This Privacy Policy helps you understand which personal data we collect about you, why we collect it, and how we use it. This policy also describes your rights as a data subject and how you can exercise these rights.
Who is responsible for the processing of your personal data?
SweGan AB, company registration no. 556965-1937, with its office located at Pursergatan 1, 582 78 Linköping, (“SweGaN”, “we”, “us”) acting as controller of personal data, is responsible for the processing of your personal data under the applicable data protection laws, such as the General Data Protection Regulation, EU2016/679 (“GDPR”) and the Swedish Data Protection Act (2018:218).
When you interact with SWEGAN, such as representing a current or potential customer, supplier or partner or visit our websites, applying for a job or otherwise interact with us we may collect certain information about you. If you have any questions or complaints regarding our processing of your personal data, or wish to exercise your rights please contact us via our e-mail address info@swegan.se or via post to SweGaN AB, Pursergatan 1, 582 78 Linköping, Sweden.
You have the right to be informed when we process your personal data. This right includes information on how and why we process your data. You can learn more on how and why we process your personal data and many other things by reading this Privacy Policy or by contacting us.
Your rights as data subject
As a data subject, you have certain rights when your personal data is processed. Read on to learn more about them. You can always contact us if you want to know more or when you want to exercise your rights, by sending an e-mail to info@swegan.se
Please note that some of these rights may not be applicable to you in all situations.
Right to access your personal data
You have the right to know what personal data we process about you and the right to access this data. A copy of the personal data we process about you and how we process your data can be provided to you upon request.
Right to rectification of your personal data
You have the right to request that we correct personal data or complete personal data about you that you believe is inaccurate or incomplete.
Right to object to the processing of your personal data
You have the right to object to the processing of your personal data if the processing is based on our legitimate interest (article 6.1 (f) GDPR). We may only continue to process your data if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing is performed in connection with legal claims. If you object to our processing of your personal data, you can also ask us to restrict the processing while we assess our legitimate interest to process your data.
Rights to restrict the processing of your personal data
You have the right to request that we restrict the processing of your personal data. Such restriction may be applied if you have asked us to rectify your personal data, for a period enabling us to verify or correct your personal data or if you believe that our processing of your personal data is unlawful, but you do not want us to erase your data. This may also apply where we no longer need your data but where you need it to establish or defend a legal claim. If the processing of your personal data has been restricted, we may only continue to process this data if this is necessary for establishing, exercising or defending legal claims, to protect someone else’s rights or if you have given your explicit consent.
Right to withdraw your consent
You have the right to withdraw your consent at any time in cases where we process your personal data based on your consent. You can contact us by sending an e-mail to info@swegan.se. Please note that a withdrawal of consent does not affect the lawfulness of prior processing of your data.
Right to erasure of your personal data (right to be forgotten)
You have the right to request that we delete your personal data. This applies if you believe that the personal data we store are no longer necessary in relation to the purpose for which they were collected or if we process your data based on your consent and you withdraw your consent. This also applies if we process your data based on our legitimate interest and your rights outweigh our legitimate interests. There may, however, be situations when we need to keep your personal data, for example where this is required according to a legal obligation, when we still need this data for the purposes for which it was collected or if the data is needed to establish, exercise or defend a legal claim. The right to be forgotten might not always be applicable to you in a particular situation, but you will always have the right to request us to delete your information, and we will then assess your request according to the data protection laws.
Right to data portability
You have the right to request us to send your personal data to you in digital form so that you can forward it to somebody else, if the processing of the data is based on your consent or on a contract and the processing is carried out by automated means.
Right to object to automated decisions based on profiling
According to the GDPR, you have the right to object to automated decisions based on profiling. SweGaN does not make automated decisions based on your personal data.
Which categories of personal data do we collect about you?
This section contains a list of categories of personal data that we collect. Not all these data have necessarily been collected about you, since this depends on how you have interacted with SweGaN.
More information on what personal data we collect relating to the specific ways you can interact with SweGaN as well as information on the legal basis for the processing of personal data is available below. A description of legal basis are also available below. For job applicants and current and former employees, please also see the specific indications below.
- Name and contact information: Name, email address, postal address, phone number.
- Identification and personal information: Personal identification number, date of birth, nationality, photos, video and audio recordings.
- Employment information: Title, occupation, employment, employment history, employer’s name, employer’s address, address of your office, education, candidate assessment results.
