Our processing of your
personal data
You have been referred here because Öckeröborgen AB, as a personal data controller, with underlying subsidiaries as personal data assistants to Öckeröborgen AB, processes personal data about you.
We do this because you are an important person for us and our business. The processing takes place in accordance with current regulations, including the data protection regulation (“GDPR”) and what is otherwise stated below. If you have questions or concerns about how we process your personal data or would like advice on data protection and privacy issues, please contact us, see contact details below.
In addition to ensuring that our processing of your personal data is correct and transparent in relation to you, we always strive to maintain a high level of security in all processing of personal data where we continuously assess and take into account both technical and organizational risks in order to best protect your personal data from unauthorized access, use, alteration and deletion.
For clarification, Öckeröborgen AB acts as the personal data controller for all processing of your personal data referred to in this privacy policy, except for the processing of personal data in relation to you applying for work at one of Öckeröborgen AB’s underlying subsidiaries. Underlying subsidiaries of Öckeröborgen AB that you may come into contact with act where applicable as personal data assistants to Öckeröborgen AB in relation to the personal data processing mentioned in this privacy policy. When you apply for work with one of Öckeröborgen AB’s underlying subsidiaries, they process your personal data in the capacity of personal data controller. See more information under Section 2 and at the company you are looking for work with.
Content
Our processing of your personal data is described below in three different sections, one or more of which may concern you depending on the relationship you have with us, followed by a general description of how and what you can contact us about regarding our processing of your personal data.
Section 1 – Networking, marketing and knowledge exchange describes the personal data processing that takes place in connection with us communicating and maintaining our contact networks for marketing and knowledge exchange as well as for managing our suppliers.
In Section 2 – Jobseekers, we address you who have or plan to submit a job application to Öckeröborgen AB. We also provide further information aimed at job seekers for one of Öckeröborgen AB’s underlying subsidiaries.
In Section 3 – Personal data of customers and customer representatives in connection with new customer registration and execution of assignments/services, we explain how we handle you as a customer as a representative of a company or another business.
In Section 4 – General information and your rights, you can read more about who can access your data, what rights you have as an individual and how you can contact us to find out more.
Section 1 – Networking, marketing and knowledge exchange
Why we process (Purpose)
We process your data to maintain our contacts and networks, to keep our knowledge and information about you up-to-date and current, as well as to market our services and to be able to provide you with relevant content in the form of invitations, SMS or other types of information as you wish.
How we process
We collect the data and compile it, i.a. based on the type of services and products we judge you to be interested in. In connection with mailings and invitations, we use external suppliers for technical functionality within the scope of the specified purposes, such as sending e-mails.
What we process
We process the personal data provided to us. It can be name, e-mail address, telephone number, postal address, date of birth, and/or other information that you have provided to us or that is otherwise necessary for us to be able to fulfill our obligations towards you.
Legal basis – Legitimate interest
In the processing we describe above, we take into account and weigh your interest in privacy in relation to our interest and purpose (as set out above) in carrying out the processing. We then make a balance between these interests in which we take into account both positive and negative effects and conclude that our interest is justified.
Legal obligation
The Accounting Act also imposes requirements on us regarding accounting and invoicing.
Collection and disclosure
The data we have about you is primarily collected from you. We share the data only with such suppliers as are necessary for the execution of the treatments, and within the scope of the purposes stated above. For example:
- Payment solutions (card companies, banks and other payment service providers).
- Marketing (via advertising agencies, web/media agencies and associated distribution and social media).
- IT services (companies that manage the necessary operation, technical support and maintenance of our IT solutions).
Retention period
We only store your data for as long as we deem it justified taking into account what is stated above about legal basis and purpose, in this case two years from the last time we heard from you.
Section 2 – Jobseekers
The information below regarding personal data processing is aimed at you who have or plan to submit a job application to Öckeröborgen AB, as Öckeröborgen AB is the personal data controller for such processing.
If you have or plan to submit a job application to one of Öckeröborgen AB’s underlying subsidiaries, the respective underlying subsidiary is the personal data controller for the processing of your personal data in the application process. As the application process is similar within all group companies, the respective underlying subsidiaries process your personal data in a similar way as described in the table below.
For more detailed information about how your personal data is processed within the specific application process, please contact the company you are applying for work with.
