Privacy Policy

At Ramirent AB, we care about your privacy. This privacy policy informs you why we collect, use and share your personal data that you provide to us or that we collect in relation to (i) your customer relationship with us, or (ii) the customer relationship that the company you represent has with us. It is important that you read and understand this privacy policy, so we ask you to read it carefully. You are always welcome to contact us if you have any questions.

1. DATA CONTROLLER

Ramirent AB (registration number 556559-4610) (hereinafter "Ramirent", "us", "we" or "our") is the data controller for the processing of your personal data carried out in relation to (i) your customer relationship with us, or (ii) the customer relationship that the company you represent has with us. Ramirent is responsible for ensuring that your personal data is processed in accordance with this privacy policy and applicable data protection legislation.

2. COLLECTION OF PERSONAL DATA

When you register as a customer with us or are registered as a representative of the company that wishes to become a customer of ours, rent equipment from us, or otherwise contact us (for example through forms on our website or via our customer service), we may ask you to provide, and/or we may collect, the following categories of data:

• Personal and contact information: such as name, personal identity number, address, telephone number, email address and, if you represent a company, your position at the company.

• Financial information: such as invoicing and delivery address, payment and billing information, including historical payment information.

• Information about goods/services: details regarding rented equipment and/or ordered services, including previously rented equipment and/or used services.

• Information about how you interact with Ramirent: such as information about your contact and communication with us in our stores, through our website or via our customer service, as well as information about registration or participation in our events/functions.

When you apply to become a customer with us, Ramirent will, with the help of a third party, carry out a credit check on you and may in this connection collect the following categories of data:

• Credit report information: Ramirent only receives information about whether you, as a customer, are creditworthy or not.

The personal data that we ask you to provide us with and/or that we collect about you from third parties are necessary in order for you to be able to access our services, for you to be able to register as a customer with us, and for us to be able to enter into an agreement with you or the company you represent. If you do not provide the information we request, you will not be able to access our services or register as a customer with us, and we will not be able to enter into an agreement with you or the company you represent.

3. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

We may and will process your personal data for the following purposes and on the legal basis set out below.

Purpose
To be able to rent out equipment to you, provide you with services and administer (i) your customer relationship with us, or (ii) the customer relationship that the company you represent has with us.

Legal basis
If you are a private customer, the processing is necessary for the performance of our agreement with you.

If we process your data because you represent a company in the customer relationship with us, the processing is necessary for our legitimate interests and those of the company you represent, following a balancing of interests in which the following interests have been considered:

• Our and the company's interest in being able to establish who has entered into the agreement with us.

• Our and the company's interest in having a contact person at the company whom we can contact in the event of any problems or questions.

Purpose
We process your personal identity number when it is necessary to be able to reliably identify you.

Legal basis
If you are a private customer, the processing is necessary for the performance of our agreement with you. If we process your data because you represent a company in the customer relationship with us, the processing is necessary for our legitimate interests and those of the company you represent, following a balancing of interests in which the following interest has been considered:

• Our and the company's interest in being able to reliably establish who has entered into the agreement with us.

Purpose
To be able to send you marketing communications via email or SMS, to inform you of news regarding our services, request your feedback, or provide you with other relevant information about our services.

Legal basis
Legitimate interest, following a balancing of interests in which the following interest has been considered:

• Our legitimate interest in providing you with relevant information about Ramirent and in promoting our services. You may object to receiving such marketing communications at any time.

Purpose
To be able to evaluate, develop and improve our products, services and systems for customers in general, and to develop new products, services or systems.

Legal basis
Legitimate interest, following a balancing of interests in which the following interests have been considered:

• Our and our customers' interest in evaluating, developing and improving our services, products and systems.

• Our and our customers' interest in us providing relevant and up-to-date products, services and systems.

Purpose
To be able to fulfil our legal obligations under statutory requirements, court judgments or decisions by authorities (e.g. the Swedish Bookkeeping Act, the Anti-Money Laundering Act, or the rules on product liability and product safety, which may require the production of communications and information to the public and customers regarding product warnings and product recalls).

Legal basis
The processing is necessary for Ramirent to be able to fulfil legal obligations incumbent upon Ramirent.

Purpose
To be able to prevent, avert or investigate suspected irregularities or crimes against Ramirent, or in connection with legal proceedings, suspected fraud, or potential threats to the rights of Ramirent or others.

Legal basis
Legitimate interest, following a balancing of interests in which the following interests have been considered:

• Ramirent's interest in preventing, averting or investigating suspected irregularities or crimes against Ramirent;

• Ramirent's interest in having crimes or threats against its interests/rights investigated and proven;

• a third party's interest in having crimes or threats against its interests/rights investigated and proven; and/or

• the interest of Swedish or foreign authorities in conducting law enforcement activities and compiling evidence for such purposes.

4. TRANSFER AND SHARING OF PERSONAL DATA

Ramirent may share, or will share, your personal data with third parties as set out below.

Suppliers and subcontractors: Ramirent may share your personal data with our trusted service providers and/or subcontractors (such as hosting providers, IT system suppliers and companies that manage operation, technical support and maintenance of relevant IT systems, logistics companies and freight forwarders, as well as suppliers who assist us with marketing, such as media agencies or advertising agencies) who process your personal data on Ramirent's behalf and provide us with services so that we can fulfil our contractual obligations to you or the company you represent, and for other purposes set out in this privacy policy. We will always control and be responsible for the use of your personal data.

Credit reporting agencies: Your personal data may be shared with credit reporting agencies in order to assess your creditworthiness when you apply to become a customer of Ramirent.

Government authorities: Ramirent may disclose necessary information to government authorities such as the police, the Swedish Tax Agency, or other authorities if we are required by law to do so, or if you have consented to us doing so. We also share your personal data when we, in good faith, believe it is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a request from a government authority.

