GDPR - G A Lindberg
Information about how G A Lindberg processes personal data
GDPR – Privacy and Personal Data Policy
G A Lindberg respects your privacy. This Privacy and Personal Data Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, purchase from our e-commerce platform, receive information from us or otherwise interact with G A Lindberg.
Personal data means any information that can be directly or indirectly linked to an individual, such as a name, email address, phone number or information connected to a contact person at a company.
Data controller
G A Lindberg ChemTech AB is the data controller for the processing of personal data described in this policy.
G A Lindberg ChemTech AB
Company registration number: 556033-0028
Raseborgsgatan 9
164 74 Kista
Sweden
Email: info@galindberg.se
Phone: +46 20-73 20 00
When do we process personal data?
We process personal data when it is necessary for us to conduct our business, for example when you:
- contact us by email, phone or via forms on our website
- request a quotation, technical advice or support
- place an order or create an account in our e-commerce platform
- act as a contact person for a customer, supplier or business partner
- register for newsletters, training sessions, events or trade fairs
- visit our website and accept cookies
- communicate with us regarding customer service, deliveries or complaints
What personal data do we process?
The personal data we process may include:
- name
- job title/role and company name
- email address and phone number
- address details
- customer number, company registration number and company-related information
- order history, quotation requests, delivery information and invoice details
- information from customer support, technical advice and case management
- information related to training sessions, events and trade fairs
- newsletter subscription details and communication preferences
- technical information from website visits, such as IP address, cookie ID, device, browser and user behaviour on the website
We do not normally process sensitive personal data. We therefore ask you not to send sensitive information to us unless it is necessary for the specific matter.
Where do we collect personal data from?
We primarily collect personal data directly from you or from the company you represent. We may also receive information from public sources, business partners, trade fairs, suppliers or other business contacts when relevant to our customer relationship, supplier relationship or business dialogue.
Purposes and legal basis
We process personal data for the following purposes:
| Purpose | Examples of data | Legal basis |
|---|---|---|
| Managing enquiries, quotations and customer dialogue | Name, email, phone number, company, case information | Legitimate interest or steps prior to entering into an agreement |
| Managing orders, deliveries and e-commerce accounts | Contact details, order details, delivery address, customer number | Agreement or legitimate interest |
| Invoicing, payment and accounting | Invoice details, order history, payment information | Legal obligation |
| Customer service, complaints and technical support | Contact details, case history, product information | Agreement or legitimate interest |
| Marketing, newsletters and information about products, training sessions and events | Name, email, company, area of interest, subscription status | Consent or legitimate interest |
| Following up customer relationships and sales | Contact details, order history, customer activity | Legitimate interest |
| Developing our website, e-commerce platform and digital services | Technical data, statistics, user behaviour | Consent for non-essential cookies or legitimate interest for necessary operation |
| Security, troubleshooting and operation of website and IT systems | Technical information, logs, IP address | Legitimate interest |
| Complying with legal and regulatory requirements | Information required by law or authority decision | Legal obligation |
When we rely on legitimate interest as the legal basis, we carry out a balancing assessment. This means that we assess that our interest in processing the data outweighs the individual’s interest in the data not being processed, for example in order to manage customer relationships, provide technical support, follow up business activities or inform about relevant products and services.
Newsletters and marketing
If you subscribe to our newsletter or complete a form to receive information from us, we process your contact details in order to send relevant information, such as news, product information, training invitations, events and offers.
You can unsubscribe from our communications at any time by using the unsubscribe link in the email or by contacting us. If you unsubscribe, we may need to retain limited information to ensure that you do not receive further communications.
How long do we store personal data?
We store personal data only for as long as necessary for the purposes for which the data was collected, or for as long as we are required to retain it by law.
Examples of retention periods:
- Customer and contact details are stored for as long as the customer relationship or business dialogue is ongoing and thereafter for as long as necessary for follow-up, support or legal claims.
