You are welcome to contact us at firstname.lastname@example.org should you have any questions about our processing of your personal data.
1. Personal data, purpose and legal basis
Personal data consists of all information that is in some way attributable to a living natural person. It may be about information that directly identifies an individual, e.g. social security number or photo, but also indirectly, e.g. information that, together with other information, can be traced back to a specific person. The personal data we may process are name, contact details (address, e-mail address and telephone number), billing information, information in and about communication between us (for example notification that you have opened our e-mail), as well as IP address and other information collected via cookies and similar technologies. We collect the personal data for the most part directly from you in connection with entering into an agreement, in our communication, e.g. via the chat function or the contact form on our website, phone or email, or when you download information from our website, sign up for our newsletter or apply for a job with us. Other sources are e.g. public records for marketing, information published on websites and the device you use when visiting our website.
In the case that you are a sole trader and a customer of ours, in principle all information about you that we receive and process will consist of personal data. The personal data is processed so that we can: -provide you with the services we undertake to deliver and charge you for the services, all in accordance with our agreement. We will contact and communicate with you in various ways, for example when we provide you with support. The processing is necessary to fulfill our agreement. -improve existing and develop new services. The processing is necessary for our legitimate interest in product development. -market Swedacco and our services. We use direct marketing via email (which of course you can easily opt out of) where we show you relevant product recommendations and offers. The processing is necessary for our legitimate interest in marketing Swedacco.
1.2. Customer representative If you come into contact with Swedacco as an employee of a customer of ours, we will process your personal data so that we can: -provide the services we have undertaken to deliver in the agreement with your employer as well as perform the rights and obligations we have under the agreement, such as performing administration, invoicing and payment as well as for communication. We will contact and communicate with you in various ways, for example when we provide you with support. The processing is necessary for our legitimate interest in fulfilling the contract with your employer. -improve existing and develop new services. The processing is necessary for our legitimate interest in product development. -market Swedacco and the services we provide that we believe are of interest to your employer. We use direct marketing via e-mail (which of course you can easily refuse) where we show you relevant product recommendations and offers. The processing is necessary for our legitimate interest in being able to market ourselves.
1.3. Potential customer or representative of potential customer Your personal data will be processed by us so that we can: -market Swedacco and the services we provide that we believe are of interest to you or your employer. We use direct marketing via e-mail (which of course you can easily refuse) where we show relevant product recommendations and offers and also make contact by phone. The processing is necessary for our legitimate interest in being able to market ourselves.
1.4. Representative for supplier or partner If you are employed by a company that is a supplier or partner to us, your personal data will be processed by us so that we can: -fulfill the rights and obligations we have according to the agreement your employer entered into with us, such as performing administration, invoicing and payment as well as for communication. The processing is necessary for our legitimate interest in fulfilling the contract with your employer.
On our website you can download material and information, register as a subscriber to our newsletter via e-mail and get in touch with us for other questions. You then fill in your contact details in a form. You can also become a subscriber to the newsletter when you contact us in another way. Your email address will be processed by us in order for us to send the material/newsletters. The treatment is based on your consent. E-mail address and other information that you provide may be saved and processed for other purposes, see paragraph 1.1, 1.2 or 1.3. above.
1.6. Job seekers If you apply for a job with us, we will also process information that appears in your cover letter and CV such as skills, competences, work experience, education, grades, references and other information that you include in your application. We process the personal data so that we can: -make an assessment of your application and your possibility of employment with us and take the necessary measures before a possible employment contract is entered into. The processing is necessary for our legitimate interest in being able to hire new staff. -save your application and your personal data in case you become eligible for future employment with us. The treatment is based on your consent. -perform the obligations and rights we have as an employer within the framework of the recruitment process. The processing is necessary to fulfill a legal obligation and for our legitimate interest in being able to pursue our claim.
Sensitive personal data is only processed if it is necessary or if you expressly consent to the processing. For example, sensitive personal data may be processed if you have a disability or other special needs that recruiting companies need to take into account in the recruitment process.
2. Transfer of personal data to another
Your personal data will be shared with selected companies that help us deliver our services. We use, for example, suppliers that provide cloud services for storage, CRM tools, booking systems, emailing, bookkeeping, personnel administration, analysis tools and recruitment services. The suppliers who process personal data on our behalf we have entered into personal data processing agreements with in accordance with current legislation. Companies that we hire for help with recruitment and that make a selection for us have their own responsibility for their processing of your personal data. Your personal data may sometimes need to be shared with authorities, courts and other parties. This applies if we are required to comply with the law, in connection with a legal process or to respond to a request from regulatory authorities or other authorities. In the event that we decide in the future to sell or transfer all or parts of Swedacco, your personal data may need to be shared with or transferred to parties involved in that process.
3. How long we process your personal data
We will save your personal data as long as it is justified for the purpose of the processing. The data is then deleted or de-identified ("anonymized"). How long we save your personal data depends on the type of task. The same information can sometimes be saved for different purposes. For example, can a piece of information be saved because the law requires it, even though it has been thinned out and anonymized for other purposes. We regularly check the need to save your data, taking into account applicable legal requirements.
4. Transfer to third countries
As a general rule, no personal data is transferred out of the EU/EEA. Should a transfer take place, for example because a service provider is located in a third country, the transfer is made in accordance with the applicable law. We will only transfer your personal data to a country outside the EU/EEA if an adequate level of protection is ensured.
5. Your rights as a data subject
-Right to receive information about and access to your data. You have the right to request information about how we process your personal data and to receive a copy of the personal data. In the event of repeated requests for copies of other personal data, we may charge an administrative fee. -Right to rectification. If the information we have about you is out of date or incorrect, you have the right to request correction and completion of the information. -Right to erasure. You have the right to request deletion of data, provided that the data is no longer necessary for the purpose for which it was collected or otherwise processed or if there is no legal basis for processing the data. -Right to limitation. You have the right to request that the processing of your personal data be restricted until incorrect information has been corrected or an objection from you has been handled. -Right to object to treatment. If the personal data processing is based on legitimate interest, you have the right to object to the processing. We must cease processing if we cannot demonstrate that there are compelling legitimate reasons for continued processing. -Right to withdraw your consent. If the processing of personal data is based on consent, you have the right to withdraw the consent you have given us at any time. Withdrawal of consent does not affect the processing carried out before the withdrawal. -The right to submit a complaint to a supervisory authority. You have the right to contact and file a complaint with the Swedish Data Protection Authority if you believe that your personal data has been handled incorrectly by us. Read more at www.datainspektionen.se. You can also contact the supervisory authority in the country where you live or work. When you want to exercise your rights, please use the contact details provided above.