PRIVACY NOTICE

Summary of Privacy Notice 

We, Nord-Lock International AB (reg. no. 556610-5739) (“Nord-Lock”, “we”, “us”), are a global leader in engineering and bolting technologies. We use personal data to provide potential customers with information about us, provide our enterprise customers with our products and services, offer an e-commerce channel to both enterprises and private customers, and manage our business operations. For information about our recruitment, please see our Recruitment Privacy Notice.

This is the primary Privacy Notice for the entire Nord-Lock Group, and it is available at https://www.nord-lock.com/ (or any other domain as instructed from time to time), this notice applies to the websites of our regional sales affiliates and e-commerce channels (“Website”, “Websites”). For information about our affiliates included in the Nord-Lock Group, please visit our Affiliates Page.

This Privacy Notice describes our policies and practices regarding our collection and use of personal data and sets forth your privacy rights. We recognize that information privacy is an ongoing responsibility, and so we will, from time to time, update this Privacy Notice as we undertake new personal data practices or adopt new privacy policies.

• You can access most of the Website without registering your personal data with Nord-Lock. Certain sections of the Website require that you provide us with some information about yourself. Such sections may include the page for e-commerce for when you place an order with us. These sections may ask you to provide information such as, but not limited to, your name, your email and your address.
• We are part of an international group of companies and share administrative systems. We may, therefore, share some or all of your personal data with affiliates for administrative purposes, or for the legitimate business purposes described below.
• We may transfer certain information out of the European Union and European Economic Area (EEA), to our affiliates. This will only be done with the relevant protection under applicable data protection legislation being in place.
• For our webshop offering: When you place an order with us, we will share your personal information with the local logistics partner. Nord-Lock International AB, reg. no.: 556610-5739 is the data controller of the purchase together with the regional sales office as stated in your receipt and/or sales contract. The local logistics partner is an individual data controller over the transport of your purchase. To read more about this, please see section 4.

If you have any questions or concerns regarding our processing of your personal data, please contact us at privacy@nord-lock.com.

Last modified: 2023-12-15

Privacy Notice Full Text

1. INTRODUCTION

To whom does this notice apply?
In this privacy notice we have gathered information on how we process personal data regarding customers and previous customers, prospects, end users of our Websites, e-commerce sites and services, company representatives and participants at events and educations.

Offerings and Brands

Offering	Brands
Nord-Lock Group	Nord-Lock, Expander, Superbolt and Boltight
Webshop	Nord-Lock, Expander

Data Controller
Nord-Lock International AB (reg. no. 556610-5739) is the data controller for the processing of your personal data. 

For more information on intra-group joint processing, please see Section 5.

2. OUR PRINCIPLES

We do our best to protect your privacy by using a range of security techniques and security methods. This means that:

• We make sure that we have appropriate security measures to protect your personal data.
• We make sure that when we ask another organization to provide a service for us, they have appropriate security measures.
• We will respect your privacy. You should receive marketing (whether by email, post, text or telephone) only from us and, if you agree, from other organizations we have carefully chosen.
• We will make sure it is clear when you can make choices regarding our marketing to you. When you place an order with us, we will offer you certain additional products (such as our Bolted Magazine or email newsletters). You will always have the option to opt out of receiving these extra products if you do not wish to receive them. However, we may email you, or send you an SMS, occasionally with information or questions about your order.
• We will collect and use individual user details only if we have your permission or if we have sensible business reasons for doing so, such as collecting enough information to manage orders.
• We will be clear and transparent regarding the personal data about you that we collect and how we will use it.
• We will use personal data only for the purposes for which it was originally collected, and we will make sure we delete it securely.
  

3. PERSONAL DATA THAT WE COLLECT

Collection of personal data:
Nord-Lock collects personal data about its customers and website visitors. The personal data can be divided into two main categories: personal data that you give to us directly, and personal data that becomes available to us when you use our services and Websites.

We do not sell personal data to anyone and only share it with third parties who are facilitating the delivery of our products and services.

