Start / Integritetspolicy

PRIVACY POLICY

Introduction 

Welcome to the Allard Support for Better Life’s Privacy Policy (the “Policy”). The Policy is applicable Allard Support for Better Life and all of its subsidiaries (“Allard”).

Allard value your privacy and are committed to handling your personal data with the utmost care. This Policy explains how Allard collects, uses, and protects your personal data, as well as your rights regarding this information.

As data privacy is an ongoing responsibility, we may update this Policy from time to time—such as when we introduce new data handling practices or implement changes to our privacy policies.

1. Important information and Allard

This Policy provides information on how Allard collects and processes your personal data when you use our services and products. This includes any data you provide when purchasing a product, using our services, programs, or applications.

It is important to read this Policy alongside any other privacy notices we may provide on specific occasions when we collect or process your personal data. This ensures you fully understand how and why we use your information. This Policy complements other notices and does not override them.

Controller

Allard consists of multiple legal entities. This Policy is issued on behalf of the Allard Support for Better Life Group, meaning that when we refer to "Allard," "we," "us," or "our," we are referring to the relevant company within the Allard Support for Better Life Group responsible for processing your personal data.

We have appointed a Data Protection Officer (DPO) to oversee privacy-related matters. If you have any questions about this Policy or wish to exercise your data protection rights, please contact the DPO using the details below.

Allard Support for Better Life
Karbingatan 38, Helsingborg, Sweden
gdpr@allardsupport.com

We encourage you to contact us directly with any concerns or inquires. However, you have the right to lodge a complaint with your country’s data protection authority at any time. Since Allard’s headquarters are in Sweden, our primary supervisory authority is the Swedish Authority for Privacy Protection (IMY).

Changes to this Policy & keeping your data up to date

We regularly review and update this Policy. The latest update was made on 27 February 2024. To ensure our records remain accurate, please inform us of any changes to your personal data during your relationship with us.

2. Data we may collect about you

Personal data, also referred to as personal information, includes any information that can be used to identify an individual. This does not include data where identifying details have been removed, i.e. anonymous data.

We may collect, use, store, and share various types of personal data about you. To provide clarity, we have categorized this data as follows:

  • Identity Data: Name, surname, title, date of birth, etc.
  • Contact Data: Email address, telephone number, physical address, etc.
  • Technical Data: IP address, browser type, operating system, login data, etc.
  • Usage Data: Information about how you use our websites and services.
  • Marketing and Communications Data: Preferences for receiving marketing communications from us.
  • Financial Data: Payment details, billing information (if applicable).
  • Employment Data: If you apply for a job, we may collect CVs, work experience, and other professional details.

Data related to health and other biometrics
Since many of Allards’s products and services relate directly to health, we may collect information about your health and other biometric data. We only collect this type of data if you provide it to us—such as when purchasing our products, using our services or applications—or if it is submitted on your behalf by a medical professional or another authorized organization through our websites, systems, or applications.

3. How is the personal data collected?

We collect personal data from you in various ways, including:

  • Directly from you when you provide information via our websites, forms, or communications.
  • Automatically through cookies and similar tracking technologies.
  • From third parties, such as analytics providers, business partners, and publicly available sources.
  • We may also receive your personal data from a medical practitioner or another authorized organization that you have permitted to enter information on your behalf into our websites or applications.

4. How your personal data is used

We only use your personal data when permitted by law. The most common circumstances in which we process your data include:

  • When it is necessary to fulfill a contract we are about to enter into or have already entered into with you (Article 6(1)(b) GDPR).
  • When it is required for our legitimate interests (or those of a third party), provided that your rights and freedoms do not outweigh those interests (Article 6(1)(f) GDPR).
  • When we need to comply with a legal obligation (Article 6(1)(c) GDPR).
  • When we have obtained your consent (Article 6(1)(a) GDPR).

Click this link to learn more about the legal bases we rely on when processing your personal data: Lawful grounds for personal data processing.

Please note that in some cases, we may process your data under more than one legal basis depending on the purpose. If you require further details on the specific legal basis applicable to your data, please contact us.

Marketing

We aim to give you control over how your personal data is used, particularly regarding marketing and advertising. You will be eligible to receive marketing communications from us if you have requested information or made a purchase from us—unless you have opted out of such communications.

Opting out

You can stop receiving marketing communications from us or third parties at any time by:

  • Clicking the unsubscribe or opt-out link in any marketing email you receive.
  • Contacting us directly.

Please note that opting out of marketing messages will not affect personal data provided in connection with a product or service purchase, warranty registration, product/service experience, or other transactions.

Cookies

You can configure your browser to block or alert you about cookies when visiting websites. Please note that disabling or refusing cookies may cause some parts of our website to become inaccessible or function improperly. You can review or change your preferences at any time by accessing the cookie settings on any of our webpages.

