Privacy Policy

1. Who is responsible for your personal data?

TekniCon AB trading as EUMachEX, is the data controller for the processing described in this Policy. Our contact details appear in Section 14 and in the company-details table at the end of this document.

2. Personal data we collect

• Identity and business-contact data, such as name, job title, employer, business address, telephone number, email address and preferred language.
• Inquiry and transaction data, such as machine requirements, budgets, quotations, correspondence, meeting notes, purchase or sale interests, inspection instructions and contractual records.
• Machine and operational information that may contain personal data, including seller contact details, site contacts, photographs, video, serial-number records and access instructions.
• Due-diligence, compliance and payment data, such as company-registration documents, VAT or tax identifiers, beneficial-owner or authorised-signatory information, bank-account details, sanctions- screening results and export documentation, where necessary.
• Technical and usage data, such as IP address, browser type, device data, pages visited, referral source, timestamps, cookie identifiers, security logs and form-submission data.
• Marketing preferences and records of consent, opt-outs or prior communications.
• Any other information you choose to provide in messages, calls, WhatsApp communications, uploaded files or meetings.

3. How we collect personal data

• Directly from you, your employer or an authorised representative.
• From buyers, sellers, dealers, auction houses, machine owners, inspection partners, logistics providers and other counterparties involved in a potential transaction.
• From public sources such as company registers, professional websites, trade directories, sanctions lists and publicly available business information.
• Automatically through the website, hosting environment, security tools, cookies and similar technologies.

4. Purposes and lawful bases

Where we rely on legitimate interests, we consider the necessity of the processing, the reasonable expectations of business contacts and the impact on individual rights. You may object as described in Section 10.

5. Cookies and similar technologies

The website may use strictly necessary cookies for security, functionality and session management. Analytics, advertising or other non-essential technologies should be activated only in accordance with applicable consent requirements. A cookie banner must accurately reflect the technologies actually deployed. More detailed information should be provided in a separate Cookie Notice or in the cookie-management interface.

6. Recipients of personal data

We may share personal data only where reasonably necessary with:

• machine sellers, buyers, dealers, auction houses and transaction counterparties;
• independent inspectors, technicians, valuers and engineering specialists;
• freight forwarders, carriers, customs brokers, insurers, warehouses and export-documentation providers;
• website hosting, email, CRM, cloud-storage, analytics, communications, cybersecurity and IT-support providers;
• banks, payment providers, accountants, auditors, insurers and professional advisers;
• public authorities, courts, law-enforcement bodies, customs authorities or regulators where required; and
• a purchaser, investor or adviser in connection with a genuine corporate transaction, subject to appropriate confidentiality. We do not sell personal data. Service providers acting as processors are required to handle personal data under our instructions and appropriate contractual safeguards.

7. International transfers

Because EUMachEX connects Europe with the MENA region and coordinates cross-border services, personal data may be disclosed to recipients outside the European Economic Area when necessary for an inquiry or transaction. Where the GDPR requires transfer safeguards, we will use an applicable adequacy decision, the European Commission Standard Contractual Clauses, another lawful transfer mechanism, or a permitted derogation for a specific transaction. We also take supplementary measures where appropriate.

8. Retention

• Unsuccessful or inactive inquiries: normally up to 24 months after the last meaningful contact, unless a shorter period is appropriate or continued retention is justified.
• Customer, supplier and transaction records: normally for the contract term and thereafter for the period required by Swedish accounting, tax, customs, limitation and compliance rules, commonly up to seven years or longer where legally necessary.
• Due-diligence and dispute records: for as long as needed to satisfy legal obligations, manage risk or establish, exercise or defend legal claims.
• Marketing records: until you opt out, consent is withdrawn, the data becomes inaccurate, or we determine that continued contact is no longer appropriate.
• Technical logs and security records: for a proportionate period based on operational and security needs. Actual retention may be shorter or longer where required by law, a legal hold, an active dispute or a documented operational need. Data is deleted or anonymised when no longer required.

9. Security

We use appropriate technical and organisational measures designed to protect personal data, including access controls, secure hosting and communications, backups, device and account protection, confidentiality obligations, supplier assessment and incident-management procedures. No internet transmission or storage method can be guaranteed to be completely secure.

10. Your data-protection rights

Subject to the conditions and limitations in applicable law, you may request:

• access to your personal data and information about its processing;
• correction of inaccurate or incomplete data;
• erasure of personal data;
• restriction of processing;

• data portability where processing is based on consent or contract and carried out by automated means;
• withdrawal of consent at any time, without affecting earlier lawful processing;
• objection to processing based on legitimate interests, including direct marketing; and
• review of a decision based solely on automated processing that produces legal or similarly significant effects, if such processing is introduced.

We may need to verify your identity and may retain limited information to document the request. We normally respond within one month, subject to lawful extensions. To exercise a right, contact info@eumachex.com.

11. Complaints

You may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another competent supervisory authority in the EU/EEA. We encourage you to contact us first so that we can try to resolve the concern.

12. Direct marketing

Business contacts may receive relevant communications about machinery or services where permitted by law. Every electronic marketing message should provide a clear way to opt out. You may object to direct marketing at any time by using the unsubscribe method provided or emailing info@eumachex.com.

13. Third-party websites and communications

The website may link to third-party sites or enable contact through services such as WhatsApp. Those providers process personal data under their own terms and privacy notices. EUMachEX is not responsible for the independent privacy practices of third parties. Do not send sensitive personal data through ordinary messaging channels unless necessary and appropriately protected.

14. Contact and updates

Privacy questions and requests may be sent to info@eumachex.com or to the registered address listed below. We may update this Policy to reflect legal, technical or operational changes. The current version and effective date should always be published on eumachex.com. Material changes should be communicated where appropriate.

Company details