Integrity Policy

The General Data Protection Regulation (GDPR) regulates how we treat your personal data. It is important to us that you are aware of how we collect, use and protect your personal information. We have therefore listed below the basic principles to clarify this.

Data Controller Responsibilities - Our Basic Integrity Principles

North Sweden Cleantech protects your personal privacy and personal data. We strive for a high level of data protection and comply with applicable laws, industry rules and other related standards that exist to protect individual’s integrity and rights.

Kompetensspridning i Umeå AB is the legal entity responsible for processing your personal data. We are responsible for your information (eg name, birthday, contact details) and handle them in accordance with applicable data protection laws.

You are welcome to contact us if you have questions about privacy and data protection by e-mail: dataskydd.ukf@umea.se.

Collection of personal data

When you are in contact with us, you may provide us with information about yourself or your business that is considered to be personal data under data protection legislation, for example, if you:

• Visit or register on any of our websites and through our use of cookies.
• Sign contracts with us for services (data collection via e-services, eg web forms).
• Leave personal information in connection with events and exhibitions, etc.
• Provide information about yourself via communication with us in other ways, for example; in writing/email, phone calls or social media.
• Provide information about your business for publication on any of our websites as well as in printed material.

Information that we collect in connection with the above activities may include, for example:

Your name, social security number, billing address and property address, contact information, all necessary billing information (if applicable) and any further information you provide.

From which sources do we collect your personal information

In addition to personal data that you submit to us, your information may be updated to the population registry at the Swedish Tax Agency (Skatteverket). This may be necessary to ensure that the information is accurate and for the completion of agreements.

What we use your personal information for (intention and purpose)

In general, we treat (for example: record and store) the information you provided to us if they are relevant to fulfil, improve, and adapt our commitments and services, or to communicate with you in a postal or digital manner.

Examples of how your personal information may be used (if applicable):

• To process job applications when you applied for a position or submitted a notice of interest report To register as a partner For the preparation or administration of the services for which we signed an agreement with you, for example, to activate and perform invoicing.
• To ensure your identity.
• To communicate with you through different channels, including providing customer service; if you submitted a request or customer point of view, to send service-related messages, operation information, confirmations and updates.
• For some statistics (such as statistics for Statistics Sweden SCB or internal statistics).
• For information purposes (read more in Marketing further down the text).
• For evaluation and quality assurance in order to evaluate, develop and improve our services and offers For summaries, if you participate in a survey or otherwise provide feedback about our services.

Contact us via social media
When you contact us via social media, such as Facebook, information and personal data is always transferred to third parties (i.e. the company / organization that operates the social media you use).

Unfortunately, we cannot regulate this, but we are happy to answer your questions in social media. If you do not want third parties to collect the information you send to us, we recommend that you contact us by phone at +4690-16 10 00.

How we handle your social security number
We will only process your personal identification number when it is clearly motivated for the purpose, necessary for secure identification, or if there is any other reasonable reason. We always minimize the use of your social security number as much as possible.

If you have a protected identity or want to be anonymous
If you want to perform a service that requires login or identification (such as My Pages), you cannot have a protected identity or be anonymous. By identifying yourself, the system knows that it is you. If you have a protected identity, it is better that you turn to us personally. We have special safety practices for handling protected personal data and therefore it is important that you always state that you have a protected identity when contacting us so that we can ensure that the procedures are followed.

If you want to leave a point of view or contact us anonymously you cannot provide any personal information (such as an email) because these data are registered and become what we call public act.

Who can we share your personal information with
Personal data may be handed over to other companies within Umeå Municipality Concern or to collaboration partners (e.g. service providers and partners). This may be necessary when a service is delivered from us. Further examples are service providers that help us with, for example, marketing (print and distribution, media and advertising agencies) and IT services (companies that handle the necessary operations, technical support and maintenance of our IT solutions).

If such disclosure of information is done to someone who assist us (such as Data Processors), Kompetensspridning provides instructions on how the receiving party will process personal data and privacy. If your personal information is shared with a company that is an independent Data Controller, the recipient company's integrity policy applies.

Personal data are not regularly provided to companies in non-EU or EEA countries. If so, we promise that we will take all reasonable legal, technical and organizational measures to ensure that your data is processed safely.

Kompetensspridning is covered by the publicity principle and information in public documents may be disclosed to the person requesting it, unless the information is covered by confidentiality.

