Vässla AB, reg.no. 559117-4882, (“Vässla”, ”we” or “us”) is committed to getting you where you need to go, smoothly, safely and comfortably. When you are visiting and using the services provided at vassla.com or our mobile application or purchasing our products/services, we need to process your personal data.
In this privacy notice you will find information on what kind of personal data we process, why it is processed and how we may share it. Vässla is the data controller of any processing of your personal data, unless otherwise stated in this privacy notice.
WHAT PERSONAL DATA DO WE PROCESS?
We collect personal data when you (i) subscribe to or purchase our vehicles/services, (ii) book a test ride of a vehicle (iii) sign up for newsletters or information, (iv) request support and (v) are browsing our website.
See below detailed information on what personal data that we process and the purposes, legal ground and storage periods applicable for our processing activities.
PURPOSES, LEGAL GROUND AND STORAGE PERIODS
- Purchases/subscription services and insurance
Purpose of the processing: When you purchase products, or sign up for a subscription of our products, we will process your personal data in order to deliver and provide the agreed vehicle(s) and services to you. When you purchase an insurance policy through us in connection with your subscription or purchase, we will process and transfer your personal data to the insurance provider. When you have a subscription service with us, we also process data regarding the location of our vehicle, which enables us to locate the vehicle in case it is lost or stolen.
Categories of personal data: Name, social security number, delivery address/billing address, telephone number, e-mail address, order information, payment details, stripe customer ID, credit card information, payment reference number and location of the vehicle.
Legal ground: The processing is necessary for our performance of the agreement with you relating to your purchase, or subscription, of our products. As to location data from the vehicle, the processing is necessary for our legitimate interest to recover our vehicle if it becomes lost or stolen.
Storage period: We will process your personal data during the term of our contract (including any warranty period). Personal data that we are required to keep due to accounting legislation is stored for 7 years. Location data is deleted after 2 years.
- Test rides
Purpose of the processing: When you book a test ride of one of our products, we will process your personal data in order to administrate your booking.
Categories of personal data: Name, phone number, e-mail address and any comments voluntarily provided by you.
Legal ground: The processing is necessary for our performance of the agreement with you relating to your test ride.
Storage period: We will process your personal data until your test ride is completed. ● Newsletters and direct marketing
Purpose of the processing: If you subscribe to our e-mail and/or text-message newsletter, we will send you regular information about our offers. We may also send you other promotional communications, such as information about products and services, information about us and our partners, features, surveys, contests and events.
Categories of personal data: E-mail address.
Legal ground: The processing is necessary for our legitimate interests to maintain good customer relations and communicate relevant information and offers to you.
Storage period: You can opt-out or unsubscribe from newsletters and direct marketing at any time via the link provided in the newsletter. If you opt-out/unsubscribe from our newsletter, we will no longer process your personal data for this purpose. Unless there is another legal ground for keeping your data (such as a valid purchase contract), we will also erase your personal data.
- Information requests/support
Purpose of the processing: When you request support through our live chat or our other support channels, we will process your personal data to be able to assist you with the relevant matter.
Categories of personal data: E-mail address, phone number, information related to the vehicle and any other personal data that you voluntarily provide to us.
Legal ground: If we provide this service on the basis of an agreement with you, we consider the processing of your personal data to be necessary for the performance of the contract to which you are party. In other cases, we consider the processing of your personal data in the above context to be based on our legitimate interest to provide you with the best customer service possible.
Storage period: We will process your data until your case has been resolved. ● Browsing
Purpose of the processing: When browsing our website, we will process your personal data to improve our website and for marketing purposes.
Categories of personal data: IP-address, user generated data from cookies (e.g. clicks, page viewed, page visits, time spent, products viewed and clicked on, orders, average order value).
Storage period: The storage period for each of our cookies can be found in our cookie settings. ● Analysis of data
‒ 2 ‒
Purpose of the processing: We will analyse your personal data, in order to compile aggregated tracking data (including to analyse visitors’ use of our sites by tracking information such as page views, traffic flows, search terms and click throughs) for the purposes of to continuously being able to offer a more user-friendly experience.
