Contentor AB, company registration number 559028–1902, with registered address Bredgatan 11, 252 25 Helsingborg ("we", "us", "Contentor") is the data controller and is responsible for the personal data processed about you.
At Contentor, our customers' trust is of the utmost importance. This trust is the foundation of our business. You should always feel safe when you entrust us with your personal data. To explain how we process personal data, we have drawn up this privacy policy. The privacy policy is based on relevant law and clarifies how we work to safeguard your rights and protect your privacy. If you have any questions about the use of your personal data in accordance with this information, please contact us at gdpr@contentor.se.
Contentor collects information about you through the information that you yourself provide to us when you visit our website, apply for a job with us, enter into an agreement with us, use our services, request a quotation, or otherwise share in communication with us, as well as through information collected from third parties. Contentor collects information about you from third parties who have collected the data with your consent and who, on a lawful basis, may share the data with us. These third parties vary from time to time.
We are constantly working to improve our business, which means that the privacy policy may be altered from time to time. We may update the privacy policy as a result of changes in legal, technical or business developments. When we update the privacy policy, we will inform you. You can see when it was last updated by checking the date at the bottom of this privacy policy.
The purpose of the privacy policy is to inform you how we process your personal data, what we use it for, who may access it and under what conditions, and how you can exercise your rights. We strive to be transparent about how we use your personal data.
This privacy policy is structured as follows:
- Personal data processed when you visit our website
- Personal data processed when you apply for a job with us
- Personal data processed when you enter into a contract with us to use our services and are the contact person when we do business with the company you are employed by or when you request a quotation
- Personal data that we process after you have entered into a contract with us
- Personal data processed for direct marketing purposes
- Personal data processed due to legal obligations or to establish, exercise or defend legal claims
- Who we share your personal data with
- Transfers outside the EU/EEA
- How we protect your personal data
- Your rights
The supervisory authority for the processing of personal data is the Swedish Authority for Privacy Protection (IMY). If you wish to submit a complaint to the Swedish Authority for Privacy Protection regarding our processing of your personal data, you have the right to do so. Please see www.imy.se for more information on how to proceed.
1. Personal data processed when you visit our website
| Personal data processed | Purpose | Legal basis | Storage period |
|---|---|---|---|
| We process your IP address. When you type a website address into your browser, a request is created and sent out on the internet. The request passes through our routers on its way to our website. | We need to process your IP address so that you can visit our website. We store a text file (a cookie) in your browser to collect information about the use of our website during your visit (a session cookie), for example to show you what is new since you last visited the site. | We have a legitimate interest in ensuring that you and other people who are interested in our services can browse our website in order to access our services. | Your IP address is processed for the duration of your visit to our website (session cookies). Other cookies are stored until you delete them from your browser. By deleting cookies or disabling the function in your browser, you can ensure that Contentor no longer processes this information. |
| Contentor uses Google's Analytics tool. The tool places its own cookies in order to function, and your usage and IP address will be sent to and stored on Google's servers (by Google). You can read more about how Google processes your personal data at this link. | Contentor uses Google's Analytics tool in order to measure what visitors do (click on) when they visit our website. This information is only used to evaluate how the website is used. | The processing is based on your explicit consent. | Your IP address is stored for eighteen (18) months. |
| Contentor uses Hubspot's analytics tool. The tool places its own cookies in order to function, and your usage and IP address will be sent to and stored on Hubspot's servers (by Hubspot). | Contentor uses Hubspot's analytics tool in order to measure what visitors do (click on) when they visit our website. This information is only used to evaluate how the website is used. | The processing is based on your explicit consent. | Your IP address is stored for eighteen (18) months. |
2. Personal data processed when you apply for a job with us
| Personal data processed | Purpose | Legal basis | Storage period |
|---|---|---|---|
| Name, personal identity number, address, email address, telephone number and other information provided by the applicant when applying for a job. | We need this information to keep in touch with you and to assess your application in relation to the position you have applied for. We use your personal data to administer and process your application for employment, review your CV, covering letter, references, grades and certificates, as well as to communicate with you and for data storage purposes. | We have a legitimate interest in carrying out the necessary processing of personal data in order to evaluate your qualifications, personal characteristics and background and to enable selection in connection with recruitment/employment decisions. | We will process this personal data until the position has been filled. |
| Name, personal identity number, address, email address, telephone number and other information provided by the applicant when applying for a job. | We need to process this information for future recruitment and to enable us to contact you at an early stage if a vacancy arises for which you are suitable and of interest. | We have a legitimate interest in retaining your application for a period after the position has been filled in case a vacancy or need arises for a similar position for which you are suitable and of interest. | We will process this personal data for a period of one (1) year from when the advertised position has been filled. |
