Privacy notice
Last updated 2024-05-17.
Protecting your personal data is a serious matter for Hexatronic. This Privacy Notice (the “Privacy Notice”) explains how we collect and use your personal data, in compliance with applicable data protection laws. We also encourage you to read our Cookie Policy.
About Hexatronic Group AB and this Privacy Notice
This Privacy Notice uses the terms “Hexatronic”, “we”, “us” or “our” which refers to Hexatronic Group AB, Reg. No. 556168-6360, Sofierogatan 3A, 412 51 Gothenburg, Sweden and/or its affiliate, as applicable. Hexatronic is a group of companies that develops, markets, and delivers products, components, and system solutions with focus on the fiber optic market. Hexatronic offers a wide range of innovative system and product solutions mainly for passive fiber optic infrastructure with global trademarks like Matrix, Viper, Stingray, Raptor, InOne, Drytech™, Lightmate®, and Wistom®. Hexatronic has its headquarters in Gothenburg, Sweden and has sales offices and/or subsidiaries in Sweden, Norway, Denmark, Finland, United Kingdom, Germany, Austria, the Netherlands, Italy, Estonia, Latvia, Lithuania, South Korea, China, New Zealand, Australia, US, and Canada. Hexatronic is listed on Nasdaq Stockholm under the ticker HTRO. For more information, please visit https://www.hexatronic.com/en/investors
As part of our business, Hexatronic processes personal data for which Hexatronic is the data controller. This means that Hexatronic is responsible for ensuring that the processing of personal data is carried out in accordance with applicable data protection laws and this Privacy Notice. We take all necessary measures to make sure that your personal data are being processed by us in a lawful, fair, and transparent manner.
It is important to us that you feel comfortable with how we process your personal data. This Privacy Notice covers all necessary information about our personal data processing, and it is important that you read and understand this Privacy Notice before you use any of our services. Should you have any questions regarding our processing of your personal data, please contact us by using the contact details below.
Please note that our website may contain links to websites provided by third parties. These websites have their own privacy policies and Hexatronic is not responsible for their business or their information policies. We recommend users who submit information to or through these third-party websites to review the privacy policies on these websites before submitting any personal data to them.
For the collection, administration and retention of information collected via cookies, please refer to our Cookie Policy
Who is the data controller for your personal data?
The data controller of your personal data is the Hexatronic group company that decides the purposes and means for using your data. This is generally Hexatronic Group AB (publ), or the local entity located in your country of residence or, if applicable, the local entity which you have been in direct contact with. If you ever feel unsure as to what local entity is your data controller, you may always reach out to us at: dataprivacy@hexatronic.com
A list of all entities with our group of companies can be found here.
Why do we process your personal data?
To process orders and deliver products
When you place an order with us e.g., through our ordinary sales channels or through our web shop, we require specific information to complete it. To deliver your order and provide updates, we process certain personal data, as detailed in the table below.
|
Categories of personal data |
Legal basis |
|
Contract. The processing is necessary to fulfil our contract with you, i.e., what we are obliged to provide under the purchase agreement between you and us. Legal obligation. We save invoice documentation in accordance with applicable accounting laws and regulations. |
|
Exemption for special categories of personal data |
|
|
N/A |
|
|
Retention period |
|
|
Your personal data is saved for as long as you are an appointed contact person for a company doing business with Hexatronic. Upon termination of an agreement, your personal data will be stored for one (1) year before deletion, unless you show interest in our products, and provided that your personal data is not required to be stored for longer than one (1) year to fulfil our duties under our agreement. |
|
To respond to your requests
When you reach out to us, we need to store certain information about you to respond to your requests. For this purpose, we may process the personal data detailed in the table below.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to fulfil our legitimate interest of responding to your requests. |
|
Exemption for special categories of personal data |
|
|
N/A |
|
|
Retention period |
|
|
Your personal data is saved for as long as it is necessary for us to answer your question and complete any follow-up inquiries. In order for us to document any request to exercise your rights under applicable data protection laws, we will retain the documentation for a period of up to two (2) years in order for us to document that we have fulfilled the request. |
|
To manage product claims
To handle product claims, we need to process certain information about you. For this purpose, the personal data we may process is detailed in the table below.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to fulfil our legitimate interest of managing product claims. |
|
Exemption for special categories of personal data |
|
|
N/A |
|
|
Retention period |
|
|
Your personal data is saved for as long as it is necessary for us to manage your product claims. |
|
To send you news and information about our products that may interest you
To send you news and information about our products which we believe might interest you, we may use your personal data. For this purposes, we may, unless you have opt-ed out from receiving such information from us, process the personal data detailed in the table below.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to fulfil our legitimate interest of providing you with information about our products that may interest you. Consent. Where consent is required under applicable laws and regulations, we collect information based on your consent. |
|
Exemption for special categories of personal data |
|
|
N/A |
|
|
Retention period |
|
|
