Power Heat - privacy policy
1 Introduction
The privacy of individuals and the security of their personal data is important to companies in the Power Heat group ("Power Heat") who are responsible for ensuring that all personal data is processed correctly and in accordance with applicable data protection legislation. This privacy policy ("Privacy Policy") is a consent document and describes Power Heat in Sweden's processing of personal data. We therefore ask you to carefully read the Privacy Policy before sharing personal data with us.
In this Privacy Policy, Power Heat companies refer to all majority-owned companies within the group.
2 Scope of the privacy policy
2.1 To whom the policy applies
This Privacy Policy is applicable to individuals who are job applicants, employees, customers, suppliers and other stakeholders. Different chapters will be relevant to you depending on your relationship with Power Heat.
2.2 To what does the policy apply
This Privacy Policy regulates how Power Heat collects and processes personal data for our offerings. The policy also regulates the handling of personal data for individuals at the parties with which Power Heat has a business relationship, such as suppliers and customers.
3 Processing of personal data
Power Heat's handling of personal data is described below based on your relationship with Power Heat.
3.1 For jobseekers and employees
3.1.1 The purposes of processing personal data
Personal data is processed only for the purposes and objectives described in this Privacy Policy.
If you choose not to provide us with certain personal data, this may affect the service.
Power Heat only processes personal data to the extent that such processing is necessary for the service or for such other purposes as stated below. This also applies to sensitive personal data.
Power Heat processes job applicants' and employees' personal data in order to be able to:
(a) provide the service to Power Heat's customers and offer you the opportunity to be part of the service;
(b) managing our relationship with you;
(c) handle any cases of alleged discrimination, manage disputes and complaints against you or Power Heat's customers and suppliers; and
(d) conducting internal demographic studies and optimising Power Heat's operations.
3.1.2 Personal data
By accepting this Privacy Policy, you consent to Power Heat processing your personal data in accordance with this Privacy Policy. If you do not consent to such processing, you should not provide us with personal data.
Below you will find information about what kind of personal data Power Heat processes and how Power Heat may receive/collect this data.
3.1.2.1 Job seekers
The personal data Power Heat processes about you as a job seeker is based on the information you yourself provide to Power Heat via the web or through contact with employees at Power Heat. Power Heat will not process your personal data without your prior authorisation by accepting Power Heat's Privacy Policy.
Power Heat may also ask you to provide additional personal data but in such cases you will specifically authorise this. Such personal data provided/processed through specific authorisation will also be covered by this Privacy Policy.
3.1.2.2 Employees
The personal data we will process about you consists of, in addition to the data indicated under point 3.1.2.1 (Jobseeker), among others, contact details of relatives, salary and account details.
Power Heat may also need to process sensitive personal data about you, such as data about your health. For example, health data may need to be processed in order for Power Heat to fulfil its obligations as an employer.
3.1.3 Storage of personal data
How long a personal data is stored depends on the personal data in question and the purpose of its processing. As a general rule, Power Heat will save personal data relating to:
(a) data related to the application and recruitment process, in the current year for the last activity and thereafter for two (2) years;
(b) employment contracts, for the current year and ten (10) years thereafter;
customer and supplier contracts and data on business events, such as data on time sheets, participants, assignments, remuneration, invoices, declarations, financial statements, during the term of the contract and thereafter for ten (10) years; and
(d) control data, until the termination of Power Heat's pension obligations.
3.2 For you as a customer or supplier
3.2.1 The purposes of processing personal data
Personal data is processed only for the purposes and purposes described in this Privacy Policy. If you choose not to provide us with certain personal data, it may affect the provision of the service/product Power Heat has to offer. Power Heat only processes personal data to the extent that such processing is necessary for the service/product and for services/products that suppliers provide to Power Heat or for such other purposes as set out below. This also applies to sensitive personal data.
Power Heat processes personal data of customers' and suppliers' employees in order to:
(a) you will be able to access the service/product or provide other services/products to Power Heat;
(b) managing our relationship with you;
(c) to enable Power Heat to manage its obligations to you or the individual concerned, to manage cases of alleged discrimination, to manage disputes and complaints; and;
(d) enable future business relationships.
3.2.2 Personal data
By accepting this Privacy Policy, you consent to Power Heat processing, where applicable, personal data about your employees and/or suppliers in accordance with this Privacy Policy. You also confirm that, prior to giving your consent, you have received authorisation for Power Heat's processing of personal data in accordance with this Privacy Policy from all relevant individuals.
Power Heat may also request the individual to provide additional personal data than what is stated below. Such personal data provided/processed by special authorisation will also be subject to this Privacy Policy.
3.2.2.1 Customers
Power Heat may process contact persons' personal data. Such data includes name, address, e-mail address, position, responsibilities and other data necessary for the provision and follow-up of the service/product and to enable future business relationships.
