Privacy policy

This privacy policy was last updated on 29 March 2023.

We attach great importance to the security and confidentiality of your personal data. This privacy notice informs you about the processing of your personal data. Please consider that Agrarsense is a consortium of various companies working together with the aim of developing microelectronics, photonics and electronic packaging for agricultural use and forestry. In that context, your personal data may be shared by us with other partners to the consortium, who will be considered separate controllers when processing your personal data. You can find a complete list of the partners to the consortium via the following link: Partners

We also use cookies on our website. For more information, we kindly refer you to our cookie notice, which can also be found on our website via Cookie Policy

1. When does this privacy notice apply?

We collect and use your personal data when you:

  • use our website (www.agrarsense.eu) or the contact form;

  • interact with us via social media pages and accounts (LinkedIn);

  • enter into an agreement with us or communicate with us in that context;

  • interact with us at events and conferences;

  • communicate with us by email, phone, or any other digital communication channels; or

  • hand us your business card.

In each of those instances, we will collect and process your personal data in the manner described herein.

This privacy notice may be amended as set forth in Article 8, below.

2. Who are we?

We”, “us”, “our” in this privacy notice refers to Komatsu Forest AB:

Name: Komatsu Forest AB

Address: PO Box 7124, SE-907 04 Umeå

Company number: SE556079594901

E-mail: gdpr@komatsuforest.com

We are responsible for the collection and use of your personal data in the manner explained in this privacy notice. If you have any questions about this, please contact us by e-mail via gdpr@komatsuforest.com.

In certain circumstances, third parties may (also) be responsible for the processing of your personal data. For example, if you click on a link and leave our website or if you use our social media and have your own social media account. We have no control over the data social media providers collect about you. In that case, we recommend that you consult the privacy policies of these third parties.

3. Which personal data do we process and why?

We will only process your personal data for specific purposes and to the extent permitted by law. We further explain below in which cases we collect and use your personal data. If we do not receive your personal data directly from you, we will also inform you of this below.

3.1. When you use our website or use the contact form

When you use the Agrarsense website (www.agrarsense.eu) or use our contact form or other digital communication channel, we collect and use the following personal data

  • To ensure the most fault-free operation of our website and to detect and prevent malware, illegal content and conduct and other forms of potential abuse, we process technical information (e.g., server log files) about your visit and the device you use (e.g., IP address). We cannot identify you on the basis of this information, but third parties may be able to identify you (e.g., your internet service provider).

    For processing your personal data under this purpose, we base ourselves on our legitimate interest on keeping our online presence safe.

  • To enable communication between you and us, we process identity and contact details provided by you (e.g., telephone number and professional position) and the content of the message and the technical details of the message itself (e.g., date and time).

    For processing your personal data under this purpose, we base ourselves on our legitimate interest in being able to respond to requests, questions, or comments, or to contact your proactively.

3.2. When you use our social media

When you access and use the Agrarsense social media (LinkedIn), we collect and use the following personal data.

  • To enable messages to be exchanged between you and us via social media, we collect your identity and contact information, your message content and your message technical details (e.g., data and time). These messages are not public. However, if you post a comment or like or post other data (e.g., photos) on our public social media, then these data are public.

    For processing your personal data under this purpose, we base ourselves on our legitimate interest in being able to respond to requests, questions, or comments, or to contact you proactively.

3.3. When you contract with us

When you enter into an agreement with us, we collect and use the following personal data.

  • To fulfil our contractual obligations, we process identity and contact details provided by you in the context of our agreement (e.g., name, e-mail, phone, and professional function).

    If you contract with us as an individual, we rely on the necessity of processing your personal data for the performance of the contract we have with you. However, when you act on behalf of a company or other legal entity, we rely on our legitimate interest in being able to contract with you.

  • To carry out our normal business administration (e.g., invoicing and relationship management), we process personal data relating to your identity and contact details, as provided by you, within the framework of our contract and, if applicable, your company and invoicing details.

    For processing your personal data under this purpose, we base ourselves on our legitimate interest in managing our business activities in a responsible and professional manner.

3.4. When you register for or participate in events organised by Komatsu Forest

 When you register for or participate in our events, we collect and use the following personal data.