Your personal data is saved for up to two (2) years for marketing purposes. You may at any time request that you do not wish for us to send you e-mails or text messages (opt-out). |
|
To keep our investors informed about any news regarding Hexatronic
To keep our investors informed about the latest company news, financial updates, and strategic developments, we offer a subscription to our investor newsletter. Subscribing to this newsletter allows us to send you periodic communications that are relevant to your interests as an investor in our company. For this purpose, we may need to process your personal data detailed in the table below.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to fulfil our legitimate interest of providing you with relevant information about Hexatronic. |
|
Exemption for special categories of personal data |
|
|
N/A |
|
|
Retention period |
|
|
Your personal data is saved for up to two (2) years for this purpose. You may at any time request that you do not wish for us to send you e-mails or text messages (opt-out) for this purpose. |
|
To manage loyalty programs
To manage and offer loyalty programs to our customers, we need to process certain personal data. For this purpose, the personal data we may process is detailed in the table below.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to fulfil our legitimate interest of managing our loyalty programs. |
|
Exemption for special categories of personal data |
|
|
N/A |
|
|
Retention period |
|
|
Your personal data is saved for as long as you are part of our loyalty program and for a period of six (6) months thereafter. |
|
To conduct surveys to improve our services and products
From time to time, we may send you surveys to improve our services and products. For this purpose, we may process the personal data detailed in the table below.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to fulfil our legitimate interest of improving our services. |
|
Exemption for special categories of personal data |
|
|
N/A |
|
|
Retention period |
|
|
Your personal data is saved for up to two (2) years for us to be able to conduct surveys. |
|
To organize competitions
From time to time, we may organize competitions at marketing exhibitions and on our social media platforms. For this purpose, we may process the personal data detailed in the table below.
|
Categories of personal data |
Legal basis |
|
Legitimate interest. The processing is necessary to fulfil our legitimate interest in organizing and managing competitions for individuals who have wished to participate. |
|
Exemption for special categories of personal data |
|
|
N/A |
|
|
Retention period |
|
|
Your personal data is saved for the duration of the competition and a maximum period of six (6) months thereafter to inform the winner and manage any related activities. |
|
To generate statistics for marketing analysis
When you browse our website, we collect information about your clicks using cookies and other tracking technologies that you have approved of. This information is stored to recognize you on future visits and enhancing your marketing experience. For this purpose, we may process the personal data detailed in the table below.
|
Categories of personal data |
Legal basis |
|
> Name and contact information, including address, mobile number and e-mail address; > IP address; and > Other information that is relevant for customer surveys, advertisement/marketing or offers. |
Consent. We collect information via the use of cookies based on your consent. For more information about our cookies, see Cookie Policy. |
|
Exemption for special categories of personal data |
|
|
N/A |
|
|
Retention period |
|
|
Your personal data is retained for one (1) year from the date of creation, i.e., one (1) year from the logging event in question. |
|
Other purposes defined in each case
We may process your personal data for any other specific purpose indicated at the time of collection of your personal data. The information in this Privacy Notice shall then be read in conjunction with any information provided by us upon the collection of your personal data. Your personal data is only retained for a period needed to fulfil the purpose of our processing of your personal data. Legal basis for such processing as well as retention periods and categories of personal data processing is further detailed in the information provided upon our collection of your personal data.
What personal data do we collect and where from?
The types of personal data that we collect may, depending on the context, include:
- name and contact information including address, mobile number and e-mail address;
- geo-location (roughly estimated);
- pictures and video clips;
- other information that is relevant for customer surveys, advertisement/marketing or offers; and/or
- IP address.
We may collect your personal data from the following sources:
- when you contact us by e-mail or phone;
- when you contact us through any of our contact forms on our websites;
- Hexatronic’s website(s), e.g. when you subscribe to our newsletter;
- by way of agreement, invoice, or other business contact, if you are a customer or a contact person for any of our business partners;
- when you visit us on any of our marketing exhibitions or sign up for any of our seminars; and/or
- from third parties in the form of group companies, public records, or any of our business partners.
Transfer of personal data
Hexatronic only transfers personal data as described below. We always observe great caution when transferring your personal data and your personal data is only transferred in accordance with this Privacy Notice and after taking appropriate security measures. We do not sell personal data to third parties. Hexatronic may transfer your personal data in the following situations:
- Group companies: Hexatronic may transfer your personal data to other group companies for the purpose of conducting business across our offices, develop our business and provide you with relevant information. The processing is necessary to fulfil our legitimate interest in sharing personal data within our group of companies.
- Business partners which are not group companies: Our business partners will get access to your personal data to the extent necessary for them to fulfil their obligations relating to your purchase. We will clearly state when one of our business partners is involved in your purchase. The processing is necessary to fulfil our contractual obligations with you.