3.2.2.2 Suppliers
Power Heat may process the personal data of contact persons and other employees.
Such personal data consists of, among other things, the data specified in sections 3.2.2.1 (Customers) and 3.1.2.1 (job applicants) and other data necessary for the provision and monitoring of the service/product, to ensure the proper delivery of services and products to Power Heat and to enable future business relationships.
3.2.3 Storage of personal data
How long a personal data will be stored depends on the personal data in question and the purpose of its processing. Power Heat does not save personal data for a longer period than is necessary with regard to the purposes for which they were collected, unless otherwise provided by law. The information that you as a supplier provide/transmit or that Power Heat registers in Power Heat's business system, after approval from you or the individual concerned, will be stored as long as the respective business system is active or during the ongoing contractual relationship. As a general rule, Power Heat will save personal data that occurs in:
(a) application and recruitment processes, in the current year for the last activity and thereafter for two (2) years;
(b) customer and supplier contracts and data on business events, such as data on timesheets, participants, assignments, compensation, invoices, declarations, financial statements, during the term of the contract and thereafter for ten (10) years.
4 Protection of personal data
Power Heat has implemented appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. To ensure that personal data is processed in a secure and confidential manner, we use data networks that are intrusion-proof, including firewalls and industry-standard password protection. To ensure the integrity of the personal data you provide over the Internet, we may use encryption technology when transmitting such personal data over the Internet to our servers.
Power Heat employees and suppliers are bound by confidentiality agreements and are required to comply with Power Heat's information and IT security rules, this Privacy Policy and other internal regulations that further regulate the processing of personal data.
5 Sharing of personal data within the group
Power Heat may share personal data derived from job applicants, employees, customers and suppliers' employees with all companies within the Power Heat group in order to provide services and products. Sharing is necessary to quickly and efficiently open up new business relationships.
As a general rule, sensitive personal data is not shared between the companies in the Power Heat group. Before any sharing of sensitive personal data takes place, Power Heat always makes an assessment of whether such sharing is necessary for the purpose for which the sensitive personal data was collected and whether additional consent is required for the sharing or whether there is legal support for sharing the personal data. A prerequisite for sharing personal data between companies in the Power Heat group is that it is undertaken in accordance with this Privacy Policy and relevant personal data legislation.
6 Sharing of personal data outside the group
Power Heat will not sell, disclose or disseminate personal data to third parties, except as stated in this Privacy Policy. Within the framework of the service/product, personal data may be disclosed to a Power Heat customer, suppliers, subcontractors, and partners if it is necessary for the performance and provision of the service/product. Power Heat may also disclose your personal data to other third parties, such as
Power Heat's suppliers for our business, for example for payroll administration, technical support, operation of IT systems, or
suppliers.
Further, we may disclose personal data if we are required to do so by applicable law, court order or if such disclosure is otherwise necessary to assist in a legal investigation. In the event that Power Heat is subject to a reorganisation, merger or sale, we may transfer personal data to the relevant third party, provided that the third party undertakes to process the personal data in accordance with this Privacy Policy.
7 Data controller
Power Heat Piping South AB, 556922-7530
Power Heat Plastic Sweden AB, 559025-0055
are data controllers for the processing of your personal data and are responsible for ensuring that such processing is carried out in accordance with applicable law.
8 Power Heat as a processor of personal data
Power Heat is the data controller for Power Heat's personal data, but there may be situations where Power Heat is not the data controller but only a data processor for a third party. When Power Heat processes personal data as a data processor, it does so on behalf of a third party and Power Heat is then bound by the instructions that Power Heat has received from the data controller. In these situations, Power Heat cannot guarantee that such processing will take place in accordance with this Privacy Policy, but Power Heat will always ensure that processing takes place in accordance with applicable legislation and, as far as possible, in accordance with this Privacy Policy.
9 Your rights
You as an individual have the right, once per calendar year, after a written and signed request to Power Heat at the address above (under "Personal Data Controller") to be informed of the personal data that Power Heat processes about you and information about the scope and purpose of such processing. You as an individual also have the right to request that we block, delete or correct your personal data at any time. You always have the right to withdraw a given consent and notify us that you oppose further processing of your personal data.
10 Changes to this privacy policy
Power Heat reserves the right to revise this Privacy Policy from time to time. The date of the most recent change is indicated at the end of the Privacy Policy. If we make any changes to the Privacy Policy, we will publish these changes on the website. You are therefore advised to read this Privacy Policy regularly to be aware of any changes. If we change the Privacy Policy in a way that is significantly different from what was stated when your consent was collected, we will notify you of these changes and, if necessary, ask you to re-consent to Power Heat's personal data processing.
11 Contact us
If you have any questions regarding this Privacy Policy or our use of your personal data, please contact us at info@powerheat.se.