The purpose of the information in this policy is to ensure that you feel confident about how we process your personal data.
The personal information you provide is data that we will primarily use to supply you with the material you have requested. We also collect this information so that we can send you newsletters and information about upcoming events. We process your personal data on the basis of our legitimate interest in sending you relevant information about us and our services.
We will retain your data for as long as is necessary to handle and document your case and to send you information in accordance with the above. You may object to our use of your data, either by contacting us directly or by clicking on the unsubscribe link in the emails we send to you.
We are active on social media. If you choose to publish content – such as a post or a comment – on any of our public pages, we will process the personal data you publish. We do this on the basis of our legitimate interest in promoting our organisation and communicating with people who contact us to ask questions or engage in discussions. In addition to your personal data being stored on the service where you have published it, we also process it by reading it, possibly replying to it, and eventually deleting it. You can delete what you have published yourself at any time.
Please bear in mind that by publishing content on one of our public pages, you are also providing the information you publish to the social media service provider. We have no control over what these providers do with your information; this is governed entirely by their own terms and conditions for each service.
Incoming emails usually contain personal data. If you send an email to any of us, we will process your personal data by reading, storing and handling your message, and, where appropriate, forwarding it to the correct recipient within our organisation. The personal data we process for this purpose is the same as that which you provide in your message. Common examples of personal data received by us in this way include your name, email address, telephone number and job title.
The legal basis for this processing is our legitimate interest in ensuring that the email is handled and replied to. How long we retain your message depends on the nature of the matter in question. For example, if the matter relates to an existing customer relationship, we may retain it for the duration of that relationship and for a period thereafter (in order to safeguard our legal rights).
Please think twice before mentioning any other person in an email to us. Although such personal data is also processed on the basis of legitimate interest, it may be difficult or even impossible for us to inform the individual that their personal data is being processed in this instance. Please be considerate of others and only mention people other than yourself if you consider it necessary.
When we send out newsletters, we process your email address. We process your personal data on the basis of the consent you gave when you signed up for the newsletter. You can withdraw your consent at any time by contacting us or by clicking ‘Unsubscribe’ in one of the newsletters we have sent you.
We will process your personal data until you withdraw your consent by unsubscribing from the newsletter.
If you are an existing customer of ours, or if we have added you to our mailing list because we believe you are likely to be interested in the content, we will instead send you newsletters on the basis of legitimate interest.
Like most other companies, we engage in sales activities aimed at both existing and potential customers. This means that we may process personal data relating to contact persons within various organisations that are of interest to us, and get in touch via, for example, email, our website or social media. The personal data we process for this purpose usually includes names, work telephone numbers, work email addresses, and the organisation’s name and address. This processing is justified by our legitimate interest in marketing our business, identifying new opportunities for collaboration or new customers, and maintaining relationships with our existing customers.
If your organisation is a customer of ours, we also process your contact details on the basis of our legitimate interest in being able to fulfil our obligations under the agreement and provide customer care. This may include responding to enquiries relating to the contract, adding users to our support system, documenting our agreements and work carried out, invoicing for work carried out, and inviting you to events organised by us or by the group of which we are a part.
Personal data relating to contact persons whose employers do not proceed with signing a contract with us as a supplier is retained for a maximum of two years following the last point of contact. As regards existing customers, data processed for up-selling purposes is retained for up to three years after the most recent transaction, whilst other personal data relating to contact persons at existing customers may be retained for up to 10 years after the most recent transaction to enable us to safeguard our legitimate interests (for example, to assert or defend legal claims relating to the contract).
In order for us to process your application, assess whether you are a suitable candidate and contact you regarding any queries or to arrange an interview, we need to process your personal data. The data we process depends on what you submit to us, but generally includes your name, address, email address, telephone number, personal identification number, as well as details of your qualifications and other information contained in your CV and/or cover letter. This processing is carried out on the basis of our legitimate interest in being able to process your application. If you wish to withdraw your application, you can do so by contacting us via the channel through which you submitted your application, or alternatively at [EMAIL ADDRESS]. If you do so, we will delete all your personal data and close your recruitment case, unless we are required by law to retain all or some of the data.
If your application is unsuccessful, your application documents will be retained for two years so that we can comply with the requirements of the Discrimination Act. However, if we decide not to proceed with an unsolicited application you have submitted because we do not currently have any vacancies, your documents will be retained for one year unless you request that they be deleted before then. Even if you are hired, your qualifications will be retained for two years, whilst other necessary details such as your name, personal identity number and contact details will be retained for the duration of your employment and for a certain period thereafter.
