Privacy and Information Security Policy

This Privacy and Information Security Policy (“Policy”) sets out and formalises the processing of personal data by Systeminstallation i Varberg AB (“Systeminstallation”, “we”, “us”), company registration number 556533-7697. The policy also sets out how we proceed to ensure that your personal data is collected, used, stored, protected and otherwise processed securely, in accordance with the provisions of the Data Protection Regulation and the General Data Protection Regulation (GDPR) and associated implementing and supplementary regulations (the “Data Protection Regulations”). Systeminstallation is the data controller for the processing.

Definitions

In this Policy, the term “personal data” refers to information that can be attributed to an identified or identifiable natural person, such as name, address, social security number, date of birth, payment card number, email address and telephone number (hereinafter referred to as “personal data”).

This Policy describes how we process your personal data. The term “processing” means, for example, that we record, store, send and otherwise use your personal data in the manner described in this Policy (hereinafter referred to as “processing”).

Purpose of processing personal data

For external data subjects:

To ensure and develop customer service;
In communication with customers and suppliers;
To handle support and service issues;
To manage contracts;
To handle requests;
To manage various customer activities;
For statistical purposes; and
To further develop Systeminstallation's business operations
For camera surveillance

For internal data subjects:

For recruitment
For the fulfillment of employment contracts
For management, planning and organization of work
For benefits related to employment
For publications, invitations and other communications
To contact your relatives or other relevant contact in case of emergency
For participation in the company's contact list
For marketing purposes, including images online, in print and on social media (with your consent)
To provide accommodation or travel

Categories of personal data we process and legal basis

System installation processes personal data regarding our employees, customers, customers' customers, suppliers, prospective customers and partners.
The personal data that we may process are:

For external data subjects:

Name and identification number (personal identification number);
Address;
Phone number;
IP address;
E-mail;
Customer number;
Picture/video of visitors.

For internal data subjects:

Name and identification number (personal identification number);
Address;
Phone number;
IP address;
E-mail;
Photos;
Gender;
Financial information;
CV;
Employment contract;
Employee performance;
Educational catalog;
Sick leave.

Personal data may be obtained directly from you when you use our server platform services, interact with us, visit our websites, become employed by us, apply for employment with us, or from third parties.

The processing of personal data is necessary to satisfy our legitimate business interest in being able to interact with customers, partners and suppliers and otherwise operate and develop our business. We may also process personal data with your explicit consent.

Some of the personal data that Systeminstallation collects is processed in order to be able to fulfill legal obligations according to requirements in laws, judgments or authority decisions. Such requirements may, for example, relate to requirements for product liability and product safety such as the production of communication and information to the public and customers about product alarms and product recalls, for example in the event of suspicion of a defective or harmful product. Processing of personal data concerning you may also be required for, for example, accounting reasons according to the Accounting Act (1999:1078) and for handling questions about money laundering according to the Money Laundering Act (2017:630).

How long is your personal data stored?

Personal data is only stored for as long as there is a need to store it to fulfill the purposes for which the personal data was collected according to this Policy.

In order to enable Systeminstallation to comply with legal obligations arising from law or to safeguard our legal interests (if legal proceedings are ongoing), we may store personal data for a longer period of time. However, personal data is never stored longer than is necessary or legally required for the respective purpose.

How do we protect your personal data?

To protect your personal integrity, detect, prevent and limit the risk of hacker attacks, etc., Systeminstallation takes a number of technical and organizational information security measures. Systeminstallation also takes measures to protect your personal data against unauthorized access, misuse, disclosure, alteration and destruction. Systeminstallation ensures that access to your personal data is only given to personnel who need it for the performance of their duties and that they take confidentiality measures.

Your rights

You have the right to receive information about the processing of personal data we carry out. Below is a summary of the rights that you can exercise by contacting us. You will find our contact information at the end of this Policy.

Right of access

You have the right to request information free of charge about the processing we carry out regarding your personal data. You also have the right to receive a copy of the data we process about you. This request must be submitted to us in writing with clarification of what information you wish to see. We will respond to your request as soon as possible. If we cannot meet your wishes for access to the data your request relates to, we will provide a justification for this. The copy of your personal data will be sent to your population registration address unless otherwise agreed in writing. In order to ensure your identity in the event of a request from you, we may request additional information from you.

Right to rectification

The primary responsibility for ensuring that the personal data we process is accurate lies with Systeminstallation as the data controller. If you notify us that the personal data you have provided is no longer accurate, we will correct, block or delete such personal data as soon as possible.

Right to erasure

You have the right to request that Systeminstallation, without undue delay, delete your personal data. Personal data shall be deleted in the following cases:

(i) if the personal data is no longer necessary for the purpose for which it was collected;

(ii) if you have withdrawn your consent and the processing is solely based on consent as a legal basis;

(iii) if processing is for direct marketing purposes and you object to your personal data being processed for this purpose;

(iv) if you object to the processing of personal data which takes place after a balancing of interests and your interest outweighs ours;

(v) if your personal data has not been processed in accordance with the Data Protection Regulations; or

(vi) if erasure is required to comply with a legal obligation.

