Privacy Policy
- General
GIAB safeguards your personal privacy and strives to process your personal data in a safe, responsible and transparent manner.
In this privacy policy, we describe how we collect, use, store, and protect personal data when you visit our website or contact us via our contact form.
We process personal data in accordance with the EU Data Protection Regulation (GDPR) and applicable data protection legislation.
- Data controller
The data controller for the processing of your personal data is:
Company name: Gothenburg Industrial Installation AB
Organization number: Org. No.: 556875-7131
Website: https://giab.eu
Email: info@giab.eu / felicia@giab.eu
Address: Bangårdsvägen 14, 428 35 Kållered
If you have questions about how we process your personal data, please feel free to contact us using the contact details above.
- What personal data do we collect?
When you use our contact form, we may collect the following information, depending on the fields the form contains:
- Name.
- Email address.
- Phone number, if requested.
- Company name, if requested.
- The content of your message.
- Other information that you choose to provide in connection with your contact with us.
We collect only the personal data that is relevant for handling your request and communicating with you.
We ask you not to submit sensitive personal data or other information that is not necessary for your case via the contact form.
- Why do we process your personal data?
We process your personal data for the following purposes:
- To receive and answer questions and messages sent via the contact form.
- To communicate with you regarding your request.
- To follow up and manage any further contacts related to the same matter.
- To administer and document cases when necessary.
We do not use the data from the contact form for unrelated marketing purposes without there being a valid legal basis for such processing.
- What legal basis do we use?
We process personal data based on a legal basis under the GDPR.
Depending on the nature of your request, the processing may be based on:
Legitimate interest: When you contact us with a general question, we may process your contact information to read, manage, and respond to your message. Our legal basis may then be our legitimate interest in communicating with individuals who contact us. We then conduct an interest balancing exercise to ensure that our interest outweighs your interest in protecting your personal data.
Actions ahead of the agreement: If your contact concerns a quote, an order or a possible contract, processing, when the conditions are met, may be necessary to take action on your request before a contract is concluded.
We do not process personal data based on a legal basis that is irrelevant to the specific purpose.
- Storage of personal data and email communication
We store personal data only for as long as necessary for the purposes for which the data is processed, taking into account the nature of the matter and any legal obligations.
Contact requests and quotes that do not lead to assignments
If a contact request or quote request does not lead to a job, we store the associated personal data and emails for a limited period to be able to manage and follow up on the case. When the data is no longer needed, we delete it, unless there are special reasons or legal obligations to keep it longer.
Ongoing assignments and customer relationships
When a request leads to a job assignment, or when we have an ongoing customer relationship, we may need to store email messages and other relevant documentation for the time necessary to plan, perform, and follow up on work, as well as communicate with the customer.
This may include, for example, agreements, tenders, orders, changes to the assignment, technical information, prices, and other communications relevant to the assignment.
Completed assignments and previous customer communication
After a task has been completed, we can continue to store relevant email communications and documentation when necessary for, for example, follow-up, warranty matters, complaints, handling of any disputes, or to comply with legal obligations.
We do not keep all emails indefinitely just in case they might be useful in the future. Instead, we assess which data needs to be retained and for how long. When the data is no longer needed, we delete it or anonymize it, unless there is a legal basis for continued storage.
Accounting records and other documentation that are subject to specific statutory requirements are retained for the period required by applicable legislation.
- Who can access your personal data?
Your personal data is only handled by persons who need access to it to perform their work tasks and answer your request.
We may also employ external service providers to help us operate the website, manage the contact form, provide email, or store information.
Such providers may only process personal data in accordance with our instructions and in accordance with applicable data protection regulations. Where required by the GDPR, we enter into data processing agreements with the providers.
We do not sell your personal data.
We only disclose personal data to other recipients when there is a legal basis for the disclosure, for example when required by law or when it is necessary to handle your case.
- Transfer of personal data to countries outside the EU/EEA
If we or our service providers transfer personal data to a country outside the EU/EEA, we ensure that the transfer takes place in accordance with the GDPR.
This may, for example, mean that the European Commission has decided that the country has an adequate level of protection or that appropriate protective measures have been taken, such as standard contractual clauses, when required.
If such transfers occur, relevant information about them and applicable safeguards shall be available to you.
- How do we protect your personal data?
We take appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, destruction, and unauthorized processing.
The measures are adapted to the needs of the business and the scope of the processing that takes place.
Access to personal data is restricted to individuals and suppliers who need the data for their work tasks.
No method of electronic transmission or storage can guarantee complete security, but we work to handle the data in a safe and responsible manner.
- Your rights under the GDPR
You have several rights when we process your personal data. Which rights apply in a particular case depends, among other things, on the legal basis for the processing.
Right to information and access: You can request information about how we process your personal data and access the data that is covered by your right to access.
Right to rectification: You can request that incorrect or incomplete personal data be corrected.
Right to deletion: In some cases, you can request that your personal data be deleted, for example when it is no longer needed for the purpose for which it was collected.
Right to restriction: In certain situations, you can request that the processing of your personal data be restricted.
Right to object: When we process your personal data based on legitimate interest, you have the right to object to the processing. We then assess whether there are compelling legitimate reasons to continue the processing.
Right to data portability: When the statutory requirements are met, you may be entitled to receive certain personal data in a structured, commonly used and machine-readable format.
To exercise your rights, contact us via [the company's email address].
We will respond to your request within the timeframes and rules applicable under the GDPR. If we need to verify your identity to protect your data, we may ask you for additional information.
- Right to file complaints
If you believe that we are processing your personal data in violation of applicable data protection regulations, you have the right to file a complaint with the Data Protection Authority (IMY), which is the regulatory authority in Sweden.
You can find information on how to do this at:
You also have the right to turn to the competent supervisory authority in another EU country when the rules allow it.
- Cookies and similar technologies
Our website may use cookies and similar technologies to ensure the website functions properly and, if such tools are used, to analyze traffic or provide other functions.
Which cookies are used, why they are used, and how you can manage your settings should be stated in our cookie information or cookie solution.
Non-essential cookies and similar technologies are only used after obtaining the necessary consent, when such consent is required under applicable regulations.
If the website does not use analytics, marketing or other non-essential cookies, this section should be adapted to describe the actual use of the website.
- Changes to the privacy policy
We may update this privacy policy when our personal data processing changes or when it is necessary to comply with changes in legislation and other applicable requirements.
The latest version is published on our website together with the date of the latest update.
If a change means that personal data must be processed for a new purpose, we will provide the necessary information before the new processing begins.
- Contact us
If you have any questions about this privacy policy or about how we process your personal data, please feel free to contact us.
Company: Gothenburg Industrial Installation AB
Email: info@giab.eu / felicia@giab.eu
Address: Bangårdsvägen 14, 428 35 Kållered
Website: https://giab.eu
We are happy to help you with questions regarding your personal data and your rights under the GDPR.