During the course of your cooperation with Kvadrat, we may process your personal data. Unless otherwise informed, the Kvadrat entity you, your company or the company you are employed with conclude an agreement with or correspond with is the data controller in relation to the personal data collected.
Collection of personal data
Kvadrat may collect, process and store personal data about you in the following instances:
- When you, your company or the company you are employed with enter into an agreement with Kvadrat
- When you make use of Kvadrat’s websites and portals
- When you collaborate and communicate with Kvadrat
Types of personal data
Kvadrat may collect, process and store the following personal data:
- Name, e-mail address, telephone number and similar identification data
- Individual data, such as preferred language
- Organizational data, such as company name, company address, job position, business area, primary work location and country
- Contractual data, such as contracts and other agreements between you (or your company) and Kvadrat, that may include e.g. your contact information
- Financial data, such as bank account details
- IT-related data, such as user-ID, passwords (however, Kvadrat has no access to such passwords), log-in details as well as data and logs about your usage of Kvadrat’s websites and portals
Such information may be provided directly by you to us (primarily via e-mails and other correspondence) or by a third party such as your employer.
Purposes of the processing
Your personal data may be processed for the following purposes:
- Generally, to plan, perform and manage the business relationship, including any contracts
- Administration, such as processing payments and registration in Kvadrat’s files
- General communication
- Statistics and analytics
- Compliance and regulatory purposes, such as fulfilling our legal and compliance-related obligations to prevent illegal activity
Kvadrat will mainly process your personal data based on the following legal bases:
- Contractual obligation: The processing of your personal data will in some cases be necessary for the performance of a contract (Article 6(1)(b) of the GDPR).
- Legitimate interests: We may process your personal data pursuant to our legitimate interest in, for instance, to manage daily operations according to lawful and fair business practices, including planning, performing and managing the business relationship (Article 6(1)(f) of the GDPR).
- Legal claims: The processing may also be necessary to prevent fraud or establish, exercise or defend legal claims (Article 6(1)(f) of the GDPR).
- Legal obligation: The processing of your personal data will in some cases be necessary to comply with legal obligations, such as our obligations to prevent illegal activity (Article 6(1)(c) of the GDPR).
- Consent: In exceptional cases and only when no other legal basis can be applied, Kvadrat may ask separately for your consent to process your personal data (Article 6(1)(a) of the GDPR).
Your personal data will be retained for the period necessary to fulfill the purposes outlined above, unless a longer retention period is required by applicable law. The retention periods may differ from country to country due to applicable national legislation.
Disclosure to other data controllers and transfer to data processors
To meet the purposes mentioned above we may give third parties, who provide relevant services on basis of a contractual relationship with Kvadrat, access to your personal data, including providers of e.g. IT services, CRM systems, ERP systems, invoicing systems, marketing services, newsletter distribution, customer satisfaction surveys, website analytics, printed material, CRM apps, IT support, IT service development as well as digital developers, e-mail operators, hosting providers and other suppliers providing systems or services to Kvadrat. Such service suppliers may only process personal data on behalf of Kvadrat and in accordance with our instructions.
Personal data may be shared within the Kvadrat group as some Kvadrat entities, including Kvadrat A/S, provide services, e.g. support, fulfillment of product warranties and hosting services, to other group entities. Furthermore, subsidiaries to Kvadrat A/S may disclose personal data to Kvadrat A/S for e.g. internal administrative purposes.
Your personal data may be disclosed to accountants. Under certain circumstances it may also be necessary to disclose your personal data to lawyers, courts, public authorities, the police and potential buyers.
In connection with Kvadrat’s development, the company structure may change, e.g. through a full or partial sale of Kvadrat. In case of a partial hand over of assets containing personal data, the legal basis for the related disclosure of personal data is, as a general rule, Kvadrat’s legitimate interest in handing over parts of its assets as well as making commercial changes.
If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA which do not have an adequate level of protection, such transfers will as a main rule be based on the EU Commission’s Standard Contractual Clauses.
We have implemented numerous security measures to prevent, for example, the loss and misuse of personal data under our control. Accordingly, we use our best endeavours to protect the quality and integrity of your personal data.
- You have the right to access the personal data we process about you
- You have a right of objection towards our collection and further processing of your personal data
- You have the right to have your personal data rectified and deleted, with certain national statutory exceptions
- You have the right to request us to restrict the processing of your personal data
- Under certain circumstances you may also request to receive a copy of your personal data as well as the transmission of your personal data which you have provided us with to another data controller (data portability)
- You may at any point withdraw the consents that you have given. You can unsubscribe from our newsletter by clicking the link at the bottom of the newsletter
Questions or complaints
If your complaint is not resolved by us and you wish to proceed with the case, you can send your compliant to the supervisory authority in your country. A list of European supervisory authorities is available here.
Latest update 31 March 2020