Privacy Notice - ASSA ABLOY Digital Solutions and Services

• Email address
• Name
• Unique identifier
• IP address
• Password 

Your email address and name are either provided to ASSA ABLOY by you directly, or by the administrator that gives you access to the Services, when you are given access to the Services. The administrator can either be ASSA ABLOY or a customer of ASSA ABLOY.

The unique identifier is created and assigned to you when you are given access to the Services.

Your IP address will be collected when you access the service and stored to relate to your unique identifier. 

Legitimate Interest (GDPR Article 6.1.f).

Our legitimate interest for processing your personal data is to provide access to the ASSA ABLOY Digital Solutions and Services requested either by you or by an administrator assigning you access to the Service on your behalf. Also, our interest is to ensure that only authorized access is permitted. 

To our Access Management Service Provider in their capacity as Processor acting on our behalf.

To our Data Centre Service Provider in their capacity as Processor acting on our behalf.

•  Email address

Legitimate Interest (GDPR Article 6.1.f).

Our legitimate interest is to send you emails and notifications regarding events and reports regarding the Service.

The reports are only sent out if you choose to subscribe to the reports, and you can unsubscribe at any time through the Services. The push notifications are only sent to you if you have enabled push notifications for the Insight Mobile application in your smart phone, and you can swich off the push notifications at any time through the settings on your smart phone. 

• Email address
• Name
• Unique identifier
• IP address
• Actions taken in the Service

Legitimate Interest (GDPR Article 6.1.f).

Our legitimate interest is to ensure that the Service is functioning properly and that we can correct any errors swiftly. Our interest is also to ensure that the Service is not misused. 

To our Access Management Service Provider in their capacity as Processor acting on our behalf.

To our Data Centre Service Provider in their capacity as Processor acting on our behalf. 

Withdrawal of consent (Article 7.3 of the GDPR):

You have the right to withdraw any consent given to us allowing us to use your personal data in a specific way. If you choose to withdraw such a consent, we shall immediately cease the related use of your personal data and delete or anonymise the associated personal data immediately.

Right of access (Article 15 of the GDPR):

You have the right to obtain confirmation from us as to whether we are processing personal data about you, and, where that is the case, access to a copy of the personal data together with information about our use of your personal data.

Right to rectification (Article 16 of the GDPR):

You have the right to obtain without undue delay the rectification of inaccurate personal data about you. Considering the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure (Article 17 of the GDPR):

You have in certain situations the right to right to request erasure or deletion of your personal data ("the right to be forgotten").

Right to restriction (Article 18 of the GDPR):

You have in certain situations the right to request that the use of your personal data is restricted, which means that you can, at least for a certain period, stop us from using your personal data in other ways than just storing your personal data.

The right to restriction of the use of your personal data will only apply in certain situations. The right to restriction applies if you have objected to our use or if you consider that your personal data is incorrect or incomplete and during the period that we manage your objection or verify whether the personal data is incorrect or incomplete. The right to restriction also applies if we no longer need the personal data for the purposes that we collected the personal data, but you need the personal data to manage, defend or exercise legal claims and rights. In such a case we will continue to store your personal data for as long as you need the personal data for this purpose.

If the use of your personal data has been restricted, we may normally only store your personal data and not use them for any other purpose than to manage, defend or exercise legal claims and rights. We can also use your personal data for other purposes if you have given your consent to such use.

Right to data portability (Article 20 of the GDPR):

You have the right to a copy of certain personal data about you in a structured, commonly used and machine-readable format and, if it is technically feasible, the right to request that the copy of your personal data is transferred directly to an external recipient.

The right to data portability only applies to personal data that we have collected, and use based on your consent (Article 6.1 (a) of the GDPR) or in order to fulfil an agreement with you (Article 6.1 (b) of the GDPR). Moreover, the right is limited to personal data that you yourself has provided to us.

Please see each relevant section regarding our use of personal data for information on which legal bases we rely on in each situation. 

Right to object (Article 21 of the GDPR):

In certain situations, you have the right to object to our use of your personal data. Where the right to object applies, this means that we must stop using your personal data in the specific situation.

The right to object applies under specific circumstances. You always have the right to object to our use of your personal data for direct marketing purposes. In marketing communications, we always include an opt-out link that you can use to unsubscribe to such communications.

Moreover, where we rely on a legitimate interest for the use of your personal data, you have the right to object to the use for reasons which relates to your particular situation. If we in such a situation cannot show a compelling reason to continue to use your personal data, we will stop using your personal data for the relevant purpose.

Please note that the right to object does not apply if the personal data is needed to exercise, manage, and defend legal claims. 

Right to object to automated individuation decisionmaking (Article 22 of the GDPR):

You have the right to object to decisions based solely on automated processing, including profiling, which produces legal effects concerning you or which similarly significantly affects you.