Personal data you provide to us:
When using certain services, you provide us with personal data directly. When you place an order, become a subscriber/user, or submit a job application with us, we will ask you to provide the following information:

• your name and/or company name;
• your email address;
• your mobile phone number;
• your shipping and/or billing address; and
• your billing information,

This personal data is necessary for us to fulfill our service to you and deliver your purchase and give you information about your order. For further information about how and why we collect your personal data, please see Section 4.

When applicable, we may also ask you to provide us with additional information, such as debit or credit card information, or previous work experience.

Personal data we collect when you visit our Website– use of cookies:
When you visit our Website we collect certain information about you, for the purposes described in section 4.

Please refer to the actual cookie policy of the applicable website you are visiting for the cookies applicable to your visit.

As is true of most other websites, Nord-Lock’s Website collects certain data automatically and stores it in log files. This information may include IP addresses, the region or general location of your computer or device, browser type, operating system, and other usage information about the use of our Website including a history of the pages you view.

When navigating through our Website we may collect information, including, IP addresses, cookies and web beacons to generate statistics and measure site activity for the benefit of the users of our Websites. Such data does not tell us who you are or reveal any other information of a personal nature. 

Your correspondence with Nord-Lock:
If you correspond with us by email, the postal service, or other form of communication, we may keep such correspondence and the information contained in it (for example your name, e-mail, additional contact information as well as any personal information you provide in free text form) and use it to respond to your inquiry; to notify you of publications or other services; or to keep a record of your complaint, question, request, and the like. As always, if you wish to have Nord-Lock “erase” your personal data or otherwise refrain from communicating with you, please contact us at privacy@nord-lock.com

Note: if you ask us not to contact you by email at a certain email address, we will retain a copy of that email address on a “do not send” list, to comply with your no-contact request.

What happens if you do not provide us with your data:
You can use our Website without providing us with much of your personal data. However, you will not be able to create a membership account without providing us with your essential data for the provision of that account and you may not order products without providing Nord-Lock with essential data for the performance of the contract.

You can choose to only enter the minimal amount of mandatory data when making a purchase or when creating an account.

4. HOW WE COLLECT & WHY WE USE YOUR DATA

We use your personal data for the purposes described below.

The personal data we collect are used for three (3) main purposes:

• to provide visitors with information about our business;
• to manage the orders our customer place with our business, and
• to provide our customers with support and respond to your inquiries.

Managing orders and administering our customer relations:
When your business places an order with us, either with your sales representative, or via our webshop for our enterprise customers, we need certain information to manage and complete the order of the company that you represent. For the purposes of delivering your order, contacting you with information about your order, as well as administering your payment, we process your name, your contact information, manage refunds, recalls or any claims you may have, as well as any additional necessary information such as billing address or credit card details. 

Nord-Lock International AB, reg. no.: 556610-5739 is the data controller for your sales contract. Depending on the type of sale, Nord-Lock International AB may be joint controller with a regional sales Affiliate of ours as stated in your order receipt and/or sales contract.

We will share your data with the logistics partner relevant to your location. The logistics partner is independently responsible for your information. If you have questions about their usage, you should turn directly to your logistics partner. 

Legal basis: this collecting and processing are done to the degree, so we can fulfil our contract towards you and provide you with your purchase, art. 6.1.(b) GDPR as well as potentially abide by legal obligation towards purchasers, art. 6.1(c) GDPR. 

Webshops are provided by our Nord-Lock Group affiliates:
When you as a private customer place an order through any of our webshops provided by any of our Affiliates, we need certain information to manage and complete your order. For the purposes of delivering your order, contacting you with information about your order, as well as administering your payment, we process your name, your contact information, as well as any additional necessary information such as billing address or credit card details as applicable. We may also process your information to manage refunds, recalls, cancellations or any claims you may have and thus store your data longer, so that we can fulfill our legal obligations towards you and process your purchase.

Nord-Lock International AB, reg. no.: 556610-5739 is the joint data controller for your webshop purchase as we provide the technical webshop solution and the regional sales affiliate as stated in your receipt and/or sales contract will fulfil your order.