Why we process (Purpose)
We process your data to handle your application and to be able to assess, compare and match against the needs we have for resources.
We store your data as stated below in order to be able to contact you again if a new need arises within the time of storage.
How we process
We are compiling the information you have provided and comparing it with other candidates and our needs. At a later stage in the process, we will send out a request via our digital reference tool, where you will have the opportunity to provide references that we will then contact to supplement and confirm the information.
What we process
Primarily, we process the information you have provided in your application, i.e., your contact details, your CV, and your answers to the selection questions. We supplement this information with details from the references you provide when we send out a request via our digital reference tool. This is done to gain the most comprehensive and relevant understanding of you as a candidate.
Legal basis – Legitimate interest
In the processing we describe above, we take into account and weigh your interest in privacy in relation to our interest and purpose (as set out above) in carrying out the processing. We then make a balance between these interests in which we take into account both positive and negative effects and conclude that our interest is justified.
Collection and disclosure
The information we have about you is primarily collected from the details you provide to us. Later in the process, it may become relevant to supplement this with information from references. If so, you will be asked to provide your references. We do not share your application unless we have specifically asked for your permission.
Retention period
We will only store your data for as long as we deem justified taking into account what is stated above about legal basis and purpose, in this case 24 months from the time of your application (unless you request otherwise, which we will of course respect). If you are employed by us, the data in your application will be stored and processed in accordance with what is stated in our policy for the processing of employee personal data, which is only provided to our employees.
Section 3 – Personal data of customers and customer representatives in connection with new customer registration and execution of assignments/services
Why we process (Purpose)
We process the data to enable customary customer administration and for us to be able to fulfill our commitments to you, perform and administer the assignment, to manage authorized persons for entry into our premises, to protect your interests, for accounting and invoicing purposes.
The data can also be used for business and method development, market analysis, statistics and risk management.
How we process
We collect the data and check against our registers, save in our systems for project and invoice management.
We also compile the data in our systems for customer care.
What we process
The information we process about you is the information you provide to us that is relevant to our relationship with you as a customer. It can be name, e-mail address, telephone number, postal address, date of birth, and/or other information that you have provided to us or that is otherwise necessary for us to be able to fulfill our obligations towards you.
Legal basis
Legal obligation
The Accounting Act places demands on us regarding accounting and invoicing.
Legitimate interest
In addition to the processing that is necessary to fulfill our legal obligations, certain processing also takes place with the support of a legitimate interest.
In doing so, we take into account and weigh your interest in privacy in relation to our interest and purpose (as set out above) in carrying out the processing. We then make a balance between these interests in which we take into account both positive and negative effects and conclude that our interest is justified.
Collection and disclosure
The data we have about you is primarily collected directly from you. In connection with taking on a new customer, we may need to collect information from public registers such as allabolag.se, UC AB and similar to supplement and confirm the information we received from you about the business you represent as well as about you as a person and other representatives of the business.
We will not disclose personal data to third parties except in cases where (i) it has been specifically agreed between us and you, (ii) when it is necessary within the framework of a certain assignment to safeguard your rights, (iii) if it is necessary for us to fulfill a statutory obligation or to comply with authority decisions or court decisions, or (iv) in the event that we engage external suppliers who perform tasks on our behalf. The data may be disclosed to courts, authorities, counterparties and counterparty representatives if it is necessary to protect your rights.
Retention period
We store your data only for as long as we deem it justified, taking into account what is stated above about legal basis and purpose.If you end a business relationship with us, we will delete your personal data as soon as we can.
Section 4 – General information and your rights
You have the right, in accordance with current data protection legislation, to request access to the personal data processed about you at any time. You also have the right to have incorrect personal data corrected, to request deletion of your personal data or limitation of our processing of your personal data, exercise your right to data portability and object to the processing of your personal data.
If processing is based on consent, you have the right to withdraw your consent to the processing at any time.
If you wish to exercise any of your rights, please contact us using the contact details below.
You also have the right to lodge a complaint with the applicable supervisory authority (Integritetsskyddsmyndigheten, imy.se) at any time if you believe that your personal data is not processed in accordance with the applicable data protection legislation.
Öckeröborgen AB
Registrator
Lammholmsvägen 2
475 31 Öckerö