LOTS Group

Privacy policy

LOTS Group's Privacy Statement

LOTS Group's Privacy Statement

LOTS Group is wholly-owned by Scania CV AB. As a Scania Company a core value for us is respect for the individual. This is the foundation when we interact with you in your role as our valued customer, a co-worker in our global organisation, a trusted business partner/supplier or when visiting our websites or premises.

We process your personal data when it is needed to:

• deliver our products and services,

• fulfil and follow up contractual obligations, ours as well as yours,

• fulfil legal obligations and legitimate requests from law enforcement and other authorities,

• provide information about our products and services as well as upcoming events,

• improve quality and develop existing, as well as new, products and services as well as our organization.

We strive to always handle and protect your personal data with respect and integrity. Sometimes we utilize trusted business partners to help us deliver our products and services. In those cases when we need to share your data with our business partners, we ensure that they treat your data with the same respect and integrity that we do. In this privacy statement we would like to inform you what personal data we might process, why we are doing it and how we ensure that your rights and your privacy is respected.

What data do we collect?

The data we collect depends on your relationship with LOTS Group. In the tables below, you can access more information about the data we collect for different purposes.

What personal data do we process from you as a customer?

When you represent your company, we need to process your personal data for the purposes listed below.

Why do we process your data?	What categories of personal data do we process?	Legal ground
To create a database of prospect customers, e.g., by using data from third parties.	Organizational data (such as company name, country, company address and phone number) Contact information (such as name, email, phone number, address)	Legitimate interest
To provide a quotation	Organizational data (such as company name, country, company address and phone number) Contact information (such as name, email, phone number, address) Driving behaviour, such as driving patterns, geo-location and operating hours Identification data, for example the vehicle identification numbers, driver ID, IP number, MAC address, IT-system and user ID Performance data from the vehicle, for example information from vehicle components, fuel consumption, brake usage, gear shifting, battery usage, engine data and error codes Images and video footage	Legitimate interest
To deliver upon a contract	Organizational data (such as company name, country, company address and phone number) Contact information (such as name, email, phone number, address)	Contractual obligation
To provide services and support, and to follow up on contractual obligations	Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address and phone number) Contact preferences Purchases and transactions	Contractual obligation
To inform you about updates, products and services that we believe may be of interest	Contact information (such as name, email, phone number, address) Contact preferences	Legitimate interest
To comply with legal obligations and legitimate requests from law enforcement and other authorities	Contact information (such as name, email, phone number, address) Delivery address Purchases and transactions Financial data such as credit ratings, bank accounts and payments as well as contractual related data such as contract number, order number, invoices.	Legal obligation or legitimate interest
To provide you with requested information and relevant updates.	• Contact information (such as name, email, phone number, address)	Legitimate interest

What personal data do we process regarding you as an employee?

When you apply for a position at LOTS Group we ask you to provide some personal data in order to process your application, for example contact information and reference information such as previous work history, education, certificates.

During your employment at LOTS Group we process your personal data in order to:

administer your employment,
fulfil our legal obligations as an employer
fulfil our legitimate interest to e.g.:
- steer, plan and evaluate the work
- protect company employees and assets
- contact and inform employees
- being transparent to owners and the general public

After you have left the company we process limited amounts of data required to fulfil our legal obligations, for example data showing your employment period.

