El-Björn AB, 556075-4581, PO Box 29, 334 21 Anderstorp (hereinafter ‘our’, ‘we’, ‘us’ or ‘El-Björn’) is a company that develops and manufactures full project solutions to provide the right products for industry, construction sites and events in the following product areas: Power, Lighting and Climate. This personal data policy describes how your personal data is processed if you are the designated contact person for El-Björn at a company that is a supplier, customer or partner of ours, or if you have applied or are applying for a job with us. We respect and protect your personal data and process it in a transparent and lawful manner.

Contact persons
If you are the designated contact person for El-Björn at a company that is a supplier, customer or partner of ours, we use your data as follows.

In order for El-Björn to fulfil its contract with your employer, we require the details of the contact person(s) whom we can contact to discuss and manage the contractual relationship. We will then collect and process your name, contact details (such as phone number and email address) and role or job title and record these in our systems. We will process the data for as long as you are the designated contact person for El-Björn at the company you are employed by.

We also use your data to market El-Björn’s products and services to the company you work for. El-Björn has a legitimate interest in marketing its products and services. You can object to receiving further information from us at any time by clicking on the unsubscribe link in our newsletters, which will unsubscribe you from all our future newsletters sent by email.

Job applicants
If you apply for a job at El-Björn, we will process your personal data as follows.

When you apply for a job at El-Björn, you submit certain data, i.e. your name, personal identity number, contact details and CV. Your application may also contain other data if you voluntarily add such data.

We need to process this data in order to review your application. El-Björn has a legitimate interest in reviewing potential employees, and the data will also be necessary if a contractual relationship is formed between us and you on the basis of an employment contract. El-Björn also has legal obligations to fulfil during application procedures.

The data will be processed by El-Björn’s HR department and by the head of the department in which you have applied for a job, in order to be able to make a recruitment decision on the vacancy at hand.

We will retain your data for two years in relation to your application for the position in question. We are required to do this in case someone claims that El-Björn has not followed the applicable law in the recruitment process, for example, if someone claims to have been discriminated against and El-Björn needs to defend itself against such a claim. In such instances, the data is used solely for this purpose. If you send us an open application, we will retain your data for one year; if you are not considered for recruitment during this period, we will delete your data.

 

Employee
If you are employed by El-Björn, we process your personal data as follows.

El-Björn may process the following personal data that is collected during the recruitment process, at the start of your employment and throughout the course of your employment.

Basic personal data: Name, personal identity number, gender, telephone number, home address, other private contact details, employment number, bank and account details, date of employment, date of termination of employment, level of employment (as a percentage of a full-time role), length of employment in years, manual worker / office worker, and other basic personal data where required.

When hiring: Employer, date of hiring by El-Björn, date of termination of the contract with El-Björn, type of contract.

For carrying out and planning work: Manager, manager’s manager, job title, department, business area, education/skills, level of education, performance in the role.

Personnel management and other HR-specific personal data: Weekly working hours, daily working hours, contact details of the next of kin, cost centre, job evaluation, monthly salary, salary progression, bonus scheme, health information, rehabilitation, absences, manager, assigned organisational level and where necessary other relevant data for human resources management and HR-specific personal data.

Communication: Personal data required to give employees access to El-Björn’s computer systems and networks, including work email, IP addresses and usernames for logging in, as well as other types of personal data logged when using computer systems and networks.

El-Björn may collect and process employees’ personal data for the following purposes, among others. This list is not exhaustive and is instead intended to provide an overview of El-Björn’s reasons for processing employees’ personal data.

• carrying out administration and management of employment at El-Björn
• ensuring internal management of work, planning and managing the workforce, balancing the need for and availability of different resources, and resource allocation
• managing recruitment, skills development, career planning and development, evaluation and monitoring of employee performance
• managing benefits, payroll, remuneration, taxes and insurance
• managing business travel and travel insurance
• providing employees with access to internal company information systems and other resources; supporting the safe, secure and efficient use of internal information channels such as email and other internet or telephony-based services; ensuring that business-critical data and other El-Björn assets are secure and protected
• carrying out financial planning, reporting, preparation of the budget and analysis work
• ensuring a healthy and safe working environment
• monitoring the application of internal policies and other regulations, protecting El-Björn’s physical and intellectual property rights, preventing fraud and other illegal activities
• managing work-related disputes and complaints, such as compensation claims, acting in accordance with other applicable legal obligations that El-Björn may be subject to due to the employee’s employment at El-Björn.

