Latest update: 2025-03-12

1. General

With this privacy notice, we want to ensure that you feel safe when you provide us with your personal data. This privacy notice describes how we collect, use, transfer and store your personal data, and how we make sure that your personal data is processed lawfully and securely. It is important that you read the information provided in this privacy notice so that you understand how your personal data is processed and why.

2. Who is the data controller?

2.1 Dustin AB, with corporate registration number 556237-8785 and postal address P.O. Box 1194, SE-131 27 Nacka, Sweden (referred to in this notice as “Dustin”, “we”), is the controller in relation to the processing of your personal data whenever you visit this As the controller, Dustin is responsible for making sure that your data is handled in a correct and secure way pursuant to applicable legislation.

2.2 Dustin has a shared IT infrastructure with some affiliated companies within the Dustin Group. Any personal data and databases related thereto that is being processed in this infrastructure, are managed and directly owned by Dustin. Dustin thus has the controlling influence over your personal data including determining how and for what purposes the data is processed. We ensure the safe processing of your personal data through agreements with the affiliated group companies.

3. What personal data do we process?

Dustin collects and processes the following categories of personal data about you:

• Browsing behaviour on our website gathered by way of cookies, such as clicks and browsing history that indicates which pages you have shown interest in.
• User-generated data about your interaction with Dustin, e.g., IP address, device information (technical information about the computer, mobile phone and other devices you use, for example browser settings, time zone and operating system) and location information.
• If you subscribe to our mailing list, you provide Dustin with your user credentials and email address.

4. From which sources do we collect data about you?

4.1 Dustin collects your personal data directly from you when you visit Dustin Group’s website, or contact Dustin in any other way and provide information about yourself.

4.2 Dustin also collects certain personal data via cookies which log your website behaviour and thus your web content preferences. You can read more about how we use cookies here.

5. Why do we process personal data about you?

Dustin collects and processes personal data about you for various purposes. These purposes set the limit for our use of your personal data. Below, we explain the purposes of our processing and provide examples of processing activities that may take place under each purpose. Kindly note that some of your personal data may be processed for multiple purposes.

a) To track your browsing behaviour on our websites for analytical purposes

We at Dustin want you to have the best possible experience when you visit our websites. To enable this, analyses of your browsing behaviour on our websites are carried out by way of placement and reading of cookies. The collection of personal data for this purpose is based on consent. 

b) To facilitate the creation and sending of emails through our mailing list

Dustin Group sends out updates via our mailing list for which you can subscribe. When you subscribe to our mailing list your user credentials and email address will be processed for the purpose of providing you with these updates.

6. What are the legal bases for our processing of your personal data?

For Dustin to lawfully collect and process your data, we must have a legal basis for each purpose for which the data is processed. The legal bases for our processing purposes are described in this section. Kindly note that several legal bases may be applicable to the same processing activity.

a) Legitimate interests

This basis means that our processing is based on a so-called balancing of legitimate interests, meaning that the processing is necessary based on our assessment that Dustin has a legitimate interest in processing your personal data which is not overridden by your interest not to have your personal data processed. On this basis, we process your personal data to, for example, avoid improper use to avoid, prevent and investigate crime in our business operations. If we believe that a crime or an attempted crime has been committed and we submit a report to the police, Dustin will also continue to process your personal data to establish, exercise or defend legal claims.

b) Consent

This basis means that we process your personal data when you have given us your consent to our processing. You have the right to withdraw your consent. A withdrawal of consent does not interfere with the lawfulness of processing your personal data with your consent prior to the withdrawal.

The consent can be withdrawn at any time by contacting us at [email protected]. 

7.1 For how long do we retain your personal data?

7.1 Dustin will store your personal data for as long as necessary to fulfil the purposes for which the data is being processed (see retention time for each purpose in the table under p.12). This means that the retention period depends on the purpose for which the data is being processed. Dustin may also store data for a longer period if it is necessary to establish, exercise or defend a legal claim, e.g., if there is an ongoing dispute or a crime has been reported to the police. We perform regular disposals and erase personal data that is no longer necessary to process.
 

8. With whom do we share your personal data?

8.1 Dustin may share your data with governmental authorities if necessary to comply with laws, regulations or governmental decision, or for Dustin to establish, exercise or defend legal claims.

8.2 Depending on how you have interacted with Dustin, Dustin may share your personal data to the following recipients:

• Other companies within the Dustin Group acting as processors on behalf of Dustin to fulfil the various purposes set out in this notice. The legal bases for transfer to affiliated companies of the Dustin Group are the same as for our own processing.
• Governmental authorities such as the police or the national tax agency, to which we are obliged to transfer your personal data either pursuant to legal requirements or governmental decisions or because of reporting suspected crime or attempted crime. The transfers are made due to Dustin’s legal obligations or to establish, exercise or defend legal claims.
• With IDX, in order for them to administrate and update the website dustingroup.com. The categories of data that are transferred are user-generated data and browsing behaviour on our website.

9. Where do we store your personal data?

Dustin will primarily process your data within the EU/EEA. But we may also transfer your personal data to a country outside the EU/EEA if we need to share your data with Dustin’s suppliers or business partners that are outside or store personal data in a country outside the EU/EEA. If your personal data is transferred to a country outside the EU/EEA, Dustin will take the necessary measures in order to transfer the personal data legally by ensuring that your personal data is processed securely and with an adequate level of protection that is comparable with the protection offered within the EU/EEA, either by creating an agreement with the recipient that includes the EU Commission’s or based on the EU Commission’s .

