1. Introduction

The personal privacy of the individual and the security of personal data are important for Sandberg Trygg, who is responsible for ensuring that all personal data is processed correctly and in accordance with applicable data protection legislation. This Integrity Policy is a consent document and describes Sandberg Trygg’s processing of personal data. We therefore ask you to carefully read this Integrity Policy before sharing your personal information with us.

2. The scope of application of the Integrity Policy

2.1 Who does the policy apply to?

This privacy policy applies to individuals who are candidates, customers, suppliers and other stakeholders. Different chapters will be relevant to you depending on your relationship with Sandberg Trygg.

2.2 What does the policy apply to?

This Privacy Policy governs how Sandberg Trygg collects and processes personal data for our candidates, customers, suppliers and other stakeholders.

2.3 When does the policy apply?

Positions at Sandberg Trygg are sometimes advertised on external websites, which are not owned or administered by Sandberg Trygg. Sandberg Trygg has not reviewed these websites which include links to Sandberg Trygg’s website. This Integrity Policy does not apply to the processing of personal data that occurs on such websites. Sandberg Trygg is not responsible for personal data processing on websites that are not part of Sandberg Trygg’s website.

2.4 Are you a candidate applying for an advertised position or want to send in a spontaneous application?

In order to appoint a new employee at Sandberg Trygg, we accept applications and save personal data in the current recruitment system. Sandberg Trygg will not actively process and/or collect sensitive personal data (such as information about membership in unions, political opinions, sexual orientation or religious beliefs) or information that is irrelevant to recruitment and hiring. It is therefore important that you as a candidate do not provide such sensitive personal data or information that is irrelevant to the position you are applying for. It is also important that you inform any references that their personal data has been submitted to Sandberg Trygg.

The processing of personal data performed by Sandberg Trygg in order to perform recruitment and/or freelance processes is based on your consent.

You may at any time send an email to legal@sandbergtrygg.se to revoke your consent (read more under “Revocation of consent”).

Data relevant to an individual recruitment or freelance process, such as interview notes and references, are only saved for as long as they are necessary for the process in question and thereafter for up to two years after completion of the recruitment and/or freelance process. The reason is that Sandberg Trygg must be able to exercise their right in the event of a possible discrimination dispute. Sandberg Trygg regularly screens their candidacy system so that it can fulfil its purpose and stay updated.

The personal data Sandberg Trygg collects and processes for the above-mentioned processes includes:

  • First and last name
  • Contact details such as e-mail address, phone number, professional title and home address
  • Information posted in social media such as LinkedIn, which is considered relevant and essential to assessing your professional qualifications
  • IP address and browser settings
  • URLs
  • Gender
  • Year of birth
  • Skills-based suitability for the position
  • Interview notes
  • Test results from test tools used in the selection process
  • Submitted references
  • Correspondence between you and us

2.5 Are you a potential candidate?

In order to contact you as a potential candidate regarding relevant career opportunities, Sandberg Trygg collects personal information through internal networks and external searches of third parties and processes them in our recruitment system.

The processing of personal data is based on Sandberg Trygg’s legitimate interest in being able to find information on you as a potential candidate which we consider relevant to the current recruitment process and to be able to communicate and convey future career opportunities to you.

Personal data is stored in our recruitment system for a limited period of time, but not longer than six months, in order to establish a relationship with you as a candidate with the aim of transitioning the contact to the recruitment process.

The personal data Sandberg Trygg collects and processes for the above-mentioned processes includes:

  • First and last name
  • Contact information such as email address, phone number, professional title and home address
  • URLs to the candidate’s profile with a third party
  • Skills-based suitability for the position
  • Information posted in social media such as LinkedIn, which is considered relevant and essential to assessing your professional qualifications
  • Photography

2.6 Are you a reference?

The processing of the personal data of references is based on Sandberg Trygg’s legitimate interest in being able to contact submitted references in order to perform thorough and well-executed recruitment and freelance processes as possible.

As a routine, Sandberg Trygg will always send out this policy in a first contact with you as a reference so that you can find out how your personal data is being processed.

To protect the integrity of references, Sandberg Trygg will always summarize all the statements of the references and anonymize them in a reference report.

The reference report will be saved for two years in order for Sandberg Trygg to be able to exercise its rights in the case of a possible discrimination dispute.

2.7 Are you a contact person at an existing client?

In order to maintain a business relationship with you as a client regarding Sandberg Trygg’s services and products as well as marketing activities, Sandberg Trygg processes your personal data. The processing of this personal data is based on Sandberg Trygg’s legitimate interest in developing a business relationship with you and Sandberg Trygg’s ability to communicate with you as a contact person. Your personal data is stored on Sandberg Trygg’s platforms for communication and information purposes. Sandberg Trygg will only send mailings deemed to be relevant to your professional role. For each mailing you will be given the opportunity to unsubscribe.

How long personal data is saved depends on the nature of the personal data and its purpose. Sandberg Trygg does not save personal data for a longer period than necessary considering the purpose for which it was collected, unless otherwise required by law.

As a rule, Sandberg Trygg will save personal information contained in client agreements as well as information about business events, data on time reports, participants, assignments, payroll, invoices, declarations, financial statements, during the term of the agreement and subsequently for ten (10 years).