We will share your data with the logistics partner relevant to your location. The logistics partner relevant to your location manages your personal data as an independent data controller. If you have questions about their usage, you should turn directly to your logistics partner. 

Legal basis: this collecting and processing are done to the degree that we can fulfil our contract towards you and provide you with your purchase, art. 6.1.(b) GDPR as well as potentially abide by legal obligation towards consumers, art. 6.1(c) GDPR. 

Providing you with relevant content on our sites:
When you browse our Website we will, with your consent to our use of cookies, collect information about what you click on. This information is stored and saved, so we will recognize you when you return to our Website at a later date. We do this so we can better understand your preferences and interests, so that we can show you relevant content on our site. If you for example have browsed a certain section of our Website before, you may see advertisement from specific products from that section next time you visit the Website since we believe that these are products you will be particularly interested in. For more information about the use of cookies, please read our Cookie Policy. Please refer to the actual cookie policy of the applicable website you are visiting for the cookies applicable to your visit.

Nord-Lock International AB, reg. no.: 556610-5739 is the data controller for www.nord-lock.com. For the web-shops, Nord-Lock International AB is joint controller together with the regional Nord-Lock Affiliate that fulfils your order according to your order receipt. To see which local Nord-Lock Affiliate that may be relevant to you, please see our Affiliate page.

Legal basis: this collecting and processing is done to the degree it is necessary for us to fulfil our legitimate interest, (art. 6.1.(f) GDPR) to understand our visitors and give them personalized and relevant content and offers. If applicable, we will ask for your consent to use cookies under the E-Privacy Directive (2022/58/EC). 

Providing you with relevant marketing:
When you place an order with us, or become a subscriber to our newsletter, you will be asked to provide us with your email address and your shipping address. This information will be used for, in addition to the purpose of managing your order, marketing purposes. We appreciate you as a customer, and we hope that you will keep coming back to Nord-Lock. To keep you updated about Nord-Lock we will send you newsletters and advertisements about our products and services. You will also receive our magazine Bolted, free of charge, which is filled with interesting cases and insights from the world of bolting. 

If you do not wish to receive these offers, you will always have the option to opt out of receiving them, by un-clicking relevant boxes when you are asked to provide your email or shipping/billing address. If you first wish to receive these offers and newsletters, but then change your mind, you can always contact us at info@nord-lock.com to manage or cancel your subscription. 

Nord-Lock International AB, reg. no.: 556610-5739 is the data controller together with the regional Nord-Lock Affiliate that may provide you with local marketing campaigns, and events. To see which local Nord-Lock Affiliate may be relevant to you, please see our Affiliates page.

Legal basis: this processing is done to the degree it is necessary for our legitimate interest to send advertisement, (art.6.1. (f) GDPR).

Statistics, analytics, and service improvement:
We may collect and store IP addresses, device location, browser type, operating system and other usage information about the use of our Website including a history of the pages you view to help us design our site to better suit our users’ needs. We may also use your IP address to help diagnose problems with our server and to administer our Website analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences. For statistical purposes we may store information about how many individual visitors to our Website we have, and how often these individual users visit our Website. We may collect and store this information to better understand our customers’ needs and interests, so that we can develop and improve our services in the future. For more information about the use of cookies, please read our Cookie Policy. Please refer to the actual cookie policy of the applicable website you are visiting for the cookies applicable to your visit.

Nord-Lock International AB, reg. no.: 556610-5739 is the data controller for these purposes.

Legal basis: this processing is done to the degree it is necessary for our legitimate interest, (art. 6.1.(f) GDPR) to improve our services and to develop our business. We trust in your consent to use cookies under the e-Privacy Directive (2009/136/EC) appropriately. 

Security:
We use information (log data, names, email addresses, IP-numbers) in order to protect our services, systems and customer’s security and to discover and prevent fraud or malware.

Nord-Lock International AB, reg. no.: 556610-5739 is the data controller for these purposes.

Legal basis: Legitimate Interest or Legal obligation (if we are legally obligated to protect certain information assets).