Why do we process your data?	What categories of personal data do we process?	Legal ground
Staff administration	Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos) Financial information (such as salary, taxes, expenses, time reports, bank account number etc)	Contractual obligation
Fulfil legal obligations (e.g. reporting to authorities, whistleblowing, documenting rehabilitation, comply with collective agreements etc.) and comply with legitimate requests from law enforcement and other authorities.	Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos) Citizenship Date of birth License registration Financial information (such as salary, taxes, expenses, time reports, bank account number etc) Union membership (to fulfil the collective agreement, the data is collected as needed) Access logs from IT-systems and entry systems, IT-logs from applications and network services, Camera surveillance and images Rehabilitation data	Legal obligation or Legitimate interest
Planning and following up	Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos) Organizational information (place of work, cost centre, direct manager etc) Performance evaluations Development plans	Legitimate interest
To provide access to our ITsystems and to improve our systems	Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos) User preference settings in systems Logs of your usage of our systems	Legitimate interest
Safety in case of emergency	Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos) Next of kin Citizenship Date of birth	Legitimate interest or protection of your vital interest
To protect our employees and our company assets	Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos) Access logs from IT-systems and entry systems, IT-logs from applications and network services, Camera surveillance Security incident reports Misconduct incident reports	Legitimate interest
Transfer of personal data externally in order to identify you as a LOTS employee or to enable you to perform your work duties	Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos) License registration Personal data on contracts Images, film and audio	Legitimate interest
To analyse, improve and develop existing and new services and products, as well as our organization	Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos) Citizenship Date of birth License registration Organizational information (place of work, cost centre, direct manager etc) Access logs from IT-systems and entry systems, IT-logs from applications and network services Organizational information (place of work, cost centre, direct manager etc) Performance evaluations Development plans Driving behaviour, such as driving patterns, geo-location, operating hours and preference settings Identification data, for example the vehicle identification numbers, driver ID, IP number, MAC address, IT-system and user ID Performance data from the vehicle, for example information from vehicle components, fuel consumption, brake usage, gear shifting, battery usage, engine data and error codes	Legitimate interest
To provide you with requested information and relevant updates.	Contact information (such as name, email, phone number, address)	Legitimate interest

What personal data do we process from you as a business partner/ supplier?

If you work as a representative for a supplier that provides products and services to LOTS Group we process limited amounts of your personal data, e.g. your contact information and identification. This is used to evaluate your offering, manage a contract and provide you with access to relevant IT-systems.

Why do we process your data?	What categories of personal data do we process?	Legal ground
To evaluate a proposal from you or your employer, including background checks	Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address and phone number) If you are a sole trader, we also process financial data such as credit ratings and prices Background information (such as personal or professional conditions and characteristics, financial data, connections to government officials and - if legally permitted – possible criminal offences).	Legitimate interest
To perform contracts with you or your employer	Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address and phone number, business organisation number) If you are a sole trader, we also process financial data such as credit ratings, bank accounts and payments	Contractual obligation or legitimate interest
To provide access to our ITsystems	Contact information (such as name, email, phone number, address) User-id Language settings in systems Logs of your usage of our systems	Legitimate interest
Transfer of personal data externally in order to identify you as a LOTS business partner/supplier	Contact information (such as name, email, phone number, address) Employment data (such as employment number, User-ID, Photos)	Legitimate interest
To communicate with yourself or your employer	Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address, phone number and business organisation number)	Legitimate interest
To analyse, improve and develop exisiting and new products and services, as well as our organization	Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address, phone number and business organisation number) If you are a sole trader, we also process financial data such as credit ratings, bank accounts and payments Logs of your usage of our systems Driving behaviour, such as driving patterns, geo-location, operating hours and preference settings Identification data, for example the vehicle identification numbers, driver ID, IP number, MAC address, IT-system and user ID Performance data from the vehicle, for example information from vehicle components, fuel consumption, brake usage, gear shifting, battery usage, engine data and error codes	Legitimate interest
To comply with legal obligations and legitimate requests from law enforcement and other authorities	Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address, phone number and business organisation number) Financial data such as credit ratings, bank accounts and payments as well as contractual related data such as contract number, order number, invoices Citizenship Date of birth License registration Access logs from IT-systems and entry systems, IT-logs from applications and network services	Legal obligations or legitimate interest
To provide you with requested information and relevant updates	Contact information (such as name, email, phone number, address)	Legitimate interest

What personal data do we process from you as a visitor?

When you visit our website or premises, we process data about you to be able to fulfil the purpose of your visit and make your visit successful and safe. This may include contact information and driving license number, as well as food preferences and co-traveller information.

Why do we process your data?	What categories of personal data do we process?	Legal ground
Evaluate website usage and enhance our website	IP-address Browser settings Type of device used to access the site	Legitimate interest
To enhance your browsing experience	IP-address GEO-location Browser type and version Operating system Date and time for you visit URL of the referring site Browsing country	Legitimate interest
To fulfil the purpose of your visit to our premisis	Contact information (such as name, email, phone number, address) Co-traveller information (such as name, email, phone number, address, age) Organizational data (such as company name, country, company address, phone number and business organisation number) Language Food preferences Travelling and lodging details Driver license Host details	Legitimate interest
To protect our visitors and our company assets	Contact information (such as name, email, phone number, address) Access logs from IT-systems and entry systems, IT-logs from applications and network services, Camera surveillance Security incident reports	Legitimate interest
To provide you with requested information, services and updates, including webcasts, annual reports.	Contact information (such as name, email, phone number, address) Organizational data (such as company name, country, company address, phone number and business organisation number) Language	Legitimate interest

How do we collect your data?

