Privacy policy
LOTS Group’s Privacy Statement
LOTS Group is wholly-owned by Scania CV AB. As a Scania Company a core value for us is respect for the individual. This is the foundation when we interact with you in your role as our valued customer, a co-worker in our global organisation, a trusted business partner/supplier or when visiting our websites or premises.
We process your personal data when it is needed to:
- Deliver our products and services,
- Fulfil and follow up contractual obligations, ours as well as yours,
- Fulfil legal obligations and legitimate requests from law enforcement and other authorities,
- Provide information about our products and services as well as upcoming events,
- Improve quality and develop existing, as well as new, products and services as well as our organization.
We strive to always handle and protect your personal data with respect and integrity. Sometimes we utilize trusted business partners to help us deliver our products and services. In those cases when we need to share your data with our business partners, we ensure that they treat your data with the same respect and integrity that we do. In this privacy statement we would like to inform you what personal data we might process, why we are doing it and how we ensure that your rights and your privacy is respected.
What data do we collect?
The data we collect depends on your relationship with LOTS Group. In the tables below, you can access more information about the data we collect for different purposes.
What personal data do we process from you as a customer?
When you represent your company, we need to process your personal data for the purposes listed below.
| Why do we process your data? | What categories of personal data do we process? | Legitimate interest |
|---|---|---|
| To create a database of prospect customers, e.g., by using data from third parties. | Organizational data (such as company name, country, company address and phone number). Contact information (such as name, email, phone number, address). | Legal ground |
| To provide a quotation | Organizational data (such as company name, country, company address and phone number). Contact information (such as name, email, phone number, address). Driving behaviour, such as driving patterns, geo-location and operating hours. Identification data, for example the vehicle identification numbers, driver ID, IP number, MAC address, IT-system and user ID. Performance data from the vehicle, for example information from vehicle components, fuel consumption, brake usage, gear shifting, battery usage, engine data and error codes. Images and video footage. | Legitimate interest |
| To deliver upon a contract | Organizational data (such as company name, country, company address and phone number). Contact information (such as name, email, phone number, address). | Contractual obligation |
| To provide services and support, and to follow up on contractual obligations | Organizational data (such as company name, country, company address and phone number). Contact information (such as name, email, phone number, address). Contact preferences. Purchases and transactions. | Contractual obligation |
| To inform you about updates, products and services that we believe may be of interest | Contact information (such as name, email, phone number, address). Contact preferences. | Legitimate interest |
| To comply with legal obligations and legitimate requests from law enforcement and other authorities | Contact information (such as name, email, phone number, address). Delivery address. Purchases and transactions. Financial data such as credit ratings, bank accounts and payments as well as contractual related data such as contract number, order number, invoices. | Legal obligation or legitimate interest |
| To provide you with requested information and relevant updates | Contact information (such as name, email, phone number, address). | Legitimate interest |
What personal data do we process regarding you as an employee?
When you apply for a position at LOTS Group we ask you to provide some personal data in order to process your application, for example contact information and reference information such as previous work history, education, certificates.
During your employment at LOTS Group we process your personal data in order to:
- Administer your employment,
- Fulfil our legal obligations as an employer,
- Fulfil our legitimate interest to e.g.
- Steer, plan and evaluate the work
- Protect company employees and assets
- Contact and inform employees
- Being transparent to owners and the general public
After you have left the company we process limited amounts of data required to fulfil our legal obligations, for example data showing your employment period.
