Privacy Policy
We respect your privacy.
J-Craft Boats AB (hereinafter “J-Craft Boats”, “we” and “us”) is a company registered in Sweden with company registration no 556743-4567.
In this privacy policy, J-Craft Boats describes its processing of personal data when conducting business and in conjunction with provision of its goods and services. J-Craft Boats is the data controller for the processing performed by J-Craft Boats described in this privacy policy. We will collect and process personal data in accordance with this privacy policy and the General Data Protection Regulation, often referred to as GDPR (EU 2016/679).
It’s important for us at J-Craft Boats that you feel confident with our processing of your personal data. We are transparent with our collection, processing, and use of your personal data, as described in this privacy policy. You will also find information about your rights as a data subject and how you can exercise the rights.
Categories of Data Subjects and Personal Data
J-Craft Boats collects and processes personal data which you provide to us and that we collect when you use our services. We process the following categories of personal data from the following categories of data subjects.
Potential customers, newsletter recipients and website visitors:
Data subjects that we believe may be interested in the services that J-Craft Boats offers, for example by visiting or contacting us or accessing our website, signing up to our newsletter, using our configurator, or visiting our social media pages. J-Craft Boats may process the following personal data about potential customers and newsletter recipients: name, country, city, e-mail address, telephone number, and personal data in emails and CRM-system. When visiting our website, we may collect certain visitor statistics and device information through cookies, as well as the information you choose to provide during your visit. We also collect information that the web browser sends to us. Such data includes information such as the computer’s Internet Protocol ("IP") address, browser version, pages of our website that is visited, the time and date of the visit, the time spent on those pages, and other similar statistics.
Customers:
Data subjects that are individuals purchasing our goods and services or represents an organization that purchases our goods and services. J-Craft Boats may process the following personal data about customers: name, telephone number, postal address, visiting address, information contained in agreements and other documents, name of company, title, function, image, payment information, delivery address, boat details, price, personal data in emails and CRM-system and other information relevant to the purpose of the contact.
Business contacts, suppliers, consultant, and others:
Data subjects that as individuals or represents an organization that providing services, are a business contact or otherwise have a business relationship with J-Craft Boats other than as customers. J-Craft Boats may process the following personal data about such business contacts and other visitors: name, e-mail address, telephone number, name of company, title, function, information contained in agreements and other documents, image, payment information, personal data in emails and CRM systems, as well as other data relevant to the purpose of the contact.
Applicants:
Data subjects applying for employment at J-Craft Boats. J-Craft Boats may process the following information about job applicants: name, telephone number, e-mail address, telephone number, postal address, social security number, age, work experience, educational history, grades, qualifications, and other information that the applicant chooses to provide in the CV and personal letter.
We collect and process personal data that we obtain from third parties. The personal data is collected from providers of social media services, such as Facebook. More information about their personal data processing can be found on the respective provider’s website. Certain personal data may also be collected through web services from Google and Microsoft. In addition, personal data may be obtained from publicly available sources. We process the following categories of personal data from potential customers, that we collect from third parties: name, e-mail address, IP-address, country.
Purpose and Legal Basis for Processing of Personal Data
We collect and process personal data for the following purposes based on the following legal bases:
Potential customers, newsletter recipients and website visitors:
To send information and marketing about J-Craft Boats and our goods and services.
To establish new customer relationships and sell our goods and services.
To improve and develop our goods and services.
To assist a data subject who is in contact with us or visits our website or social media pages.
To improve our service and adapt our website to the visitor’s device.
Legal basis: Our legitimate interest.
Customers:
To administer and provide our goods and services to the customer.
To contact the customer.
To enter into contracts, deliver ordered products and assist the customer.
To provide product support, service, and thereto related services.
To administer payments and other administrative tasks.
To send information and marketing about J-Craft Boats and our goods and services.
Legal basis: If J-Craft Boats has an agreement directly with the data subject: fulfil the contract.
In other cases: Our legitimate interest.
Business contacts, suppliers, consultants, and others:
To assist a data subject who chooses to contact us or visits our website.
To establish and maintain business partnerships.
To enter into agreements, purchase goods and services, and administer services.
To develop and administer J-Craft Boats and other thereto related purposes.
Legal basis: If J-Craft Boats has an agreement directly with the data subject: fulfil the contract.
In other cases: Our legitimate interest.
Applicants:
To administer employment processes.
Legal basis: Our legitimate interest.
To retain applications for future employment processes.
Legal basis: Consent.
All categories above:
To safeguard J-Craft Boats’ rights, for example in conjunction with an ongoing legal process or claim or due diligence.
Legal basis: Our legitimate interest.
To fulfil statutory requirements, for example for bookkeeping purposes and other associated legal requirements.
Legal basis: Comply with applicable legislation.
When processing personal data on the basis of J-Craft Boats’ legitimate interest, J-Craft Boats considers that the processing is reasonably necessary to perform, fulfil, and administer our business, to provide our goods and services to our customers, to establish and maintain contact with customers, potential customers, business contacts, suppliers and others who contact us. Our legitimate interest in sending marketing and information about our business and our goods and services is based in our belief that such information may be of interest to the data subject and its organization, and that the associated risk for the data subject, if any, is minimal. The data subject may at any time object to our processing of the data subject's personal data for the purpose of marketing.
Retention of Personal Data
We store personal data for as long as necessary based on the purpose of the processing. Personal data is retained as follows.
Potential customers, newsletter recipients and website visitors:
When signing up to our newsletter or if the data subject is interested in information and marketing about J-Craft Boats and our goods and services (a potential customer), data is kept as long as we send out such information, unless the data subject objects to receiving the information/newsletter. When contacting us, the personal data is saved for as long as necessary to assist the data subject. For data collected through cookies on our website, during the visit. Personal data in excess of what is necessary to send newsletters and marketing may be retained for a longer time with the data subject’s consent. If the data subject objects to receiving further information from J-Craft Boats or unsubscribes from the newsletter, the personal data relating to the data subject will be deleted.
