Privacy policy

For CoreIT AB, personal integrity is important and you must feel safe with how your personal data is processed by us. We therefore always strive for a high level of protection for your personal data. In this privacy policy, we provide information about how we collect and use your personal data. We also describe your rights and how you can exercise them.

What is personal data and what is processing of personal data?

Any information that can be directly or indirectly traced to a natural person who is alive is personal data. This includes names, email addresses and social security numbers, but also pictures and usernames in digital media.

Processing of personal data is any operation that is performed on personal data. This includes, for example, collection, registration, reading, structuring, storage, processing, transfer and deletion, etc. In some cases, actions that take place outside IT systems can also be regarded as processing. This applies when personal data are included in registers.

Responsibility for personal data

All processing of personal data takes place in accordance with applicable legislation and for the processing that takes place, CoreIT AB is the data controller (Org. No.: 556724-9429, Box 407, 891 28 Örnsköldsvik, Phone: +46 (0)660 729 00, E-mail: info@coreit.se).

When registering and using CoreIT’s websites, digital platforms, products and services, you as a user are also responsible for the information you provide to CoreIT. If personal data is provided for a third party, you as a user are responsible for ensuring that the third party has been informed of CoreIT’s Privacy Policy and has consented to registration. CoreIT also reserves the right, if necessary or if required by law, to inform third parties about CoreIT’s handling of their personal data.

What personal data is processed?

The personal data CoreIT processes and collects about you in your capacity as a customer contact person or as a user of our digital platforms, functions and services is mainly

• Name and social security number or other identification number
• Contact information, e.g. address, phone number, email
• Business affiliation
• IP address for information about your use of the website
• Account details

Personal data will also be processed at various events and seminars and, if necessary, data on allergies or diet will be stored. Sometimes, additional information may be processed but only where you can be considered to have disclosed the information yourself. In addition, we may collect certain personal data from external sources for credit checks and address updates.

From which sources do we collect personal data?

Your personal data is collected, for example, when you enter your details when using features and ordering services or products from us, contacting us on various matters or signing up to receive newsletters, attending seminars and other events. Data may also be collected about you as an employee of the company you work for when they purchase our services or when they are already a customer.

Use of personal data

We process your personal data for the purpose of providing the services and products you use. We will also process your personal data to maintain and administer our relationship with you and, where applicable, to administer the contract with you or with your employer.

Depending on the website, service or feature you use, we may process your personal data for the following purposes and legal basis:

• Customer orders, service and support
  In order to provide you as our customer with a personalized and fast service, we need to register and administer your personal data in order, case and time management systems. We can also use the information for contracting, time reporting and invoicing for current assignments and when checking order history when purchasing via the webshop. The legal basis for processing is contractual.
• Use of our websites/services
  When you use and register for forms on our e-services, information is collected in our systems. When you browse any of our websites, we may automatically collect information about your visits, your use of them and your computer in order to improve your experience of our services to you. We sometimes link to other third party pages on our websites which have their own privacy policies and for which we cannot take responsibility. The legal basis for processing is based on a balance of interests.
• Delivery of product/service
  When you order a service or buy a product on our webshop, we need the right information about you. This is done for identification and to be able to send you a confirmation and to be able to deliver and invoice the service/product you have ordered in a secure manner. The legal basis for processing in the case of delivery is contractual and in the case of invoicing, processing is based on a legal obligation.
• Newsletter
  We would like to inform you about what we or our partners offer, what is going on with us or invite you to our events. This can be done via e.g. newsletters to your e-mail. You can unsubscribe from our newsletters at any time by clicking on “Unsubscribe me” in the footer of all newsletters. The legal basis for processing is based on a balance of interests.
• Surveys
  We occasionally conduct surveys to find out what you think about us, mainly by sending you emails. You can choose to unsubscribe from our mailing list at any time by clicking on “Unsubscribe me” in the footer of any survey mailing. The legal basis for processing is based on a balance of interests.
• Email
  If you email us or send information to us by other means, that information is stored by us. We transfer important or sensitive data to other systems and regularly delete our email archives. The legal basis for processing is based on a balance of interests.