You directly provide us with most of the data we collect. We collect data and process data when you:

Use or view our website via your browser’s cookies
Contacts us through any of our digital platforms
Enters into any contract with us
Visit any of our premisis

We may also receive your data indirectly from the following sources:

As a LOTS Driver the vehicle you drive also provides us with information from the vehicle analytic system

How will we use your data?

We collect your data so that we can:

Fulfil our contractual obligations towards you
Manage your account
Develop and optimize our processes and services

Do we share personal data with third parties?

To provide the best services we utilize our global organization and a global network of trusted partners. This means that we may – from time to time – share your data (all or selected parts) within the LOTS Group as well as with trusted business partners that help us. Typical examples include:

When you as a driver or LOTS employee report a deviation or safety issue, we might share the report with our customers, in order to resolve the issue
When you as a LOTS employee utilize LOTS owned equipment your data may be process by our equipment suppliers or safety systems suppliers
We may process your data in IT-systems that are developed, delivered or hosted by our external IT-partners
When we are doing research and development, we may share data with universities, research facilities or other trusted partners

In cases where we need to share your data with our business partners, we ensure that they treat your data with the same respect and integrity as we do. We may also share your data with public authorities if required by law or a legitimate legal request is received from law enforcement or another authority.

How do we process and store your data?

LOTS is a global company with operations in several countries. This means that we might sometimes choose to process your data (all or selected parts) inside as well as outside of the European Union. When doing so we always comply with existing regulations and ensure that your data is handled in a secure way. If your data is transferred out of the European Union this is done using appropriate transfer mechanisms.

In this context ‘processing’ means any operation or set of operations on personal data such as; collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

How do we protect your data?

We are committed to protecting your data. We take all appropriate and reasonable legal, technical and organizational security measures to adequately protect the personal data that we process. Our security measures are continuously improved in line with the development of available security products and services.

How long do we keep your data?

Specific processing activities have their own individual retention periods applicable to them as per the legal basis and/or purpose of processing. We, therefore, minimise or delete your data as soon as it is no longer needed to:

Fulfil our contractual obligations towards you
Fulfil the purpose for which the data was collected
Fulfil our legal obligations

What are your data protection rights?

Right of access

You can request a registry extract showing what personal data we process regarding you. Once we have confirmed your identity, the extract will be handed over to you in a secure way.

Right to rectification

You have the right to update your information to ensure that we always have the correct information.

Right to erasure

You may, without undue delay, have your personal data deleted if any of the following conditions apply:

If the data is no longer needed for the purposes for which it was collected.
If you have objected to its use and there are no other legitimate grounds for us to use it.
If the processing is based solely on your consent and you revoke your consent.
If deletion is required to fulfil a legal obligation.

Right to object

You are always entitled to object to processing of your personal data for direct marketing. This is an absolute right, which means that if you object or unsubscribe, we are going to stop all further use of your data for direct marketing. You also have the right to object to any processing that we base on legitimate interest. You must then specify in detail what you object to and why. The processing will then stop unless we demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or show that our processing is for the establishment, exercise or defence of legal claims.

Right to restriction

You are entitled to request a temporary limitation on processing your data. Processing may be limited in the following situations:

When you believe your data is incorrect and you have therefore requested a correction with us. You may then request that processing of your data be limited while we validate if your data is incorrect.
When the data processing is unlawful, but you oppose to your data being deleted and instead request that the use of these data be restricted.
When you need your data to be able to determine, enforce or defend legal claims, even if we no longer need your data for the purpose of our processing.

Right to data portability

You are entitled to obtain the data you have provided to us in order to process it elsewhere. This right only applies in cases where our processing of your data is based on the legal ground that you have given your consent to the data processing or if you have entered into a contract with us. Click here to contact our DPO.

Notification of violation (complaint) If you believe your data is being processed in violation of current regulations, please report it to us as soon as possible. You also have the right to file a complaint with the Data Protection Authority.