- Technical information: your IP address, logs, the date and time of access, which browser you used, the URL of the website from which you were referred, geolocation information such as city and region of connection.
Which are the legal bases for the processing of your data?
We process your personal data based on the following legal grounds:
- Consent (Article 6.1 (a) GDPR): we may process your personal data based on your consent. You have the right to withdraw your consent at any time by contacting us.
- Contract (Article 6.2 (b) GDPR): we may process your data based on a contract or prior to entering a contract to which you or the organisation that you represent is a party.
- Legal obligation (Article 6.1 (c) GDPR): we may process your personal data due to a legal obligation, for example relating to bookkeeping and accounting.
- Legitimate interest (Article 6.1 (f) GDPR): we may process your data based on our legitimate interest, for example to communicate with you, to establish or maintain a business relationship with you or the organisation that you represent, or to improve our services. When we use our legitimate interest as legal basis, we have balanced our interests with your interests to ensure that the processing of the data is necessary.
Your interaction with SweGaN
This section will provide information on which information we collect, when we collect it, why we collect it, how this is done and the legal basis.
When you visit our websites
When you visit our websites (www.swegan.se ), certain information is collected and shared with us through your web browser.
- What data we process
IP address, logs, the date and time of access, which browser you used, the URL of the website from which you were referred, information about your activities on our website, geolocation information such as city and region of connection.
- Why we process this data
We collect this data for statistical reasons to improve our websites, the technical functionality of the sites, and the user experience. To do this we use the analytics service from Google Analytics. - Legal basis
Consent (Article 6.1(a) GDPR). You can withdraw your consent at any time. By contacting us on info@swegan.se - Storage period
We will store your personal data for a period of three months after your visit our website. Google will continue to use your personal data after this period for their own purposes why Google will give you information in this regard separately.
We also use cookies on our websites. For more information about our use of cookies, please see our cookie policy.
When you contact us
When you contact us, for example by sending an email, contacting us via social media or calling us, we collect certain information about you. If you visit our social media platforms we process information you have in your profile (such as user name and photo).
- What data we collect
Provided by you: contact information, which company you represent and any additional information you provide us with in free text. - Why we collect this data
We collect this information so that we can communicate with you, help you with your query, or establish a business relationship with you or the organisation that you represent. If you visit our office, we collect information about you for security reasons so that we know when guests are expected to be in our office building. - Legal basis
Your personal data will be processed based on our Legitimate interest (Article 6.1(f) GDPR) to communicate with you due to your contact with us. - Storage: we will delete your personal data as soon as the purpose of the processing is met, e.g. your communication with us via e-mail will be deleted as soon as the matter for which you contacted us has been resolved. Your communication with us on our social media channels can be deleted by you at any time.
When you represent a potential supplier or partner or customer
When you represent a potential supplier, partner or customer we process information about you.
- What data we collect
Provided by you or your employer: Contact information, information about which organisation you represent, position in your company and other information you provide us with in our communication. - Why we collect this data
We collect the above information in order to market our products towards the company you represent - Legal basis
Your personal data will be processed based on your consent. You can withdraw such consent at any time by contacting us. - Storage period:
We will process your personal data for marketing purposes for as long as you interact with us and twelve months thereafter. We will delete your personal data if we conclude that the company you represent is not interested in entering in an agreement with us. You can choose to unsubscribe or object to receiving marketing at any time.
When you represent a customer
We are offering products and services to our customers. Below follows information on how we process your personal data as a representative of our customer.
- What data we collect
Provided by you or your employer: Contact information, information about which organisation you represent, position in your company and other information you provide us with in our communication, information about your /your company’s activities when using our products based on a survey and information in accounting material such as history regarding payments made and other information that constitutes accounting records. - Why we collect this data
We collect the above information in order to enter into an agreement with the company you represent and to establish or maintain a business relationship with the organisation that you represent, to improve our products and services, - Legal basis
Your personal data will be processed based on our Legitimate interest (Article 6.1(f) GDPR) to enter into an agreement with the company you represent and to maintain a business relationship with said company. - Your personal data when
Storage period:
If your company becomes our customer we will store your personal data for this purpose as long as the company you represent is our supplier or partner and for a period of 5 years in order to handle any potential disputes after the termination of the agreement.
We will store any document constituting accounting material and the personal data included therein according to the storage period stated in the accounting legislation which is up to eight years.
