Privacy policy

Gigant AB, org.nr 556588-2916 ("Gigant") ("we", "us" and "our"), with postal addresses Kristineholmsvägen 35D, 441 39 Alingsås, is the data controller for the processing of your personal data.

Personal data we process about you

In your contact with Gigant , you will provide us with certain information such as your name and contact details (e.g. e-mail, address, etc.). Your personal data has generally been collected either directly from you or from your employer in connection with the business relationship that exists between us and your employer. We may also collect personal data about you from other sources.

Purposes and legal basis for processing your personal data and retention periods

It is not a legal or contractual requirement to provide us with your personal data. Nor are you obliged to provide us with your personal data. However, our ability to enter into a contract and subsequently perform our contract and administer the contractual relationship with you may be affected if you do not provide your personal data.

Purposes and legal basis for processing your personal data and retention periods

It is not a legal or contractual requirement to provide us with your personal data. Nor are you obliged to provide us with your personal data. However, our ability to enter into a contract and subsequently perform our contract and administer the contractual relationship with you may be affected if you do not provide your personal data.

For you as a customer or employee of a customer

In your contact with us as a customer and when using our services and purchasing our Products , we will process your personal data for the purpose of providing the services and Products covered by the contract. This processing is based on our obligation to fulfill our obligations under the contract with you.


Your personal data as an employee of a customer of ours is also processed, where applicable, in accordance with the contract with the customer for the purposes of invoice management, payment and administration of the contractual relationship, management of deliveries and contact and communication. When your personal data as an employee is processed, we do so based on a balance of interests. Gigant's legitimate interest is to be able to offer your employer and our customer the services and Products we provide.


If you have or have had in the last twelve (12) months a customer relationship with us or are employed by such a customer, and have not given consent in accordance with the paragraph below, your personal data is processed on the basis of a balance of interests between your interests and our legitimate interest in being able to market our Products and services and for the purpose of direct marketing. We never process sensitive personal data based on a balance of interests. This processing may include sending newsletters, information about our courses and other direct marketing.


If you have given us your consent, we will process your personal data for the purpose of direct marketing. This processing may include sending newsletters, information about our courses and other direct marketing.


Where applicable, we process personal data about you as a customer or about you as an employee of a customer for accounting purposes, for example for invoicing or payment of our services or Products , we carry out this processing on the basis of legal obligations under the Accounting Act.


We only process your social security number in situations where it is necessary for the purposes of the processing or for a secure identification, for example if you are a sole trader, when it is necessary to process your social security number for billing purposes.

For non-customers and non-customer employees

We process your personal data in connection with your contact with us or when you ask us to contact you. The purpose of Gigant's processing is to be able to help you with your questions regarding Gigant or the use of any of our services or Products. This processing is based on a balance of interests. Gigant's legitimate interest is to be able to help future customers and other interested parties by answering questions and providing any material.


We process your personal data to send you direct marketing messages relevant to your professional role. The purpose of this processing is to inform potential future customers about Gigant's services and Products. This processing is based on a balance of interests. Gigant's legitimate interest is to be able to inform potential customers about such services, Products and offers that may be of interest within the framework of their professional role.


If you have given us your consent, we will process your personal data for the purpose of direct marketing. This processing may include sending newsletters, information about our courses and other direct marketing.

For you as an employee of a supplier

Your personal data as an employee of a supplier to us is processed in accordance with the agreement with the supplier for the purposes of invoice management, payment and administration of the contractual relationship, management of deliveries and contact and communication. When your personal data as an employee is processed, we do this based on a balance of interests. Gigant's legitimate interest is to be able to administer agreements and fulfill our obligations to our suppliers/your employer.


Where applicable, we process personal data about you as an employee of the supplier for accounting purposes, for example, regarding invoicing or payment of your services or Products, this processing is carried out on the basis of legal obligations under the Accounting Act.


Our use of cookies


When you use our website, we may process your personal data such as IP address through cookies. Read more about our cookies atgigant

Who can have access to your personal data?

Your personal data may be shared with actors who process personal data on our behalf, so-called data processors. Our data processors include our IT and system suppliers.


We also transfer your personal data to recipients who are not data processors, such as certain authorities and debt collection agencies. These recipients are those who are independently responsible for their processing.

Transfer of personal data to third countries

As a general rule, we and our suppliers and partners only process your personal data within the EU/EEA. Where personal data is processed outside the EU/EEA, there is either a Commission decision that the third country in question ensures an adequate level of protection or appropriate safeguards, in the form of standard contractual clauses, binding corporate rules or Privacy Shield, which ensure that your rights are protected. If you would like to receive a copy of the safeguards we have in place or information on where these have been made available, you can do so by contacting us.


How do we protect your personal data?

We, and where applicable third parties, have put in place several security measures to protect the personal data processed. We have firewalls and anti-virus software to protect and prevent unauthorized access to our networks and systems. Our employees have strict instructions to handle all personal data in accordance with applicable laws and regulations. Only certain of our employees have access to the areas and systems where personal data is stored and passwords and usernames are required to log into these systems.

How long do we keep your personal data?

We will never process your personal data for a longer period than is permitted by applicable law, regulation, practice or government decision. Personal data that we process for the purpose of fulfilling our contract with you is processed as a starting point for the time necessary for us to administer the contractual relationship, exercise our rights and fulfill our obligations in relation to you. However, in order to comply with legal requirements, because you have given your consent to it or because we are entitled to do so according to a balance of interests, we may save your personal data for a longer period of time as described below.


Your personal data that we process on the basis of consent will be processed until you withdraw your consent.


Your personal data that we process based on a balance of interests for the purpose of marketing to you is processed in accordance with applicable national law and practice. If you have a customer relationship with us, we process your personal data for a maximum of one (1) year after your customer relationship has ended or until you have notified us that you no longer wish to receive our mailings. If you are not an active customer with us, we will process your personal data for a maximum of three months or until you have notified us that you no longer wish to receive our mailings.


Any data relating to payment and where processing is required under the Accounting Act is processed in accordance with the requirements of the Accounting Act for seven (7) years. We also process certain data about your purchase in accordance with applicable purchase or consumer purchase legislation.

Your rights

In accordance with the applicable data protection legislation, you have the right to access information about what personal data we process about you and the right to request rectification of your personal data.


Under certain conditions, you also have the right to request the erasure or restriction of your personal data or to object to our processing. You also have the right, under certain conditions, to obtain the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit it to another controller.


You have the right to withdraw all or part of your consent to the processing of your personal data at any time with effect from the moment of withdrawal. You also have the right to object at any time to the processing of your personal data for direct marketing purposes.


If you have any complaints regarding our processing of your personal data, you have the right to lodge a complaint with the Swedish Data Protection Authority or any other competent supervisory authority that oversees the processing of personal data by companies.

Contact us for more information

If you wish to exercise your rights under the above or otherwise contact us in relation to our processing of your personal data, you can do so by contacting us by email at [email protected].

This information on the processing of personal data was adopted by Gigant AB on May 24, 2018.