Privacy policy for consumers

Introduction

This privacy policy is designed to ensure that contact persons at existing or potential suppliers or customers feel secure that CityMail AB (“CityMail”, “we”, or “us”) as the data controller, handles your personal data in compliance with applicable privacy legislation.

Why do we process your personal data and what legal basis do we have for the processing?

We use your information to communicate with you and your employer in matters concerning existing or potential agreements with your employer.

We may also use your personal data to send advertising and offers for our services and products to you, which your employer may be interested in.

In addition, we may process your personal data to follow up on any complaints or feedback from you or your employer.

We consider the processing for the above purposes to be in your interest as a registered person, or at least not so privacy-intrusive that our or your employer’s legitimate interests cannot be upheld.

What do we do with your personal data?

We store your personal data in our customer or supplier database and use it to communicate with you for the purposes stated above.

Which personal data do we process?

For the above purposes and purposes, we process the following personal data:

  • Your full name;
  • Your email address;
  • Your phone number;
  • Your job title;
  • Any other personal data you provide to us in connection with our communication with you;
How did we get your personal data?

We may have obtained your personal data through:

  • You have provided it to us yourself;
  • Your employer, i.e. our customer or supplier, has provided it to us;
  • We have looked up your information
Where do we process your personal data?

Your personal data is processed within the EU/EEA.

To whom do we share your personal data?

Only the people at our company who need to use your personal data to perform their work tasks are allowed to process the personal data for the stated purposes.

We may also share your personal data with the following third parties for the following purposes:

  • External customer service; to be able to provide support and conduct troubleshooting
  • Consultancy companies and IT sector suppliers; for the development and operation of IT systems
How long do we keep your data?

If your employer is a customer/potential customer, or a supplier to us, we will keep your information for 36 months from the time the agreement ends or contact with you is terminated. If your employer is a customer or supplier to us and we become aware that you are no longer the contact person, we will remove your information within 3 months.

Do you want us to change or delete your personal data?

If you want us to change incorrect or incomplete information, delete information, or limit our processing of your information, you can contact us by using the contact information below.

Do you want a copy of the personal data that we process about you as a contact person?

You can request a copy of the personal data we process about you. Contact us using the contact information below. Include in your request: your name, the name of the organization you represent, and the address you would like us to send the information to.

Contact us

If you have any questions or concerns about how we handle your personal data, you can contact our data protection officer:

Email address: dpo@citymail.se
Phone number: 08-709 43 00
Mail: CityMail AB, Box 90 108, 120 21 Stockholm

Privacy policy for mail & package recipients

Introduction

This privacy policy is in place so that you, as the actual or potential recipient of mail or package (referred to as “shipment” or “shipments”) sent via CityMail Sweden AB (“we” or “us”), can feel confident that we, as the data controller, handle your information in accordance with applicable privacy legislation.

Why and how do we process your personal data?

We process your personal data to ensure that you receive your shipment to the correct address. The information is stored in an address register. When one of our customers sends a shipment to you, we match the shipment information with the information we have about you in our address register. This way, we can ensure that your shipment is delivered to the correct address. For packages, the processing also allows for presentation of tracking data to recipients and senders and the possibility for recipients to make changes to delivery options.

We also process your personal data for support/complaint handling, troubleshooting purposes, and internal improvement of our operations. If something has gone wrong in the distribution, we need to investigate the error to ensure that you continue to receive your shipments delivered to the correct address.

The processing of your personal data is necessary to accommodate our customers’ interest in sending shipments, our interest in delivering shipments, and recipients’ interest in receiving shipments.

What personal data do we process?

To be able to sort and deliver shipments to you, handle address changes for mail (packages are not forwarded), enable tracking of packages, support/complaint handling, troubleshooting, and internal improvement of our operations, we may process the following of your personal data:

  • Your name
  • Your address
  • Your personal identity number
  • Your telephone number
  • Your email address
  • Information about the sender
  • Information about change of address
  • Properties of the address that governs how the distribution is made.
  • Other information you provide us with when contacting us for support
How do we collect your personal data?

We collect property addresses from “Lantmäteriet” (The Land Survey) and constantly update our address register, both on our own and with the help of our partners.

We may also receive your personal data from “Svensk Adressändring” (Swedish Change of address) when you have ordered an change of address or forwarding, or in cases where “Svensk Adressändring” forwards changes regarding your official address or special postal address from SPAR to postal operators.

If something goes wrong and you contact us, we may receive your personal information from you or from someone else reporting the error. Information regarding a package shipment will be obtained from the sender.

Where do we process your personal data?

Your personal information will be processed both within and outside the EU/EEA. The transfer of information outside the EU/EEA is regulated by standard contract clauses. Processing is further regulated in processor agreements and is always done in accordance with applicable data protection legislation.

With whom do we share your personal data?

Only those within our company who need to use your personal data to perform their work tasks will have access to process the information for the stated purposes.

We may also share your personal data with the following third parties for the following purposes:

  • Other postal operators; to be able to deliver mail to you
  • Our external customer service; to provide support, handle complaints, and perform troubleshooting
  • DHL’s agent network; to deliver shipments that do not fit in your mailbox
  • iBoxen; to be able to deliver shipments to their lockers
  • Consulting companies and IT suppliers; for the development and operation of IT systems
  • Authorities; in connection with audits and inspections

In cases where the actors are “personal data processors” to us, the processing is regulated in an personal data processing agreement.

How long do we keep your personal data?

We will store your personal information for different lengths of time depending on the purpose of the processing.

To ensure that you can receive your mail, we will store your information in our address register as long as you are a recipient in our delivery area.

For support and troubleshooting purposes and for internal improvement, we will store your personal information for a maximum of 18 months.

Do you want us to change or delete your personal data?

If you want us to change or delete your personal data, you can contact us by using the contact information below.

Do you want a copy of the personal data that we process about you?

If you want a copy of the personal data we process about you, you can request one. Contact us using the contact information below. Include your name, address, zip code, and city in your request.

For security reasons, register extracts can only be issued for the name and address specified in the request. For the same reason, the answer will be sent to the specified address. We therefore cannot provide register extracts in digital form as we cannot safely identify the person requesting this or the receiving digital address.

Do you have complaints?

If you have any complaints and want to object to how we process your personal information, you can contact the “Integritetsskyddsmyndigheten” (Swedish Authority for Privacy Protection). The Swedish Authority for Privacy Protection’s role is to uphold the protection of personal data, monitoring that they are handled correctly and do not fall into the wrong hands. You can reach them by phone: 08-657 61 00 or by email: imy@imy.se.

Contact us

If you have any questions or concerns about how we handle your personal data, you can contact our data protection officer:

Email address: dpo@citymail.se
Phone number: 08-709 43 00
Mail: CityMail AB, Box 90 108, 120 21 Stockholm