There may be obligations that prevent us from immediately deleting all of your personal data. These obligations follow from applicable legislation in e.g. accounting. If certain personal data cannot be deleted due to applicable legislation, we will ensure that the personal data can only be used for the purpose of fulfilling such legal obligations and not for any other purposes.

Right to restriction

You have the right to request that Systeminstallation temporarily restrict the processing of your personal data. Such a restriction may be requested in the following cases:

(i) if you believe that the personal data we hold about you is incorrect and that you have requested correction in connection with this;

(ii) when the processing of your personal data is not in accordance with the rules of the Data Protection Regulations but you still do not want your personal data to be deleted but instead restricted; and

(iii) when we no longer need your personal data for the purposes of our processing but you need them to establish, exercise or defend a legal claim.

If you have objected to the processing of your personal data, the use of the personal data may be restricted while the investigation is ongoing. In the event of restriction of your personal data, Systeminstallation will only store your personal data and obtain your consent for further processing.

Right to data portability

You have the right, where we process your personal data based on your consent or to perform a contractual obligation with you, to receive from us all the personal data we hold about you that are processed by automated means, in a structured and machine-readable format. If technically feasible, you also have the right to request that we transfer your personal data to another controller.

Right to object

You have the right to object to our processing of your personal data if the processing is based on Systeminstallation's legitimate business interests. In such cases, Systeminstallation will ask you to specify which processing you object to. If you object to any processing, we will only continue to process your personal data if there are legitimate reasons for the processing that outweigh your interests.

Right to lodge a complaint You have the right to lodge any complaints regarding the processing of your personal data with the national supervisory authority, the Swedish Data Protection Authority (IMY). Read more about how you can do this at www.imy.se

Processing of personal data on behalf of Systeminstallation

Before Systeminstallation engages any type of supplier to deliver a service that involves personal data that Systeminstallation processes being processed by the supplier on behalf of Systeminstallation, Systeminstallation ensures that only suppliers who have the technical and organizational capacity and level required for the assignment that the supplier is to perform are used.

Information security

Information is one of our most important assets and its management is an important part of the work, which is why SI places high demands on good information security. Interruptions in the availability of information can be critical and have serious consequences for the business.

All employees are responsible for handling information correctly.

Information assets refer to all information, regardless of whether it is processed manually or automatically and regardless of the form or environment in which it occurs.

Information security is the part of the organization's management and quality process that concerns the management of the business's information.

It is therefore of utmost importance that we handle information security issues in a trust-inspiring and methodical manner.

Information security encompasses all of SI's information assets.

That the right information is available to the right person when it is needed and in a traceable manner
That the information is reliable, accurate and complete
That information is protected from unauthorized access

Information security is an integral part of our operations. Everyone who handles information assets has a responsibility to maintain information security. It is also the responsibility of managers at all levels to actively promote a positive attitude towards security work.

SI's goal is to meet the requirements for information security in laws, ordinances, and regulations and to work on continuous improvements.

GDPR

At SI, we protect your privacy. The personal information you provide to us may be used by SI for its own communication and marketing, such as invitations to its own events and seminars, newsletters, communities and competitions. Communication takes place in the form of printed mailings and digital mailings via email and notifications via SMS and various communities. The personal information we collect is never sold to third parties.

According to the Data Protection Regulation, you as an individual have the right to the following:

Access your personal data
Get incorrect personal data corrected
Have your personal data deleted
Object to the use of personal data for direct marketing
Object to the use of personal data for automated decision-making and profiling
Moving personal data (data portability)

When requesting the deletion of personal data, this will be done within 3 months. According to applicable laws and regulations, you have the right to request a so-called register extract containing the personal data we hold and process about you, free of charge.

You also have the right to request correction, blocking or deletion of your personal data. If so desired. The General Data Protection Regulation, or GDPR as it is also called, contains rules on how personal data may be processed. The regulation comes into force on May 25, 2018 and replaces the Personal Data Act (PuL).

For more information about the Data Protection Regulation, see the Swedish Data Protection Authority's website: https://www.imy.se/globalassets/dokument/dataskyddsreformen—integritetslagarna2.pdf

Cookies

We use cookies on our website, please read more in our Cookie Policy.

Privacy Policy Change

System Installation reserves the right to update or change this Policy at any time and you should regularly visit this website to obtain the latest version.

Last updated: 2023-02-06

How to contact us with questions

If you have any questions regarding this Policy or our processing of your personal data, please contact our GDPR Officer by email: info@wearesi.se

Privacy and Information Security Policy

This Privacy and Information Security Policy (“Policy”) sets out and formalises SI i Varberg AB’s (“Systeminstallation”, “we”, “us”), corporate registration number 556533-7697, processing of personal data. The policy also sets out how we proceed to ensure that your personal data is collected, used, stored, protected and otherwise processed securely, in accordance with the provisions of the Data Protection Regulation and the General Data Protection Regulation (GDPR) and associated implementing and supplementary regulations (the “Data Protection Regulations”). SI is the data controller for the processing.

