Privacy policy

At Autoliv, we care about the safety of your data. In this notice, you will find information about how we manage information about you and how to exercise your data protection rights.

Who is responsible for your data?

The HBM Safety Suite Portal is jointly operated by Autoliv AB and Autoliv Sverige AB, (“Autoliv”) which act as joint controllers within the meaning of Article 26 GDPR.

Autoliv AB, registered with the Swedish Companies Registration Office under company number 556687-7345 and with registered office at Klarabergsviadukten 70, Section B7, 111 64, Stockholm, governs the global digital infrastructure and systems (including HubSpot and ServiceNow).
Autoliv Sverige AB having a place of business Wallentinsvägen 22, SE-447 83, Vårgårda is responsible for the HBM Safety Suite services and customer interactions.

General information about Autoliv’s data protection practices is available here: https://www.autoliv.com/privacy-notice

All personal data processing is done following the applicable privacy legislation. If you have any questions regarding the use of your data, please contact our team at the Autoliv Global Privacy Office at alv-dataprivacy@autoliv.com

What personal data do we use and why?

The HBM Safety Suite Portal is a web‑based platform designed for professional B2B users who want to explore, evaluate, and use Autoliv’s HBM Safety Suite solutions.

The portal includes:

A public area, where you can learn more about the HBM Safety Suite and request contact, demos; and
A secure, logged‑in area for trial and commercial customers, providing access to customer‑specific information, software downloads, trial‑related materials, and support interactions.

We collect personal data when you:

Submit forms or requests through the User Portal
Communicate with us about demos, trials, or support
Access the logged‑in portal or download materials
Use the portal, through cookies and aggregated analytics

We use your personal data to:

Respond to your requests and support your evaluation of the HBM Safety Suite
Provide access to the User Portal, including relevant downloads and services
Deliver customer support and maintain our business relationship
Improve the User Portal and our offerings through aggregated insights
Share product updates and marketing communications, where you have chosen to receive them
Meet our legal, contractual, and regulatory obligations

Your privacy is important to us. The table below explains in more detail what personal data we process, for which purposes, on what legal basis, and for how long.

Purpose	Data subject	Personal data	Lawful basis	Retention period
Responding to contact requests, inquiries, demo requests submitted via the public Portal through the webform	Prospect Representatives	From data subject: personal data collected through forms which include: Contact information (including First and last name, work Email, Job Title, Company name, Country, your request) Communication History, if any	Article 6(1)(b) GDPR -contract	Duration of the prospect relationship and related follow up, in accordance with Autoliv retention schedules
Planning and delivering demos for prospects and trials for Customers for the HBM Safety Suite,	Prospect Representatives, Customer Representatives	Contact information, communication history, scheduling information	Article 6(1)(b) GDPR- contract	. Duration of the prospect relationship and related follow up, in accordance with Autoliv retention schedules
Recording/transcript of the demo sessions for minutes of meeting/ note‑taking and follow‑up	Prospect Representatives, Customer Representatives	Contact information, Where transcription is exceptionally enabled with the agreement of all participants: meeting transcripts containing business‑related discussions.	Article 6(1)(a) GDPR – consent	Transcripts are retained 60 days the Minutes of meetings: Where they form part of customer or prospect files (e.g. information affecting a proposal, product specification, or complaint), retention is until the date no longer active, in use, or superseded + 7 years. Where they relate exclusively to product orders and corresponding information, retention is 26 years
To collaborate and maintain our contractual relationship with our customers (that you are part of)	Customer Representative	From you and/or our customer: Full name, function, company, country, e-mail address, contractual communication and in some legal instances your signature	Article 6(1)(f) GDPR -Legitimate interest	Duration of the customer relationship Date Terminated, Closed or Expired + 10 Years
Providing access to the logged in User Portal	Customer’s Users	Company level access identifiers, authentication and access timestamps	Article 6(1)(b) GDPR -contract	Duration of the customer relationship
Enabling downloads of HBM Safety Suite software and related materials via the logged in User Portal	Customer’s Users	Company level access identifiers, access metadata, license related information	Article 6(1)(b) GDPR -contract	Duration of the customer account in User Portal
Handling support and service requests submitted via the User Portal	Customer’s Users, Customer Representatives	From you: E-mail and/or Company level access identifiers, free text descriptions of support requests, communication history and attachments (if any)	Article 6(1)(f) GDPR – legitimate interest in providing customer support	If you send us emails, your data will be retained since Creation+18 months since the date of received If you submit your request using the ticketing system available in the portal, your data will be retained for the duration of the customer subscription+60 days past the subscription period
Managing customer and prospect relationships in Autoliv’s centralized CRM across business lines (centralized data management, security, compliance, and evidence purposes)	Customer Representatives/User, Prospect Representatives	Contact data, communication history, interaction records	Article 6(1)(f) GDPR – legitimate interest	According to Autoliv CRM retention schedules: MKT21- Customer Correspondence affecting the order Customer Requests for Quotations Sales Orders- Creation + 26 Years
Performing aggregated and pseudonymized CRM analytics and reporting helping us to analyze performance and make data-driven decisions.	Customers, Prospects	Aggregated interaction data, CRM activity metrics	Article 6(1)(f) GDPR – legitimate interest	According to Autoliv analytics retention schedules: MKT-11 Date No Longer Active, In Use or Superseded + 7 Years
Sending marketing communications about products, services, events, or offers	Customers, Prospects, Customer Representatives, Prospect Representatives	Contact information, marketing preferences, communication history such as Tickets Customer Preferences Purchase History	Article 6(1)(a) GDPR – consent	According to Autoliv retention schedule MKT-11 Date No Longer Active, In Use or Superseded + 7 Years or Until consent is withdrawn
Aggregated Portal usage analytics to improve portal usability	Portal visitors and users	Aggregated and anonymized usage data	Article 6(1)(f) GDPR – legitimate interest	Anonymized data retained according to analytics settings

