<\/p>\n
UT Transport i Norr AB is committed to protecting the privacy and security of your personal information. This privacy notice describes how we collect and use personal information about you in accordance with the General Data Protection Regulation (GDPR). Please read it carefully.<\/p>\n
<\/p>\n
The GDPR says that the personal information we hold about you must be:<\/p>\n
<\/p>\n
Used lawfully, fairly and in a transparent way.<\/p>\n
Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes.<\/p>\n
Relevant to the purposes we have told you about and limited only to those purposes.<\/p>\n
Accurate and kept up to date.<\/p>\n
Kept only as long as necessary for the purposes we have told you about.<\/p>\n
Kept securely.<\/p>\n
This notice is separated into the following sections for ease of use. If you have any questions about this notice or how we collect and use personal information about you please contact us<\/a>.<\/p>\n 1. The DANX Carousel Group <\/p>\n The DANX Carousel Group of companies (hereafter \u201cThe Group,\u201d \u201cWe,\u201d \u201cOur\u201d) consists of DANX, DANX ILS, UT, TBS, FOMAB, TLS Group, LPR Group, Carousel, Alltrans and Logik, and is a comprehensive partner for logistics and supply chain services such as time-critical spare parts distribution, warehousing, battery logistics, customs clearance, and more. We operate in the UK, EU \u2013 Ireland, Benelux, DACH, Iberia, Nordics, Baltics, Poland and EEA \u2013 Norway.<\/p>\n <\/p>\n The objective of this privacy notice is to describe how we collect and use, store and protect users\u2019 personal information via our website in accordance with General Data Protection Regulation (GDPR) in line with EU, UK and EEA regulations, and National and International applicable laws.<\/p>\n The GDPR legislation says that the personal information we hold about you must be:<\/p>\n <\/p>\n We use your personal data to help us run our website, provide our services, and improve your overall experience. We only collect and use your information when we have a lawful reason to do so, or through your consent and we always aim to be transparent about what we do with it.<\/p>\n To operate our website:\u00a0<\/strong>We process information such as your IP address, device details, and browsing behaviour to:<\/p>\n <\/p>\n This processing is necessary for the legitimate interest of operating a functional and secure website.<\/p>\n To improve our website and services:\u00a0<\/strong>We use analytics tools as outlined in our Cookie Notice to understand:<\/p>\n <\/p>\n This is based on your consent (for non-essential cookies) or our legitimate interests in improving our services.<\/p>\n To respond to your enquiries:\u00a0<\/strong>If you contact us using our contact us form, we use your details to email the message to the appropriate department and to be able to respond to your message and administer your request. This processing is necessary for our legitimate interests in communicating with you or to take next steps at your request.<\/p>\n To send you updates, newsletters, or marketing (optional):\u00a0<\/strong>If you sign up or consent, we use your email or contact details to:<\/p>\n <\/p>\n This is based on your consent, and you can opt out at any time by clicking the \u201cConsent Preferences\u2019 within the Cookie Notice and unsubscribe.<\/p>\n To maintain security and prevent fraud:\u00a0<\/strong>We may process data to:<\/p>\n <\/p>\n This is necessary for our legitimate interests in keeping our services safe and secure and to comply with legal obligations.<\/p>\n To meet legal or regulatory requirements:\u00a0<\/strong>We may process your data to:<\/p>\n <\/p>\n This processing is required by law.<\/p>\n What we will never sell your personal information, use your data for unrelated purposes without telling you or collecting more information than we need<\/p>\n Consent preferences\/ Cookie Notice:\u00a0<\/strong>We reference the use of cookies within our Cookie Notice (available to view on our websites) and the user has the option to change consent preferences at any time.<\/p>\n <\/p>\n Personal data is any information relating to an identified or identifiable natural person to whom data relates. (e.g. name, address), we collect personal data from you in the following ways.<\/p>\n Contact form information:<\/strong>\u00a0This is information about you (such as your name, address, email address, telephone number), that you provide when filling in forms whether on our website or forms on another website (e.g. LinkedIn). This could include, for example, forms which you complete to register for a service, place an order, sign up for a newsletter or enter a competition<\/p>\n Content:<\/strong>\u00a0This is information about you which you provide when you post content on our website. This may include status updates, photographs, videos, blog posts, discussion board posts, survey responses and other content which you post on our website.<\/p>\n Emails and records of other contact:<\/strong>\u00a0This is information you provide when you contact us (for example by email, post or SMS) or when you respond to correspondence from us. This may include enquiries about our services or products, reviews, follow-up comments or complaints.<\/p>\n Technical information:<\/strong>\u00a0This is information about you which is collected via technical means such as cookies, webpage counters and other analytics tools.<\/p>\n In addition, we may also receive personal information about you or your interaction with our website and other websites from external sources, third parties or other channels. (e.g. advertising networks, marketing companies, analytics providers or search information providers).<\/p>\n In this case you will be informed when we collect that data if we intend to share this internally and combine it with data collected on this website and the purpose.