Contus

Your privacy is important to us and we are responsible for the personal information you provide us. This policy describes how we process, store and handle your personal data partly when you are a customer with us, and partly when you apply for a job with us. It also describes your rights and how you can enforce them. It is important that you take note of and understand the privacy policy and feel safe in our processing of your personal data. This Policy is a legally binding agreement between you and Contus Assessments AB. By accessing and using the our Website and Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Agreement. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

Responsible for handling personal data

To reach the person responsible for personal data for the processing of personal data described in this policy, kindly email at gdpr@contus.se. This applies if you have any questions or want to invoke any of your rights.

How do we access the personal data?

The only information we have access to is the one you provide us when you take our test or when you send an e-mail.

What personal data do we process?

We may process the following categories of personal data:
• Contact information such as name, address, e-mail address, telephone number.

How do we process your personal data?

We process your personal data primarily to fulfill our obligations to you. Our starting point is not to process more personal data than is needed for the purpose, and we always strive to use the least privacy-sensitive data.

Below is information about which personal data processing is available.

Provide and fulfill agreements on services / products

We process personal data in order to fulfill our agreement and provide services / products to you. We process personal data for our administration and invoicing of the services / products, to handle complaints and grievances, to help you with questions about your service / products when you contact us and otherwise to safeguard our rights and fulfill our obligations under our agreement with you. Personal information we handle in this processing is contact information, as well as identity-related personal information.

Accounting

We process your personal data in order to be able to fulfill the statutory obligations incumbent on us, such as the Swedish Bookkeeping Act's requirements for archiving accounting material. Personal information we handle in this processing is contact information and identity-related personal information.

Marketing

We process personal data to enable marketing of products / services to you and to enable the sending out of newsletters for the services / products you are interested in in general and information about the company. Personal information we handle in this processing is contact information.

Before employment

We process your personal data in connection with you applying for vacancies or registering your interest in employment with us. The company processes your personal data to assess your application and carry out the recruitment process. Personal information we handle in this processing is contact information and identity-related personal information.

What legal basis do we have for our personal data processing?

We process your personal data in order to administer and provide the agreed service / product. With regard to the processing of personal data in order to fulfill requirements such as the Swedish Bookkeeping Act or the tax legislation, the legal basis for processing is a legal obligation.

For pre-employment treatment, the legal basis is our legitimate interest. This means that we believe that our interests in processing your personal data for these purposes listed above outweigh the privacy breach to which you are exposed as a result of the processing. This assessment has been made especially taking into account that we believe that the treatment will be beneficial for you.

With regard to personal data in connection with job applications that have no connection with a recruitment process or completed recruitment process, we will save your personal data for any future recruitment needs only if you have specifically agreed to this.

How long do we store your personal information?

We save your personal information up to 12 months after you have taken our test or contacted us. Some personal data is stored for a longer period of time, for example to meet requirements from the Swedish Bookkeeping Act and tax legislation. When the purposes of the treatments have been fulfilled and the storage period has expired, your personal data will be securely deleted or anonymized so that it can no longer be linked to you.

A cookie is a small text-based data file that a web server requests to be stored in your browser. By generally sending the content of the cookie back with each request to the relevant website, it is possible for the server to keep track of the visitor's preferences, behavior or identity (insofar as it is known). We use the following cookies on our website:

Session cookies (a temporary cookie that expires when you close your browser or device).
Permanent cookies (cookies that remain on your computer until you delete them or they expire).
Third-party cookies (cookies set by a third-party website. With us, these are primarily used for analyzes, such as Google Analytics.

The cookies we use aim to improve the services we offer. Cookies give the website better functionality and make it easier for you as a user. We also use cookies to collect and analyze behavioral data based on your use of the website and services in order to improve the user experience and also enable individualized communication and messages to you as a user. We also use cookies to be able to direct relevant marketing to you.

How can you handle cookies?

You can change the settings for the use and scope of cookies in your browser at any time. You can then choose to block all cookies, only accept certain cookies or delete cookies when you close your browser. If you choose to block or delete cookies, it may mean that certain services cannot be used or that the website does not work correctly in all respects.

Who do we share personal information with?

Our starting point is not to disclose the data subject's personal data to third parties if the data subject has not consented to it or if it is not necessary to fulfill our obligations under agreement or law. In cases where we disclose personal data to third parties, we ensure that the personal data is processed in a secure manner.

Service providers
In order to fulfill the purposes of our processing of your personal data and to fulfill the requirements that we owe as a company, we share personal data with companies that provide services to us. These companies may only process personal data in accordance with the personal data assistant agreement signed with the company and in accordance with the instructions they receive in connection with this. They may not use your personal data for their own purposes and they are obliged by law and agreement to protect your personal data. A service provider may not share your personal information with third parties or subcontractors without our consent.
Authorities
We may provide necessary information to authorities if we are required by law to do so. This information may include your personal information. In connection with a legal dispute, it may also be relevant to transfer information that may contain personal data to other parties to the dispute.

How is your personal data protected?

We protect your personal data through a combination of technical and organizational solutions. We have taken special security measures to protect your personal data against illegal or unauthorized access. We develop routines and working methods for your personal data to be handled in a secure manner. Only those people who actually need to process your personal data for their work tasks have access to it.

Your rights

As registered with us, you have the following rights:

You have the right to request an extract from the register where you can see what personal information we have about you.
You have the right to request correction if we have incorrect or incomplete personal information registered about you.
You have the right to have your personal data deleted under these conditions:

       - The information is no longer needed for the purpose for which it was collected.

       - If the information is saved with your consent and you revoke the consent.

       - If the treatment is based on a balance of interests and there are no justified reasons that outweigh your interest.

       - If the personal data has been processed illegally.

       - If deletion is required to fulfill a legal obligation.

       - If you object to direct marketing purposes.
The right to have personal data deleted does not apply if we are obliged by law (eg the Swedish Bookkeeping Act) to keep the data.
You have the right to data portability (the right to have your personal data transferred) provided that the legal basis is consent or agreement and what you can obtain is personal data concerning you, which you have provided yourself or which has been generated by your documents / activities.
You have the right to request that the processing of your personal data be restricted. However, if you request a restriction on your processing of personal data, this may mean that we are unable to fulfill our possible obligations to you during the period in which the restriction is in force.
You have the right to object to a processing of personal data that has a balance of interests as a legal basis. In order for us to be able to continue with the current treatment, we need to be able to show a compelling justified reason for the treatment that outweighs your interests, rights or freedoms. Otherwise, we may only process the data to establish, exercise or defend legal claims.
You always have the right to object to your personal data being used for direct marketing. If an objection is made to direct marketing, the personal data may no longer be processed for such purposes.

If you are not satisfied with the response you have received from us, you have the right to submit a complaint to the supervisory authority.