- Quotation, order and delivery information is stored for as long as necessary to manage the business relationship, customer support, complaints and warranty/liability matters.
- Invoice and accounting records are stored in accordance with applicable accounting rules.
- Newsletter data is stored until you unsubscribe or withdraw your consent.
- Data related to website statistics and cookies is stored in accordance with the retention periods stated in our cookie information and your cookie settings.
- Support and case history is stored for as long as it is relevant in order to provide support, follow up cases and ensure quality.
We continuously work to delete, anonymise or update personal data that is no longer needed.
Who may access personal data?
Only employees who need the information to perform their work have access to personal data at G A Lindberg.
We may also share personal data with external parties when necessary, such as:
- IT and system suppliers
- providers of e-commerce, CRM and marketing automation systems
- transport and logistics partners
- payment, finance and invoicing providers
- suppliers and business partners when needed for technical support, quotations, orders or deliveries
- analytics and advertising partners, if you have consented to such cookies
- authorities when we are required to do so by law
When a supplier processes personal data on our behalf, we use data processing agreements. This means that the supplier may only process the data according to our instructions and must protect the data in a secure manner.
Transfers of personal data outside the EU/EEA
We strive to process personal data within the EU/EEA. In certain cases, personal data may be processed by suppliers or business partners outside the EU/EEA, for example when using certain digital services, analytics tools or cloud-based systems.
If personal data is transferred to a country outside the EU/EEA, we ensure that there is a valid legal basis and appropriate safeguards in place, such as the European Commission’s Standard Contractual Clauses or another approved transfer mechanism.
Security
We apply technical and organisational security measures to protect personal data against unauthorised access, loss, alteration or unlawful processing.
This includes limiting access rights, working with secure systems, following internal procedures and using agreements with suppliers who process personal data on our behalf.
Your rights
You have the right to receive information about how we process your personal data. You also have the right to:
- request access to the personal data we process about you
- request correction of inaccurate or incomplete data
- request deletion of personal data in certain cases
- request restriction of processing
- object to processing based on legitimate interest
- object to direct marketing
- request data portability when the processing is based on consent or agreement
- withdraw your consent when processing is based on consent
If you wish to exercise any of your rights, you are welcome to contact us. We may need to verify your identity before disclosing or changing any information.
We will respond to your request without undue delay and normally within one month. If the request is complex, or if we have received a large number of requests, the response period may be extended in accordance with applicable data protection rules.
Complaints
If you believe that we process your personal data incorrectly, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection, IMY.
We appreciate it if you contact us first so that we have the opportunity to respond to your questions or concerns.
Automated decision-making
We do not use automated decision-making that has legal effects concerning you or that similarly significantly affects you.
Links to other websites
Our website may contain links to other websites. G A Lindberg is not responsible for the content of external websites or for how they process personal data. We recommend that you read the privacy policy of each website you visit.
Cookies
Our website uses cookies. Cookies are small text files that are stored on your computer, mobile phone or other device when you visit a website.
We use cookies to make the website function, improve the user experience, analyse website traffic and, in some cases, support marketing activities.
What types of cookies do we use?
We may use the following types of cookies:
Necessary cookies
These cookies are required for the website and e-commerce platform to function, for example for login, security, language settings and shopping basket functionality. Necessary cookies may be used without consent.
Statistics and analytics cookies
These cookies help us understand how the website is used, for example which pages are visited and how visitors navigate the website. These cookies are only used if you have given your consent.
Marketing cookies
These cookies may be used to personalise advertising and measure the effect of marketing activities. These cookies are only used if you have given your consent.
Managing cookies
When you visit our website, you can choose which cookies you want to accept. You can change or withdraw your consent at any time via our cookie settings.
You can also block or delete cookies in your browser. If you block necessary cookies, certain functions on the website or in the e-commerce platform may stop working correctly.
Changes to this policy
We may update this Privacy and Personal Data Policy from time to time. The latest version is always available on our website.
Last updated: 2026-09-16