1. General
This privacy and marketing policy (“Privacy Policy”) outlines how VIMAB BESS AB (“VIMAB BESS”, “we”, “us”, or “our”) collects, uses, shares, and stores your personal data. Personal data refers to any information that can be directly or indirectly linked to a living individual.
1.1 This policy applies whenever VIMAB BESS provides products or services, including purchases, trading, customer service, and website visits.
1.2 You should feel safe providing your data to us. This policy explains how we ensure compliance with applicable data protection laws.
2. Data Controller
VIMAB BESS AB is the controller responsible for the processing of your personal data and ensures all processing complies with current legislation.
3. When We Process Your Personal Data
3.1 To visit our website, purchase products/services, or contact us, we must process your personal data.
3.2 We collect data when you make purchases, request support, visit our website, or participate in our events. This data is necessary for fulfilling agreements and providing services.
3.3 We may also update address data via third-party services.
4. What Personal Data We Process
For customers using our services, we may process:
- Name, address, and contact details
- Payment information
- Site ID and technical connection data
- Geographic and technical data
- Purchase and customer history
- IP address and web activity
5. Why We Process Your Data
We process data to:
- Fulfill contracts: purchases, billing, support, advisory, aggregation
- Provide customer service and address inquiries
- Send marketing communications by mail, email, or phone
- Manage client relationships and provide services
- Deliver newsletters and personalized offers
- Improve our products and services
- Comply with legal obligations (e.g., accounting)
- Conduct market analysis, statistics, and business tracking
6. Legal Grounds for Processing
We rely on several legal grounds:
6.1 Contractual necessity for purchases and service delivery
6.2 Legitimate interest, e.g., sending marketing material (no sensitive data processed under this basis)
6.3 Legal obligation, e.g., for accounting and financial record-keeping
7. Overview of Our Data Processing
| Administer and deliver products/services | Contract | Name, address, contact, geographic data, IP, site ID | 1 year after last activity |
| Deliver and manage frequency regulation or trading services | Contract | Name, address, contact, geographic data, IP, site ID | 1 year after service termination |
| Legal compliance (e.g., accounting) | Legal obligation | Name, address, contact, geographic data, IP, site ID | As required by law |
| Marketing via email, phone, post | Legitimate interest | Name, address, contact, geographic data, IP, site ID | 1 year after last activity |
8. Profiling
8.1 We may use profiling only with your explicit consent or when required to fulfill a contract (e.g., service personalization).
8.2 You may object at any time by contacting: gdpr@vimab-bess.com. We will cease such processing upon request.
9. Data Retention
9.1 We retain data only as long as necessary for the stated purposes or to fulfill legal obligations.
9.2 Customer data is stored for up to 24 months after last activity. If services are active (e.g., frequency regulation or trading), data is deleted upon contract termination.
10. Disclosure of Data
10.1 We may share data with VIMAB Group companies and partners.
10.2 Third parties may only use data to market or deliver services under agreements with you.
10.3If you apply for credit, data may be shared with credit agencies.
10.4 We may share data if legally required or to protect our rights or detect/prevent fraud.
10.5 We may transfer data outside the EU/EEA where necessary and will ensure legal safeguards are in place.
11. Changes to the Policy
We may update this Privacy Policy at any time. You’ll be notified in advance. If you disagree with the changes, you have the right to terminate your agreement with us before the new terms take effect.
12. Data Protection
We use appropriate security measures to protect your personal data from unauthorized access, alteration, or deletion. Access is restricted and protected by firewalls and access controls.
13. Your Rights
You have the right to:
- Request a free annual extract of your stored data
- Request correction or deletion of inaccurate or outdated data
- Withdraw consent and object to direct marketing
- Receive your data in a structured format or transfer it to another provider (if processed under contract or consent)
You may also file a complaint with the national data protection authority.
14. Cookies
Under the Swedish Electronic Communications Act (in effect since July 25, 2003), visitors must be informed of cookie usage and how to opt out.
More info: PTS (Swedish Post and Telecom Authority). How to disable cookies varies by browser—check your browser’s help section for guidance.
15. Contact Information
Please reach out if you have questions about this policy, how your data is handled, or to request a data extract.
Data Controller VIMAB BESS AB (Reg. No. 556760-0175) Sveavägen 166, 113 46 Stockholm, Sweden gdpr@vimab-bess.se
General Inquiries
info@vimab-bess.com