privacy policy

This privacy policy intends to inform all users of the processing of personal data that is carried out on this website (www.environdec.com, from now on referred to as the ”Website”), as well as to inform of the principles that governs e.g. newsletters sent by EPD International AB (“EPD International” or “we”). Our contact information is found below, in section 2.5, as well as on www.environdec.com/Contact.

1. What personal data do we process?

1.1. EPD International collects and processes such personal data that you submit to us when creating a user account on the website, registering an EPD, applying to become a PCR moderator or applying to become an individual verifier. The personal data collected are, where applicable, user name, password, name, e-mail address, organisation and address. This processing of personal data is based on you giving your consent to the processing, in connection with submitting the personal data.

1.2. When signing up for our newsletters or when you register on any of our courses, seminars or other events that we arrange we process personal data that you provide through filling in assigned forms. The personal data collected are, where applicable, name, e-mail address, organisation, address and dietary preferences. This processing of personal data is based on you giving your consent to the processing, in connection with submitting the personal data.

1.3. When posting on the PCR forum, your comment, username, name and e-mail address are displayed publically in the forum. When registering an EPD, applying to become PCR moderator or applying to become an approved individual verifier, the name and e-mail address of the contact person is publicly displayed at www.environdec.com. We have found that this processing is motivated, to enable a transparent procedure for PCR development and to enable stakeholders to contact an EPD owner about the document, and have thus found that our interest in processing the data is legitimate.

1.4. We use the tool Google Analytics in order to measure traffic on the Website and evaluate the functions of the Website. This means that personal data about you, i.e. your IP-address is collected, as well as indirect personal data about, you regarding information on how long your visit on the Website has been and what pages you have visited, will be transferred to Google Inc. (”Google”). Before initiating this kind of processing, we have conducted a weighing of interests and concluded that this processing is necessary for us to evaluate our business in order to offer the best possible experience when visiting the Website. More information about how Google processes the transferred personal data is found here, and there you can also find information on how to disable or moderate what data is transferred to Google.  

1.5. We sometimes publish photographs on the Website, from events we arrange or participate in. These photographs may be of such nature that they constitute personal data. Before publishing photographs, we always examine them and evaluate if publishing of the photograph may be integrity sensitive. If we find that this is not the case, we publish the photograph, for the purpose of informing about the event or otherwise circumstances under which the photograph was taken.

1.6. The Website uses cookies, in accordance with our cookie policy, which is found below.

1.7. During PCR development, the PCR moderator sends us a list of identified stakeholders for the PCR stakeholder consultation group. These stakeholders, as representatives of different organisations, are contacted to enable them to be informed about and to be given a possibility to comment on the draft document that may be relevant for their work. This entails that processing of personal data is a necessary measure. We have limited the amount of collected and processed personal data to a minimum and have made the assessment that this processing is motivated and that our interest of processing it is legitimate.

2. The processing

2.1. EPD International is part of a group, in which IVL Swedish Environmental Research Institute is the parent company. The group also consists of BASTAonline AB (”BASTA”) and eBVD i Norden AB (”eBVD”) . EPD International, IVL, BASTA and eBVD are joint personal data controllers for the processing of personal data conducted within the group. This applies to personal data processed for our newsletters or when registering on courses, seminars or other events that we arrange. This means that your personal data will be shared and jointly stored within the group. You will, however, only receive the newsletters and other mailings that you have signed up for. What is mentioned in this policy regarding EPD International also covers IVL, BASTA and eBVD, and you can enforce your rights against any of the companies.

2.2. Regarding all other processing of personal data than the ones described above, EPD International is the sole controller.

2.3. EPD International is cautions of your integrity and right to privacy, and it is therefore of key importance for EPD International that all processing of your personal data is made in a safe and proper manner, in accordance with the applicable laws and in a manner that ensures a safe and appropriate processing. For this reason, your personal data will only be processed for the purposes specified when the personal data was collected, unless you have been informed otherwise and have been given the opportunity to consent, if applicable.

2.4. If you want to know what personal data EPD International processes about you, you have the right to request access to these personal data. You also have the right to request rectification or erasure of incorrect personal data. If you are of the opinion that EPD International’s processing of your personal data is incorrect, you may request restriction of our processing of the personal data or object to the processing. You may also have the right to so called "data portability". If you want to use any of your granted rights, please contact us on the information given below in section 2.6.

2.5. Other than what is mentioned above, EPD International will not transfer your personal data to any third party or transfer them to a country other than Sweden, unless you are given information about this and is given the opportunity to consent, if applicable. For newsletters, we always use technology that ensures that addresses of the recipients are not shown.                                                                     

2.6. If you have any comments about our processing of your personal data, if you want to use any of your in section 2.4 granted rights or if you for any other reason wish to contact us, we are reached using the following information

EPD International
Swedish companies reg. no 556975-8286
Box 21060
100 31 Stockholm
info@environdec.com

2.7. You also have the right to contact the responsible supervisory authority, which is the Swedish Data Protection Authority. Contact information is found on their website, www.datainspektionen.se.

3. For how long to we store the personal data?

3.1. The term under which we process your personal data depends on the processing – meaning that processing is carried out until the purpose for the processing has been reached. This assessment is made through the following principles.

3.2. Processing of personal data for mailings and newsletters will be made for as long as you wish to receive them. The easiest way for us to become aware that you no longer wish to receive our mailings is if you opt-out from further mailings in accordance with the information provided in each mailing. However, we are regularly follow up our mailings, and should we discover that you have not been opening our mailings, or if you have in other ways been passive regarding them for a continuous period of one year, we reserve the right to erase your personal data from our systems. You are however always more than welcome to re-sign up.

3.3. The personal data we collect for seminars, courses and other events are needed in order for us to be able to administrate the event, and under some circumstances in order to send information or handouts before or after the event. We therefore keep your personal data until thirty days from the event have passed.

3.4. Personal data associated with your user account on the website will be stored until you request them to be delted. If you have in other ways been passive regarding them for a continuous period of one year, we reserve the right to erase your personal data from our systems. You are however always more than welcome to re-sign up

3.5. Personal data supplied with registering an EPD, applying to become a PCR moderator, applying to become an approved individual verifier will be stored and processed for as long as the EPD remains published, you are still the appointed PCR moderator, or while you remain as an approved individual verifier of an EPD. We reserve the right to erase your personal data from our systems in one year after these criteria are no longer fulfilled.

3.6. Personal data collected of stakeholders during PCR development will be stored for one year after the publication of the PCR.

3.7. Personal data collected when using the Website, through cookies or Google Analytics, are only processed by us for the period when you are active on the Website. No such data are stored once the session has ended.

4. Misceallaneous

4.1. This privacy policy may be updated without prior notice. In case of any significant changes or updates, EPD International will post a notification on the Website.

Cookie policy

A cookie is a small text file stored on the visitor's computer and containing information. Cookies are usually used to improve the site for the user.

There are two types of cookies:

• cookies temporarily stored on your computer while you are browsing a page. It disappears when you close your browser.
• cookies saved for a long time on your computer. For example, it uses features that tell you what's new since you last visited the current site.

At www.environdec.com, cookies are used to provide access to different functionality, such as logging in, remembering if the user accept cookies and to measure and analyse site traffic with Google Analytics.

If you do not want to use cookies, you can change the settings of your web browser to avoid them. See your browser's help pages for more information. Not allowing cookies may limit some functionality on the site.

More information about cookies can be found here.