How long do we keep your personal data?

We will retain your data for as long as necessary to fulfill the above purposes or as long as we are required to do so by law. We have developed deletion procedures to ensure that personal data is not stored longer than is necessary for the specific purpose. The length of storage varies depending on the purpose of the processing and how long the data is necessary for the purpose. After that, we will securely delete or de-identify your data so that it can no longer be linked to you, for example, data on special diets will be deleted as soon as the event/seminar is over. However, some data needs to be kept for at least seven years due to legal obligations such as accounting law.

Access to personal data

The information you provide to CoreIT may be shared within the CoreIT group and with partners in order to fulfill the above-mentioned purposes or in the event of legal requirements, legal investigations or court decisions. In some situations, it is also necessary for us to share personal data with third parties such as authorities or credit companies. These are considered independent data controllers and that organization’s privacy policy then applies to their personal data processing.

We never pass on, sell or exchange your personal data for marketing purposes to third parties outside CoreIT.

In cases where you, as a contact person at a customer located in a third country, provide CoreIT with personal data, this data may be processed outside the EU/EEA, but only with the agreement of you as the data subject and in accordance with the agreement with the customer. When personal data is processed outside the EU/EEA, the level of protection is guaranteed, for example, by a decision from the European Commission that the country in question ensures an adequate level of protection or by the use of so-called appropriate safeguards. These include the Privacy Shield, the use of Binding Corporate Rules and various contractual solutions. Standardized model clauses for data transfers, adopted by the European Commission, are also available on the European Commission website.

Protection of personal data

CoreIT has taken the necessary technical and organizational measures to protect your data from loss, manipulation and unauthorized access. We also continuously adapt our security measures in line with developments and advances in the technical field.

Your rights

Under current legislation, you have the right to request information about the personal data we hold about you at any time. If your data is inaccurate, incomplete or irrelevant, you can request that it be corrected or deleted. However, in some cases we may not delete some of your data if there is a legal requirement to retain it, such as accounting rules, or where there are other legitimate reasons why the data needs to be kept, such as unpaid debts.

You also have the right to limit the amount of personal data we process and have the right to data portability (transfer of personal data). A prerequisite for data portability is that the transfer is technically feasible and can be automated. You can withdraw your consent to allow us to use your data for marketing purposes at any time.

If you have any questions about CoreIT’s handling of personal data, register extracts, rectification or restriction of data, or if you object to purposes such as marketing mailings, please contact CoreIT’s data controller by sending a letter to CoreIT’s customer service, Box 407, 891 28 Örnsköldsvik, Sweden or by email, info@coreit.se.

Supervisory authority

The Swedish Data Protection Authority is the supervisory authority responsible for monitoring the application of data protection legislation. If you believe that we are acting improperly, you have the right to contact the DPA, see contact details at https://www.imy.se/

How do we use cookies?

According to the Electronic Communications Act, anyone visiting a website that uses cookies must be informed that the website contains cookies and the purpose of the use of cookies. Visitors must also give their consent to the use of cookies.

A cookie is a small text file that the website you are visiting requests to be stored on your computer. Cookies are used on many websites to give a visitor access to various features.

We also use Google Analytics, a network analysis service provided by Google Inc. These are third-party cookies that we use to improve our services and to provide a statistical evaluation of our visitors’ traffic. It is not possible to trace the identity of individuals using these services. The information generated in this way may be transferred to a server abroad and stored there. You can prevent cookies from being stored by adjusting the settings in your browser. For more information, see Google Analytics Privacy Policy.

Links

CoreIT websites may contain links to other websites over which we have no control. We are not responsible for the privacy practices or the content of these sites, but we provide these links to make it easier for our visitors to find more information on specific topics.

Contact us

If you have any questions or concerns, you are always welcome to contact us.

CoreIT AB
Org.Nr: 556724-9429
Box 407
891 28 Örnsköldsvik
Phone: +46 (0)660 729 00
E-mail: info@coreit.se