<\/p>\n We obtain information from the following\u00a0publicly available sources<\/strong>:<\/p>\n <\/p>\n We process certain personal data based on your consent, as required under GDPR. This means you have a genuine choice and control over whether we use your information for these purposes.<\/p>\n What are you consenting to?<\/strong> <\/p>\n Your rights<\/strong><\/p>\n <\/p>\n Granular choices:\u00a0<\/strong>Where we ask for consent for multiple purposes, you will be able to choose which purposes you agree to and which you do not.<\/p>\n Record keeping<\/strong> <\/p>\n Contact form information: Website CRM or Microsoft Dynamics CRM<\/strong><\/p>\n Content:\u00a0<\/strong>Website Media Library<\/p>\n Emails and records of other contact:<\/strong>\u00a0Microsoft 365 \u2013 stored in the Cloud<\/p>\n Our head office is based in Ishoj, Denmark, and we have several other offices located throughout Europe, the UK and within the EEA where we have on-prem servers.<\/p>\n <\/p>\n We maintain an information security and privacy management framework proportionate to risk, designed to ensure confidentiality, integrity, availability, and resilience of personal data processing.<\/p>\n Organisational measures include governance and accountability structures (roles, policies, training), risk and DPIA processes, access control and least privilege, vendor and transfer controls, incident response and breach notification procedures, data lifecycle and retention management, regular testing and assurance (audits, vulnerability management, exercises), and business continuity\/disaster recovery. Measures are reviewed, tested, and improved on an ongoing basis in line with GDPR Article 32 and the principle of privacy by design and default. We support information security through our international standards 27001: 2022 and NIS2, this ensures our technical, organisational and security measures (e.g. encryption, access controls) are compliant.<\/p>\n <\/p>\n <\/a>We may on occasion transfer personal data to countries outside the UK\/EU\/EEA when this is necessary for the purposes described in this notice. Whenever we do so, we ensure that the information remains protected to the same standards required under the UK GDPR and EU GDPR.<\/p>\n We only transfer data where one of the following applies:<\/p>\n <\/p>\n Before making any international transfer, we assess the legal and security risks and apply measures such as encryption and strict access controls to keep your data safe.<\/p>\n You can contact us if you would like more information about international transfers or to request a copy of the applicable safeguards via\u00a0gdpr@danxcarousel.com<\/a><\/a>\u00a0<\/strong><\/p>\n <\/p>\n We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal requirements. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.<\/p>\n Details of typical retention periods for different aspects of your personal information can be found below:<\/p>\n Individuals have the right to access, rectify, erase (\u201cright to be forgotten\u201d), restrict, or object to the processing of their personal data, by contacting the Group Data Controller Officer, they also have the right to data portability and to withdraw consent and to be able to lodge a complaint if resolution can\u2019t be found, directly with the relevant supervisory authority.<\/p>\n For further details please refer to our Data Subject Request Policy and Procedure.<\/p>\n <\/p>\n Any changes we make to this privacy notice in the future will be posted on this page.<\/p>\n <\/p>\n
\n2. Objective and purpose
\n3. How and why do we use your information?
\n4. What personal information do we collect and how do we collect it?
\n5. Consent for processing personal data
\n6. Where we store your information
\n7. Data security measures
\n8. Data transfers
\n9. How long will we retain your data for?
\n10. Data subject rights
\n11. Changes to this privacy notice
\n12. Contact details<\/p>\n1. The DANX Carousel Group<\/h3>\n
<\/a><\/a>2. Objective and purpose<\/h3>\n
\n
3. How and why do we use your information?<\/h3>\n
\n
\n
\n
\n
\n
<\/a><\/a>4. What personal information do we collect and how do we collect it?<\/h3>\n
\n
5. Consent for processing personal data<\/h3>\n
\nWhen you provide consent, you agree that we may process your personal data for the 5. specific purposes described at the point of collection, such as:<\/p>\n\n
\n
\nWe maintain records of:<\/p>\n\n
6. Where we store your information<\/h3>\n
7. Data security measures<\/h3>\n
8. Data transfers<\/h3>\n
\n
9. How long will we retain your data for?<\/h3>\n
\n\n
\n Data Category<\/strong><\/td>\n Examples<\/strong><\/td>\n Retention Period<\/strong><\/td>\n Rationale \/ GDPR Basis<\/strong><\/td>\n<\/tr>\n \n Customer Account & Contact Information<\/td>\n Name, email, phone, address<\/td>\n Duration of customer relationship + 6 years<\/td>\n GDPR requires defined, justified periods for customer\/client data.<\/td>\n<\/tr>\n \n Communications & Support Queries<\/td>\n Emails, chat logs, support tickets<\/td>\n 2 years from last contact<\/td>\n Communications logs require documented retention and deletion processes.<\/td>\n<\/tr>\n \n Marketing Data<\/td>\n Preferences, consent logs<\/td>\n Until consent withdrawn + 2 years<\/td>\n Need proof of consent and storage limitation compliance.<\/td>\n<\/tr>\n \n Website Analytics & Server Logs<\/td>\n IP addresses, cookies, device identifiers<\/td>\n 12\u201324 months<\/td>\n Analytics data must have justified retention periods.<\/td>\n<\/tr>\n \n Processor \/ Third\u2011Party Data Handling<\/td>\n Any data processed externally<\/td>\n Only retained for period specified by controller<\/td>\n Processors must follow controller-defined retention schedules.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n <\/h1>\n
<\/h3>\n
10.\u00a0<\/a>Data subject rights (DSR)<\/h3>\n
<\/a><\/a>11. Changes to this privacy notice<\/h3>\n
<\/a>12. Contact details<\/h3>\n