johnér Group employees who need access to your personal data can gain access.
Application and amendment of the integrity policy
The most recently updated version of Johnér’s integrity policy that applies at any given time will always be published on our website. Should the integrity policy be amended, you will be informed the next time you log in to your user account. In the case of substantial changes to the integrity policy, we may even inform you by e-mail. If, for any reason, you do not wish to accept the amended policy, you can contact us to close your user account.
Contact information
Do not hesitate to contact us with questions regarding this integrity policy or if you should find incorrect personal data that needs to be changed.
Phone: +46 8 644 83 30
e-mail: personuppgifter@johner.se