At CBK Distribution, we protect your privacy and always strive to maintain a high level of data protection. This privacy policy explains how we collect and use your personal information. It also outlines your rights.

It is important that you understand our privacy practices and feel confident in how we handle your personal data. You are always welcome to contact us if you have any questions.

What is Personal Data and What is Personal Data Processing?

Personal data refers to any information that can directly or indirectly be linked to an individual. This may include images and audio recordings processed on a computer where no names are mentioned. Encrypted information and various types of electronic identifiers (such as IP numbers) are considered personal data if they can be associated with an individual.

Personal data processing includes collecting, recording, organizing, structuring, storing, processing, transferring, and deleting data.

Who is Responsible for the Personal Data We Collect?

CBK Distribution AB, with company registration number 995 971 003 and address Gneisveien 30, 2020 Skedsmokorset, is responsible for the processing of your personal data.

Where Do We Obtain Your Personal Data?

In addition to the information you provide to us, we may also collect personal data from other (third-party) sources.

The information we collect from third parties includes:

• Address information from public sources to ensure we have accurate address details for you.
• Credit rating information from credit rating agencies, banks, or information companies.
• Data from social media for marketing purposes.

How Long Do We Store Your Personal Data?

We never store your personal data longer than necessary for each specific purpose.

What Rights Do You Have as a Data Subject?

Right to Access
We are always transparent about how we process your personal data. If you want more detailed insight into the personal data we process about you, you can request access to this data. Please note that if we receive a request for access, we may ask for additional information to ensure that your request is handled effectively and that the information is provided to the correct person.

Right to Rectification
You can request that any incorrect personal data we hold about you is corrected. Within the scope of the specified purpose, you also have the right to complete any incomplete personal data.

Direct Marketing
Direct marketing refers to all types of outbound marketing actions (e.g., via email and SMS). Marketing actions where you, as a customer, actively chose to use one of our services or contacted us for more information about our services do not count as direct marketing (e.g., product recommendations or other features). If you object to direct marketing, we will stop processing your personal data for this purpose and cease all forms of direct marketing.

How Do We Handle Personal Identification Numbers?

We only process personal identification numbers when there is a clear, legitimate purpose for doing so, such as when it is necessary for secure identification or when there is another justifiable reason. We always minimize the use of personal identification numbers to the greatest extent possible.

How Are Your Personal Data Protected?

We use IT systems to protect the confidentiality, integrity, and access to personal data. We have implemented specific security measures to protect your personal information from illegal or unauthorized use (e.g., illegal access, loss, destruction, or damage).

What Does it Mean that the Data Inspectorate is a Supervisory Authority?

The Data Inspectorate is responsible for overseeing the application of data protection legislation and assessing whether a company is handling personal data improperly.

How Can You Contact Us with Questions About Data Protection?

Since we take data protection very seriously, we have dedicated staff within the company who handle it. We may make changes to our privacy policies.

Right to Erasure

You can request the erasure of personal data we process about you if:

• The data is no longer necessary for the purposes it was collected or processed for.
• You object to a legitimate interest we have pursued and your reason for erasure outweighs our legitimate interest.
• You object to the processing for direct marketing purposes.
• The personal data is processed unlawfully.
• The personal data must be erased to comply with a legal obligation we are subject to.

Please note that we may have the right to deny your request if there are legal obligations preventing us from immediately deleting certain personal data. These obligations may stem from accounting and tax legislation, anti-money laundering laws, or consumer protection laws. Processing may also be necessary for the establishment, exercise, or defense of legal claims.

Right to Restriction

You have the right to request that the processing of your personal data is restricted. If you dispute the accuracy of the personal data we process, you may request restricted processing while we verify whether the data is correct. If you object to a legitimate interest we have pursued as a legal basis for a purpose, you can request restricted processing while we verify whether our legitimate interests outweigh your rights by deleting the data.

If processing has been restricted in any of the above situations, we may only process the data, aside from storage, for the purposes of establishing, exercising, or defending legal claims, protecting the rights of others, or if you have given your consent.

Right to Object to Certain Types of Processing

You have the right to object to direct marketing from us based on legitimate interests.