Customers:
We keep personal data as long as the data subject has an ongoing business relationship with us such as a customer agreement to provide support services, either directly or through a customer or a partner. Personal data regarding the purchase of a J-Craft boat is kept for ten years.
Business contacts, suppliers, consultant, and others:
We keep personal data as long as the data subject has an ongoing business relationship with us, either directly or through a company, and for one year thereafter.
Applicants:
Until the position applied for has been filled. With consent from the applicant, the data is retained in accordance with the consent.
Information required by applicable legislation or to safeguard J-Craft Boats' rights: Notwithstanding what has been stated in this chapter above, J-Craft Boats may retain personal data that is necessary to comply with legal requirements, such as seven years according to the Swedish Accounting Act, or as necessary to safeguard J-Craft Boats' legal interests, e.g. if there is an ongoing legal process or in case of claims.
When the time for retention expires, the personal data will be erased by deletion or anonymization.
Disclosure of Personal Data and Data Processors
J-Craft Boats may disclose personal data to third parties to the extent necessary to provide our services, administer our business, hire subcontractors, purchase goods and services and if disclosure is required by applicable law. We may share your personal data with suppliers we use to provide our services, such as the software and cloud services providers Microsoft and AWS, IT-related service providers, social media companies such as Facebook, software or online service providers such as Hubspot and Mailchimp, marketing agencies, accounting firms, professional advisors (for example law firms), business consultants, and other administrative service providers. In certain cases, J-Craft Boats engages sales representatives and/or sales agents in certain countries. Personal data will be shared with such representatives in applicable cases.
When transferring personal data, we remain the data controller for our own processing, while the recipient becomes either a separate data controller or a data processor to us, based on the circumstances of the specific case.
If we engage a supplier who will process personal data on J-Craft Boats’ behalf, J-Craft Boats will enter into a data processing agreement with the supplier, who will be deemed a data processor. The data processing agreement is entered into to ensure that we provide lawful instructions to the processor and to comply with applicable law.
Security and Geographical Location of Processing Personal Data
We take appropriate technical and organizational measures to ensure a level of security appropriate to the risk of our processing of personal data.
Our online services are provided from data centers located in the EU and EES. We will mainly process your personal data within the EU and EES. However, it may in certain cases be necessary to transfer your personal data outside the EU and EES. For example, Hubspot, Facebook, Google and certain sales agents may process personal data in the United States. In that case, we will take the necessary measures to ensure that the processing takes place in a safe manner and in accordance with applicable legislation, including the GDPR.
We value your trust in providing us your personal information. Thus, we are striving to use commercially acceptable means of protecting it. However, no method of transmission over the internet, or method of electronic storage is completely secure and reliable, and we cannot guarantee its absolute security.
If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the privacy policy of these websites. We have no control over, and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Cookies
A cookie file is a text file that, either directly if the cookie is necessary or otherwise with permission from you, can be placed on your computer or mobile device. More information on the cookies we use can be found on our website. If you agree, your browser will add the cookies we use on our website. You have the option to either accept or refuse these cookies. If you choose to refuse our cookies, you may not be able to use some portions of our website.
We use cookies to analyse traffic on our website, to gain knowledge on how our website has been used, from what type of device it has been accessed and at what time.
Our Services do not Address Children
We do not knowingly collect personal identifiable information from children. In the case we discover that a child under 16 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.
Your Rights as a Data Subject
The GDPR grants you as a data subject several rights in relation to our processing of personal data. As a data controller, we shall make it possible for you to exercise your rights.
Right of access:
You have the right to receive confirmation of whether your personal data is processed by us, and in such case receive information about the processing. We cannot, with reference to the General Data Protection Regulation, disclose personal data if it may adversely affect the rights and freedoms of others.
Right to correction:
If processed personal data is incorrect or incomplete, you as a data subject have the right to request correction without undue delay from us.
Right to be forgotten:
In some cases, you as a data subject have the right to request the deletion of your personal data ("the right to be forgotten"). An example is when the personal data is no longer necessary for the purpose it was collected or otherwise processed. However, there may be contractual relationships or legal requirements that prevent us from delete your personal data.
Right to data portability:
As a data subject, you have the right to transfer your personal data to another data controller, if the processing is supported on the lawful bases of performance of a contract or consent.
Right to restriction of processing:
In some cases, you as a data subject have the right to demand that we limit the processing of your personal data, i.e. limit the processing to certain separated purposes. The right to restriction applies, among other things, when you as a data subject believe that the personal data is incorrect and have requested the personal data to be corrected.
Right to object:
You as a data subject have the right to object to the processing of personal data supported on the lawful basis legitimate interest. In the event of an objection, we shall case the processing if we cannot demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or if the processing of personal data is carried out for the establishment, exercise or defence of legal claims.
Right to object to direct marketing:
When personal data is processed for direct marketing, you as a data subject have the right to object at any time to the processing of personal data for that purpose.
Right to lodge a complaint:
If you wish to lodge a complaint against our processing of your personal data, you are welcome to contact us using the contact details set out below. You also have the right to submit a complaint about our personal data processing to the supervisory authority, in Sweden the Swedish Authority for Privacy Protection, or the supervisory authority in your country of residence within the EU.
Changes to the Policy
We may update and make changes to this policy from time to time. The latest version can be found on our website.
This privacy policy was last updated on March 2, 2023.
_____________
If you have any questions about our processing of personal data or if you wish to exercise your rights as a data subject, please contact us for assistance.
Contact details are available on our website, www.j-craftboats.com.
J-Craft Boats AB