Privacy Policy

WHAT PERSONAL DATA DO WE PROCESS?

Examples of such information are name, contact details, photos, personal ID number, IP address and the contents of e-mails and other communications.

We process personal data within the scope of recruiting staff and engaging consultants. The data we process are the data you provide in your application, e.g. CV, personal statement, school grades and other certificates and data from references.

FOR WHAT PURPOSE?

We process personal data for the purposes performing our assignments, complying with our obligations, recruiting staff and marketing our services, in the manner described in more detail below.

We are data controller for our processing and are responsible for ensuring compliance with applicable data protection legislation.

LEGAL BASIS

We process your personal data when necessary to carry out our assignments in accordance with law, which you have applied for. We also process data when we have a legitimate interest in doing so, for example an interest in communicating with you, to carry out recruitment and marketing and to develop our services. If we were to process your personal data for any purpose which requires your consent under the data protection legislation, we will obtain your consent in advance.

DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your personal data to external companies with whom we collaborate- for example marketing agencies and IT services providers- and/or companies we provide services to. We may also disclose data when we have a legal duty to do so.

Your personal data will always be processed confidentially and protected by appropriate security measures.

STORAGE PERIOD

Personal data are only stored for as long as it is necessary in order to fulfil the purposes of the processing, or for as long as we are required to store them by law. The data are thereafter erased.

PERFORMANCE OF ASSIGNMENTS

We process personal data which we gain access to within the scope of an assignment, for the purposes of administering and performing the assignment and to comply with our legal obligations.

YOUR RIGHTS

IOD is the data controller for the processing of your personal data. You have the following rights in relation to us:

• Right of access – a right to obtain confirmation of and information about the processing of your personal data.
  
  
• Right to rectification – a right to have erroneous data rectified.
  
  
• Right to erasure – a right to have data removed. This right is limited to data which, by law, may only be processed with your consent, if you withdraw consent and oppose the processing.
  
  
• Right to object – a right to object to our processing if it is based on a balancing of interests or direct marketing.
  
  
• Right to restrict processing – a right to request that personal data processing is restricted, for example, if you oppose the accuracy of the data. IOD’s access to the data is restricted while the accuracy of the data is investigated.
  
  
• Right to data portability – a right to request that personal data are transferred from one data controller to another. This right is restricted to data that have supplied to us yourself.
  
  

If you feel that our processing does not comply with data protection legislation, you are also entitled to lodge a complaint with the Swedish Data Protection Authority (the competent supervisory authority), please contact: datainspektionen@datainspektionen.se

CONTACT DETAILS FOR THE DATA CONTROLLER

If you would like further information about how your personal data are processed, or wish to exercise any of the rights listed above, please contact us:

Torkamaan – Inhouse On Demand
Oxtorget 3A
SE-111 57 Stockholm, Sweden
e-mail address:nina@iodlaw.co
The subject line to your e-mail should read “GDPR”