5. Disclosure of personal data

We may share your personal data with the following parties:

  • Entities within the Allard Support for Better Life Group.
  • Service providers (typically acting as data processors) relevant to the services we offer. This may include, but is not limited to, professional service providers, regulators, authorities, and governmental institutions.
  • Third-party agents, suppliers, consultants, or contractors, who are bound by confidentiality obligations and process your personal data in accordance with this Policy. This may include IT and communications service providers.
  • Professional advisers, such as consultants, financial institutions, legal representatives, insurers, and accountants.

Please note that we require all third parties to maintain the security of your personal data and handle it in compliance with applicable laws. Our third-party service providers are not permitted to use your personal data for their own purposes. They may only process your data for specified purposes and in accordance with our instructions.

6. Data security

We have implemented appropriate security measures to protect your personal data from accidental loss, unauthorized access, misuse, alteration, or disclosure. Additionally, we restrict access to your personal data to employees, agents, contractors, and other third parties who require it for business purposes. These individuals are only permitted to process your data according to our instructions and are bound by confidentiality obligations.

We have also established procedures for handling potential data breaches. If a breach occurs, we will notify you and any relevant regulatory authority as required by law.

International data transfers

We operate globally, which means your personal data may on exceptional occasions be transferred to and processed in countries outside the EU/EEA and the UK.

Whenever we transfer your data internationally, we ensure that appropriate safeguards are in place to protect your personal information, including:

  • Standard Contractual Clauses (SCCs): We use European Commission-approved SCCs or UK-approved International Data Transfer Agreements (IDTAs) to ensure that personal data receives adequate protection when transferred outside the EU/UK.
  • Adequacy Decisions: If the destination country has been recognized by the European Commission or UK Government as providing an adequate level of data protection, we rely on this decision.
  • Binding Corporate Rules (BCRs): Where applicable, we transfer data within our group of companies under BCRs approved by relevant data protection authorities.
  • Additional Safeguards: In some cases, we implement encryption, pseudonymization, or other technical and contractual measures to further enhance data security.

Click this link for further information regarding transfers of personal data to a third country: Transfer of data to a third country | IMY.

Data retention

We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Retention periods vary depending on the type of data and regulatory requirements.

7. Your legal rights

As an individual, you have certain rights regarding your personal data. You can exercise these rights by contacting us at gdpr@allardsupport.com. Please note that we may need to verify your identity before processing your request.

Click the link below to learn more about your rights: The data subject’s rights | IMY

These rights include:

  • Request access to your personal data.
  • Request correction of inaccurate or incomplete data.
  • Request erasure of your personal data in certain circumstances.
  • Object to processing of your personal data if there are legitimate grounds.
  • Request restriction of processing under specific conditions.
  • Request transfer of your personal data to another party.
  • Withdraw consent at any time, where processing is based on consent.

The aforementioned rights are elaborated further below:

Request access to your personal data (commonly referred to as a data subject access request): This allows you to obtain a copy of the personal data we hold about you and verify that we are processing it lawfully.

Request correction of your personal data: This allows you to correct any incomplete or inaccurate data we hold about you. Please note that we may need to verify the accuracy of the new data you provide.

Request erasure of your personal data: This allows you to request the deletion or removal of personal data when there is no legitimate reason for us to continue processing it. You may also request erasure if you have successfully exercised your right to object to processing, if we have processed your data unlawfully, or if we are required to erase it under applicable law. However, we may not always be able to comply with your request for erasure due to specific legal reasons, which we will notify you of if applicable.

Object to the processing of your personal data: You may object to the processing of your data if we are relying on legitimate interests (or those of a third party), and there are specific factors related to your situation that make you feel the processing impacts your fundamental rights and freedoms. You also have the right to object if we are processing your data for direct marketing. In some cases, we may demonstrate that we have compelling legitimate grounds to process your data that override your rights.

Request restriction of the processing of your personal data: You may request that we suspend the processing of your personal data in the following situations:

  • If you want us to verify the accuracy of the data.
  • If our processing is unlawful, but you do not wish to have the data erased.
  • If you need the data to establish, exercise, or defend legal claims, even if we no longer need it.
  • If you have objected to our processing, but we need to verify whether we have overriding legitimate grounds to continue using it.

Request the transfer of your personal data: You have the right to request that we transfer your personal data to you or to a third party in a structured, commonly used, readable format. This right applies only to automated data that you initially provided consent for us to use, or where the data was used to perform a contract with you.

Withdraw consent at any time: If we are processing your personal data based on your consent, you can withdraw it at any time. Please note that this will not affect the lawfulness of processing carried out before your withdrawal. If you choose to withdraw your consent, we may not be able to provide certain products or services, and we will inform you if this is the case at the time of withdrawal.