Policy for handling personal data

From 25 May 2018, Sweden and the entire EU have been subject to a new data protection regulation, GDPR for short. Myntauktioner i Sverige AB has adopted the policy below for handling personal data.

Introduction

The purpose of this policy is to ensure that Myntauktioner i Sverige AB handles personal data in accordance with the EU's data protection regulation (General Data Protection Regulation - GDPR). The policy covers all processing where personal data is handled. The CEO has overall responsibility for the content of this policy and that it is implemented and complied with by the business. This policy is anchored in all our employees.

Customer register

Myntauktioner i Sverige AB's customer register consists of sellers, buyers and readers of our newsletter. Which information is stored depends on what the customer has given consent to. When registering for a newsletter, only name and email address are stored. When selling and buying, name, address, email address and sometimes account number are stored.

We collect personal data in 3 different ways

  • A: Through our newsletter, where the customer can fill in their name and email.
  • B: In case of selling, the customer then fills in his information on the delivery agreement.
  • C: In case of purchase, the customer can fill in their information when they sign out a bid shovel or alternatively place a bid via our auction page.

We save this data as long as the customer is active with us or as long as we need to fulfill legal obligations. In the event of inactivity or on request from a customer, we delete the personal data. The register is never shared with another party.

List of systems in which personal data appears:

  • Excel document
  • Websites (Ex. MailChimp)
  • External hard drives
  • Accounting software (Visma)
  • Personal data in physical form is stored in a cash vault.

Personal data is used to be able to:

  • Invoice
  • Send final reports and invoices to customers
  • Send newsletter
  • Contact the customers
  • Pay out the auction proceeds

The right of access

The customer has the right to access at any time the personal data that Myntauktioner i Sverige AB has registered about him, for example what information we have registered, what purposes the register serves, what categories of personal data and who the recipients of the information may possibly be.

Miscellaneous

In the case of distribution of information and mailings to several members via e-mail, this is done with so called "hidden recipient" in order not to reveal members' e-mail addresses.