Users

Users are people like you who use ICA Gruppen AB’s website and digital channels, such as www.icagruppen.se and social media pages. We are responsible for processing your data in a secure and correct manner.

Where do we collect personal data?

You yourself

We collect the personal data you provide to us when you use our website and our digital channels, contact us, or subscribe for our email postings.


Why do we process your personal data?

To manage subscriptions

We process your personal data to manage your subscriptions to press releases and other communication on our website and in social media. You have the right at any time to unsubscribe from such communication. One way you can do this is to click on an unsubscribe link directly in the email.

To communicate with you and address queries

We process your personal data to communicate with you and to address queries from you in digital channels, such as if you ask us questions in social media.

To evaluate and monitor your use of our digital channels

When you use our digital channels, such as icagruppen.se, we collect the information that you provide to us. This information is then used to evaluate and monitor your use of our digital channels, based on your browsing and clicking statistics, for example.

To manage and address legal requirements

We process your personal data to manage and address legal requirements, such as in a dispute or legal process.

To meet legal obligations

We must process your personal data to meet legal obligations, such as data protection laws.

To manage, protect and develop our systems and services

Your personal data is used by ICA Gruppen to manage, protect and develop our systems and services, such as to troubleshoot, log, develop, test and improve our systems and services.


Recipients with whom we share information

In certain cases we share your personal data with other recipients. If we share your personal data, we do so according to the premise that the recipient is responsible for processing your personal data in a secure and correct manner.


We share personal data with:

Service providers
We share your personal data with companies that provide services to us, including other ICA companies, such as IT services or management of subscriptions. These companies may only process your personal data in accordance with our instructions and may not use your personal data for their own purposes.

Other recipients
In certain cases we may share your personal data with other recipients, if necessary for a particular situation (such as to meet a legal obligation or to manage and meet legal requirements). Examples of such recipients include external advisers, authorities, courts, police, and potential buyers or sellers in connection with a company divestment or acquisition.


Detailed information about records

Manage subscriptions

Categories of personal data

• Identity information
• Contact information

Legal basis

Legitimate interest.
The processing is necessary for us to pursue our legitimate interest in communicating with you and directing offers to you.

Storage period

Your personal data is stored until you unsubscribe from an email service that you have subscribed for.

Communicate and address queries

Categories of personal data

• Your communication
• Identity information
• Contact information

Legal basis

Legitimate interest.
The processing is necessary for us to pursue our legitimate interest in responding to questions from you.

Storage period

For this purpose, the basic premise is that communication in digital channels is stored for an indefinite period of time. Overarching reports that do not included any personal data and statistics are stored for an indefinite period of time.

Evaluate and follow up your use of digital channels

Categories of personal data

• User-generated data
• Identity information

Legal basis

Legitimate interest.
The processing is necessary for us to pursue our legitimate interest in following up and evaluating your use of digital channels.

Storage period

Reports at an overarching level that do not include any personal data and statistics are stored for an indefinite period of time.

Manage and meet legal requirements

Categories of personal data

• User-generated data
• Your communication
• Identity information, including personal identity number
• Contact information

Legal basis

Legitimate interest.
The processing is necessary for us to pursue our legitimate interest in managing and meeting legal requirements. Processing of your personal identity number is necessary in view of the purpose of the processing.

Storage period

Your personal data is stored during the time that is needed for this purpose.

Meet legal obligations

Categories of personal data

• User-generated data
• Your communication
• Identity information, including personal identity number
• Contact information

Legal basis

Legal obligation.
The processing is necessary for us to be able to meet our legal obligations. Processing of your personal identity number is necessary in view of the purpose of the processing.

Storage period

Your personal data is stored for as long as necessary in relation to the respective legal obligation.

Management, protection and development of our systems and services


Categories of personal data

• User-generated data
• Your communication
• Identity information, including personal identity number
• Contact information

Legal basis

Legitimate interest.
The processing is necessary for us to pursue our legitimate interest to manage the lifecycle of, protect and develop our systems and services.

Storage period

Your personal data is stored for the same period that is indicated in relation to the respective purposes of processing your personal data stated above. Personal data in logs is stored for troubleshooting and incident handling for a period of 13 months from the date of the log event.


Detailed information about recipients with whom we share your personal data

Authorities

Purpose

We may provide necessary information to authorities if we are obligated by law to do so.

Legal basis for transfer

Legal obligation.
The processing is necessary to meet a legal obligation.

External advisers

Purpose

We may provide necessary information to external advisers, such as accounting firms, law firms or other legal agencies if we are obligated to do so by law or to manage or meet a legal requirement.

Legal basis for transfer

Legal obligation and legitimate interest.
The processing is necessary to meet a legal obligation or to pursue our legitimate interest in managing and meeting legal requirements.

Courts, counterparties, etc.

Purpose

To manage and meet a legal requirement, we may share personal data with other parties.

Legal basis for transfer

Legitimate interest.
The processing is necessary to pursue our legitimate interest in managing and meeting legal requirements.

Law enforcement authorities, e.g., police

Purpose

We may share personal data with law enforcement authorities, such as the police, if we are obligated to do by law or to contribute to an ongoing criminal investigation.

Legal basis for transfer

Legal obligation and legitimate interest.
The processing is necessary to meet a legal obligation or to pursue our legitimate interest in contributing to an ongoing criminal investigation upon request.

Potential buyers and sellers

Purpose

We may share information with potential buyers and sellers if we were to sell all or parts of a business or in connection with a merger.

Legal basis for transfer

Legitimate interest.
The processing is necessary to pursue our legitimate interest in carrying out a divestment or participating in a merger.

 

Read more