Customer support:
As is mentioned above in section 3, certain information that you provide to us when you contact us is stored and processed in order to best manage your inquiry with us. When you become a subscriber or place an order with us, your contact information will be stored in order for us to quickly gain access to your order or your subscription account details, so we can help you with your inquiry as effectively as possible. 

Nord-Lock International AB, reg. no.: 556610-5739 is the data controller.

Legal basis: this processing is made to the degree it is necessary for our legitimate interest, (art. 6.1.(f) GDPR) so our customer service can provide you with a good service. They will ask you to identify yourself, if you visit our webshops as logged in, we will find and pair the information about you with your account information, that is done to the degree it is necessary for our legal obligation toward you as a customer (art.6.1. (c) GDPR). It is also our legitimate interest to answer your questions regarding our services and products.

Customer support and legal rights as a purchaser in our webshops:
As is mentioned above in section 3, certain information that you provide to us when you contact us is stored and processed in order to best manage your inquiry with us. When you become a subscriber or place an order with us, your contact information will be stored in order for us to quickly gain access to your order or your subscription account details, so we can help you with your inquiry as effectively as possible. We will also manage your request for rectifications of faulty products. 

As a webshop customer, we may also help you with your right of withdrawal of your purchase and other legal rights that you have.

Nord-Lock International AB, reg. no.: 556610-5739 is the data controller together with the regional Nord-Lock Affiliate that fulfils your order as stated in your receipt and/or sales contract. To see which local Nord-Lock Affiliate that may be relevant to you, please see our Affiliates page.

Legal basis: this processing is made to the degree it is necessary for our legitimate interest, (art. 6.1.(f) GDPR) so our customer service can provide you with a good service. They will ask you to identify yourself, if you visit our web-shops as logged in, we will find and pair the information about you with your account information, that is done to the degree it is necessary for our legal obligation toward you as a consumer (art.6.1. (c) GDPR). It is also our legitimate interest to answer your questions regarding our services and products. All customers have the right to return a faulty product, you as a webshop customer also have the right to withdrawal. For more information, please see our terms and conditions of sale.

Other Purposes: 
If we intend to use any personal data in any manner that is not consistent with this Privacy Notice, you will be informed of such anticipated use prior to or at the time the personal data is collected. Alternatively, we will obtain your permission after such collection but prior to such use.

For more information on exactly what type of cookies we use, what type of information they collect, why they gather this information, and how you can manage, inactive or delete cookies, please visit our Cookie Policy. Please refer to the actual cookie policy of the applicable website you are visiting for the cookies applicable to your visit.

5. WHEN & HOW WE SHARE INFORMATION WITH OTHERS

We share your personal data when it is necessary for the performance of a contract.

Payment service providers
When you provide payment data to pay for your purchase, we will share this payment data with banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction. Each payment service provider is an independent controller of the personal data that they process in relation to payments.

Distribution partners
When you choose a logistics partner to deliver your purchase, we will share the necessary information about you with our logistics partner. Each distribution company is an independent controller of the personal data that they process in relation to deliveries.

Suppliers that are data processors
For the purpose of managing your order, we may disclose your personal information to our affiliates and service partners (i.e. companies we have hired to provide customer support or assist in protecting and securing our systems) that are entrusted to process your information on our behalf and in accordance with our instructions, this Privacy Notice and other appropriate measures for privacy and security.

Other motivated disclosures
We may also disclose your personal information to third parties if we have good reasons to believe that access, use, retention, or disclosure of such information is reasonably necessary to:

• comply with laws, any court order or other legal obligation, and to disclose information to the police and other competent authorities;
• enforce or apply our terms of use and other agreements; 
• protect the rights, property, or safety of Nord-Lock, its franchisees, or others to prevent junk mail, fraud; 
• prevent or stop attacks on our systems or networks; and
• we may disclose personal data as part of a joint transaction, a merger or a sale of assets.

