About this policy
Your privacy is important to us and we are responsible for the personal information you provide us with and that our handling complies with applicable law. It is important that you take note of and understand the policy and feel safe in our processing of your personal data. This policy describes how we process, store and manage your personal information when you are a customer of ours, when you visit our website or when you contact us by e-mail, telephone, chat or other means. The policy also describes your rights and how you can enforce them. ProjektStegen Sverige AB is responsible for personal data for its operations and the person responsible for the processing of personal data described in this policy. See contact information further down in this policy.
How do we access the personal data?
We collect and process your personal information when you:
- order an education, service or product
- participates in an education
- creates user accounts in and interacts with our digital platforms
- visit our website
- sign up for digital material subscriptions
- contact our support
What personal data do we process?
We may process the following categories of personal data:
- Contact information such as name, address, e-mail address, telephone number
- Identity information such as social security number, organization number
- Financial information such as bank account number, card number and other payment-related information
- Work-related tasks such as work experience, positions, degree certificate
- System-related information such as login information, user accounts
- Information that you provide when you complete training such as how to use it, results, self-assessments, reflections and other information
How do we process your personal data?
We process your personal data primarily to fulfill our obligations to you. Our starting point is not to process more personal data than is needed for the purpose, and we always strive to use the least privacy-sensitive data.
Below is information about which personal data processing is available.
Provide and fulfill agreements on training / services / products
We process personal data in order to fulfill our agreement and provide training / services / products to you. We process personal data for our administration and invoicing of the training / services / products, to be able to fulfill our delivery of training and services, to help you with questions about your training or service when you contact our support and otherwise to safeguard our rights. and fulfill our obligations under our agreement with you. Personal information we handle in this processing is contact information, identity-related personal information, financial personal information, work-related personal information, system-related personal information and information you provide when you complete training.
Accounting
We process your personal data in order to be able to fulfill the statutory obligations incumbent on us, such as the Accounting Act's requirements for archiving accounting material. Personal information we handle in this processing is contact information, identity-related personal information and financial personal information.
Marketing
We process personal data to enable the marketing of training / services / products to you and to enable the sending of newsletters for the training / services / products you are interested in in general as well as information about the company. Furthermore, to enable invitation to events in the area of your interest. Personal information we handle in this processing is contact information.
What legal basis do we have for our personal data processing?
- We process your personal data in order to administer and provide agreed training / service / product. With regard to the processing of personal data in order to fulfill requirements such as the Accounting Act or the tax legislation, the legal basis for processing is a legal obligation.
- We process your personal data to register and administer user accounts in various platforms, cloud services, communication services and other services used for the implementation of training. The legal basis for the processing of login information and contact information is agreements.
- When you complete an education with us, we process information you submit via oral and written communication through, for example, interacting with platforms and systems, meetings, telephone, e-mail and other communication channels over electronic networks or in physical premises. The legal basis for this treatment is an agreement or a legitimate interest.
- For the marketing treatments, the legal basis is our legitimate interest. This means that we consider that our interests in processing your personal data for these purposes listed above outweigh the privacy breach to which you are exposed as a result of the processing. This assessment has been made especially taking into account that we believe that the treatment will be beneficial for you.
- If your employer has ordered and / or paid for an education on your behalf, we may process and share your personal information with him or her in order to fulfill our obligation. See also the point Employer, under the title Who do we share personal information with? in this policy, regarding the purpose, type and legal basis for this treatment.
How long do we store your personal information?
Personal data we handle so that you can complete training with us, we save during the training period + 30 days.
We save agreements for subscription services during the agreement period + 5 years.
We save other personal information as long as you are a customer with us and up to a maximum of 12 months thereafter. Some personal data is stored for a longer period of time, for example to meet requirements from the Accounting Act and tax legislation. When the purposes of the treatments have been fulfilled and the storage period has expired, your personal data will be securely deleted or anonymised so that it can no longer be linked to you.
Especially about cookies
A cookie is a small text-based data file that a web server requests to be stored in your browser. By generally sending the content of the cookie back with each request to the relevant website, it is possible for the server to keep track of the visitor's preferences, behavior or identity (insofar as it is known). We use the following cookies on our website:
- Session cookies (a temporary cookie that expires when you close your browser or device).
- Permanent cookies (cookies that remain on your computer until you delete them or they expire).