 

The legal basis for the processing of personal data is the fulfilment of the employment contract. The legal basis also consists of El-Björn’s obligation to process personal data in a certain way as a result of legislation, collective agreements or other provisions, for example in relation to the Swedish Tax Agency and insurance companies. The legal basis may also be that El-Björn, after a balancing of interests, has the right to carry out the processing. Furthermore, El-Björn may process personal data on the basis of the employee’s specific consent.

If the processing is necessary for the fulfilment of a contract or a legal obligation, the employee may not object to the processing. If the processing is based on a balancing of interests, any objection to the processing shall be reviewed on a case-by-case basis.

El-Björn applies appropriate technical and organisational security measures to protect personal data from situations such as loss, misuse and unauthorised access.

Only persons within El-Björn who, due to their role need to process personal data in accordance with the above purposes, have access to said data.

El-Björn may disclose personal data to data processors, other companies within the group or third parties as described below in accordance with applicable data protection laws.

• To data processors. El-Björn may engage data processors for business purposes as part of its normal operations, such as outsourcing the processing of employee payroll or IT operations to an external supplier. In such cases, El-Björn will require the controller to use appropriate technical and organisational security measures to protect employees’ personal data and to ensure that all processing of employees’ personal data takes place in accordance with El-Björn’s instructions.
• To authorities if El-Björn has an obligation to do so or if El-Björn needs to protect its rights or those of third parties.
• To third parties in connection with the sale or other transfer of part of El-Björn’s operations.
• To third parties in the event of an emergency where the health and safety of the employee or another person is at risk.
• To third parties to defend El-Björn’s rights, e.g. in connection with labour law disputes.
• To an authority and/or employer organisation for salary statistics.

El-Björn will process and retain employees’ personal data for as long as is necessary in relation to the purposes for which the data was collected.

Some personal data will be deleted at the end of the employment. Other personal data will be retained for a longer period of time, because El-Björn is subject to a legal obligation to retain the personal data, for example in order to draw up a proof of employment certificate or to prove that correct tax deductions have been made, or because El-Björn requires the data to assert its rights. Data will be deleted when the windows in which to make claims against El-Björn close (statute of limitations).

Some personal data may be retained for a longer period of time, for example, data on length of service is retained until the employee reaches retirement age, in accordance with the Employment Protection Act. Records of contributions to pension schemes may be retained for as long as the employee is alive.

Employees may access further information about the processing of personal data from HR or their line manager.

 

Your rights
You are always entitled (with certain restrictions) to exercise the following rights, which can be done by contacting us.

If you wish to exercise these rights, we may ask you to first prove your identity and/or provide details that will allow us to identify the data we process about you.

• Object to our processing of your personal data. In certain circumstances, you may object to our processing of your personal data. Where such circumstances exists, we will suspend all processing in relation to you, for the purpose for which you want us to suspend processing.
• Request that our processing of your personal data be restricted. In certain circumstances, you may request that our processing of your personal data be restricted. Where such circumstances exist, we will suspend all processing in relation to you, according to the restriction you want us to apply.
• Be informed about our processing of your personal data. If you exercise this right, you will receive a description and a copy of the personal data that we process concerning you.
• Request that your personal data be deleted (right to be forgotten). If you exercise this right, we will delete all personal data relating to you that we process, unless we are required to retain your data due to an obligation we are subject to, for example by law or contract.
• Request that any incorrect data concerning you be rectified. If you exercise this right, we will rectify the incorrect data.
• Withdraw your consent. If you notify us that you withdraw your consent, where our processing of your personal data is based on your consent, we will cease all processing and delete your data in respect of any consent-based processing.
• Complain about our processing to the Swedish Authority for Privacy Protection, https://www.imy.se/en/.

There is no fee for exercising your rights. However, if your request is manifestly unfounded or unreasonable (for example, unnecessarily repetitive), we reserve the right to charge a reasonable administrative fee or to refuse to fulfil your request.

This policy may be amended over time. This version of the policy was drawn up on: 19 December 2018.