Privacy policy

General

Data controller

This privacy policy describes Qnister AB’s processing of personal data when Qnister AB, with the Swedish business registration number 559116-6433 (hereinafter “Qnister” “we”, “our”, “us”,), is the data controller of the processing of your personal data.

Contact

If you have any queries, need further information or want to exercise any of your data protection rights, please contact our registered Data Protection Officer Mats Herling at Insatt AB:

Mats Herling
e-mail:mats.herling@insatt.com
Telephone: +46 (0) 724 01 97 03.
Address: Kyrkogatan 4, 553 16 Jönköping, Sweden.

You can always find Qnister’s complete contact information on our contact page.

If you are not satisfied with our processing or our answers, you have the right under data protection legislation to submit any comments or complaints to the relevant supervisory authority (in Sweden it is the Swedish Authority for Privacy Protection “Integritetsskyddsmyndigheten” (IMY)).

Contact details to IMY:

Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm
Telephone: 08-657 61 00
e-mail: imy@imy.se

Additional information about the current data protection legislation can be found at www.imy.se/en/.

Processing of personal data in our digital services

Purposes and lawful basis

Separate terms and conditions apply to the use of our digital services When y our employer, meaning our customer, has registered you as a user of one or several of Qnister’s digital tools, Qnister processes the categories of personal data; name and e-mail address. Then we support our processing on on our legitimate interest in order to provide the service to our customer (your employer). We will transfer your data to our partners to provide the service.

Your rights as data subject

As a user of our services, you have the right to:

Object to the processing of personal data based on legitimate interest;

Request a confirmation as to whether or not your personal data are being processed by us, access to the personal data and the additional information of how the data is processed;

Request rectification of potentially inaccurate information;

Request erasure (‘right to be forgotten’). However,we can only erase your data if we do not have the right or legal requirement to save the information.

Request that the processing of data is limited under certain circumstances, such as during the time your request for instance regarding the rectification or erasure of the personal data is investigated.

Transfers of personal data

Your personal data will be processed within EU/EES and will not be transferred to third countries. By registering, you will receive a newsletter as part of the service.

Storing of your personal data

We will process your personal data as long as you are registered in the service or as long as your employer is our customer.

If you use our support or counseling functions, we will process your personal data to help you and to give you advice. For more information, please see Appendix 1.

General information on processing of personal data

Purposes and lawful basis

Our lawful bases for each processing activity of personal data is described in Appendix 1. Examples of the personal data processed include information which you have chosen to share via a form at the website or by sending us an email or an SMS. This data will be used to process and answer your inquiry. If you sign up to our newsletter, the personal data will be used to send you news and for marketing purposes. The personal data may be transferred to our partners to the extent necessary to fulfil our obligations and provide our services, such as sending newsletters.

In addition, we process personal data when providing our services, recruiting, events, and to administrate contracts with our customers, suppliers, and partners.

For more information, please see Appendix 1.

Webpage and use of cookies

Our webpage www.qnister.com (hereinafter “the webpage”, “the website”, “qnister.com”) uses cookies, which is further described in our Cookie policy at our website.

Your rights as data subject

As a data subject, you have the right to receive information on which of your personal data that we store as well as certain rights. You have the right to:

Withdraw consent;

Object to processing of personal data for marketing purposes. Subsequently, we shall cease to process the data. Further, you have the right to object to processing based on our legitimate interest;

Request a confirmation as to whether or not your personal data are being processed by us, access to the personal data and the additional information of and how the data is processed;

Request rectification of potentially inaccurate personal data;

Request erasure (‘right to be forgotten’). However, we can only erase your data if we do not have the right or legal requirement to save the information.

Access your data in a machine-readable format, according to the right of data portability; and

Object to profiling.

Transfers to third countries

The company strives to not transfer personal data to a country or company located outside of EU/EES. However, if a situation requiring such transfer would arise, the company will implement appropriate measures to protect the personal data to the greatest extent possible in accordance with the data protection legislation.

If personal data is transferred to a third country, Qnister will always ensure that appropriate safeguards are in place to ensure the secure processing of your personal data. Such appropriate safeguards include, but are not limited to, ensuring:

- that the European Commission has decided that the country outside of the EU/EEA to which your personal data are transferred has an adequate level of protection, which corresponds to the level of protection afforded by the GDPR, or

- that we enter into the European Commission’s standard contractual clauses (SCCs) with the recipient of the personal data outside the EU/EEA. When the transfer of personal data to a third country supported with the SCCs, we assess whether there are laws in the recipient country that affects the protection of your personal data. Where necessary, we take technical and organizational measures so that the protection of your personal data remains during the transfer to the relevant country outside the EU/EEA. Due to for instance American security regulations there is still some risk that American agencies, in order to fight crimes or protect national security, may access the personal data transferred to the US despite our technical and organizational measures taken.

Please contact us for more information about potential transfers to third countries and to request a copy of our security measures. You find our contact details above.

Storing of personal data

Depending on our relationship and the role in which we process your personal data, the data will be processed during different lengths of time. Generally, your personal data will not be processed longer than necessary with regard to the purpose of which the data was collected. We will process your personal data as long as we need it in order to provide our services, as long as we have a valid consent or a legal obligation to process your personal data.

Appendix 1 – Processing of personal data

Purpose and description	Personal data	Lawful basis for the processing	Additional information
User in one of our digital services: We process your personal data to provide the service in question.	Name, e-mail	Legitimate interest to fulfill the commitments towards your employer.
Customer support: the purpose is to provide our services in accordance with the contract with the customer. Thus, we may have to process personal data regarding the customer, counterpart, and other potential contacts in conjunction with the support.	Name, phone number, title, address, e-mail, personal data. Depending on the circumstances, other types of personal data may be processed.	Legitimate interest, legal obligation, contract.
Contact through the webpage or other ways of communication: when you contact us via the contact form on our website or by reaching out to one of our employees, we process your personal data to administrate your question. We may also use your contact details for marketing purposes and to send you offers and newsletters.	Name, phone number, address, e-mail.	Legitimate interest
Signing up for our newsletters: when you sign up for our newsletters, we collect your contact details to send you the newsletter. To send newsletters, we use our partners, which means your personal data will be shared to a third party. We may also use your contact details for marketing purposes and send you offers and newsletters.	E-mail	Consent
When you participate in our events: if you sign up for one of our events, we process your personal data to administrate the events regarding, for example, event spaces and food orders.	Name, phone number, address, e-mail, employer.	Legitimate interest
When you apply for a position at Qnister in an existing recruitment ad: we process your personal data to assess you throughout the recruitment process.	Name, phone number, address, e-mail, year of birth, other types of personal data that you choose to share with us in conjunction with the application or at an interview.	Legitimate interest
When you spontaneously apply for a position at Qnister: we process your personal data to assess you before a potential recruitment process.	Name, phone number, address, e-mail, year of birth, other types of personal data that you choose to share with us in conjunction with the application.	Legitimate interest for one year.	After one year, if you want your application to remain, we ask for your consent.
When you represent Qnister as a partner or supplier: we process your personal data when you are in touch with Qnister representing your employer. If your employer is a supplier, our purpose of the processing is to fulfill our commitments in the contract. In other situations, the processing depends on the nature of the case.	Name, phone number, address, e-mail.	Legitimate interest to fulfill the commitments towards your employer.
New customer targeting: we process personal data about you as a potential customer of ours.	Name, phone number, e-mail, title.	Legitimate interest to promote and sell our services.