PROVSVARET PRIVACY POLICY
Welcome to Provsvaret's privacy policy on the processing of personal data. Data privacy is important to Provsvaret and we want to be open and transparent about how we handle your personal data. We therefore have a policy that establishes how your personal data should be processed and protected.
1. General
Provsvaret Professional Scandinavia AB, org. no. 556958-5986 ("Provsvaret") is the data controller for the processing of your personal data through Provsvaret, which primarily occurs through the services Provsvaret offers and through Provsvaret's website www.provsvaret.com (the "Website"). Provsvaret is responsible for ensuring that all processing of personal data is carried out in accordance with GDPR and applicable data protection legislation ("Data Protection Legislation"). This means, among other things, that Provsvaret protects your personal data with necessary measures and that you always have the right to contact us at Provsvaret to find out what personal data Provsvaret processes about you. Sections 3-9 provide detailed information about Provsvaret's processing of personal data.
The personal data Provsvaret collects from you is stored within the European Economic Area (EEA).
2. Your rights
2.1 Right of access
You have the right to request information at any time about what personal data we process about you. We will send the information via email provided you can confirm your identity in an acceptable manner.
2.2 Right to data portability
Whenever Provsvaret processes your personal data in an automated manner, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format transferred to you or another party. This only includes the personal data you have provided to us yourself.
2.3 Right to rectification
You have the right to request rectification of your personal data if it is incorrect and to have incomplete personal data completed.
2.4 Right to erasure or restriction
Under certain circumstances, you have the right to have personal data concerning you erased by us, for example if the personal data is no longer necessary to fulfill the purposes for which it was collected, or if the personal data has been processed unlawfully. You also have the right to require Provsvaret to restrict the processing of your personal data under certain circumstances, such as when you object to the processing of your personal data based on Provsvaret's legitimate interest.
2.5 Your right to object to processing of personal data based on legitimate interest
You have the right to object to the processing of your personal data that is based on a legitimate interest assessment. In such cases, Provsvaret will not continue to process the personal data unless we can demonstrate a legitimate interest that overrides your interests and rights, or due to legal claims.
2.6 How to exercise your rights
You exercise your rights by sending an email to info@provsvaret.se.
2.7 Right to lodge a complaint with a supervisory authority
If you believe that Provsvaret is processing your personal data incorrectly, you can contact us. You also have the right to lodge a complaint with a supervisory authority. The Swedish Authority for Privacy Protection (IMY) is the supervisory authority in Sweden (https://www.imy.se).
2.8 Updates to our privacy policy
We may need to update our privacy policy. The latest version of the policy is always available on our Website.
3. Website visitors (Cookies)
A cookie is a file that identifies your browser. The cookie file does not contain any contact information such as name, address, etc. A cookie is saved on the device you use to access the website (for example, computer, mobile, or tablet) so that a website can recognize your device the next time you visit the website. Every time you visit a website, such as the Website, where you once received a cookie, your browser automatically sends it with the request. The cookie makes your device recognized.
3.1 Purpose
We use cookies to collect statistics and user data in order to optimize the Website and to obtain data for our business development. Furthermore, we use cookies, among other things, to send the right information to the right user on the server, such as language selection in the browser, to customize content and advertisements, and to offer features in social media.
3.2 Processing performed
The Website may use several different cookies such as session cookies and functional cookies. Functional cookies are cookies that are necessary for our services to work. Google Analytics is used to analyze the Website, the purpose of which is to improve the user experience. Apart from the IP address, the information that Google Analytics collects is mostly anonymous traffic data such as browser information, device, and language.
3.3 Personal data processed
Geographic information, IP address, information about interaction on the website.
3.4 Legal basis
The processing is justified by our legitimate interest in collecting user data, optimizing the Website, showing you relevant marketing material, and obtaining data for our business development.
3.5 Storage period
Some cookies (session cookies) are deleted if you have been inactive for a certain period. Otherwise, your personal data is stored as long as it is needed to achieve the purposes above.
3.6 Transfer of personal data
Data forwarded to third parties, such as Google Analytics, is only used to provide the above-mentioned services to you, and to serve as an analysis tool in order to collect statistics to optimize the Website and present relevant material to you.
4. Customers
4.1 Purpose
We process personal data in order to maintain a business relationship with former and existing customers to be able to carry out the assignment for the customer, and to market content from the Website to our former and existing customers.
4.2 Processing performed
We primarily use the program Pipedrive for managing and storing our customers' personal data. Personal data primarily consists of the information you choose to send us, for example through a contact form. Your contact information may be used to share information about our services or other information we believe may be of interest to you. Once you have chosen to contact us, we also link your behavior as a visitor to the website to your personal information.
- Communication with the customer or the customer's contact persons if they contact us via email, telephone, the Website, or social media.
- Storage of the customer's and associated contact persons' personal data in our email inbox and in our business system.
- Other processing justified by the current assignment.
4.3 Personal data processed
We process personal data such as name, email address, position, postal address, telephone number, account number, personal identity number, and other information you provide to us.