| Name, personal identity number, address, email address, telephone number and other information provided by the applicant when applying for a job. | We need to process this information in order to be able to defend any claims that may arise in connection with a recruitment process, as | the processing is based on a legal obligation. The limitation period for bringing an action is two (2) years in accordance with the Swedish Discrimination Act. | We will process this personal data for a period of two (2) years from when the advertised position has been filled. |
| Name, personal identity number, address, email address, telephone number and other information provided by the applicant when submitting an unsolicited application to us. | We need to process this information for future recruitment and to enable us to contact you at an early stage if needed. | Both parties have a legitimate interest in our being able to retain your application for a period after it has been received, in case a vacancy or need arises for a suitable position. | We will process this personal data for a period of one (1) year after the unsolicited application has been received. |
3. Personal data processed when you enter into an agreement with us to use our services and are the contact person when we do business with the company you are employed by or when you request a quotation
| Personal data processed | Purpose | Legal basis | Storage period |
|---|---|---|---|
| Name, personal identity number (for sole traders), address, email address, telephone number. | We need to process this information in order to provide you with a quotation. | We have a legitimate interest in being able to enter into an agreement with the company you are employed by. | The quotation is stored for up to one (1) year and is then deleted if you do not accept it. |
| Name, personal identity number (for sole traders), address, email address, telephone number. | We need to process this information in order to enter into a contractual relationship with you. We may use your personal data when you are the contact person for the company we do business with. | We have a legitimate interest in being able to enter into an agreement with the company you are employed by. | We will process this personal data for a period of three (3) years from the date the service ends, or for the period required by the nature of the service. |
| Name, personal identity number (for sole traders), address, email address, telephone number and purchased services. | We need to process this information in order to perform our service and the work you have ordered. We may use your personal data to provide our services to you, to communicate with you and to store our communication. | Conclusion of contract | We will process this personal data for a period of three (3) years from the date the service ends, or for the period required by the nature of the service. |
4. Personal data that we process after you have entered into an agreement with us
| Personal data processed | Purpose | Legal basis | Storage period |
|---|---|---|---|
| Name, personal identity number (for sole traders), address, email address, telephone number and purchased services. | We need to process this information for bookkeeping and invoicing purposes, to receive payments and report our financial information. | The processing is based on a legal obligation. The data is stored in accordance with accountancy rules. | We will process this personal data for a period of seven (7) years from the date it was recorded in the accounts, in accordance with the Swedish Bookkeeping Act. |
5. Personal data processed for direct marketing purposes
| Personal data processed | Purpose | Legal basis | Storage period |
|---|---|---|---|
| Name, personal identity number (for sole traders), address, email address, telephone number. | We need to process this information for direct marketing purposes. We may use your personal data to provide you with up-to-date information about our services and those of selected partners, to send newsletters and to give you information about planned events. | We obtained your explicit consent when you provided us with your details. | We will process this personal data for a period of one (1) year from the date the service ends, or for the period required by the nature of the service. |
6. Personal data processed due to legal obligations or to establish, exercise or defend legal claims
| Personal data processed | Purpose | Legal basis | Storage period |
|---|---|---|---|
| Personal data that has been processed as a result of you entering into an agreement with us. | We need to process this information in order to fulfil our legal obligations under various laws, regulations, public authority provisions and guidelines. | The processing is based on a legal obligation. To comply with legal requirements, we need to process this data. These legal requirements may, for example, relate to tax law or bookkeeping obligations. | We will process this personal data for a period of three (3) years from the date the service ends, or for the period required by the legal obligation. |
| Personal data that has been processed as a result of you coming into contact with our services/products. | In the event of a dispute, we may use your personal data to investigate, respond to or establish legal claims or disputes related to your use of our service or our contractual relationship in general. | We have a legitimate interest in safeguarding our rights. | We will process this personal data for a period of three (3) years from the date the service ends, or for the period required until the legal claim has been established and the decision/judgment is resolved. |
7. Who we share your personal data with
We only share your personal data where it is necessary for our business. We share your personal data with our partners such as Wordbee SA (VAT: LU22550164), Hubspot Ireland Limited (VAT: IE9849471F), Google Ireland Limited (VAT: IE6388047V), Google Cloud EMEA Limited (VAT: IE3668997OH), Verified Global AB (company registration number: 556883-1233), Teamtailor AB (company registration number: 556936-6668), our auditor Kim Lavin at Baker Tilly Helsingborg AB (company registration number: 559053–9655), our payroll administration provider Edacta AB (company registration number: 559245-1123), our IT provider Future IT Partner Skåne AB (company registration number: 556884-2859) and our website provider ODERLAND Webbhotell AB (company registration number: 556680-8746).