When you represent a supplier or partner
When you represent a supplier or partner we process information about you.
- What data we collect
Provided by you or your employer: Contact information, information about which organisation you represent, position in your company and other information you provide us with in our communication. - Why we collect this data
We collect the above information in order to enter into an agreement with the company you represent and to establish or maintain a business relationship with the organisation that you represent. - Legal basis
Your personal data will be processed based on our Legitimate interest (Article 6.1(f) GDPR) to enter into an agreement with the company you represent and to maintain a business relationship with said company. - Storage period:
If your company becomes our customer we will store your personal data for this purpose as long as the company you represent is our supplier or partner and for a period of 5 years in order to handle any potential disputes after the termination of the agreement.
When you apply for a job, a traineeship or student position etc.
When you apply for a job, a traineeship, or a student position at SweGaN, we collect and process certain information about you. For successful candidates, additional information will be collected.
- What data we collect
Provided by you: Contact information, Identification and personal information, Employment information
From other sources: Employment information - Why we collect this data
We collect this information for the purposes of the recruitment process at SweGaN and for SweGaN to enter into an employment contract or other contract with successful applicants, based on our legitimate interest or to enter into a contract. - Legal basis
Legitimate interest, Contract - Storage period
Your personal data will only be stored for as long as it is needed to fulfil the purpose of the processing, as described above. Unfortunately, it is not possible to specify specify exactly how long this is. Normally your personal information is stored for as long as you are relevant for the position you have applied for. Your personal data may also need to be stored to comply with legal obligations. For example, the application data of final candidates who are not hired must be kept for two years after the recruitment procedure has ended, in in accordance with the Swedish Discrimination law.
For employment reference persons
In a recruitment process, we might collect and process certain information on a job applicant’s reference persons.
- What data we collect
From other sources: Contact information - Why we collect this data
As part of a recruitment process, it may be necessary to collect information on a job applicant’s reference person in order to assess the candidate. - Legal basis
Legitimate interest - Storage period
Your personal information is stored for as long as the job applicant is relevant for the position they have applied for.
For our employees’ emergency contacts
In the event of an emergency, we might need to contact an employee’s emergency contact or next of kin. A separate Privacy Notice for emergency contacts is available.
- What data we collect
From our employees: Contact information - Why we collect this data
Our employees are encouraged to share the contact details of somebody they want us to contact. As an employer, we feel a responsibility towards our employees to be able to inform a person that they have chosen in the event of an emergency. - Legal basis
Legitimate interest - Storage period
We will store your information for as long as the employee that has appointed you as their emergency contact is still employed at SweGaN.
Who do we share your personal data with?
Staff access
Access to personal data for our staff is restricted to times when it is deemed necessary and to people who need to access the data as part of their job. Access to data for our employees and contractors is covered by confidentiality agreements to ensure that all data is handled with the utmost care.
Swedish government authorities
Due to legal requirements, we might share your personal data with Swedish authorities, for example where we need to share certain information with the Swedish Tax Agency and the Swedish Social Insurance Agency about our employees, based on a legal obligation.
Financial institutions and auditors
Personal data might be shared with our bank in order for us to handle payments, and with auditors, based on a legal obligation or our legitimate interest.
Service providers and subcontractors
We may use data processors for the processing of your personal data, for example cloud service providers, such as Microsoft. Data Processing Agreements are used to ensure an adequate level of protection when a processor is processing personal data on our behalf.
Where is your data processed?
Your personal data is primarily processed within the EU/EEA. We might use processors based in countries outside EU/EEA, but only where this is legal and appropriate based on a decision on adequacy from the European Commission, with parties certified under the EU-U.S. Data Privacy Framework and/or where the European Commission Standard Contractual Clauses are used. Such processing will always be governed by adequate technical and organisational measures to protect your personal data.
Updates to this Privacy Policy
SWEGAN reserves the right to update this Privacy Policy at any time. The most recent version will be available here on our website.
Complaints
If you believe that SWEGAN is not processing your data in accordance with the GDPR or other applicable data protection laws, you have the right to submit a complaint to the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten) or to your local data protection authority.
Contact SWEGAN
If you have any questions regarding our processing of your personal data, or if you have any complaints, you can contact us by sending an e-mail to info@swegan.se.
SweGaN AB
Rev 11/24