10. What are your rights?

Dustin is responsible for ensuring that your personal data is processed in accordance with current legislation. This section describes your rights associated with our processing of your personal data. At your request or on our own initiative we will rectify, anonymize, erase or supplement data that is discovered to be incorrect, incomplete or misleading. If you have any questions about this or wish to exercise a right, please contact us via the contact details at the end of this privacy notice.

a) Right to access your personal data

At Dustin, we want to be open about how we process your personal data. If you would like an insight into our processing of data about you, you have the right to request information about the processing activity, including a copy of your personal data being processed, what is referred to as a register extract. This includes information about purpose, categories of personal data, categories of recipients of personal data, storage period or criteria for how the storage period is defined, information about where data has been collected from and the existence of automated decision-making, including information about the logic behind and the significance of the processing activity. Please note that when there is a request for access, we may ask for additional data about you to ensure that we are disclosing the data to the correct person and to clarify which data you wish to access. The register extract is free of charge, although in the event of repeated requests Dustin reserves the right to charge an administrative fee of SEK 100.

b) Right to rectification of your personal data

It is very important to Dustin to collect accurate and updated personal data. If we have collected incorrect personal data from you, you have the right to request that it be rectified. You also have the right to supplement any incomplete personal data. At your request, we will rectify the incorrect or incomplete data we are processing about you as quickly as possible.

c) Right to erase your personal data

We respect that the personal data we are processing has been borrowed from you. You therefore have the right to request that Dustin erase your personal data if the data has been processed in an illegal way, must be erased to fulfil a legal obligation to which Dustin is subject, is no longer necessary for the purposes for which it has been processed or when you object to a balancing of legitimate interest performed by Dustin and there is no legitimate interest for Dustin or a third party that carries great weight (see section f) below for information about the right to object). We are, however, not always able to approve your request as there may be reasons that give us the right to process data, e.g., if the personal data is being processed to fulfil a legal obligation, such as a requirement of the applicable accounting law, or if the data is necessary to establish, exercise or defend legal claims.

d) Right to data portability

You have the right to a copy of your personal data in a structured format and in certain cases to have the data transferred to another controller. This right, however, only relates to data that you yourself submitted to Dustin and that we are processing with the support of your consent or a contractual obligation towards you as legal basis.

e) Right to restriction of processing

You have the right to request that our processing of your personal data be restricted in certain situations, which means that the data may only be processed for certain purposes. You can, for example, request a restriction of incorrect data when you have requested rectification. During the period when Dustin is investigating the correctness of the data, the processing of it will be restricted. In case of restriction of processing, personal data should only be processed, except for storage, when the following applies:

i. The data subject has given consent to processing.

ii. Dustin needs to exercise or protect themselves against a legal claim.

iii. To protect the rights and freedoms of another data subject or legal person.

iv. For the public interest of the European Union or Member State.

f) Right to object to a certain kind of processing

When Dustin processes your personal data based on legitimate interest as legal basis or for direct marketing, you have the right to object to our processing activity.

An objection to Dustin’s processing of personal data based on legitimate interest can be submitted when you have personal reasons that relate to the situation. In the event of such an objection, Dustin assesses whether our legitimate reasons for processing carry more weight than your interest in protecting your privacy. If this is the case, Dustin may continue to process your personal data even though you have objected to the processing activity.

If you believe that we are processing your personal data in an incorrect way, you are welcome to contact us. Our contact details can be found at the end of this privacy notice. You also have the right to submit any complaints regarding the processing of your personal data to your local supervisory authority responsible for processing of personal data. For Sweden this is Integritetsskyddsmyndigheten (IMY) . 

11. How do we keep your personal data secure?

You should always feel safe when you provide us with your personal data. Therefore, Dustin has taken appropriate technical and organizational security measures in order to protect your personal data against unlawful or accidental disclosure, use, access, destruction, alteration or harm to your personal data. For example, all customer data is stored in a database protected by firewalls and access control so only employees within the Dustin Group who need access to your personal data to perform specific tasks have such access. 

12. Overview of our personal data processing

Below is a table of our personal data processing activities to provide you with a clear overview of which personal data categories we process for our various purposes, the legal basis on which our processing is based and how long we retain the data. That way, you can easily see which processing activities we carry out and why we do so.

Purpose	Legal basis	Categories of personal data	Retention time
To track your browsing behaviour on our websites for analytical purposes	Consent	•      Browsing behaviour •      User-generated data	Up to one year after you last interacted with us.
To facilitate and to send our mailing list.	Consent	•      Email address •      User credentials	For as long as you are subscribed to our mailing list and have not unsubscribed.

 

 

 

13. Term and changes to this privacy notice

13.1 The most recently updated version of Dustin Group’s privacy notice is always available on our website. Our privacy notice is valid at any time in the form and with the content that is published on the website.

13.2 Dustin has the right to update the privacy notice at any time. If the privacy notice is amended, the updated notice will be published on Dustin Group’s website.

14. Contact details

Do not hesitate to contact us if you have any questions about this privacy notice, if you would like more information about how we process your personal data or if any data is incorrect and you want us to rectify it.

•	Are you a consumer? Please contact customer service on 08-533 448 00 or send an email to [email protected].
•	Do you represent a company? Please contact customer service on 08-533 448 00 or send an email to [email protected].
•	You can also contact our Privacy Team directly via [email protected].  Dustin’s data protection officer, Jenny Dahl, is available via the same email address. If you would like to send any question or information to her, please state that your message is intended for Dustin’s data protection officer.