Processing of personal data
Tidsam is committed to protecting your privacy and in this policy we explain how Tidsam collects and uses your personal data. It also describes your rights towards us and how you can exercise them. You can always contact us if you have any questions regarding privacy and data protection by sending an email to us at firstname.lastname@example.org.
What is personal data?
Personal data is any information which directly or indirectly can be linked to your person. It may be obvious details such as your name your social security number or phone number. Even pictures are a form of personal data, if you are clearly distinguishable in the picture.
What does processing of personal data mean?
Processing means everything that we in Tidsam do with your personal data. For example, when we collect, sort, or store personal data.
How do we collect your personal data?
At Tidsam, your personal data will, for example, be collected when you apply for our newsletter or when you send e-mails, order information material, post a comment or question via e-mail, social media or use our e-services, your personal data may be registered.
Be careful not to send sensitive personal data to us via e-mail and social media, since this is not a secure way to transmit information. Examples of sensitive personal data include, but are not limited to: ethnic origin, religious and political views, health status, social security number or union affiliations.
Who is responsible for the personal data?
Tidsam is a data controller for the processing of your personal data as we determine the means and purposes of the processing. We also use data processors, external suppliers, who help us with the processing. You can read more about this under the heading «Who can see your personal data?».
Why do we process your personal data?
For Tidsam to be able to offer its services and to fulfil its commitments, we need to manage information about you. Throughout the processing of personal data, we safeguard your privacy. Below, we describe the purposes of processing your personal data, the legal grounds justifying the processing according to current data protection laws and regulations and how long we store personal data. Tidsam does not use personal data for profiling or automated decision-making.
How long do we keep your personal data?
We will only keep the personal data if there is a purpose to retain the information. We are also required to retain personal information for a certain time according to requirements from various statutes such as the Accounting Act.
Who can see your personal data?
Your personal data is only available to people who need them to perform their duties. We may also communicate information about you to other companies within the Tidsam group, to third-party companies, transportation companies, or other business partners. Tidsam may also disclose necessary information to the police, the tax authorities or other public authorities if we are required to do so by law.
Where do we process your personal data?
Tidsam always strives to process your personal data within the EU/European Economic Area (EEA). However, in certain situations, the data can be transferred to, and processed in, countries outside of the EEA, since some of our suppliers or subcontractors are international organisations. Tidsam will take all reasonable legal, technical and organisational measures to ensure that your personal data is processed safely and with an adequate level of protection, both within and outside the EEA. If you want to know if or where your personal data is transferred outside the EEA, you can contact our data protection officer at email@example.com.
Your rights under the data protection regulation
Each person owns their own personal data, therefore, you have certain rights as an individual which Tidsam is required to adhere to under certain circumstances. According to the General Data Protection Regulation (GDPR), you can claim the rights which are described below. To do this, contact firstname.lastname@example.org. To claim your rights, you must be able to identify yourself by answering some questions from our staff.
The right of access
According to the General Data Protection Regulation, you always have the right to receive information about your personal data which Tidsam is processing. If you send a request to email@example.com Tidsam will send a transcript to you, containing the personal data that we process and a text that describes how we process it. It will normally take a maximum of one month to receive such a transcript.
The right to rectification and restriction
If you believe that any personal data about you is inaccurate or misleading, you can request it to be corrected or used in a more limited way in some cases. If this applies to you, please contact firstname.lastname@example.org and explain what information you believe to be inaccurate and why.
The right to erasure («right to be forgotten»)
You have the right to request deletion of your personal data stored by Tidsam if at least one of the following conditions is met:
- the data is no longer needed for the purpose for which it was collected
- the processing is based on consent and you withdraw your consent
- the processing concerns direct marketing, and you object to the processing
- you object to personal data processing justified by the legal basis – legitimate interest, and there is no legitimate interest that outweighs your interest
- personal data has been processed illegally
- deletion is required to comply with a legal obligation
You do not have the right to have your personal data deleted in case Tidsam:
Need to process the personal data for the performance of a task in the context of a contractual relationship with you, for archiving purposes, to exercise the right to freedom of expression and information, for compliance with a legal obligation or to defend legal claims.
The right to data portability
You sometimes have a right to have a copy of your personal data in a common, structured and machine-readable format, and in addition, to have your personal data transferred to another organization (if technically possible). This right is only applicable if the processing is based on consent or contractual obligation and is performed by automated means (e.g. with computers). Please contact our data protection officer if you would like to learn more email@example.com.
The right to object
You have the right to object to Tidsam’s processing of your personal data. You also have a right to submit complaints to your local data protection supervisory authority.
The data controller for processing of personal data is Tidsam AB.
If you want to get in contact with TIDSAM with regards to our processing of your personal data, please send an e-mail to firstname.lastname@example.org