- Business transactions: If all or part of Hexatronic’s operations is sold or integrated with any other business, operation or company, your personal data may be disclosed to our advisors, potential buyers, and their advisors, and be transferred to the new owners of the operation. The processing is necessary to fulfil our legitimate interest in being able to sell all or part of our business in connection with a merger or other investment.
- Third-party service providers: Some companies provide services on our behalf. These services include, inter alia, logistics, distribution, suppliers, IT services, banks and credit information services. These companies will get access to your personal data to the extent necessary for them to fulfil their obligations, but they may not use or share the information for any other purposes. Hexatronic uses Google's marketing services. Please find more information about Google's collection, transfer and use of personal data here: https://support.google.com/analytics/answer/6004245
- Legal obligations: Your personal data may also be disclosed for the purpose of Hexatronic’s compliance with certain legal obligations and it may be transferred to the Police and other relevant public authorities when permitted and required by law.
Under certain circumstances, personal data may be transferred to countries outside of the EU/EEA, such as the U.S.A., United Kingdom, China, New Zealand, Australia, and Canada, as Hexatronic has offices and/or business partners in these countries. When such transfers are carried out, Hexatronic takes all appropriate measures to ensure that your personal data is adequately protected and that all processing is performed in accordance with this Privacy Notice. You can always be confident that all transfers of your personal data to countries outside of the EU/EEA are carried out in compliance with applicable data protection laws, as Hexatronic will ensure that at least one of the following conditions are fulfilled in relation to each of those transfers:
- the receiving country ensures an adequate level of protection;
- Hexatronic has collected your consent prior to the transfer;
- an agreement including certain standard contractual clauses issued by the European Commission (e.g. (EU) 2021/914 or replacing versions thereof) have been entered into between Hexatronic and the recipient, without any conflicting changes or amendments; or
- the recipient has adopted binding corporate rules for the processing which have been approved by the relevant supervisory authority and the recipient of the personal data in the third country is bound by these rules.
Should you have any questions regarding our transfers of personal data to countries outside the EU/EEA, please contact us using the contact details provided at the end of this Privacy Notice. You have the right to obtain a copy of the safeguards we employ for transferring personal data to countries outside the EU/EEA by contacting Hexatronic.
Should you have any questions regarding our transfers of personal data to countries outside the EU/EEA, please contact us by using the contact details provided at the end of this Privacy Notice. You have the right to obtain a copy of the safeguards that we use when transferring personal data to a country outside of the EU/EEA by contacting Hexatronic.
Withdrawal of consent
If we process your personal data based on your consent, it is important that you are aware of your right to withdraw your consent at any time. You may withdraw your consent by contacting us on the contact details provided below. Such withdrawal may be made in whole or in part. If you do not wish to receive marketing and offers from us, you can withdraw your consent by contacting customer service or, as regards direct marketing via e-mail, by following the link in our marketing e-mails. Please note that if you withdraw your consent, you may not be able to use parts or all of our services.
Your rights
Under applicable data protection laws, you have certain rights in relation to the processing of your personal data. We process your personal data to the extent necessary to fulfil your rights. Please submit requests for exercising your rights by contacting us by using the contact details set out below.
You have, under certain circumstances, the right to exercise the following rights:
|
Access |
You may request confirmation whether personal data about you is processed by us and, if that is the case, access your personal data and additional information regarding the operation, such as the purposes of the processing. You are also entitled to receive a copy of the personal data undergoing processing. |
|
Object to certain processing |
You have the right to object to the processing of your personal data based on a legitimate interest for reasons which concern your situation. In such a situation, we will stop using your personal data where the processing is based on a legitimate interest, unless we can show that the interest overrides your privacy interest or that the use of your personal data is necessary to manage or defend legal claims. |
|
Rectification |
You have the right to obtain from us the rectification of inaccurate personal data concerning you. |
|
Erasure |
You may have your personal data erased under certain circumstances, such as when your personal data is no longer needed for the purposes for which it was collected. |
|
Restriction of processing |
You may ask us to restrict the processing of your personal data to only comprise storage of your personal data under certain circumstances, such as when the processing is unlawful, but you do not want your personal data erased. |
|
Withdrawal of consent |
You have the right to at any time withdraw your consent to the processing of personal data to the extent the processing is based on your consent. |
|
Data Portability |
You have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used, and machine-readable format and ask for the information to be transferred to another data controller (where possible). |
You may file a complaint with your local competent authority if you believe that Hexatronic’s processing of your personal data is not carried out in accordance with applicable laws.
Changes to the Privacy Notice
Please note that the terms of the Privacy Notice may be changed or amended. Any updated version will be published on Hexatronic’s website. Consequently, you should review this information on a regular basis.
Contact us
If you have any questions related to this Privacy Notice, if you suspect that a breach of this Privacy Notice has occurred, or if you would like to contact us for any reason stated in this Privacy Notice, please contact us using the contact details provided below.
Hexatronic Group AB
dataprivacy@hexatronic.com