Privacy Policy

Pickcost, which operates the service, is the data controller for the processing described in this policy unless otherwise expressly stated. If you have questions about how we process personal data or want to exercise your rights, you are welcome to contact us at support@pickcost.se.

We may process data that you provide directly to us, such as your name, email address, phone number, address, postal code, city, company name, organisation number and other information you provide when you create an account, submit a request, contact us or otherwise use the service.

Where necessary to provide the service, we may also process account and case history, communications between you and us, information about which suppliers you were shown or selected, and technical data such as IP address, device information, browser information, log data and data collected through cookies or similar technology.

We primarily receive personal data directly from you. Some data is also generated when you use the service, such as logs and usage data. In some cases, we may also receive data from suppliers, partners or someone acting on your behalf if this is necessary to administer a request, follow up on a case or manage a customer relationship.

We process personal data to provide, administer and develop the service, create and manage your account, match you with relevant suppliers, facilitate contact between parties, communicate with you, provide support, prevent misuse, maintain security and comply with legal obligations. Depending on the situation, the legal basis is performance of a contract, our legitimate interest, consent or legal obligation.

When you request contact with a supplier or accept an offer, we process the data needed to facilitate that contact and make it possible for the supplier to fulfil its commitment. Where processing is required by law, for example for bookkeeping, security or the handling of legal claims, we rely on legal obligation or our legitimate interest in establishing, exercising or defending legal claims.

When you request a quote, show interest in an offer or accept an offer, we may share relevant data with the supplier or suppliers that need the information to handle your request. This may include, for example, your name, contact details, address, information about your needs and other information required for the supplier to contact you or fulfil an order.

When a supplier receives your data in order to manage its own contact with you or perform its own contract with you, that supplier will normally be independently responsible for its further processing of your personal data. The supplier's own privacy policy and terms may then also apply alongside this policy.

We may also share personal data with companies and providers that process data on our behalf, such as providers of hosting, data storage, analytics, email, customer support, technical operations and security. These recipients may only process the data in accordance with our instructions and agreed safeguards. We may also disclose data to authorities or other recipients where required by law, by a government decision, or to establish, exercise or defend legal claims.

If we use providers or services that involve transferring personal data outside the EU/EEA, this will only take place subject to appropriate safeguards under the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision. Contact us if you would like more information about possible transfers and the safeguards used.

We keep personal data for as long as necessary for the purposes described in this policy. Account data is normally kept for as long as your account is active. Data linked to requests, offers and customer matters is kept for as long as needed to administer the relationship, follow up on the transaction, handle complaints or disputes and comply with our contractual or legal obligations.

Log and security-related data is kept for as long as needed to detect, prevent and investigate incidents. Accounting records and other documentation that we are required to keep by law are retained for the period required under applicable rules. When the data is no longer needed, we delete it or anonymise it within a reasonable time.

You have the right to request access to the personal data we process about you and to request rectification, erasure, restriction of processing and, in some cases, data portability. You also have the right to object to processing based on legitimate interest and to withdraw consent at any time where processing is based on consent. If you believe that our processing violates data protection rules, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

If you want to exercise your rights, contact us at support@pickcost.se. To protect your data, we may ask you to verify your identity before we process your request.

We use cookies and similar technology, such as local storage, so that the service works, to remember your choices and settings, for login, for analytics and to improve the user experience. Where consent is required, we will ask for it before non-essential cookies or similar technology are used. You can change your cookie settings at any time in your browser or through any cookie tools we provide.

We take appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration and unlawful disclosure. Access to the data is limited to persons who need it for their work, and we work continuously with security, logging, access control and risk reduction.

Some personal data is necessary for us to provide the service, create an account, facilitate contact with suppliers or manage a case. If you do not provide such data, we may not be able to give you access to all or part of the service. Other data is voluntary and is only provided if you choose to do so.

We may use automated processes to sort, prioritise or match requests with suppliers and to detect misuse or security risks. These processes are used as support within the service, but we do not make decisions based solely on automated processing that produce legal effects or similarly significant effects for you without a lawful basis and the safeguards required by law.

We may update this privacy policy over time. If the changes are material, we will inform you in an appropriate manner, for example through the service or by email. The latest version is always published here together with the date of the latest update.

If you have questions about this privacy policy or our processing of personal data, you are welcome to contact us at support@pickcost.se.