  • To process your registration and prepare, organize, and secure our events, we process your identity and contact details you provide to us (e.g., name, e-mail, phone, the company you work for, professional position and payment details).

    For processing your personal data under this purpose, we base ourselves on our agreement with you, by your acceptance of applicable terms and conditions.

  • To capture and share ambience images of events (e.g., on our website and our social media), we may capture your image on photo or video during events, on which you may be recognisable.

    For processing your personal data under this purpose, we base ourselves on your permission.

3.5. In other cases

Your personal data is also collected and used by us in the cases below.

  • For us to be contact you within the framework of normal relationship management, we may process identity and contact details on the business cards you give us.

    For processing your personal data under this purpose, we base ourselves on our legitimate interest in building our network of contacts.

3.6. In all of the above cases

For all personal data that we collect in the above circumstances, we would like to make it clear that we will also process your personal data in the following cases.

  • To comply with our legal obligations or to comply with any reasonable request from competent police authorities, judicial authorities, government institutions or bodies, including competent data protection authorities, we may process any of the personal data mentioned above.

    For processing your personal data under this purpose, we base ourselves on our legal obligation.

  • To prevent, detect and combat fraud or other illegal or unauthorized activities, we may process any of the personal data mentioned above.

    For processing your personal data under this purpose, we base ourselves on our legal obligation.

  • To defend ourselves in legal proceedings, we may process any of the personal data mentioned above.

    For processing your personal data under this purpose, we base ourselves on our legitimate interest in using your personal data in these proceedings.

4. With whom do we share your personal data?

In principle, we do not share your personal data with anyone other than the persons who work for us, consortium partners, as well as with the suppliers who help us process your personal data. Anyone who has access to your personal data will always be bound by strict legal or contractual obligations to keep your personal data safe and confidential. This means that only the following categories of recipients will receive your personal data:

  • You;  

  • Your employer or business partners, but only when this is necessary for the purposes mentioned above (e.g. when your employer is our supplier or customer);

  • Our employees and suppliers;

  • Government or judicial authorities to the extent that we are obliged to share your personal data with them (e.g., tax authorities, police or judicial authorities);

  • Squarespace, being the subcontractor allowing us to provide you with access to our website; and

  • LinkedIn when you access and use our social media.

We may share your personal data with partners located outside the European Economic Area (EEA) (the European Economic Area consists of the EU, Liechtenstein, Norway, and Iceland), specifically Turkey. The personal data concerned, is the personal data referred under purposes 3.1 and 3.3. We will take adequate safeguards to protect your personal data when we transfer your personal data, such as standard data protection clauses adopted by the European Commission.

5. How long do we keep your personal data?

Your personal data will only be processed for as long as necessary to achieve the purposes described above or, when we have asked you for your consent, until you withdraw your consent.

As a general rule, we will de-identify your personal data when it is no longer required for the purposes described above or when the retention period, as explained in this Article 5, has expired. However, we cannot delete your personal data if there is a legal or regulatory obligation or a court or administrative order preventing us from doing so.

  • We retain all personal data collected through our website for as long as necessary to protect the legitimate interests stated in Article 3.1. We retain technical information such as our server log files until six (6) months after your visit to our website, after which it will be deleted or de-identified. Messages that you send us via the contact form will be retained as long as necessary to handle and follow up your question, request, comment, or other input. We also keep an archive of so-called tickets we received via the contact form. We will remove or de-identify tickets we have closed no later than five (5) years after closure.

  • All personal data we collect through our social media we retain as long as necessary to protect the legitimate interests stated in Article 3.2. Messages that you send to us via social media and your identity and contact details, and technical details related thereto, we will retain as long as necessary to handle and follow up your question, request, comment, or other input. We will not retain this data longer than five (5) years after your message, after which it will be deleted or de-identified.

  • We will retain all personal data collected in connection with our events for as long as necessary to protect the legitimate interests stated in Article 3.4 or until you withdraw your consent. If your photo was not published, we will not keep your photo longer than two (2) years after the event in question. If you wish to object to a published photo of you during an event, please let us know (see Article 9). Identity and contact details in the context of your registration for or participation in an event, we will retain your personal data until your personal data are no longer necessary in this context. We consider this retention to be necessary at least as long as you can take legal action in connection with the event in question. Your feedback about a particular event and your identity and contact information to the extent you have provided it to us, we will retain as long as necessary to process your feedback for future events. We will not retain this data longer than two (2) years after the event in question.