The personal data Sandberg Trygg collects and processes for the above-mentioned processes includes:

  • First and last name
  • Contact information such as email address, phone number, professional title and home address
  • Information on an earlier employer (in those cases where it involves a previous client)
  • Position and areas of responsibility
  • Order history
  • Correspondence between you and a subsidiary
  • Technical information about how you have interacted with the subsidiary
  • IP address and browser settings
  • Information on dietary preferences (in connection with meetings, talks, events etc.)

2.8 Are you a contact person at a supplier?

In order to fulfil our obligations to you as a supplier, Sandberg Trygg handles your personal data as a contact person or that of other employees. The processing of this personal data is based on Sandberg Trygg’s legitimate interest in following up the services provided by the supplier and that Sandberg Trygg is able to communicate with you as a contact person. Your personal data is stored on Sandberg Trygg’s platforms for communication and information purposes.

How long personal data is saved depends on the nature of the personal data and its purpose. Sandberg Trygg does not save personal data for a longer period of time than necessary for the purposes for which they were collected, unless otherwise required by law.

As a rule, Sandberg Trygg will save personal data contained in supplier agreements, as well as information about business events, data in time reports, participants, assignments, payroll, invoices, declarations, financial statements, during the term of the agreement and subsequently for ten (10 years).

The personal data Sandberg Trygg collects and processes for the above-mentioned processes includes:

  • First and last name
  • Contact information such as email address, phone number, professional title and work place address
  • Title and areas of responsibility
  • Order history
  • Correspondence between you and Sandberg Trygg
  • Other information necessary for the provision and follow-up of the service

2.9 Interest notifications via website

Establishing and maintaining business relationships with clients and other stakeholders to develop Sandberg Trygg’s services, products and systems constitutes an important part of Sandberg Trygg’s operations. In order to contact parties interested in Sandberg Trygg’s services and products, and market activities, the company collects your personal data. This personal data is collected from you when you notify your interest via Sandberg Trygg’s website. The data will be stored in Sandberg Trygg’s marketing tools with the aim of establishing a business relationship with you.

Sandberg Trygg will process your personal information until it is no longer necessary to fulfil the above-mentioned purpose or until you request that you no longer want your personal data to be registered, in such a case, it will be deleted without unnecessary delay. Sandberg Trygg has also set up routines to regularly delete contact information that no longer fulfils its purpose.

The personal data Sandberg Trygg collects and processes for the above-mentioned processes includes:

  • First and last name
  • Contact information such as email address and phone number
  • Correspondence between you and Sandberg Trygg
  • Technical information about how you have interacted with Sandberg Trygg
  • IP address and browser settings

Processing of this personal data is based on the consent you submitted in connection with your notification of interest.

3. Responsible for personal data

Sandberg Trygg AB (corporate identity number 556662–1305) is responsible for the processing of your personal data in accordance with applicable legislation.
Address: Box 2208, 403 14 Gothenburg

4. Sandberg Trygg as a personal data officer

Sandberg Trygg is personally responsible for Sandberg Trygg’s personal data but there may be situations where Sandberg Trygg is not the responsible person, but only a personal data officer for third parties. When Sandberg Trygg handles personal data as a personal information officer, it is done on behalf of a third party and Sandberg Trygg is then bound by the instructions Sandberg Trygg has received from the person responsible for the personal data. In these situations, Sandberg Trygg cannot guarantee that such processing will occur in accordance with this Integrity Policy, but Sandberg Trygg will always ensure that processing is in accordance with applicable law.

5. Your rights

As an individual, you have the right to receive, free of charge, once a calendar year, after a written application to Sandberg Trygg to the above address (under “Responsible for Personal Data “) information about which personal data Sandberg Trygg is processing about you and information about the extent and purpose of such processing. You as an individual also have the right to request that we block, delete or correct your personal information at any time. For those cases where there are legal obligations that prevent us from deleting certain information immediately, we may deny your request for deletion. These obligations exist, for example, in accounting legislation. Should the legal obligations prevent your personal data from being deleted, they are marked so that they are not actively used.

In cases where Sandberg Trygg’s processing of personal data is based on your consent, you are always entitled to withdraw your consent at any time. A withdrawal does not affect the legality of the processing that has occurred based on your consent before withdrawal. If you revoke your consent, Sandberg Trygg will no longer process your information unless Sandberg Trygg is legislatively bound to continue processing it.

On revocation of consent, you can contact Sandberg Trygg at any time at legal@sandbergtrygg.se. We will process your request as fast as possible.

You have the right to file a complaint with the Data Inspectorate if you consider that your personal data has been incorrectly handled. To do this contact the Data Protection Inspectorate on phone number 08-657 61 00 or via email datainspektionen@datainspektionen.se

6. Changes to this policy

Sandberg Trygg reserves the right to revise this Integrity Policy from time to time. The date of the latest change is stated at the end of the Integrity Policy. If we make any changes to the Integrity Policy, we will publish these changes on our website. You are therefore recommended to read this Integrity Policy on a regular basis to make note of any changes. If we change the Integrity Policy in a manner that differs significantly from what was stated when your consent was collected, we will notify you of these changes and, if necessary, request a renewal of your consent to Sandberg Trygg’s personal data processing.

7. Contact us

If you have any questions about this Integrity Policy or our use of personal data, please contact us at legal@sandbergtrygg.se.