The Ramirent Group: Your personal data may be shared with companies within the Ramirent Group in cases where your data is specifically requested by another company within the Ramirent Group.

In the event of a merger, acquisition or sale: Should Ramirent become subject to a merger, an acquisition, or a sale of all or part of our assets, your personal data may be shared with a potential buyer, and if assets or Ramirent as a whole are acquired by a third party, personal data about our customers may be shared with such third party.

The third parties with whom we may/will share your personal data are all established within the EU/EEA.

5. TRANSFER OF PERSONAL DATA OUTSIDE THE EU/EEA

We do not transfer your personal data outside the EU/EEA.

6. COOKIES

We also use cookies and other similar technology on our website www.ramirent.se. Cookies are small text files placed on your device to collect and store useful information, in order to enhance the functionality of our website and make it easier to use. We may also use cookies and other similar technology for statistical purposes, to compile anonymous, aggregated statistics regarding, for example, the use of our website, which enables us to understand how users use the website and improve the user experience.

You can set your browser not to accept cookies, restrict the use of cookies, or delete cookies from your browser. However, cookies are an important part of how our website functions, so restricting cookies may affect the website's functionality.

To read more about how we use cookies, please see our cookie policy.

7. STORAGE OF PERSONAL DATA

Your personal data will only be stored for as long as necessary to fulfil the purposes defined in this privacy policy.

Ramirent will store your personal data until your customer relationship with Ramirent ends, which may occur manually or automatically due to inactivity for a period of 18 months. We may also retain certain of your personal data after your customer relationship with us has ended, for as long as required by statutory retention periods or as necessary for other legitimate interests, for example to comply with requirements to retain accounting records for seven (7) years. In such cases, we only retain your personal data for as long as permitted to fulfil our legitimate interests and/or for as long as required by statutory retention periods. After that, we delete your personal data.

8. YOUR RIGHTS

Right of access: You have the right to access the personal data we process about you and to obtain information about our processing of your personal data (the information is provided in the form of a register extract that includes, among other things, information about the categories of personal data we process about you and the categories of recipients to whom the personal data have been or will be disclosed) by requesting a so-called register extract. Please note that if we receive a request for access, we may ask for additional information to ensure efficient handling of your request and that the information is provided to the right person.

Right to rectification: You have the right to have inaccurate personal data that we process about you corrected without undue delay. Within the scope of this right, you also have the right to have incomplete personal data completed, taking into account the purpose of the processing.

Right to erasure: You also have the right to have your personal data erased without undue delay upon request, and we are in such cases obliged to erase the relevant personal data if, for example, any of the following circumstances apply: (i) the data is no longer necessary for the purposes for which it was processed, (ii) the data is processed unlawfully, or (iii) you withdraw the consent on which the processing is based and there is no other legal basis for the processing. However, we are not obliged to immediately erase the personal data in cases where continued processing is necessary, for example for us to be able to comply with a legal obligation, or for us to be able to establish, exercise or defend legal claims.

Right to restriction: You have the right to request that our processing of your personal data be restricted under certain conditions, for example if you contest the accuracy of the personal data we process, you may request a restriction of processing during the period we need to verify whether the personal data is accurate; or if we no longer need the personal data for the purposes of the processing, but you need it to establish, exercise or defend legal claims, you may request that we only store the data for that purpose.

Right to object: You also have the right, at any time and for reasons relating to your particular situation, to object to our processing of your personal data that is based on, for example, a legitimate interest (following a balancing of interests). If you object to such processing, we may no longer process your personal data for that purpose unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or that the processing is carried out to establish, exercise or defend legal claims. You always have the right to object to the processing of your personal data for direct marketing purposes, which includes profiling, and if you object to processing for direct marketing purposes, we may no longer process your personal data for such purposes.

Right to data portability: If our right to process your personal data is based either on your consent or on the performance of an agreement with you, you have the right, where the processing is carried out automatically, to receive a copy of the personal data relating to you that you have provided to us, in a structured, commonly used digital format, and to transfer that data to another data controller without hindrance from us. You further have the right to request that this data be transmitted directly from us to another data controller, where technically feasible (so-called data portability).

Right to withdraw your consent: If our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time by contacting us. Please note that if you withdraw your consent, this does not affect the lawfulness of the processing carried out on the basis of the consent before it was withdrawn.

If you wish to exercise your rights as described above, please use our request tool Falcony, which you can find here; Falcony – report a new observation or contact us using the contact details in section 11 below.

If you believe that our processing of your personal data violates applicable law, you have the right to lodge a complaint with the relevant supervisory authority within the EU/EEA in the country where you live or work, or in the country where the alleged infringement took place.
For example, in Sweden this is the Swedish Authority for Privacy Protection (IMY.se).

9. SECURITY

We maintain a reasonable level of security (including physical, electronic and administrative measures) to protect personal data from loss, destruction, misuse and unauthorised access or disclosure.

Please note that although we strive to maintain a reasonable level of security for personal data, no security system can prevent all potential security breaches.

10. CHANGES TO THIS POLICY

We reserve the right to amend this privacy policy. If we make any changes to this privacy policy, we will announce this on our website www.ramirent.se. The updated privacy policy may involve changes to how we handle your personal data, and it is therefore important that you review our privacy policy each time you use our services.

11. CONTACT US

If you have questions about the processing of your personal data, this privacy policy, or otherwise have comments regarding our processing of your personal data, please contact us or our Data Protection Officer at:

Ramirent AB
Attn: Data Protection Officer
Råsundavägen 12
169 67 Solna
Email: integritet@ramirent.se

Ramirent Internal Services AB
Attn: Data Protection Officer
Råsundavägen 12
169 67 Solna
Email: dpo@ramirent.com