Marketing
Your personal information may be used for the sending of information material, invitation to activities, and promotion via website and printed material.

Consent Manager
We have integrated the consent management tool "consentmanager" (www.consentmanager.net) from consentmanager AB (Håltgelvågen 1b, 72348 Västerås, Sweden, info@consentmanager.net) on our website to obtain consent for data processing and use of cookies or comparable functions. With the help of "consentmanager" you have the possibility to give your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, measurement and personalized advertising. With the help of “consentmanager” you can grant or reject your consent for all functions or give your consent for individual purposes or individual functions. The settings you have made can also be changed afterwards. The purpose of integrating “consentmanager” is to let the users of our website decide about the above-mentioned things and, as part of the further use of our website, to offer the option of changing settings that have already been made. By using “consentmanager”, personal data and information from the end devices used, such as the IP address, are processed by consentmanager. In addition, the processed information may also be stored on your device.

Access to your personal information and information
We are always open and transparent about how we process your personal information and if you want to know what information we have about you, you can request access to the data in the form of a registry transcript. Please note that if we receive a request for access, we may ask for additional information to ensure the effective handling of your request and that the information is provided to the correct person. The transcript will be issued within one month after we have received your request. Under certain circumstances (such as the number of requests received), the time for issuing the transcript may be extended to two months (in which case you will be informed within one month).

When you provide information to us, you are entitled to receive information that we process your personal information and why we do this. Please contact us if you do not think you have received enough information.

Data Portability Right: If our right to process personal data is based either on your consent or execution of an agreement with you, you are entitled to request the data relating to you and the data which you have provided to us to be transferred to another Data Controller, so-called data portability. A prerequisite for data portability is that the transmission is technically possible and can be automated.

Security
Kompetensspridning uses IT systems to protect the privacy, integrity and access to personal data. We take special physical, technical and organizational security measures to protect your personal data from unauthorized treatment (such as unauthorized use, loss, destruction or damage). Only the people who need to process your personal information to fulfil our stated purposes have access to them. We continuously adapt our security measures to ongoing technical developments in terms of reasonableness and the amount and sensitivity of personal data.

How long do we keep your personal information
We keep your information as long as it is necessary to fulfil our contractual obligations to you and in accordance with statutory storage periods for each purpose. These obligations include, for example, publicity and confidentiality legislation, accounting and tax legislation, banking and money laundering legislation and the Archives Act. It may also be possible that treatment is necessary for us to determine, enforce or defend legal claims.

This means, among other things, that we will remove or anonymize your information (so that they cannot be linked to you personally or used for other purposes) and other information in our databases when the arrangements in the agreement are finalized. This provided that the information is no longer necessary for the purpose for which it was collected or that it is deemed to have a preservation value based on the Archives Act. Information necessary for fulfilling an agreement or other legal basis may include, for example, measured values, information about agreements, invoiced products and services that, therefore, cannot always be limited or deleted.

Changes to this privacy policy
We may make changes to our privacy policy. The latest version of the privacy policy is always available on our site. If there are any major changes in our handling of personal data, you will be notified personally. For example, our handling of personal data may change if legislation changes. However, if the personal data processing has been governed by agreements with the customer, the terms of the agreement are valid until they are amended, unless they are incompatible with law or other legally binding provision.

Contact us for questions about data protection
Kompetensspridning is all about ensuring that all data we process is correct. This, of course, also applies to all personal information we process. You are entitled to correct incomplete, misleading or incorrect information about yourself, request a registry transcript, object to direct marketing, and to some extent request the deletion or restriction of your personal information. However, please note that certain legal obligations may prevent us from deleting all of your personal data. In order to protect your privacy and your personal information, we may require you to identify yourself in connection with our assistance.

According to data protection legislation, you have the right to file complaints regarding the processing of your personal data to the Swedish Authority for Privacy Protection; contact:  imy@imy.se

More information about current data protection legislation can be found at www.imy.se/en/

Data Protection Officer:
Daniel Glaad
Phone: +4673-620 01 25
E-mail: dso.ukf@insatt.com

Personal Data Controller:
Kompetensspridning i Umeå AB
Rådhusesplanaden 8
903 26 Umeå
Phone: +4690-16 10 00
E-mail: dataskydd.ukf@umea.se