Personal data policy SYNEA, last updated 2024-05-29

Your privacy is important to us and we are responsible for the personal information you provide us with. This policy describes how we process, store and handle your personal data partly when you are a customer with us, partly when you are looking for work with us.

It also describes your rights and how you can enforce them. It is important that you read and understand the privacy policy and feel secure in our processing of your personal data.

Responsible for handling personal data

SYNEA is the personal data controller for the processing of personal data described in this policy.
If you have any questions or want to invoke any of your rights, you can reach us at:

E-mail: hej@synea.se
Address: Hängpilsgatan 5
Postal address: 426 77 Västra Frölunda
Telephone number: 072 315 24 47

How do we get access to the personal data?

In addition to the information you provide to us yourself, or that we collect from you in connection with you becoming a customer with us, contacting us or applying for employment with us, we may also collect personal data from someone else, so-called third parties . The information we collect from third parties is as follows:

  • Address information from public records to be sure we have the correct address information for you.
  • Information on creditworthiness from credit rating agencies, banks or information companies.

We also collect open data, data published on the internet/social media.

What personal data do we process?

We may process the following categories of personal data:

  • Contact details such as name, address, e-mail address, telephone number
  • Identity information such as social security number, organization number
  • Financial data such as bank account numbers and other bank-related data
  • Work-related information such as employment information, applications, CV, cover letter

How do we process your personal data?

We process your personal data primarily to fulfill our obligations to you. Our starting point is not to process more personal data than is necessary for the purpose, and we always strive to use the least privacy-sensitive data.

Below is information on which personal data processing is available.

Providing and fulfilling agreements on services/goods
We process personal data in order to fulfill our agreement and provide services/goods to you. We process personal data for our administration and invoicing of the services/goods, for credit information purposes, to handle complaints and claims, to help you with questions about your service/goods when you contact our customer service and otherwise to safeguard our rights and fulfill our obligations under our agreement with you. Personal data we handle in this processing are contact data, identity-related personal data, and financial personal data.

Accounting

We process your personal data in order to be able to fulfill the statutory obligations incumbent upon us, e.g. the Accounting Act’s requirements for archiving accounting material. Personal data we handle in this processing are contact data, identity-related personal data, and financial personal data.

Marketing

We process personal data to enable the marketing of goods/services to you and to enable the sending of newsletters for the services/goods you are interested in in general as well as information about the company. Furthermore, also enables the invitation to events in the area of ​​your interest. Personal data we handle in this process are contact details and interests related to our services/goods.

Prior to employment

We process your personal data in connection with applying for vacant positions or registering your interest in employment with us. The company processes your personal data to assess your application and carry out the recruitment process. Personal data we handle in this process are contact details and identity-related personal data.

What legal basis do we have for our personal data processing?

We process your personal data in order to administer and provide the agreed service/goods. When it comes to personal data processing to fulfill requirements such as the Accounting Act or tax legislation, the legal basis for processing is legal obligation.

For marketing and pre-employment treatments, the legal basis is our legitimate interest. This means that we consider that our interests in processing your personal data for these purposes listed above outweigh the breach of privacy that you are exposed to as a result of the processing. This assessment has been made specifically taking into account that we believe that the treatment will be beneficial to you.

As regards personal data in connection with job applications that have no connection with a recruitment process or completed recruitment process, we will save your personal data for possible future recruitment needs only if you have specifically agreed to this.

How long do we store your personal data?

We save your personal data as long as you are a customer with us and up to 12 months thereafter. Some personal data is saved for a longer period of time, for example to fulfill requirements from the Accounting Act and tax legislation. When the purposes of the treatments have been fulfilled and the storage period has expired, your personal data is securely deleted or anonymized so that it can no longer be linked to you.

Especially about cookies

A cookie is a small text-based data file that a web server asks to save in your browser. By generally sending the content of the cookie back with each request to the relevant website, it is possible for the server to keep track of the visitor’s preferences, behavior or identity (to the extent known). We use the following cookies on our website:

  • Session cookies (a temporary cookie that expires when you close your browser or device).
  • Persistent cookies (cookies that remain on your computer until you delete them or they expire).
  • Third-party cookies (cookies set by a third-party website. We use these primarily for analyses, such as Google Analytics).

The cookies we use aim to improve the services we offer. Cookies make the website have better functionality and make it easier for you as a user. We also use cookies to collect and analyze behavioral data based on your use of the website and services in order to improve the user experience and enable personalized communication and messages to you as a user. We also use cookies to be able to direct relevant marketing to you.

How can you manage cookies?

You can change the settings for the use and scope of cookies in your browser at any time. You can then choose to block all unnecessary cookies or only accept certain cookies. If you choose to block cookies, it may mean that certain services cannot be used or that the website does not function correctly in all respects. The footer on the website www.synea.se contains a link to manage cookies.

Who do we share personal data with?

Our starting point is not to disclose the data subject’s personal data to third parties if the data subject has not consented to it or if it is not necessary to fulfill our obligations according to agreement or law. In cases where we disclose personal data to third parties, we ensure that the personal data is processed in a reassuring manner.

Service providers
In order to fulfill the purposes of our processing of your personal data and to fulfill the requirements to which we are obliged as a company, we share personal data with companies that provide services to us. These companies may only process personal data according to the personal data processing agreement signed with the company and according to the instructions they receive in connection with this. They may not use your personal data for their own purposes and they are obliged by law and contract to protect your personal data. A service provider may not share your personal data with third parties or subcontractors without our approval.

Agencies
We may provide necessary information to authorities if we are required by law to do so. This information may include your personal data. In connection with a legal dispute, it may also be relevant to transfer information that may contain personal data to other parties to the dispute.

How is your personal data protected?

We protect your personal data through a combination of technical and organizational solutions. We have taken special security measures to protect your personal data against illegal or unauthorized access. We develop routines and working methods to ensure that your personal data is handled securely. Only the people who actually need to process your personal data for their work tasks have access to it.

Your rights

As registered with us, you have the following rights:

  • You have the right to request a register extract where you can see what personal data we have about you.
  • You have the right to request correction if we have incorrect or incomplete personal data registered about you.
  • You have the right to have your personal data deleted under these conditions:
    – The data is no longer needed for the purpose for which it was collected.
    – If the data is saved with your consent and you revoke the consent.
    – If the processing is based on a balancing of interests and there are no justified reasons that outweigh your interest.
    – If the personal data has been processed illegally.
    – If deletion is required to fulfill a legal obligation.
    – If you object to processing for direct marketing purposes.

The right to have personal data deleted does not apply if we are obliged by law (e.g. the Accounting Act) to keep the data.

  • You have the right to data portability (the right to have your personal data moved) provided that the legal basis is consent or agreement and what you can obtain is personal data that concerns you, that you yourself provided or that was generated by your actions/activities.
  • You have the right to request that the processing of your personal data be restricted. However, if you request a restriction on your processing of personal data, it may mean that we cannot fulfill our possible obligations towards you during the time that the restriction is in effect.
  • You have the right to object to personal data processing that has a balancing of interests as a legal basis. In order for us to be able to continue with the current processing, we need to be able to show a compelling legitimate reason for the processing that outweighs your interests, rights or freedoms. Otherwise, we may only process the data to establish, exercise or defend legal claims.
  • You always have the right to object to your personal data being used for direct marketing. If an objection is made to direct marketing, the personal data may no longer be processed for such purposes.

If you are not satisfied with the answer you have received from us, you have the right to lodge a complaint with the supervisory authority.