Personal Data Management
- Privacy notice
To Hunna, it is of outmost importance that your personal data is processed in a correct and safe way. In this privacy notice we describe how, and why we process your data. Processing of your data may occur when you purchase or request information about our products/services or when you contact us.
This is how Hunna is approaching the updated General Data Protection Regulation
- We only collect the personal data needed to provide our products and services and to conduct our business
- We protect the data we collect
- We only use the collected data for the purposes they were collected for
- We delete the data we no longer need
- We inform the data subjects about how and when personal data is collected
- We inform relevant parties, such as data subjects and authorities, in the event of personal data breach
2. General
This Privacy notice describes how Hunna process your personal data.
We respect your right to integrity, and we are committed in complying with current data protection legislation. We want to make sure you are aware of what sort of data we collect from you, how this data is used, and how we protect it.
This notice also describes your rights and how you can contact us if you have any questions regarding the processing of your personal data.
How do we process your personal data?
Hunna collects personal data in several ways, and at several occasions, for instance when you use or website, purchase or request information about our products/services or when you contact us.
3. Data that we may process
3.1 When you purchase a product or service from us
Personal data
– Name, e-mail, telephone number, company, delivery- and invoicing address, role.
Purpose of processing
– The purpose of the processing is for Hunna to fulfil its commitment towards you as a customer as well as to be able to send an invoice for the product or service. We also need to comply with laws and regulations.
Lawfulness of processing
– Performance of a contract and legal obligation.
Retention period
– We will store your data for as long as necessary to fulfil the purpose.
3.2 When you contact us regarding our products or services
Personal data
– Name, e-mail, telephone number, company, address, role.
Purpose of processing
– To be able to answer your questions, provide the correct products and services as well as to provide relevant information.
Lawfulness of processing
– Performance of a contract or to take steps towards entering a contract, legitimate interests or consent.
Retention period
– We will store your data for as long as necessary to fulfil the purpose.
3.3 When you visit our website
Personal data
– General data such as language settings, browser settings, use of our website, time zone, geographic information, operating system, platform and screen resolution (via statistical tool).
Additionally, we may collect;
– Name, company, delivery address, e-mail and telephone number if you sign up for an account in our support portal.
– Name, company and e-mail if you sign up for our newsletter
– Name and e-mail if you contact us through our website
Purpose of processing
– Provide, execute and improve our services.
Lawfulness of processing
– Performance of a contract or to take steps towards entering a contract, legitimate interests or consent
Retention period
– We will store your data for as long as necessary to fulfil the purpose.
3.4 When you visit our offices/sites
Personal data
– Name, company and telephone number is entered into our visitor’s log
Purpose of processing
– For emergency preparedness i.e. to know what visitors are present in the building in case evacuation is needed.
Lawfulness of processing
– Legitimate interest and consent.
Retention period
– The visitor’s log is deleted within maximum 12 months.
3.5 When you apply for a job
Personal data
– Name, address, telephone number, e-mail, gender, birthdate, citizenship and other information that you choose to provide in your CV/application documents.
– If you are employed, we will also process data necessary for payroll management, such as salary and bank details. This personal data is collected in the hiring process, through your employer contract.
Purpose of processing
– Necessary for the recruitment/employment process and documentation.
Lawfulness of processing
– Performance of a contract or to take steps towards entering a contract, legitimate interests, legal obligation and/or consent
Retention period
– Applications are stored for a maximum of 300 days.
– If you are employed, your data will be stored during your employment period + 1 year, unless otherwise required by other legislation (accounting, tax).
When you are employed by us
Personal data
– Name, address, telephone, e-mail address, gender, year of birth, citizenship and other information contained in your contract of employment.
– When you are hired, we will process data necessary for payroll, such as salary and bank details, insurance and pension contributions.
Purpose of the processing
– Necessary documentation on order to handle the employment.
Lawfulness of processing
– Employment contract, legitimate interests, legal obligation and/or consent
Retention period
– As an employee, your data is saved during the employment period+ 1 year, provided that there is no other legislation that requires longer retention (e.g accounting and tax rules).
3.7 As a supplier to Hunna
Personal data
– Name, company, address, e-mail, telephone number and relevant information for the specific contract.
Purpose of processing
– To maintain effective business operations.
Lawfulness of processing
– Performance of a contract or to take steps towards entering a contract, legal obligation
Retention period
– We will store your data for as long as necessary to fulfil the purpose.
4. To whom may we disclose your personal data?
– We use various suppliers/providers products and services to our IT-infrastructure. This means that these suppliers/providers may process your personal data. Hunna may also disclose your personal data to sub-suppliers, to be able to provide the agreed product or service.
– Suppliers and sub-suppliers are in such instance’s processors of personal data and may only process the data according to Hunna´s instructions.
– Hunna may, in some cases, be obliged to disclose information to authorities as required by law or court rulings.
5. Where do we process your personal data?
Hunna strives to always process your personal data within the EU/EES. However, in some circumstances processing might take place at a third party outside the EU/EES, for example an IT-system provider or sub-supplier. Hunna will always implement necessary legal, technical and organizational measures to ensure your personal data is processed with at least the same level of protection that is provided within the EU/EES.
6. Your rights
Right to revoke your consent
– If you have provided us with personal data on the legal basis of consent, you have the right to revoke your consent to certain processing, at any time. If you revoke your consent, we will cease the processing of data covered by the consent and erase it.
Right of access
– Upon request, you have the right to obtain confirmation as to whether or not personal data concerning you are being processed by Hunna, and, where that is the case, access to that personal data. Unless otherwise requested, the information will be provided as an electronic copy. Hunna will then respond to your request within 30 days and provide you with the registered information stored.
Right to rectification and erasure
– You have the right to obtain rectification of any personal data that is inaccurate. In some cases, you also have the right to obtain erasure of personal data (“to be forgotten”) as long as the processing is no longer necessary in relation to the purposes for which they were collected. Hunna will then promptly rectify and/or reface your personal data without unnecessary delay. Hunna may also be forced to retain certain information in order to comply with legal obligations.
Right to object and the right to restriction of processing
– You have the right to object to the processing of your personal data, e.g. for direct marketing purposes and, in case we process your data on the legal basis of legitimate interests.
– You also have the right to restrict the processing, for example if you consider the data to be inaccurate.
Right to data portability
– In certain cases, you have the right to receive the data you have provided to us. In such cases, Hunna will provide the data in a structured and machine-readable format. You also have the right to request that the data is transmitted to another controller, where technically feasible.
7. Questions and complaints
– If you have any questions regarding the processing of your personal data, you are welcome to contact Hunna, see further details below. If you are not satisfied by the answers provided by Hunna you have the right to leave a complaint with the supervisory authority.
8. Contact details
Hunna AB
Kivra: 559017-8041
106 31 Stockholm, Sweden
E-mail: privacy@hunna.eu