HaiKom Privacy Policy (GDPR)
2020-01-01
1. Background
HaiKom AB processes personal data in its daily operations. The privacy policy generally applies to the processing of personal data within HaiKom and exists to explain what kind of data HaiKom processes, why and how. Personal data is processed in HaiKom’s support and case management system. The privacy policy applies to employees, suppliers and customers.
2. Personal data and personal data processing
Personal data is all information that can be directly, or indirectly together with other data, linked to a living natural person. Names, telephone numbers, pictures and IP addresses can be personal data. Bookings, behaviors and orders can also be personal information if they, together with other information, can be linked to a person. Measures taken with personal data are personal data processing, such as storage, collection, modification, deletion and dissemination.
2.1 Special categories of personal data
HaiKom does not process specific categories of personal data.
3. Personal data manager
The person responsible for personal data is the person who is responsible for the processing of personal data and decides why and how personal data is processed. In most cases, HaiKom AB is responsible for personal data. In some cases, another party decides which personal data is processed and why. HaiKom is then the personal data assistant and processes personal data on his behalf.
4. Personal data assistants
To be able to deliver its services, HaiKom uses personal data assistants. This means that HaiKom is responsible for personal data and decides which personal data is processed and why, but that we outsource parts of the processing. These are, for example, IT solutions. HaiKom then decides on the treatment and is responsible for it, but takes help from other suppliers to be able to deliver its services. HaiKom always enters into a personal data assistant agreement with personal data assistants to safeguard a high level of protection for all data.
5. HaiKom’s personal data processing
HaiKom and our personal data assistants always have a legal basis for the processing of personal data. Most often it is necessary to fulfill agreements or due to legal requirements.
Below is an overview of HaiKom’s personal data processing. HaiKom strives to process as little personal data as possible.
5.1 Communication and administration
HaiKom processes personal data for administration and communication with customers, employees and suppliers. The purpose is to manage support, employment and administer the business.
Personal information
Name, e-mail address, address, telephone number, bookings.
Legal reason
The processing is necessary to be able to fulfill the agreements and provide our services.
Origin of the data
The information comes from the registered person who is provided to us when booking and entering into a contract.
5.2 Employment conditions
To handle the administration and payment of salaries and contact with employees, HaiKom must process employees’ personal data.
Personal information
Name, e-mail address, address, telephone number, any relatives, account number, employer certificate, salary specifications, absence.
Control information, income information.
Legal reason
The treatment is necessary to be able to fulfill employment contracts and to administer and pay salaries.
As an employer, HaiKom has a legal obligation to provide the Swedish Tax Agency with employees’ control information.
Origin of the data
The information comes from the registered person himself and is provided to us at the time of entering into the contract or during the contractual relationship. Salary specifications are generated in HaiKom’s salary system.
5.3 Marketing
HaiKom uses personal data to market its services in Digital channels and through invitations and information.
Personal information
Names, email addresses.
Legal reason
The treatment takes place after consent or a balance of interests.
Origin of the data
From those who registered themselves through registration for courses or newsletters.
5.4 Payments
To handle payments, HaiKom processes personal data.
Personal information
Invoice number, name, e-mail address, address, telephone number, amount, time of the transaction, details of the order.
Legal reason
To trade in services and goods and live up to agreements by getting paid or insuring their own payment, HaiKom needs to handle personal data linked to payments.
Origin of the data
The information comes from the registrants themselves. newsletters.
6. Recipients that HaiKom can share information with
6.1 Service providers
To be able to provide its services, HaiKom enlists the help of various providers for, among other things, IT solutions such as networks, storage services and e-mail services. Suppliers may only process personal data under HaiKom’s express instructions and may not process the data for their own purposes. All are also bound by law and agreements to protect personal data.
6.2 Other recipients
In some cases, HaiKom may also share information with other recipients, primarily authorities due to legal requirements or in connection with legal proceedings.
7. Technical and organizational measures
HaiKom cares about the privacy of customers and employees and takes appropriate technical and organizational security measures to protect personal data from unauthorized access, alteration, dissemination or destruction. Among other things, there are routines and access restrictions that prevent unauthorized access.
8. Where does HaiKom process personal data?
HaiKom’s goal is for all personal data to be processed within the EU area.
9. How long is personal data stored?
HaiKom processes personal data as long as there is a relationship with the data subject and for some time thereafter, as long as there is a legal basis. If there is no longer a reason to process personal data, they will be deleted.
10. Rights
HaiKom would like to remind you of the rights GDPR gives people who have their personal data processed.
10.1 Access to personal data
As a registered user, you have the right to request confirmation of whether we process personal data about you or not. If we do, you have the right to see what information we process about you through a register extract.
10.2 Amendment
If information is incorrect or incomplete, you have the right to request that it be corrected.
10.3 Withdraw consent
If we process your personal data with consent as a legal basis for the processing, you have the right to withdraw the consent with future effect at any time.
10.4 Oppose treatment for direct marketing
Registered persons have the right to oppose the processing of personal data for direct marketing. This is most easily done by unsubscribing from mailings by clicking on the unsubscribing link in the mailing or contacting us.
10.5 Right to complain to the supervisory authority
The data subject also has the right to contact the supervisory authority directly to complain. The supervisory authority must then investigate what has happened.
10.6 Deletion
Registered persons have the right to request and in certain circumstances have their personal data deleted. An exception is if we are required by law to preserve the information.
10.7 Limitation of treatment
Registered persons have the right to request that the processing of their personal data be restricted.
10.8 Data portability
Registered persons also have the right to receive copies of their personal data in a structured, generally used and machine-readable format. This right only covers personal data that the data subject himself has provided to us and the legal basis is either consent or the existence of an agreement.
To protect your rights or for questions, contact HaiKom.
Personal data manager: Erik Rise
Postal: HaiKom AB, Svartensgatan 8A, 116 20 Stockholm
E-mail: erik.rise@haikom.se