The following privacy policy describes how Consat AB, org.nr 556361–0723, and its subsidiary (jointly “Consat“) processes personal data about you. The terms “we”, “our”, “our” and “us” in this policy refer to Consat. We safeguard your privacy and will in all situations ensure that we process your personal data in a legal and correct manner.

1. Data Controller

Each company within Consat is an independent controller for its processing of your personal data and is responsible for that such processing is done in accordance with this privacy policy and applicable data protection regulations. The companies within Consat agree that Consat AB administers any questions regarding processing of personal data for all companies, see contact details under section 10.

2. ABOUT WHOM DO WE PROCESS PERSONAL DATA?

We process personal data about the following categories:

• Customers, i.e. natural person who is either customer of Consat or who is a representative or contact person of such.
• Partners, i.e. natural person who is either a partner with Consat or who is a representative or contact person of such.
• Suppliers, i.e. a natural person who is either a supplier to Consat or who is a representative or contact person of such.
• Potential customers, ie. natural person who is either a potential customer or who is a representative or contact person of such.
• Visitors, i.e. natural persons who visits our website or contacts us via forms on our website.
• Recruitment of staff, ie. natural person seeking employment with one of the companies within Consat.

3. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?

We process both personal data that you provide to us, that we collect from you and personal information that we receive from third parties.

• Personal data that you provide to us

When you, as one of the categories above, enter into an agreement with us, contact us by phone, e-mail, download material from our website, or participate in our events, we process personal data about you that you provide to us. Personal data that you provide to us and that we process can be, for example, your name, address, telephone number, e-mail address, copies of identity documents, information about account numbers and other billing information, information about allergies and other information needed to perform agreements, contact you or otherwise meet your needs.

• Personal information that we collect from you

When you visit our website, download material from the website or otherwise use our website, we will collect personal data about you. This may be about your IP address and which subpages you have visited on our website.

• Personal information about you that we receive from third parties

We may receive information and documentation from third parties, such as partners, authorities and more, both via e-mail and through other correspondence that contains personal information about you.

4. WHY AND ACCORDING TO WHAT LEGAL BASIS DO WE PROCESS YOUR PERSONAL DATA?
   • Customers, partners, suppliers and potential customers

In order to enter into an agreement with you or the company you represent and to implement such an agreement and guard your/your client’s interests, Consat collects and processes personal information about you, such as name, address, telephone number, e-mail address, copies of identity documents, account number information and other billing information. We further process your information in order to be able to invoice for our work. If you, as an individual or as a representative of a sole proprietorship, are a customer of Consat, the legal basis for our processing of personal data is that it is necessary for the performance of the agreement to which you are party or in order to take steps at your request prior to entering into an agreement. In the event that you do not provide your information to us, we cannot enter into an agreement.

If you are instead a representative or contact person for an organization that is a customer of Consat or another natural person that is processed within the framework of an agreement, the legal basis for our processing of personal data about you is a balance of interests, ie. that the processing is necessary for a purpose relating to our legitimate interest in maintaining and fulfilling our obligations in agreements and in customer relationships. If you do not provide your personal information, we may not be able to fulfill our obligations to the organization you represent.

Consat also processes your name and contact information, such as your email address, as well as information about the organization you represent to offer and market our services to you and the organization you represent. The legal basis for our processing of your personal data is that it is necessary for our legitimate interest in being able to market services that we believe you and your organization may be interested in. Our interest in processing your personal data in order to send offers to you takes precedence over your possible interest in protecting your privacy in light of the potential benefits that these offers bring to your organization. However, you have the right to object at any time to the processing of personal data for direct marketing.

In connection with events, among other things, we may process information about allergies that you provide to us. The processing of information about allergies is based on your consent to such processing.

Certain personal data may also be processed because Consat has a legal obligation to fulfill, for example as a result of Consat’s accounting obligation or other obligations imposed on Consat by law.

• Visitors

Consat processes personal information collected during your visit to our website, such as IP address, name, contact information, how you use our website and information about the organization you represent for the purpose of quality assurance and development of our business.

The legal basis for our processing of your personal data is that it is necessary for our legitimate interest in being able to ensure the quality and development of our business and meet your and your organization’s needs. Our interest in processing your personal data for these purposes takes precedence over your possible interest in protecting your privacy, e.g. in light of the potential benefits that the development of our business entails for your organization.

• Recruitment of staff

We process personal data about you within the framework of staff recruitment. The personal data we process are those that you provide in your application, e.g. CV, personal letter, grades, certificates, information from references and test results from personality tests and problem-solving tests.