The HBM Safety Suite User Portal is intended exclusively for professional B2B use. The portal is not designed to collect or process special categories of personal data, and we do not intentionally request such information from users. Demo and trial sessions are not recorded by default. Please note that the use of the Visualizer software itself is governed by a separate Visualizer Privacy Notice, which is made available prior to downloading and applies once the software has been downloaded, installed, and used.

Definitions

For the purposes of this Privacy Notice, the following terms have the meanings set out below:

“Customer” means a legal entity that has entered into a contractual relationship with Autoliv for the use of the HBM Safety Suite or related services.

“Customer’s User” means any individual who is authorized by a Customer (a legal entity contracting with Autoliv) to access or use the Portal, or any related services on the Customer’s behalf. This may include the Customer’s employees, contractors, consultants, or other designated individuals.

“Customer Representative” means any individual who acts on behalf of a Customer (a legal entity contracting with Autoliv) in the context of the contractual or business relationship with Autoliv. Customer Representatives may include employees, contractors, consultants, or other individuals designated by the Customer to communicate with Autoliv, receive services, manage accounts, or participate in technical or commercial collaboration.

“Prospect” means a legal entity or organization that has expressed an interest in Autoliv’s products or services, including the HBM Safety Suite, but does not yet have a contractual relationship with Autoliv.

“Prospect Representative” means any individual who acts on behalf of a Prospect (a legal entity or organization without a contractual relationship with Autoliv) in the context of pre‑contractual or business discussions. Prospect Representatives may include employees, contractors, consultants, or other individuals designated by the Prospect to communicate with Autoliv, request information, participate in demos or trials, or engage in technical or commercial evaluations.

If we need to share your data, we ensure that such recipients process it in accordance with this Privacy Notice, for example by entering into data transfer agreements or data processing agreements with them. These agreements include appropriate contractual, legal, technical, and organizational measures to ensure that your personal data is processed with an adequate level of protection and in compliance with applicable law. Categories of recipients include:

• Autoliv companies within the Autoliv Group, as listed in Annex 1 of the Privacy Notice for the Autoliv website, available https://www.autoliv.com/privacy-notice . To support data management processes, customer service, and operational efficiency, and subject to applicable local laws, the personal data you provide may be accessed, processed, and used on a need‑to‑know basis by relevant personnel within Autoliv or its affiliates or subsidiaries, including Management, IT, Finance, Legal, Compliance, Internal Audit, Marketing, and customer support teams.

• Third parties engaged by the Autoliv Group as processors, including:

– HubSpot, Inc., used as a customer relationship management (CRM) platform to manage contact requests, demo and trial inquiries, customer and prospect communications, and marketing communications where consent has been provided.

– ServiceNow, Inc., used to manage customer support and service requests submitted through the User Portal.

• Independent third‑party partners, where applicable, including Fraunhofer Chalmers Center (FCC), which is involved in the distribution of the SAFER‑HBM model. Where access to SAFER‑HBM is provided through FCC, your interaction with FCC and any personal data processed in that context is subject to FCC’s own privacy practices and privacy notice. FCC acts as an independent data controller for such processing.

• Subcontractors and consultants engaged by Autoliv to provide technical, operational, or customer support services under applicable laws, including Autoliv affiliates and approved vendors that support customer and prospect service functions in various jurisdictions.

• Authorities and law enforcement agencies, where required for audit purposes or to verify compliance with legal obligations.

• Legal or professional advisers, where necessary for the establishment, exercise, or defense of legal claims.

We do not otherwise disclose your personal data to non‑Autoliv parties for their independent use unless:

(1) you request or authorize such disclosure;

(2) disclosure is required to comply with applicable law (for example, in response to a subpoena, court order, or regulatory request), to enforce an agreement, or to protect the rights, property, or safety of Autoliv, our employees, or others;

(3) the information is shared with agents, vendors, or service providers acting on our behalf and under our instructions;

(4) disclosure is necessary to address emergencies or force majeure events; or

(5) disclosure is made to persons demonstrating legal authority to act on your behalf.

