LOTS Group's Privacy Statement
LOTS Group is wholly-owned by Scania CV AB. As a Scania Company a core value for us is respect for the individual. This is the foundation when we interact with you in your role as our valued customer, a co-worker in our global organisation, a trusted business partner/supplier or when visiting our websites or premises.
We process your personal data when it is needed to:
• deliver our products and services,
• fulfil and follow up contractual obligations, ours as well as yours,
• fulfil legal obligations and legitimate requests from law enforcement and other authorities,
• provide information about our products and services as well as upcoming events,
• improve quality and develop existing, as well as new, products and services as well as our organization.
We strive to always handle and protect your personal data with respect and integrity. Sometimes we utilize trusted business partners to help us deliver our products and services. In those cases when we need to share your data with our business partners, we ensure that they treat your data with the same respect and integrity that we do. In this privacy statement we would like to inform you what personal data we might process, why we are doing it and how we ensure that your rights and your privacy is respected.
What data do we collect?
The data we collect depends on your relationship with LOTS Group. In the tables below, you can access more information about the data we collect for different purposes.
What personal data do we process from you as a customer?
When you represent your company, we need to process your personal data for the purposes listed below.
Why do we process your data? |
What categories of personal data do we process? |
Legal ground |
To create a database of prospect customers, e.g., by using data from third parties. |
|
Legitimate interest |
To provide a quotation |
|
Legitimate interest |
To deliver upon a contract |
|
Contractual obligation |
To provide services and support, and to follow up on contractual obligations |
|
Contractual obligation |
To inform you about updates, products and services that we believe may be of interest |
|
Legitimate interest |
To comply with legal obligations and legitimate requests from law enforcement and other authorities |
|
Legal obligation or legitimate interest |
To provide you with requested information and relevant updates. |
• Contact information (such as name, email, phone number, address) |
Legitimate interest |
What personal data do we process regarding you as an employee?
When you apply for a position at LOTS Group we ask you to provide some personal data in order to process your application, for example contact information and reference information such as previous work history, education, certificates.
During your employment at LOTS Group we process your personal data in order to:
administer your employment,
fulfil our legal obligations as an employer
fulfil our legitimate interest to e.g.:
steer, plan and evaluate the work
protect company employees and assets
contact and inform employees
being transparent to owners and the general public
After you have left the company we process limited amounts of data required to fulfil our legal obligations, for example data showing your employment period.
Why do we process your data? |
What categories of personal data do we process? |
Legal ground |
Staff administration |
|
Contractual obligation |
Fulfil legal obligations (e.g. reporting to authorities, whistleblowing, documenting rehabilitation, comply with collective agreements etc.) and comply with legitimate requests from law enforcement and other authorities. |
|
Legal obligation or Legitimate interest |
Planning and following up |
|
Legitimate interest |
To provide access to our ITsystems and to improve our systems |
|
Legitimate interest |
Safety in case of emergency |
|
Legitimate interest or protection of your vital interest |
To protect our employees and our company assets |
|
Legitimate interest |
Transfer of personal data externally in order to identify you as a LOTS employee or to enable you to perform your work duties |
|
|
To analyse, improve and develop existing and new services and products, as well as our organization |
|
Legitimate interest |
To provide you with requested information and relevant updates. |
|
Legitimate interest |
What personal data do we process from you as a business partner/ supplier?
If you work as a representative for a supplier that provides products and services to LOTS Group we process limited amounts of your personal data, e.g. your contact information and identification. This is used to evaluate your offering, manage a contract and provide you with access to relevant IT-systems.
Why do we process your data? |
What categories of personal data do we process? |
Legal ground |
To evaluate a proposal from you or your employer, including background checks |
|
Legitimate interest |
To perform contracts with you or your employer |
|
Contractual obligation or legitimate interest |
To provide access to our ITsystems |
|
Legitimate interest |
Transfer of personal data externally in order to identify you as a LOTS business partner/supplier |
|
Legitimate interest |
To communicate with yourself or your employer |
|
Legitimate interest |
To analyse, improve and develop exisiting and new products and services, as well as our organization |
|
Legitimate interest |
To comply with legal obligations and legitimate requests from law enforcement and other authorities |
|
Legal obligations or legitimate interest |
To provide you with requested information and relevant updates |
|
Legitimate interest |
What personal data do we process from you as a visitor?
When you visit our website or premises, we process data about you to be able to fulfil the purpose of your visit and make your visit successful and safe. This may include contact information and driving license number, as well as food preferences and co-traveller information.