Categories of personal data: IP-address, user generated data from cookies (e.g. clicks, page viewed, page visits, time spent, products viewed and clicked on, orders, average order value), geographic location (country only), correspondence and feedback relating to our products and services, technical data (e.g. language, IP-address, device type, browser settings, time zone, operating system, platform), information about how you have interacted with us, i.e. how you have used our services, response times, page errors, how you reach and how you leave the site etc.
Storage period: The storage period for each of our Performance Cookies can be found in our cookie settings.
- Targeted messages on third party advertising platforms
Purpose of the processing: We use third-party advertising platforms, such as Meta (Facebook and Instagram), TikTok, Snapchat and Twitter to send you messages that are targeted at you, based on your behaviour and browsing pattern, at specific times and locations of these platforms to increase the efficiency of our advertising campaigns. Your personal data is shared with the third-party advertising platforms, and they will attempt to match your profile in their database to determine the optimal time and place (the page you are browsing) to show you an advertisement from us. We also need to analyse necessary information to understand the impact of our advertising.
You can learn more about how our advertising partners help us achieve this purpose by visiting their sites (the relevant links can be found in our cookie settings).
Categories of personal data: IP-address, user generated data from cookies (e.g. clicks, page viewed, page visits, time spent, products viewed and clicked on, orders, average order value), geographic location (country only).
Storage period: The storage period for each of our Targeting Cookies can be found in our cookie settings.
THIRD PARTY SITES
‒ 3 ‒
WHO WE SHARE YOUR PERSONAL DATA WITH
Only the people who need to process personal data for the purposes mentioned above have access to your personal data. We use supplier who provide services to us. Such services include support and maintenance of IT systems, storage services, identification services and marketing and such suppliers will as part of the services they provide to us, process certain personal data on our behalf. We remain responsible for the processing of your personal data that our service providers carry out on our behalf, and suppliers may not use the personal data for purposes other than those we specify.
Your personal data is primarily processed within the EU/EEA. In some cases, we may use suppliers who process personal data outside the EU/EEA. Any transfer of data outside the EU/EEA is made in line with data protection laws. This means that the EU Commission has determined that the country ensures an adequate level of protection for the processing of personal data or that we take special protective measures, e.g. by entering into standard contractual clauses for data transfers in accordance with the decision of the European Commission. The standard contractual clauses may be found here.
We also share your personal data with other controllers of personal data. Such controllers include transport companies handling delivery of your ordered product(s), payment service providers, and insurance companies (if you have purchased an insurance policy through us). Further, in certain limited circumstances, we may need to disclose your personal data to authorities (police, tax authority or other authorities), if we are obliged to share it according to law or suspected criminal activities. When your personal data is shared with other data controllers, they will be responsible for their processing of your personal data and we refer to them for more information on how they process your personal data.
RIGHTS OF THE DATA SUBJECT
You are entitled to the following rights under applicable laws:
- The right to access: you may at any time request to access your personal data. Upon request, we will provide a copy of your personal data in a commonly used electronic form.
- The right to rectification: you are entitled to obtain rectification of inaccurate personal data and to have incomplete personal data completed.
- The right to erasure (“right to be forgotten”): under certain circumstances (including processing on the basis of your consent), you may request us to delete your personal data. Please note that this right is not unconditional. Therefore, an attempt to invoke the right might not lead to an action from us.
- The right to object: to certain processing activities conducted by the us in relation to your personal data, such as our processing of your personal data based on our legitimate interest. The right to object also applies to processing of your personal data for direct marketing purposes.
- The right to restriction of processing: you may under certain circumstances request from us to restrict the processing of your personal data. Please note that this right is not unconditional. Therefore, an attempt to invoke the right might not lead to an action from us.
- The right to data portability: you are entitled to receive your personal data (or have your personal data directly transmitted to another data controller) in a structured, commonly used and machine-readable format.
‒ 4 ‒
Finally, you also have the right to lodge a complaint with the supervisory authority in Sweden, which currently is Integritetsskyddsmyndigheten.
If you have any questions relating to our handling of your personal data or if you would like to invoke any of your rights under applicable privacy legislation, please contact us at: firstname.lastname@example.org.
CHANGES TO THIS PRIVACY NOTICE
Last updated: 22/12/22
‒ 5 ‒