Such recipients or authorities may be located in countries listed in Annex 1 of the Autoliv website Privacy Notice. Where personal data is transferred, we ensure that appropriate safeguards are in place, including data transfer agreements or data processing agreements, to provide an adequate level of protection in accordance with applicable law.

How do we ensure appropriate protection of personal data when transferred across boarders?

Autoliv cares about protecting your personal data. We comply with the data protection laws that apply to each processing activity, and we implement safeguards to ensure that an appropriate level of protection applies whenever your personal data is transferred across borders, including transfers outside the jurisdiction in which you operate.

When personal data is transferred to a country outside the European Union or to another region with its own data protection framework, Autoliv takes appropriate steps to ensure that the processing remains lawful and secure. This includes using legally recognized transfer mechanisms—such as contractual protections—and applying suitable technical and organizational measures designed to maintain a high standard of data protection in line with applicable law.

Where required by applicable local laws, including in jurisdictions that require explicit authorization for cross‑border data transfers (such as China), Autoliv obtains such authorization through a separate, jurisdiction‑specific consent mechanism, prior to transferring personal data outside the relevant jurisdiction.

If you want more information about the technical and organizational measures or the implemented safeguards for third-country transfers, please contact our Privacy Office at alv-dataprivacy@autoliv.com

You have several rights related to your personal data and the way we process it. Your rights are respected in accordance with the data protection laws that apply to the specific processing activity, and these rights are not diminished simply because your data is transferred to another country.

If you want to exercise your rights or have privacy‑related questions, please contact us at alv-dataprivacy@autoliv.com.

Depending on your country or region, you may have similar or additional rights under local data protection law. When the EU General Data Protection Regulation [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC] applies to the processing of your personal data, you have the following rights:

The right to have your data deleted
You have the right to ask us to delete personal data about you, for example personal data that we no longer need for the purpose for which it was collected, or personal data that we process based on a consent that you wish to withdraw.
Right to be informed
You have the right to be informed about how we process your personal data. We provide this information through this Privacy Notice, through other applicable privacy notices, and by responding to your questions upon request..
Right to receive access to your data
You have the right to know if Autoliv processes personal data about you, and to receive a copy (“data extract”) of such data. Through the data extract, you will receive information about what personal data we hold about you and how we process it.
Right to rectification
You have the right to request that we rectify inaccurate information or complete information about you that you consider is inaccurate or incomplete.
Right to restrict processing
If you believe that your data is inaccurate, that our processing is unlawful, or that we do not need certain information for a specific purpose, you have the right to request that we restrict the processing of such personal data. You also can request that we stop processing your data while we assess your request.
Right to object to our processing of your data
You have the right to object to processing your data, for example when the processing is based on legitimate interest, by referencing your circumstances. When you object to our processing, you may also request us to restrict the processing of that personal data (as described above) while we make our assessment.
Right to object to an automated decision that significantly affects you
You have the right to object to our use of automated decisions or conclusions if the decision produces legal effects or significantly similarly affects you. Please note that no automated decision‑making is carried out within the scope of the HBM Safety Suite Portal.
Right to withdraw your consent
Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority responsible for data protection. Where the EU General Data Protection Regulation (GDPR) applies, this is the supervisory authority in the EU Member State where the data controller is established, where you have your habitual residence, or where the alleged infringement occurred.

As the relevant data controller for this processing is established in Sweden, the competent supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY). More information is available at: https://www.imy.se.

If you are located outside the European Union, you may have the right to lodge a complaint with the data protection authority or regulator responsible for your jurisdiction. If you need help identifying the appropriate supervisory authority or have questions regarding your rights, please contact us at alv-dataprivacy@autoliv.com.

Profiling and automated decision-making
Autoliv does not carry out any solely automated decision‑making, including profiling, that produces legal or similarly significant effects on you in connection with the HBM Safety Suite Portal.

How do we use cookies and other types of tracking technology

To provide a good experience and relevant content, we may use cookies and similar tracking technologies on the HBM Safety Suite Portal and related digital interfaces. These technologies help us operate the portal, understand how it is used, and improve its performance and functionality.

Information about how you can accept or decline cookies, including how to manage your cookie preferences, is made available through the cookie banners or settings of each interface, where applicable.

For a detailed overview of the cookies and similar technologies used on Autoliv websites and portals, please consult the Autoliv Cookie Policy, available here.

Updates to this notice

We are continuously working to improve our data protection practices, which may involve changes to how we process personal data in connection with the HBM Safety Suite Portal. Where such changes require an updated notice or the collection of consent under applicable law, you will be informed accordingly or given the opportunity to provide your consent, as required.

Updating your information

You may review or update certain information by accessing the User Portal, where applicable. If you are unable to update incorrect information online, or if you need to request changes outside the User Portal, you may do so by contacting us at support.safetysuite@autoliv.com.

How to contact the Autoliv Global Privacy Office

Autoliv has a group data protection officer and a team of data protection specialists. You can reach all these individuals at alv-dataprivacy@autoliv.com. If you specifically wish to contact Autoliv’s data protection officer, please type so in the subject line.