Privacy Notice
Privacy Notice - Information concerning Processing of Personal Data
Videberg Kraft AB will always aim to protect your personal data in an appropriate manner with adherence to this Privacy Notice and applicable Data Protection Privacy Laws. Videberg Kraft AB, Reg. No. 559517-0571 (“Videberg”), is regarded the controller for the personal data we process and as well as the processing’s described in this Privacy Notice. This means that Videberg decides the purpose and the means for the described processing of your personal data.
Below, you will find information on what type of personal data we collect about you and how we process such data and your rights as an individual.
What type of information we collect or process
Videberg mainly collect and process personal data that you provided to us, or our business partners, in connection with your business relations with us, such as your name, title and contact details. Personal data may also from time-to-time be collected from publicly available sources, such as company websites, business publications, trade fairs and similar including information that you have provided voluntarily or filled in on one of our websites.
When you request to receive newsletters, marketing and promotional material, general information or wish to connect with us online, we may (depending on type of contact you request) collect e.g. the following personally identifiable information about you: contact details (e-mail, address, phone, professional title or role), company name and language preferences. If you attend an event organized by Videberg, we might ask for your special dietary requests.
Job applicants
Videberg also collects personal data which you voluntarily submit when applying for a job; name, contact details, CV’s, resumes and cover letters. We may also collect data through applications from a LinkedIn account and we may supplement such information from other public sources such as search-engines, registers and social media.
Why do we handle personal data and what legal basis do we use?
Personal data is processed in order for us to conduct our business operations and to maintain the relationship with our business contacts working with or for our partners, customers and suppliers. Personal data is also processed for direct marketing purposes, to send out press releases, invitations to seminars and similar events and to follow up on leads or information provided by you.
When connecting with us by general contact requests, by registration as a recipient of our subscription services, or for other business purposes, e.g. to attend an event organized by Videberg, to develop our business relationship with you as a representative for our partners, customers and suppliers or to develop joint business interests, we process your personal data based on our legitimate interest or consent. When basing the processing of your personal data on our legitimate interest, we have undertaken a legitimate interest assessment, where the needs, expectations, rights and freedoms of all parties have been considered. Before relying on legitimate interest, we have made sure that our interests are compelling enough and will not cause any unwarranted harm. We have a strong interest in being able to conduct and maintain our business with you and the company or organization that you represent.
We might use your information for marketing and market research purposes. This processing is based on our legitimate interest to market our business. All of our marketing communications will include the option to unsubscribe from us contacting you again.
Job applicants
If you apply for a job, we rely on our legitimate interest to process your application and the personal data you submit, and your consent to store your application data and to contact you for future job opportunities if you decide that is something you want after a job application procedure has been concluded.
Third parties and transfer of your personal data
We will not share your personal data with third parties except in the following circumstances;
if we have obtained your consent to do so,
in order to comply with legal obligations or defending against legal claims,
we engage a partner who performs services on our behalf, or
it is otherwise permitted by law.
We might share your personal data with; other legal entities or suppliers we work with that provide certain services to Videberg (including IT systems providers), our shareholders and other companies within the same group of companies as Videberg, and/or any other entity that we are obligated by law, decision from public authorities or judgement to share your personal data with.
We generally only process your personal information within the EU/EEA. Should personal data be transferred outside EU/EEA, such transfers shall be in accordance with applicable Data Protection Laws and require the receiving entity, if located in a country outside EU/EEA, to have adequate levels of data protection and safeguards in place. We aim to only transfer and process personal data in countries where an adequacy decision has been made. This means that the legislative framework in the third country provides the same level of legal protection as a country within the EU/EEA. To learn more about countries with adequacy decision, please see the website of the Swedish Authority for Privacy Protection There may be occasions where we need to process personal data outside of such countries. In these instances, we have undertaken a privacy impact assessment and transfer impact assessment to identify appropriate additional measures to implement, prior to establishing data processing agreements including approved standard contractual clauses. In the event that the contractual and organizational measures are still inadequate, we will seek your consent to undertake the proposed processing.
How long do we store your personal data?
We retain your personal data in accordance with our obligations under applicable law. We only retain data for as long as it is relevant to initiate, maintain or administer our business relationship with you, the company or organization that you represent.
You may at any time unsubscribe from services you have requested from us, including our subscription services and/or receiving marketing material, as well as further contacts from Videberg and its partners. If you unsubscribe, your details will no longer be saved for this purpose.
Job applicants
Personal data provided in a job application or for future job opportunities is processed and stored based on the candidate’s consent. The consent is valid for six months from the date it is given. After this period, the candidate is given the opportunity to renew consent for continued storage. If the consent is not renewed, the personal data will be deleted within two weeks after the consent period has expired. The candidate may withdraw their consent at any time, in which case the personal data will be deleted.