| Why do we process your data? | What categories of personal data do we process? | Legal ground |
|---|---|---|
| Staff administration | Contact information (such as name, email, phone number, address). Employment data (such as employment number, User-ID, Photos). Financial information (such as salary, taxes, expenses, time reports, bank account number etc). | Contractual obligation |
| Fulfil legal obligations (e.g. reporting to authorities, whistleblowing, documenting rehabilitation, comply with collective agreements etc.) and comply with legitimate requests from law enforcement and other authorities. | Contact information (such as name, email, phone number, address). Employment data (such as employment number, User-ID, Photos). Citizenship. Date of birth. License registration Financial information (such as salary, taxes, expenses, time reports, bank account number etc). Union membership (to fulfil the collective agreement, the data is collected as needed). Access logs from IT-systems and entry systems. IT-logs from applications and network services. Camera surveillance and images. Rehabilitation data. | Legal obligation or Legitimate interest |
| Planning and following up | Contact information (such as name, email, phone number, address). Employment data (such as employment number, User-ID, Photos). Organizational information (place of work, cost centre, direct manager etc). Performance evaluations. Development plans. | Legitimate interest |
| To provide access to our ITsystems and to improve our systems | Contact information (such as name, email, phone number, address). Employment data (such as employment number, User-ID, Photos). User preference settings in systems. Logs of your usage of our systems. | Legitimate interest |
| Safety in case of emergency | Contact information (such as name, email, phone number, address). Employment data (such as employment number, User-ID, Photos). Next of kin. Citizenship. Date of birth. | Legitimate interest or protection of your vital interest |
| To protect our employees and our company assets | Contact information (such as name, email, phone number, address). Employment data (such as employment number, User-ID, Photos). Access logs from IT-systems and entry systems. IT-logs from applications and network services. Camera surveillance. Security incident reports. Misconduct incident reports. | Legitimate interest |
| Transfer of personal data externally in order to identify you as a LOTS employee or to enable you to perform your work duties | Contact information (such as name, email, phone number, address). Employment data (such as employment number, User-ID, Photos). License registration. Personal data on contracts. Images, film and audio. | Legitimate interest |
| To analyse, improve and develop existing and new services and products, as well as our organization | Contact information (such as name, email, phone number, address). Employment data (such as employment number, User-ID, Photos). Citizenship. Date of birth. License registration. Organizational information (place of work, cost centre, direct manager etc). Access logs from IT-systems and entry systems. IT-logs from applications and network services. Organizational information (place of work, cost centre, direct manager etc). Performance evaluations. Development plans. Driving behaviour, such as driving patterns, geo-location, operating hours and preference settings. Identification data, for example the vehicle identification numbers, driver ID, IP number, MAC address, IT-system and user ID. Performance data from the vehicle, for example information from vehicle components, fuel consumption, brake usage, gear shifting, battery usage, engine data and error codes. | Legitimate interest |
| To provide you with requested information and relevant updates. | Contact information (such as name, email, phone number, address) | Legitimate interest |
What personal data do we process from you as a business partner/ supplier?
If you work as a representative for a supplier that provides products and services to LOTS Group we process limited amounts of your personal data, e.g. your contact information and identification. This is used to evaluate your offering, manage a contract and provide you with access to relevant IT-systems.
| Why do we process your data? | What categories of personal data do we process? | Legal ground |
|---|---|---|
| To evaluate a proposal from you or your employer, including background checks | Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address and phone number) If you are a sole trader, we also process financial data such as credit ratings and prices Background information (such as personal or professional conditions and characteristics, financial data, connections to government officials and - if legally permitted – possible criminal offences). | Legitimate interest |
| To perform contracts with you or your employer | Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address and phone number, business organisation number) If you are a sole trader, we also process financial data such as credit ratings, bank accounts and payments | Contractual obligation or legitimate interest |
| To provide access to our ITsystems | Contact information (such as name, email, phone number, address) User-id Language settings in systems Logs of your usage of our systems | Legitimate interest |
| Transfer of personal data externally in order to identify you as a LOTS business partner/supplier | Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos) | Legitimate interest |
| To communicate with yourself or your employer | Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address, phone number and business organisation number) | Legitimate interest |
| To analyse, improve and develop exisiting and new products and services, as well as our organization | Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address, phone number and business organisation number) If you are a sole trader, we also process financial data such as credit ratings, bank accounts and payments Logs of your usage of our systems Driving behaviour, such as driving patterns, geo-location, operating hours and preference settings Identification data, for example the vehicle identification numbers, driver ID, IP number, MAC address, IT-system and user ID Performance data from the vehicle, for example information from vehicle components, fuel consumption, brake usage, gear shifting, battery usage, engine data and error codes | Legitimate interest |
| To comply with legal obligations and legitimate requests from law enforcement and other authorities | Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address, phone number and business organisation number) Financial data such as credit ratings, bank accounts and payments as well as contractual related data such as contract number, order number, invoices Citizenship Date of birth License registration Access logs from IT-systems and entry systems, IT-logs from applications and network services | Legal obligations or legitimate interest |
| To provide you with requested information and relevant updates | Contact information (such as name, email, phone number, address) | Legitimate interest |
What personal data do we process from you as a visitor?