  • All personal data we collect through our interactions with you through social media, telephone, email, or other digital communication channels will be retained for as long as necessary to communicate with you, but also to maintain a historical record of our communications. This allows us to return to previous communications when you come back to us with new questions, requests, comments, or other input.

  • All personal data we collect when you give us your business card, we keep as long as you do not ask us to delete your personal data.

6. How do we keep your personal data secure?

The security and confidentiality of the personal data we process is very important to us. That is why we have taken measures to ensure that all personal data processed is kept secure. These measures include technical and organizational measures to protect our infrastructure, systems, applications, and processes. We've also taken other measures, such as taking internal notice measures, limiting the processing to the personal data necessary for the fulfilment of the purposes, minimizing the processing of personal data, the pseudonymization of personal data as soon as possible, transparency with regard to the functions and processing of personal data, enabling the data subject to exercise control over the processing of information, enabling the controller to create and improve security features, securing access to our offices, sites or facilities, restricting access to personal data based on roles, taking backups of personal data and periodically evaluating our security measures.

7. Your rights regarding your personal data

When we collect and use your personal data, you will enjoy a number of rights that you can exercise in the manner described below. Please note that when you wish to exercise a right, we may ask you for proof of identity. 

  • You have the right to access your personal data, which means that you may ask us to provide you with information about the personal data we hold about you. You may also request a copy of your personal data. Please note, however, that you must indicate for which processing activities you wish to have access to your personal data.

  • You have the right to request that we correct your personal data if you can demonstrate that the personal data which we process about you is inaccurate, incomplete, or out of date. Please indicate the context in which we use your personal information (e.g., to respond to a request), so that we can review your request quickly and accurately.

  • If we ask your consent to collect and use your personal data, you have the right to withdraw this previously given consent.

  • You may ask us to erase your personal data if these personal data are no longer necessary for the purposes for which we collected them, if their collection was unlawful, or if you have successfully exercised your right to withdraw your consent or your right to object to the processing of your personal data. When either of these circumstances applies, we will erase your personal data immediately, unless legal obligations or administrative or judicial orders prohibit us from deleting your personal data.

  • You may ask us to restrict the processing of your personal data:

    • during the time we review your request for correction of your personal data;

    • during the time we review your objection to the processing of your personal data;

    • when such processing was unlawful, but you prefer a restriction to erasure; and

    • when we no longer need your personal data, but you need them for the establishment, exercise, or defence of any legal action.

  • When we process your personal data on the basis of our own legitimate interests, you have the right to object to our processing of your personal data. When objecting, we ask you to describe your specific circumstances that give rise to a request, so that we may balance your circumstances against our interests.

  • If we have collected your personal data on the basis of your consent or because they were necessary for the performance of a contract with you, you have the right to obtain a copy from us in a structured, widely used and machine-readable format. However, this right only applies to personal data that you have provided to us.

You can exercise these rights by sending an email to our privacy officer via gdpr@komatsuforest.com. We will inform you of the follow-up we intend to give to your request as soon as possible and no later than thirty (30) days after receipt of the request.

If you have a complaint about the processing of your personal data by us, you can always contact our privacy officer. If you are not satisfied with our response, you may lodge a complaint with the competent data protection authority, i.e., the Swedish Authority for Privacy Protection via the following e-mail address: https://www.imy.se/en/.

8. Changes to this privacy notice

We can change this privacy notice on our own initiative at any time. If material changes to this privacy notice may affect the processing of your personal data, we will communicate these changes to you in a way that we normally communicate with you (e.g., via e-mail or via a message on our website).

We invite you to read the latest version of this privacy notice on our website (www.agrarsense.eu). Our privacy notice states the date our privacy notice was last changed at the top.

9. Do you have any questions?

Should you have any further questions about the processing of your personal data, please do not hesitate to contact our privacy officer. You can contact our privacy officer by e-mail: gdpr@komatsuforest.com.