Information for contact persons at customers, suppliers, partners and authorities about Kilenkrysset's processing of personal data
Kilenkrysset is committed to protecting your personal privacy
Kilenkrysset is committed to protecting your privacy
The Kilenkrysset group of companies is committed to protecting your privacy. We therefore work actively to always protect your personal data in the best possible way in accordance with applicable legislation.
Who is the data controller for the processing of your personal data?
The company within the Kilenkrysset group that is named as the contracting party, client or buyer in the request for tender, tender, order or agreement that led you here is the data controller for the processing of your personal data described in this information notice.
The company that is the data controller for the processing as set out above is hereinafter referred to as “Kilenkrysset”, “we” or “us”.
What personal data about you do we process?
We may obtain data about you from the partner that is your employer or principal and with which we have a contractual relationship. We may also obtain data about you from the public (e.g. in the case of recommendations ahead of new contractual relationships). The categories of data we obtain about you may, for example, be:
- name, telephone number, email address,
- employer or principal,
- copies of identity documents (for board members/CEO/specially authorised signatories),
- title, areas of responsibility and access rights,
- details of any certification,
- details of fees, and
- identification data in IT systems.
We may also process corresponding data that you or your employer or principal provide to us.
Why does Kilenkrysset process your personal data?
Purpose of Kilenkrysset's processing Legal basis | Legal basis |
Negotiate and perform agreements with our partners (including your employer or principal) and customers | Legitimate interest and contractual obligation |
Communicate with our suppliers, customers and other partners | Legitimate interest and contractual obligation |
Document, administer and follow up the history of the contractual relationship with, among others, your employer or principal | Legitimate interest |
Carry out due diligence ahead of company or property acquisitions | Legitimate interest |
Apply for, obtain and be able to present the various permits necessary for the business, for example building permits | Legitimate interest and legal obligation |
Handle complaints and provide customer service | Legitimate interest |
Administration of quotations and invoicing | Legitimate interest and contractual obligation |
Plan, organise and develop the business | Legitimate interest |
Marketing of our own products and services | Legitimate interest |
Document the business, for example goodwill, security, etc. | Legitimate interest and legal obligation |
Document the administration of insurance matters | Legitimate interest and legal obligation |
System administration | Legitimate interest |
Document fulfilment of the requirements of relevant certifications and demonstrate regulatory compliance | Legitimate interest and legal obligation |
Fulfil bookkeeping obligations | Legal obligation |
Fulfil logistical purposes and allocate resources, produce statistics and supporting data for invoicing | Legitimate interest |
Security purposes | Legitimate interest and legal obligation |
Report and handle incidents, for example accidents or vandalism | Legitimate interest and legal obligation, and to establish, exercise or defend legal claims (for the processing of special categories of personal data) |
Register new company officers with the Swedish Companies Registration Office (Bolagsverket) (in the case of company acquisitions) | Legitimate interest and legal obligation |
Establish, exercise or defend legal claims | Legitimate interest |
To whom may we disclose your personal data?
Kilenkrysset may disclose your personal data to other companies within the Kilenkrysset group, our employees and consultants, our suppliers of IT services, computer systems and financial and legal services, other partners, insurance companies, banks, and to authorities and other public bodies.
As a rule, we do not process your personal data outside the EU/EEA. Where your personal data is processed outside the EU/EEA, such processing always takes place in accordance with applicable law and in compliance with the prescribed safeguards.
How long do we process your personal data?
As a general rule, Kilenkrysset processes your personal data for as long as we have an agreement with the customer, supplier or partner where you work, and for three years thereafter. Certain personal data may be retained for a longer or shorter period depending on why the personal data is processed. Personal data processed to manage our bookkeeping in accordance with the law is retained for seven years. We may retain your personal data for up to eleven years (or for the duration of any dispute) in order to establish, exercise or defend ourselves against legal claims. In order to establish, exercise or defend ourselves against environmental law claims, we may process your personal data for a longer period.
Your rights
You have the right to access the personal data about you that Kilenkrysset processes. You also have the right to request erasure, rectification or restriction of the processing of your personal data, to object to Kilenkrysset's processing of your personal data and to receive your personal data in a structured, commonly used and machine-readable format for transfer to another provider (data portability). Contact us if you wish to exercise any of these rights (see above for contact details).
You always have the right to receive more detailed information about personal data processing carried out on the basis of a balancing of interests (see below) and to object to such processing.
You always have the right to unsubscribe from direct marketing.
If you have concerns about Kilenkrysset's processing of your personal data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Do not hesitate to ask
If you have any questions or comments about Kilenkrysset's processing of your personal data, do not hesitate to contact Kilenkrysset by post at Kilenkrysset Aktiebolag, Box 554, 645 25 Strängnäs, or by email at gdpr@kilenkrysset.se.
Kilenkrysset