Joint intra-group activities and databases 
Nord-Lock is part of the Nord-Lock Group. The group company Nord-Lock International AB provides certain central functions that the Nord-Lock Group uses. Furthermore, the companies within the Nord-Lock Group have various collaborations with each other regarding marketing campaigns and retargeting activities, fulfilment of webshop orders, management of leads and customer relations management databases. These companies may have a joint controllership for the personal data they process.  

If you have any questions on the joint processing, or if you would like to exercise your data subjects rights you can always contact the company that you have a direct relationship with or have been in contact with. 

In particular we use a Customer Relationship Management (CRM) database between our Affiliates within the Nord-Lock Group, to manage and analyze our customers’ orders, preferences, communications, marketing, and other actions related to customer relationships or other, to fulfil our contract with you as a customer. 

The legal basis for the joint processing is our legitimate interest in being able to market our products and services in an efficient manner, and to achieve relevance in our marketing activities. We also have a legitimate interest in being able to analyze our business to better understand and improve our services.

We share access to our CRM database within the EEA/EU and outside of the EEA/EU with our international sales organization in the United Kingdom, North America, Latin America, Middle East, Africa, and Asia Pacific (except for China or North Korea). In order to share data in a compliant manner, we rely on the EU-UK adequacy decision, which holds the protection of personal data by UK laws to the equivalent of the GDPR and the applicable data transfer mechanism offered by the European Commission with additional safeguards to protect the privacy of any individuals.

6. DATA SUBJECT RIGHTS

Nord-Lock complies with the European Union’s General Data Protection Regulation (GDPR). GDPR provide certain rights for data subjects. You will find a good explanation of them (in English) on the Website of the United Kingdom’s Information Commissioner’s Office.

This Privacy Notice is intended to provide you with information about what personal data Nord-Lock collects about you and how it is used. If you have concerns or questions, please contact us at privacy@nord-lock.com

If you wish to confirm that Nord-Lock is processing your personal data, or if you wish to gain access to the personal data we may have about you, please contact us at privacy@nord-lock.com

You may at any time write to us at S:t Johannesgatan 1D, 211 46 Malmö, Sweden.

In accordance with your rights stated in GDPR and free of charge, you also have the right to request:

• the purpose of the processing,
• the information on the balancing test behind our legitimate interests,
• the categories of personal data concerned,
• who else outside Nord-Lock might have received the data from us,
• what the source of the information was (if you didn’t provide it directly to Nord-Lock), and
• how long it will be stored.

You have the right to correct (rectify) the record of your personal data maintained by Nord-Lock if it is inaccurate. 

You may request that Nord-Lock erase personal data.

You have the right to request limitation of our processing of your data.

You have the right to object to the processing of your personal data that we have collected for our legitimate interest.

You have a right to lodge a complaint with the appropriate data protection authority if you have concerns about Nord-Lock’s processing of your personal data. When technically feasible, Nord-Lock will—at your request—provide your personal data to you or transfer it directly to another controller.

Reasonable access to the personal data that Nord-Lock stores about you will be provided to you at no cost upon request made to privacy@nord-lock.com. If access cannot be provided within a reasonable time frame, Nord-Lock will provide you with a date when the information will be provided. If for some reason access is denied, Nord-Lock will provide an explanation as to why access has been denied.

7. SECURITY OF YOUR INFORMATION

To help protect the privacy of the data and personally identifiable information you transmit through the use of our Website we maintain physical, technical, and administrative safeguards. Our security technology is updated and tested on an ongoing basis.

We restrict access to your personal data to those employees who need to know the information to provide services to you. In addition, we train our employees about the importance of confidentiality and maintaining the privacy and security of your information.

We commit to taking appropriate disciplinary measures to enforce our employees’ privacy responsibilities.

If we transfer personal data to a third country, in other words, countries outside of the EU/EES or without an adequacy decision, we will enter an agreement and take other measures in accordance with applicable legal requirements, the use of the EU Commission standard clauses, binding business rules and complimentary security measures, that will ensure your rights are protected.

8. DATA STORAGE & RETENTION

Your personal data is stored by Nord-Lock on its servers.

9. SPECIFICALLY ABOUT GOOGLE ANALYTICS