IT providers – we use IT providers that are necessary for us to be able to deliver our service, particularly regarding programming and development of the service.
Accounting service providers – we use external providers of accounting and bookkeeping services; these providers are necessary for us to be able to invoice and keep the accounts in our business.
Public authorities and the legal system – we may share your personal data when we, in good faith, consider it necessary to comply with legal obligations or to respond to legal claims.
We may also share your personal data when we, in good faith, suspect that it is necessary for reasons of national security, law enforcement and intelligence activities, or to prevent death or personal injury, provided that these interests are not outweighed by your rights and freedoms for the protection of your personal data.
We may also disclose personal data to third parties where this has been specifically agreed between us and you, where it is necessary within the framework of a particular assignment to safeguard your or our rights, or where it is necessary for us to fulfil a statutory obligation or comply with a decision by a public authority or a court.
8. Transfers outside the EU/EEA
We always strive to process your data within the EU/EEA, but it may be transferred to countries outside the EU/EEA. If we transfer your personal data to countries outside the EU/EEA, we will take all reasonable legal, technical and organisational measures to ensure that your data is handled securely and with an adequate level of protection comparable to, and at the same level as, the protection offered within the EU/EEA. This may involve signing standard contractual clauses adopted by the European Commission or obtaining your explicit consent for the transfer.
9. How we protect your personal data
Your security is important to us. That is why we have implemented appropriate technical, organisational and administrative security measures to protect your personal data from loss, misuse, disclosure, alteration, destruction, unauthorised access and other unlawful processing. We regularly analyse and evaluate these measures so that the protection of your data is as secure as possible. Contentor employees, contractors and suppliers are obliged to follow Contentor's rules, privacy policy and other internal regulations that further govern the processing of personal data.
10. Your rights
You are not obliged to provide personal data to us, but in cases where the processing is based on the performance of a contract, we must obtain your data in order to fulfil our obligations. If you do not provide your personal data, there is a risk that we will not be able to undertake obligations under the contract.
We may ask for your consent to process parts of your personal data. You are not obliged to give such consent if you do not want your personal data to be processed for the specified purposes. You can withdraw your consent at any time by contacting us. If you withdraw your consent, the withdrawal is valid from the time of the withdrawal and does not affect processing that we carried out before the withdrawal took place.
When we process personal data about you, you as a data subject have several rights. You have the right to contact us at any time regarding these, and if you wish to exercise any of the rights described below, the easiest way to reach us is at gdpr@contentor.se.
- Right to information – you have the right to receive information about how we process your personal data.
- Right of access – you have the right to contact us and request to know which personal data we process about you and to request a copy of this data (the right to request a register extract).
- Right to rectification – you have the right to have incorrect, incomplete or outdated data corrected and supplemented with accurate data. As a general rule, you also have the right to receive information about where we obtained the incorrect data from.
- Right to erasure – under certain conditions, you have the right to have your data erased (the right to be forgotten).
- Right to restriction of processing – under certain conditions, you have the right to request that the processing of personal data be restricted.
- Right to object – under certain conditions, you have the right to object to the processing of personal data carried out for the performance of a task in the public interest, in the exercise of official authority or following a balancing of interests. You therefore have the right to object to your personal data being processed for direct marketing purposes.
- Right to data portability – under certain conditions, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transfer the personal data that you have provided to Contentor to another organisation/data controller.
- Right to withdraw consent – if our processing of your personal data is based on your consent, you always have the right to withdraw your consent at any time for the continued processing of the personal data that Contentor processes on such a legal basis.
- Right to lodge a complaint – you have the right to lodge a complaint with the Swedish Authority for Privacy Protection if you believe that we are processing your personal data in an incorrect way. You can read more about this on the Swedish Authority for Privacy Protection's website https://www.imy.se/.
This privacy policy was last updated on 23 April 2024.