Why do we process your data? |
What categories of personal data do we process? |
Legal ground |
Evaluate website usage and enhance our website |
|
Legitimate interest |
To enhance your browsing experience |
|
Legitimate interest |
To fulfil the purpose of your visit to our premisis |
|
Legitimate interest |
To protect our visitors and our company assets |
|
Legitimate interest |
To provide you with requested information, services and updates, including webcasts, annual reports. |
|
Legitimate interest |
How do we collect your data?
You directly provide us with most of the data we collect. We collect data and process data when you:
Use or view our website via your browser’s cookies
Contacts us through any of our digital platforms
Enters into any contract with us
Visit any of our premisis
We may also receive your data indirectly from the following sources:
As a LOTS Driver the vehicle you drive also provides us with information from the vehicle analytic system
How will we use your data?
We collect your data so that we can:
Fulfil our contractual obligations towards you
Manage your account
Develop and optimize our processes and services
Do we share personal data with third parties?
To provide the best services we utilize our global organization and a global network of trusted partners. This means that we may – from time to time – share your data (all or selected parts) within the LOTS Group as well as with trusted business partners that help us. Typical examples include:
When you as a driver or LOTS employee report a deviation or safety issue, we might share the report with our customers, in order to resolve the issue
When you as a LOTS employee utilize LOTS owned equipment your data may be process by our equipment suppliers or safety systems suppliers
We may process your data in IT-systems that are developed, delivered or hosted by our external IT-partners
When we are doing research and development, we may share data with universities, research facilities or other trusted partners
In cases where we need to share your data with our business partners, we ensure that they treat your data with the same respect and integrity as we do. We may also share your data with public authorities if required by law or a legitimate legal request is received from law enforcement or another authority.
How do we process and store your data?
LOTS is a global company with operations in several countries. This means that we might sometimes choose to process your data (all or selected parts) inside as well as outside of the European Union. When doing so we always comply with existing regulations and ensure that your data is handled in a secure way. If your data is transferred out of the European Union this is done using appropriate transfer mechanisms.
In this context ‘processing’ means any operation or set of operations on personal data such as; collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
How do we protect your data?
We are committed to protecting your data. We take all appropriate and reasonable legal, technical and organizational security measures to adequately protect the personal data that we process. Our security measures are continuously improved in line with the development of available security products and services.
How long do we keep your data?
Specific processing activities have their own individual retention periods applicable to them as per the legal basis and/or purpose of processing. We, therefore, minimise or delete your data as soon as it is no longer needed to:
Fulfil our contractual obligations towards you
Fulfil the purpose for which the data was collected
Fulfil our legal obligations
What are your data protection rights?
Right of access
You can request a registry extract showing what personal data we process regarding you. Once we have confirmed your identity, the extract will be handed over to you in a secure way.
Right to rectification
You have the right to update your information to ensure that we always have the correct information.
Right to erasure
You may, without undue delay, have your personal data deleted if any of the following conditions apply:
If the data is no longer needed for the purposes for which it was collected.
If you have objected to its use and there are no other legitimate grounds for us to use it.
If the processing is based solely on your consent and you revoke your consent.
If deletion is required to fulfil a legal obligation.
Right to object
You are always entitled to object to processing of your personal data for direct marketing. This is an absolute right, which means that if you object or unsubscribe, we are going to stop all further use of your data for direct marketing. You also have the right to object to any processing that we base on legitimate interest. You must then specify in detail what you object to and why. The processing will then stop unless we demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or show that our processing is for the establishment, exercise or defence of legal claims.
Right to restriction
You are entitled to request a temporary limitation on processing your data. Processing may be limited in the following situations:
When you believe your data is incorrect and you have therefore requested a correction with us. You may then request that processing of your data be limited while we validate if your data is incorrect.
When the data processing is unlawful, but you oppose to your data being deleted and instead request that the use of these data be restricted.
When you need your data to be able to determine, enforce or defend legal claims, even if we no longer need your data for the purpose of our processing.
Right to data portability
You are entitled to obtain the data you have provided to us in order to process it elsewhere. This right only applies in cases where our processing of your data is based on the legal ground that you have given your consent to the data processing or if you have entered into a contract with us. Click here to contact our DPO.
Notification of violation (complaint) If you believe your data is being processed in violation of current regulations, please report it to us as soon as possible. You also have the right to file a complaint with the Data Protection Authority.