When you visit our website or premises, we process data about you to be able to fulfil the purpose of your visit and make your visit successful and safe. This may include contact information and driving license number, as well as food preferences and co-traveller information.
| Why do we process your data? | What categories of personal data do we process? | Legal ground |
|---|---|---|
| Evaluate website usage and enhance our website | IP-address Browser settings Type of device used to access the site | Legitimate interest |
| To enhance your browsing experience | IP-address. GEO-location. Browser type and version. Operating system. Date and time for you visit. URL of the referring site. Browsing country. | Legitimate interest |
| To fulfil the purpose of your visit to our premises | Contact information (such as name, email, phone number, address). Co-traveller information (such as name, email, phone number, address, age). Organizational data (such as company name, country, company address, phone number and business. organisation number). Language. Food preferences. Travelling and lodging details. Driver license. Host details. | Legitimate interest |
| To protect our visitors and our company assets | Contact information (such as name, email, phone number, address) Access logs from IT-systems and entry systems, IT-logs from applications and network services, Camera surveillance Security incident reports | Legitimate interest |
| To provide you with requested information, services and updates, including webcasts, annual reports. | Contact information (such as name, email, phone number, address). Organizational data (such as company name, country, company address, phone number and business organisation number). Language. | Legitimate interest |
How do we collect your data?
You directly provide us with most of the data we collect. We collect data and process data when you:
- Use or view our website via your browser’s cookies
- Contacts us through any of our digital platforms
- Enters into any contract with us
- Visit any of our premisis
We may also receive your data indirectly from the following sources:
- As a LOTS Driver the vehicle you drive also provides us with information from the vehicle analytic system
How will we use your data?
We collect your data so that we can:
- Fulfil our contractual obligations towards you
- Manage your account
- Develop and optimize our processes and services
Do we share personal data with third parties?
To provide the best services we utilize our global organization and a global network of trusted partners. This means that we may – from time to time – share your data (all or selected parts) within the LOTS Group as well as with trusted business partners that help us. Typical examples include:
- When you as a driver or LOTS employee report a deviation or safety issue, we might share the report with our customers, in order to resolve the issue
- When you as a LOTS employee utilize LOTS owned equipment your data may be process by our equipment suppliers or safety systems suppliers
- We may process your data in IT-systems that are developed, delivered or hosted by our external IT-partners
- When we are doing research and development, we may share data with universities, research facilities or other trusted partners
In cases where we need to share your data with our business partners, we ensure that they treat your data with the same respect and integrity as we do. We may also share your data with public authorities if required by law or a legitimate legal request is received from law enforcement or another authority.
How do we process and store your data?
LOTS is a global company with operations in several countries. This means that we might sometimes choose to process your data (all or selected parts) inside as well as outside of the European Union. When doing so we always comply with existing regulations and ensure that your data is handled in a secure way. If your data is transferred out of the European Union this is done using appropriate transfer mechanisms.
In this context ‘processing’ means any operation or set of operations on personal data such as; collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
How do we protect your data?
We are committed to protecting your data. We take all appropriate and reasonable legal, technical and organizational security measures to adequately protect the personal data that we process. Our security measures are continuously improved in line with the development of available security products and services.
How long do we keep your data?
Specific processing activities have their own individual retention periods applicable to them as per the legal basis and/or purpose of processing. We, therefore, minimise or delete your data as soon as it is no longer needed to:
- Fulfil our contractual obligations towards you
- Fulfil the purpose for which the data was collected
- Fulfil our legal obligations
What are your data protection rights?
Right of access
You can request a registry extract showing what personal data we process regarding you. Once we have confirmed your identity, the extract will be handed over to you in a secure way.
Right to rectification
You have the right to update your information to ensure that we always have the correct information.
Right to erasure
You may, without undue delay, have your personal data deleted if any of the following conditions apply:
- If the data is no longer needed for the purposes for which it was collected.
- If you have objected to its use and there are no other legitimate grounds for us to use it.
- If the processing is based solely on your consent and you revoke your consent.
- If deletion is required to fulfil a legal obligation.
Right to object
You are always entitled to object to processing of your personal data for direct marketing. This is an absolute right, which means that if you object or unsubscribe, we are going to stop all further use of your data for direct marketing. You also have the right to object to any processing that we base on legitimate interest. You must then specify in detail what you object to and why. The processing will then stop unless we demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or show that our processing is for the establishment, exercise or defence of legal claims.
Right to restriction
You are entitled to request a temporary limitation on processing your data. Processing may be limited in the following situations:
- When you believe your data is incorrect and you have therefore requested a correction with us. You may then request that processing of your data be limited while we validate if your data is incorrect.
- When the data processing is unlawful, but you oppose to your data being deleted and instead request that the use of these data be restricted.
- When you need your data to be able to determine, enforce or defend legal claims, even if we no longer need your data for the purpose of our processing.
Right to data portability
You are entitled to obtain the data you have provided to us in order to process it elsewhere. This right only applies in cases where our processing of your data is based on the legal ground that you have given your consent to the data processing or if you have entered into a contract with us. Click here to contact our DPO.
Notification of violation (complaint) If you believe your data is being processed in violation of current regulations, please report it to us as soon as possible. You also have the right to file a complaint with the Data Protection Authority.