We at Tore Group AB understand the importance of privacy for our customers, suppliers, partners, and visitors. Our goal with this policy is to clearly and transparently describe how we collect, use, store, and transfer your information, ensuring that your personal data is handled securely. Tore Group’s processing of personal data complies with the General Data Protection Regulation (GDPR) (2016/679). This policy outlines how we meet GDPR requirements and informs you of your rights as a data subject.
We may update this policy periodically. The latest version is always available on our website.
The controller of personal data is:
Tore Group AB
559348-3695
Box 13034, 103 01 Stockholm, Sweden
For any privacy-related inquiries, you can contact us at:
Personal data refers to any information that directly or indirectly identifies a natural person. Tore Group AB processes personal data in several ways, mainly through direct interactions. Below, we outline common scenarios where data processing occurs and the legal basis for each.
When you contact us via phone, email, or other means, we process the necessary personal data to respond to your inquiry. This processing is based on our contractual obligation to provide assistance. We may also follow up on your request, which is based on our legitimate interests.
When visiting our website, your IP address may be processed to enable access, which is based on contractual necessity. If you consent to cookies, we collect usage data about how you interact with our site, which may include personal data. The legal basis for this processing is your given consent. You can manage your cookie preferences via our Cookie Policy.
We process personal data to manage customer, supplier, and partner interactions, fulfill orders, and comply with contractual agreements. If you do not provide the required personal data, we may be unable to fulfill our obligations to you. Some processing is also required for legal compliance, such as tax and accounting regulations.
If no contractual relationship exists, we may process your data for legitimate interests, including follow-ups or direct marketing. You always have the right to opt out of marketing communications at any time.
If you take part in our marketing or other projects, our processing of your personal data will be governed by specific agreements. Additional details about personal data handling will be included in these agreements.
We maintain a presence on Facebook, Instagram, LinkedIn, and other social media platforms. When you engage with us, personal data is shared with the platform provider. The purpose of our social media presence is marketing and engagement, which is based on legitimate interests. For more details, please refer to each platform’s privacy policy.
To provide our services, we engage external suppliers such as cloud service providers, IT maintenance providers, and system administrators. These providers process personal data under data processing agreements that ensure compliance with GDPR.
In some cases, we are legally required to share personal data with authorities, such as the Swedish Tax Agency. Additionally, if you use social media to interact with us, your data is shared with the respective platform provider.
If you consent to cookies, data may be shared with:
We aim to process all personal data within the EU/EEA. However, some services involve data transfers to third countries (e.g., the United States) where GDPR protections do not apply. In such cases, standard contractual clauses (SCCs) are used to ensure data protection.
If you interact with us on social media or accept cookies, data may be transferred to third countries. You can contact us to learn more about these transfers and the protection measures in place.
As a data subject, you have several rights under Articles 15-22 of the GDPR:
You can request information about what personal data we process and obtain a copy of your data.
If your data is incorrect or incomplete, you can request corrections.
You may, in some cases, request to transfer your data to another service provider.
If processing is based on legitimate interests, you can object. We may continue processing only if we can demonstrate compelling legitimate reasons.
You can request to limit how we process your data under certain conditions, such as during data accuracy verification.
You may request deletion of your data under certain circumstances, such as if:
However, some legal obligations (e.g., tax laws) may prevent immediate deletion.
For any questions about data processing, you can contact us at:
If you believe we are not handling your personal data in accordance with the law, you may file a complaint with the Swedish Authority for Privacy Protection (IMY):