Definitions

Purpose of processing personal data

Personal data is processed by SI only for the purposes explicitly stated and specified below and for no other purposes. The overall purpose of the processing is to manage existing, old and new business relationships. This means that personal data is mainly processed in the following cases:

For external data subjects:

To ensure and develop customer service;
In communication with customers and suppliers;
To handle support and service issues;
To manage contracts;
To handle requests;
To manage various customer activities;
For statistical purposes; and
To further develop SI's business operations
For camera surveillance

For internal data subjects:

For recruitment
For the fulfillment of employment contracts
For management, planning and organization of work
For benefits related to employment
For publications, invitations and other communications
To contact your relatives or other relevant contact in case of emergency
For participation in the company's contact list
For marketing purposes, including images online, in print and on social media (with your consent)
To provide accommodation or travel

Categories of personal data we process and legal basis

SI processes personal data regarding our employees, customers, customers' customers, suppliers, prospective customers and partners.
The personal data that we may process are:

For external data subjects:

Name and identification number (personal identification number);
Address;
Phone number;
IP address;
E-mail;
Customer number;
Picture/video of visitors.

For internal data subjects:

Name and identification number (personal identification number);
Address;
Phone number;
IP address;
E-mail;
Photos;
Gender;
Financial information;
CV;
Employment contract;
Employee performance;
Educational catalog;
Sick leave.

Some of the personal data that SI collects is processed in order to be able to fulfill legal obligations according to requirements in laws, judgments or authority decisions. Such requirements may, for example, relate to requirements for product liability and product safety such as the production of communication and information to the public and customers about product alarms and product recalls, for example in the event of suspicion of a defective or harmful product. Processing of personal data concerning you may also be required for, for example, accounting reasons according to the Accounting Act (1999:1078) and for handling questions about money laundering according to the Money Laundering Act (2017:630).

How long is your personal data stored?

Personal data is only stored for as long as there is a need to store it to fulfill the purposes for which the personal data was collected according to this Policy.

In order to enable SI to comply with legal obligations arising from law or to safeguard our legal interests (if legal proceedings are ongoing), we may store personal data for a longer period. However, personal data is never stored for longer than is necessary or legally required for the respective purpose.

How do we protect your personal data?

To protect your personal privacy, detect, prevent and limit the risk of hacker attacks, etc., SI takes a number of technical and organizational information security measures. SI also takes measures to protect your personal data against unauthorized access, misuse, disclosure, alteration and destruction. SI ensures that access to your personal data is only given to personnel who need it for the performance of their duties and that they take confidentiality measures.

Your rights

Right of access

Right to rectification

The primary responsibility for the accuracy of the personal data we process lies with SI as the data controller. If you notify us that the personal data you have provided is no longer accurate, we will correct, block or delete such personal data as soon as possible.

Right to erasure

You have the right to request that SI, without undue delay, delete your personal data. Personal data shall be deleted in the following cases:

(i) if the personal data is no longer necessary for the purpose for which it was collected;

(ii) if you have withdrawn your consent and the processing is solely based on consent as a legal basis;

(iii) if processing is for direct marketing purposes and you object to your personal data being processed for this purpose;

(iv) if you object to the processing of personal data which takes place after a balancing of interests and your interest outweighs ours;

(v) if your personal data has not been processed in accordance with the Data Protection Regulations; or

(vi) if erasure is required to comply with a legal obligation.

Right to restriction

You have the right to request that SI temporarily restrict the processing of your personal data. Such a restriction may be requested in the following cases:

(i) if you believe that the personal data we hold about you is incorrect and that you have requested correction in connection with this;

(iii) when we no longer need your personal data for the purposes of our processing but you need them to establish, exercise or defend a legal claim.

If you have objected to the processing of your personal data, the use of your personal data may be restricted while the investigation is ongoing. In the event of restriction of your personal data, SI will only store your personal data and obtain your consent for further processing.

Right to data portability

Right to object

You have the right to object to our processing of your personal data if the processing is based on SI's legitimate business interests. In such cases, SI will ask you to specify which processing you object to. If you object to any processing, we will only continue to process your personal data if there are legitimate reasons for the processing that outweigh your interests.

Processing of personal data on behalf of SI

Before SI engages any type of supplier to deliver a service that involves personal data that SI processes being processed by the supplier on behalf of SI, SI ensures that only suppliers who have the technical and organizational capacity and level required for the assignment that the supplier is to perform are used.

Information security

All employees are responsible for handling information correctly.

Information assets refer to all information, regardless of whether it is processed manually or automatically and regardless of the form or environment in which it occurs.

Information security is the part of the organization's management and quality process that concerns the management of the business's information.

It is therefore of utmost importance that we handle information security issues in a trust-inspiring and methodical manner.

Information security encompasses all of SI's information assets.

That the right information is available to the right person when it is needed and in a traceable manner
That the information is reliable, accurate and complete
That information is protected from unauthorized access

SI's goal is to meet the requirements for information security in laws, ordinances, and regulations and to work on continuous improvements.