The legal basis for our processing of your personal data is that it is necessary to take action before entering into an employment contract. The treatment is also necessary for our legitimate interest in communicating with you and conducting recruitments.

5. HOW LONG DO WE SAVE YOUR PERSONAL DATA?

Consat never stores personal data longer than necessary for the purposes of the process. Consat therefore regular reviews stored personal data and deletes personal data that is no longer needed.

Consat stores personal data about you costumer, partner or supplier as long as there is an active agreement. After the agreement has been terminated, Consat stores personal data for as long as a legal claim can be made in connection with the agreement or to the extent that it is necessary to save the data in order to comply with legal requirements.

Consat stores personal data about you as a visitor and when recruiting until you have objected to the processing of your personal data, however, for a maximum of three years. If you object to the processing, Consat will delete your personal data as soon as possible.

6. WHO HAS ACCESS TO YOUR Personal Data?

Your personal data may be transferred to and processed by third parties. These may be group companies, service providers, other legal advisers, auditors, consultants, courts, authorities, etc. Examples of situations when your personal data may be transferred to third parties when such action is required due to law, dispute, request for authority or decision, at own request alternatively when required to fulfil Consat´s legitimate interest.

Consat still remains data controller for the personal data that is transferred, while third parties depending on the circumstances, either becomes an independent data controller, joint data controller with Consat or Consat´s processer.

7. WHERE AND HOW DO WE STORE PERSONAL DATA?

Consat will to the greatest extent process your personal data within the EU / EEA. Consat takes appropriate technical and organizational measures to prevent unauthorized or illegal processing and access, loss, destruction or damage to personal data, thereby ensuring an appropriate level of security.

However, your personal data may sometimes need to be transferred outside the EU/EEA. We will ensure that legal, technical and organizational measures are in place to ensure that your personal data is handled securely and with an adequate level of protection outside the EU/EEA (e.g. through standard contractual clauses). You can always contact us if you have questions about applicable protective measures.

8. WHAT RIGHTS DO YOU HAVE AS A REGISTERED?

As a data subject, you have a number of rights concerning the processing of your personal data. If you wish to invoke your rights, you are welcome to contact Consat. Your rights are subject to certain conditions according to applicable data protection regulations and can be summarised as follows.

• Right to Access

You have the right to contact Consat and request access to the personal data we process, as well as request information about, among other things, the purposes of the processing and who received the personal data. Consat, as the person responsible for your personal data, will provide you with a free copy of the personal data that is processed. In the event of any additional copies, Consat may charge an administration fee.

• Right to Rectification

As a data subject, you have the right to obtain without undue delay the rectification of inaccurate personal data. You may also have the right to have incomplete personal data completed.

• Right to Erasure and Restriction

As a data subject you have, under certain conditions, the right to have your personal data erased without undue delay. This is for example the case if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, you withdraw your consent and there is no longer a legal ground for the processing, or the processing is unlawful. You also have the right to obtain restriction of the processing, for example if you contest the accuracy of the personal data or the lawfulness of the processing.

• Right to Object and to withdraw Consent

Where the processing is based on your consent, you have the right to withdraw your consent at any time. This does however not affect the lawfulness of the processing based on your consent before its withdrawal.

You also have the right to object to the processing of your personal data based on balance of interests (legitimate interest). In such case, Consat may no longer process your personal data, unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you as a data subject or for the establishment, exercise or defence of legal claims. As a data subject you always have the right to object to the processing of your personal data for direct marketing purposes. Consat will in that case cease the processing of your data for such purposes.

• Right to Data Portability

As a data subject, you have the right to receive the personal data which you have provided to Consat where the processing of your data is based on your consent or on an agreement with you. You also have the right to transmit such personal data to another data controller. The personal data shall be provided in a structured, commonly used and machine-readable format. 

• The right to submit a complaint

If you are dissatisfied with how we have processed your personal data, please contact us, see our contact details in section 10. You also have the right to submit a complaint about our personal data processing to The Swedish Data Protection Authority (Integritetsskyddsmyndigheten), Box 8114, 104 20 Stockholm, imy@imy.se.

9. Changes to this Privacy Policy

Consat reserves the right to change and update this policy. In the event of material changes to the policy or if existing personal data is to be processed in a manner other than that specified in the policy, Consat will inform about this in an appropriate manner.

10. Contact Consat

You can contact us at any time if you have questions about your personal data. You can email us at GDPR@consat.se or call us at (+46)31-340 00 00.