4.4 Legal basis
All our processing of personal data is carried out according to one or more legal bases in relation to the purposes mentioned above. Processing of customers, both private individuals and companies, is primarily done with the legal basis that the processing is necessary to fulfill a contract or a legal obligation. The processing is usually necessary to be able to offer the service Provsvaret offers or is required in order to fulfill obligations under legislation or regulations, such as storage according to accounting legislation.In cases where our contacts are with representatives or contact persons of the customer, we have a legitimate interest in processing these parties' personal data. We also have a legitimate interest in marketing our services in relation to you as a representative or contact person for the customer.In addition to the above-mentioned legal bases, Provsvaret may process your personal data according to other legal bases or combinations thereof in accordance with Data Protection Legislation.
4.5 Storage period
We store your personal data as long as it is needed according to law or to fulfill our obligations to you. Emails and other information we receive from our customers are deleted when they are no longer relevant for the purpose for which they were collected, but no later than six (6) months from when the data was collected.
4.6 Transfer of personal data
Personal data forwarded to third parties is only used for the purposes stated above. For example, we may share your personal data with external advisors, IT service providers, and other external service providers. In direct marketing, personal data may be forwarded to providers for distribution of physical and digital direct marketing.
5. Suppliers
5.1 Purpose
The purpose of the processing is to be able to manage ongoing and potential future business relationships with our suppliers.
5.2 Processing performed
- Evaluation of potential business partners.
- Management of existing business relationships.
- Storage of personal data in the program Pipedrive.
- Communication, purchasing, signing of contracts, and financial transactions.
5.3 Personal data processed
We process personal data such as name, email address, telephone number, account number, personal identity number if the business relationship is with a sole proprietorship or private individual, and other information you provide to us.
5.4 Legal basis
If you are a sole proprietor or private individual, our legal basis is usually the fulfillment of the agreement between you as a supplier and us as a customer. If you represent a supplier, the legal basis is usually a legitimate interest in processing personal data about you as a representative or contact person for the supplier.
5.5 Storage period
We store your personal data as long as it is needed according to law or to fulfill our obligations to you. The personal data is deleted when it is no longer relevant for the purpose for which it was collected.
5.6 Transfer of personal data
Personal data forwarded to third parties is only used for the purposes stated above. For example, we may share your personal data with external advisors, IT service providers, and other external service providers.
6. Social media
6.1 Purpose
We process personal data to be able to market ourselves through social media.
6.2 Processing performed
- Creation of posts, articles, interviews, or videos for our various channels and the Website.
- Communication via social media.
6.3 Personal data processed
We process personal data such as name, email address, telephone number, personal identity number, work-related information such as position, photos and images, video and audio recordings, date of birth, and username.
6.4 Legal basis
We have our legitimate interest in being able to market ourselves on social media and communicate with those who contact us via social media.
6.5 Storage period
We store your personal data as long as the purpose of the processing remains.
6.6 Transfer of personal data
Data forwarded to third parties is only used for the purpose and processing stated above. For example, if we share a post on social media in which you appear, your personal data will be available to followers and others who see the post.
7. Recruitment
7.1 Purpose
We process personal data to be able to handle applications for recruitment purposes.
7.2 Processing performed
- Handling applications for recruitment purposes.
- Storage of data for future recruitments.
- Responses to applications.
7.3 Personal data processed
Personal data processed includes, for example, name, personal identity number, contact information, CV, cover letter, references from previous employers, and other information you provide us in connection with your application.
7.4 Storage period
The personal data may be stored during the recruitment process, after which the data is deleted. If you have consented to us processing the data for future recruitments, the data may instead be kept for two (2) years after consent was given (or until consent is withdrawn beforehand), after which it is deleted. Despite the above, we may store the personal data as long as a job seeker who was not hired can take legal action in connection with the recruitment process.
7.5 Transfer of personal data
The personal data may be disclosed to any recruitment consultant or other service provider engaged in connection with the recruitment process.
8. Other email communication
8.1 Purpose
We process personal data that is provided to us when you send us an email, for example when you contact us with an inquiry, feedback, or something else.
8.2 Processing performed
Communication via email and storage of email messages in our email inbox.
8.3 Personal data processed
Personal data processed includes, for example, name, email address, contact information, and other information from our conversation with you in connection with your claim.
8.4 Legal basis
We have a legitimate interest in being able to receive, handle, and respond to inquiries and any feedback in order to improve and develop our business.
8.5 Storage period
We store your personal data as long as the purpose of the processing remains, but for a maximum of six (6) months.
8.6 Transfer of personal data
Data forwarded to third parties is only used to provide the services stated above.
9. Fulfillment of legal obligations
9.1 Purpose
We process personal data to be able to fulfill our obligations under law.
9.2 Processing performed
- Comply with accounting legislation.
- Comply with other legislation, court rulings, and authority decisions.
9.3 Personal data processed
We process personal data such as name, address, payment history, transactions, and other material that constitutes accounting material.
9.4 Legal basis
The processing is necessary to comply with mandatory law, i.e., the Swedish Bookkeeping Act and other accounting legislation, and to meet the requirements of other laws, court rulings, and authority decisions.
9.5 Storage period
The data is stored for seven to eight years in accordance with the Swedish Bookkeeping Act, and/or as long as necessary due to other legislation, court rulings, or authority decisions.
9.6 Transfer of personal data
We share your personal data with IT companies that provide solutions for accounting systems.