- Third-party cookies (cookies set by a third-party website. With us, these are primarily used for analyzes, such as Google Analytics).
The cookies we use aim to improve the services we offer. Cookies give the website better functionality and make it easier for you as a user. We also use cookies to collect and analyze behavioral data based on your use of the website and services in order to improve the user experience and also enable individualized communication and messages to you as a user. We also use cookies to be able to direct relevant marketing to you.
How can you handle cookies?
You can change the settings for the use and scope of cookies in your browser at any time. You can then choose to block all cookies, only accept certain cookies or delete cookies when you close your browser. If you choose to block or delete cookies, it may mean that certain services can not be used or that the website does not work correctly in all respects.
Who do we share personal information with?
Our starting point is not to disclose the data subject's personal data to third parties if the data subject has not consented to it or if it is not necessary to fulfill our obligations under agreement or law. In cases where we disclose personal data to third parties, we ensure that the personal data is processed in a secure manner.
- Service providers
In order to fulfill the purposes of our processing of your personal data and to fulfill the requirements that we owe as a company, we share personal data with companies that provide services to us. It can be companies that provide course leaders and companies that provide platforms, cloud services, system support and other services. These companies may only process personal data after we have signed a written agreement with the company and the processing may only take place according to the instructions they receive in connection with this. They may not use your personal data for their own purposes and they are obliged by law and agreement to protect your personal data. A service provider may not share your personal information with third parties or subcontractors without our consent. - Employer
If your employer has ordered and / or paid for an education on your behalf, we may, in order to fulfill our obligation in an agreement with your employer,
- manage personal data for you as a prospective training participant before you start your training by registering contact information and login information in platforms, communication systems, training administration systems and in other services used for the implementation of training. The legal basis for this treatment is an agreement or a legitimate interest.- send personal information about you as a training participant to designated contact persons in the agreement with your employer. The information sent is information about your use and achieved results in training. The legal basis for this treatment is an agreement or a legitimate interest.
- Agencies
We may provide necessary information to authorities if we are required by law to do so. This information may include your personal information. In connection with a legal dispute, it may also be relevant to transfer information that may contain personal data to other parties to the dispute.
How is your personal data protected?
We protect your personal data through a combination of technical and organizational solutions. We have taken special security measures to protect your personal data against illegal or unauthorized access. We have developed routines and working methods for your personal data to be handled in a secure manner. Only those people who actually need to process your personal data for their work tasks have access to it.
Your rights
As registered with us, you have the following rights:
- You have the right to request an extract from the register where you can see what personal information we have about you.
- You have the right to request correction if we have incorrect or incomplete personal information registered about you.
- You have the right to have your personal data deleted under these conditions:
- The information is no longer needed for the purpose for which it was collected.
- If the information is saved with your consent and you revoke the consent.
- If the treatment is based on a balance of interests and there are no justified reasons that outweigh your interest.
- If the personal data has been processed illegally.
- If deletion is required to fulfill a legal obligation.
- If you object to treatment for direct marketing purposes.
The right to have personal data deleted does not apply if we are obliged by law (eg the Accounting Act) to keep the data.
- You have the right to data portability (the right to have your personal data transferred) provided that the legal basis is consent or agreement and what you can obtain is personal data concerning you, which you have provided yourself or which has been generated by your documents / activities.
- You have the right to request that the processing of your personal data be restricted. However, if you request a restriction on your processing of personal data, it may mean that we can not fulfill our possible obligations to you during the time the restriction is in force.
- You have the right to object to a processing of personal data that has a balance of interests as a legal basis. In order for us to continue with the current treatment, we need to be able to show a compelling justified reason for the treatment that outweighs your interests, rights or freedoms. Otherwise, we may only process the data to establish, exercise or defend legal claims.
- You always have the right to object to your personal data being used for direct marketing. If an objection is made to direct marketing, the personal data may no longer be processed for such purposes.
Changes to this Privacy Policy
Changes and updates to this personal data policy are published on the website projektledarutbildning.se and in other channels where the policy has been made available.
Do you have questions about how we process your personal data?
You are of course welcome to contact us if you have any questions about how we handle your personal information. Please email your questions to info@projektstegen.se.
ProjektStegen Sverige AB, corporate identity number 556598-3011, Ekbacksvägen 28, 168 69 Bromma.