Your Rights related to our processing of your personal data
You have a number of rights given by applicable personal data legislation. These are as follows:
Your right of access – You have the right to ask us for copies of your personal information that we process about you. Through this copy you will be able to understand which of your personal data we have and process. The right of access is applicable when a record contains information where an individual can be identified, and the information is about them. This means that records that are accessible to you will have the personal data about other people redacted where appropriate, in order to protect their right to privacy. Your personal data will be redacted if someone else requests access to a record containing your personal data. Legislation provides other exemptions that may be applicable, such as records where legal privilege needs to be observed or there is an obligation of confidentiality, in specific circumstances. Any exemption applied will have a relevant legal basis and will be explained to you were necessary.
For more information about the right of access, please see the webpage of the Swedish Authority for Privacy Protection.
Your right to be informed – You have the right to be informed of how we process your personal data. This Privacy Notice is an initial means of informing you about the processing of your personal data. Additional methods of keeping you informed include through FAQs, contractual agreements and through discussions – if you have a question about how we are processing your personal data, you can contact us by writing to privacy@videbergkraft.se.
For more information about the right to be informed, please see the webpage of the Swedish Authority for Privacy Protection.
Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. This right applies in conjunction with one of the principles of data protection. Any request to rectify your personal data will also be transferred and actioned by any processor with whom your personal data has been shared. This process is managed by us and will not require any additional action from you for your right to be exercised in full.
For more information about the right to rectification, please see the webpage of the Swedish Authority for Privacy Protection.
Your right to erasure – You have the right to ask us to erase your personal information when the information is no longer necessary to fulfil the purpose of processing the information or if you retract your consent. Videberg is obliged to keep records in accordance with our legal obligations. As such, Videberg may not be able to delete every record that is processed about you, however this will be explained where relevant. Any request to be forgotten will also be managed by Videberg with any processor that is processing your personal data on our behalf.
For more information about the right to erasure, please see the webpage of the Swedish Authority for Privacy Protection.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances such as if they are not relevant to fulfil our legal obligations.
For more information about the right to restriction of processing, please see the webpage of the Swedish Authority for Privacy Protection.
Your right to object to processing – You have the right to object to the processing of your personal data. The right can be invoked when the legal basis is Legitimate Interest, including profiling. If an objection is made, Videberg must show compelling Legitimate Interests to continue processing personal data for that specific purpose.
For more information about the right to object, please see the webpage of the Swedish Authority for Privacy Protection.
Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you. This enables you to transfer it in a machine-readable format to another recipient. The right to data portability applies to personal data that is processed based on your consent or to perform a contract. It applies only to such personal data that you have provided Videberg with yourself.
For more information about the right to data portability, please see the webpage of the Swedish Authority for Privacy Protection.
Your right to withdraw consent – You have the right to withdraw consent where this is the lawful basis established for the processing of your personal data i.e. when collected for certain marketing activities.
For more information about the right to withdraw consent, please see the webpage of the Swedish Authority for Privacy Protection.
Please note, that these rights are not absolute, and we may have a right to deny your request where we have a compelling interest to do so.
Before responding to a request, we have a legitimate interest to ensure the authenticity of your request and identity. If we require further information to verify your identity, we will inform you after the request has been made.
Your personal data will not be subject to automated decision-making.
If you believe we process your personal information in violation of applicable Data Protection laws, please raise your concerns with us. You may also file a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), who is the relevant supervising authority. You may contact IMY at imy@imy.se. Further instructions can be found on the Swedish Authority for Privacy Protection website, www.imy.se.
If this isn’t also your local data protection authority, you can contact your local data protection authority who will advise as to how best to proceed. In some instances, such as within the EEA, you can report to your local data protection authority and have no additional need to communicate with IMY.
Please note, that there is always a risk of disclosing personal data, regardless of if it is disclosed personally, by phone or over the internet, and that no technology system can be completely protected from intrusion. However, Videberg always makes every effort to take appropriate technical measures to prevent and minimize the risks of unauthorized use, access to, improper use or corruption of your personal data.
Miscellaneous
This information is subject to regular review and Videberg reserves the right to revise the content of this information from time to time. If any notable changes are made, that may affect the processing of your personal data, we will inform you of the change.
If any part herein is inconsistent with applicable law, not applicable or for some reason cannot be maintained, other parts will not be affected in any way.
Contact us
If you have any questions or comments about the content of this information or if you want to rely on any of your rights as described above, you are welcome to contact us by sending an email to privacy@videbergkraft.se.