In some cases, we may ask candidates who are not offered a position whether we may retain their contact details and qualifications for future recruitment or for organising events and similar activities in the future. If you consent to this, you always have the right to withdraw your consent at any time by contacting us.
In some cases, current employees may make recommendations regarding you as a potential job applicant. Where this is done, you will be informed of the processing without delay, unless this would involve a disproportionate effort or significantly impede the fulfilment of the purpose of processing the personal data. Information about the processing will be provided in any event if contact is made.
We may also collect personal data relating to references provided by job applicants in order to assess the applicant’s suitability for the position in question. References will be informed about the processing of their personal data upon initial contact. Reference providers’ details will be retained for a maximum of two years if the applicant is not appointed, so that we can comply with the requirements of the Discrimination Act.
We use cookies for various purposes on our website, and these cookies sometimes contain personal data. Data processed using cookies may, for example, include all or part of your IP address, information about your device or visitor statistics. With the exception of cookies that are necessary for the website to function, we do not use cookies unless you give us your consent. Read more in our cookie policy.
If your personal data is processed for any of the purposes set out in this privacy policy, the data may be shared with our suppliers and/or partners if this is necessary to fulfil the purpose of the processing. We have entered into specific agreements with these parties to ensure that they only process personal data in accordance with our instructions.
As a registered user, you have certain rights under the General Data Protection Regulation. These rights are described below, along with how we work to ensure they are upheld.
You have the right to contact us to find out whether we are processing your personal data and, if so, to access that data and information about how we use it. You also have the right to request a copy of your personal data. The first copy you request is free of charge, but a fee may be charged for any further copies. If you submit your request electronically, you will, where possible, receive the extract and information in electronic format. If you do not specify a particular electronic format, the extract will be provided in a commonly used format, such as PDF files.
If disclosing the information to you were to cause harm to other individuals, we may refuse to disclose certain personal data. Furthermore, the right of access does not mean that you are always entitled to receive the actual document in which your personal data appears.
You have the right to have inaccurate personal data rectified without undue delay. Where appropriate in view of the purpose of our processing, you also have the right to have incomplete personal data completed, for example by submitting a supplementary statement.
A restriction on processing means that personal data may only be used and processed in certain limited ways; for example, we may only store it and not use it in any other way whilst the restriction is in force. Any other use may then only take place with your consent, to protect the rights of another person, or for an important public interest.
You have the right to request that we restrict the processing of your personal data in four different situations:
If your personal data is subject to restriction, we are obliged to notify you before the restriction is lifted.
You have the right to request the erasure of your personal data. In the following cases, we are obliged to erase your personal data without delay:
Please note that in certain situations we will not be able to comply with your request to have your data erased. We may refuse your request in whole or in part if our processing is necessary for any of the following reasons:
If you have suffered damage as a result of your personal data being processed in breach of the General Data Protection Regulation, you are entitled to claim compensation.
If you believe that our processing is unlawful or is not being carried out correctly, you have the right to lodge a complaint with the Data Protection Authority.
Under the General Data Protection Regulation, you always have the right to object to processing carried out on the basis of a legitimate interest or a public interest, or as part of the exercise of official authority. In such cases, we will carry out a balancing test based on your specific situation to assess whether it is still legitimate to process your personal data for the stated purpose.
You also have the right to object to processing carried out for direct marketing purposes. If you do so, we will cease such processing without first carrying out a balancing of interests.
Where processing is carried out on the basis of consent, you may withdraw your consent at any time, in which case the processing of your personal data must cease. However, any processing carried out before your consent was withdrawn is still considered lawful.
Automated processing (e.g. in an IT system) carried out on the basis of consent or a contract, where the personal data has been collected directly from you, is subject to the right to data portability, which means that you have the right to request your personal data in a format that is structured, commonly used and machine-readable format and, where technically feasible, to have that personal data transferred directly to another party.
If your request is manifestly unfounded or unreasonable – for example, if you repeatedly make the same request – we may charge a fee or refuse your request.
You can find out more about your rights on the Swedish Data Protection Authority’s website: www.imy.se/privatperson/dataskydd/dina-rattigheter/.
Contact
Contents
