Confidentiality Policy

Q-linea maintains the highest level of respect for your confidentiality. We have adopted this Confidentiality Policy to support our commitment to upholding your rights in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”). This policy may be updated from time to time.

Which information do we collect and how do we use it?

Q-linea collects and uses personal data from employees, job applicants, customers, suppliers or anyone else who wants to utilise the company’s services and products as well as from anyone who contacts us. Q-linea may also collect and use personal data from potential customers and/or suppliers. The purpose of processing this personal data can vary. However, your personal data is always processed with a legal basis, as defined in accordance with the provisions set for in GDPR.

Employees

Q-linea has prepared a confidentiality policy specifically for the company’s employees, consultants and elected representatives.

Job applicants

For job applicants, we save the personal data provided in your application/notice of interest and CV. The company uses this personal data for recruiting purposes. The legal basis for the processing of this personal data is stated in Article 6(1)(f) of GDPR: balance of interests. Processing is permitted because it is necessary for meeting our legitimate interest in handling your application/notice of interest concerning possible employment with us.

You are informed of the contents of this Confidentiality Policy, especially of your rights, when you apply/submit a notice of interest.

Customers

For customers, Q-linea collects and uses personal data such as company information as well as names and contact information of employees at the company. The data is used to fulfil our contractual obligations with our customers. These personal data processing activities have their legal basis in Article 6(1)(b), 6(1)(c) and 6(1)(f) of GDPR: contract, legal obligation and balance of interests. Processing is permitted because it is necessary for fulfilling customer contracts and legal obligations pertaining to customer contracts, and because it is necessary for meeting our legitimate interest in handling customer relations.

Suppliers

For suppliers, Q-linea collects and uses personal data such as company information and names and contact information of employees at the company. The data is used to fulfil our contractual obligations with our suppliers. These personal data processing activities have their legal basis in Article 6(1)(b), 6(1)(c) and 6(1)(f) of GDPR: contract, legal obligation and balance of interests. Processing is permitted because it is necessary for fulfilling customer contracts and legal obligations pertaining to customer contracts, and because it is necessary for meeting our legitimate interest in handling supplier relations.

Potential customers/suppliers

Q-linea collects and uses personal data related to potential customers and, where applicable, suppliers, including company information as well as names and contact information of employees at the company. The data is used for marketing purposes in customer relationship management and to be able to contact so-called prospects. These personal data processing activities have their legal basis in Article 6(1)(f) of GDPR: balance of interests. Processing is permitted because it is necessary for meeting our legitimate interest in performing customer relationship management and for contacts with prospects.

Answers to questions, etc.

When you communicate with us, we process your personal data in the form of your name, e-mail address and, in certain cases, telephone number and address as well as any comments you submit in your communication with us. These personal data processing activities have their legal basis in Article 6(1)(f) of GDPR: balance of interests. Processing is permitted because it is necessary for meeting our legitimate interests in handling your questions and comments.

Fulfilling legal obligations

Q-linea also processes relevant personal data to fulfil legal obligations, such as those resulting from accounting and tax legislation. These personal data processing activities have their legal basis in Article 6(1)(c) of GDPR. Processing is permitted because it is necessary for Q-linea to be able to fulfil its legal obligations according to the law.

Establishment, exercise and defence of legal claims

Q-linea may process relevant personal data to establish, exercise and defend legal claims in the case of a dispute between you and Q-linea. These personal data processing activities have their legal basis in Article 6(1)(f) of GDPR. Processing is permitted because it is necessary for Q-linea to be able to fulfil its legitimate interest in establishing, exercising and defending legal claims.

How long do we save your personal data?

How long your personal data is saved with us varies depending on why the data was collected. Your personal data is saved as long as it is needed to fulfil the purposes stated in this Confidentiality Policy, unless it is necessary to save the personal data for longer than stated in this Confidentiality Policy or it is permitted by law. The following criteria are used to determine how long we save data:

  • as long as we have an ongoing relationship with you (either as a private individual or in your role as an employee at one of our corporate customers, suppliers or partners)
  • as long as required according to the legal obligations that Q-linea is bound by (for example, accounting and tax law)
  • as long as appropriate in light of Q-linea’s legal situation

Disclosure and transfer of personal data

Q-linea may release personal data to processors acting on Q-linea’s behalf as well as to other external parties, such as IT providers or other service providers who process personal data according to Q-linea’s instructions. If the release of personal data means transferring it outside the EU/European Economic Area (EEA), Q-linea will ensure that agreements are signed between Q-linea, as the party sending the personal data, and the external party in question, and/or that other security measures are taken before such a transfer takes place.

You have the right, upon request, to obtain a copy of documentation that can prove that appropriate security measures were taken to protect your personal data when it was transferred outside the EU/EEA. In this case, please contact us at the contact information provided in this Confidentiality policy.

Security

Q-linea has taken appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration and destruction. To ensure that personal data is processed securely and confidentially, we use a tamper-proof data network with industry-standard firewalls and password protection. To ensure the confidentiality of the personal data you provide via the Internet, we may use encryption techniques when we transfer such personal data over the Internet to our servers.

What rights do you have?

Right to access

You have the right to obtain evidence of whether we process your personal data and, if we do, how we process it. Exactly which information you are entitled to is stated in Article 15 of GDPR.

If we process your personal data, you have the right to a copy of it.

Right to rectification

You have the right to, without unnecessary delay, have your personal data corrected if it is incorrect or misleading. You also have the right to complete incomplete personal data.

Right to erasure (“the right to be forgotten”)

Under certain circumstances, you have the right to have your data erased, for example, when the data is no longer necessary for the purpose for which it was originally collected.

Erasure of personal data may not be possible, however, if the data is still needed to fulfil a contract with you or if we are obligated to process it according to law. Exactly which information you are entitled to have erased is stated in Article 17 of GDPR.

Right to object

You have the right to object to the processing of your personal data at any time on the grounds of a balance of interests. If we have no legitimate grounds to continue processing the personal data, we will cease processing.

If the personal data is processed for the purpose of direct marketing, we will always cease processing if you object to it.

Right to restriction

Under certain conditions, you have the right to request restriction of a specific processing of your personal data, with the implication that we will temporarily cease processing your personal data other than with your consent, except for the purpose of storing, legal claims or to protect the rights of another natural person or legal entity.

Right to data portability

In cases where personal data has been received by Q-linea from you, you have the right to request a machine-readable copy of the personal data processed on the basis of your consent or on the basis that processing is necessary to fulfil an agreement with you (data portability), and to request that the information be transferred to another controller (if possible).

Right to revoke consent

You always have the right to revoke your consent to personal data processing in cases where the processing is based on your consent.

Complaints to the supervisory authority

If you believe that we have not processed your personal data in accordance with the applicable data protection regulation, you may file a complaint with the relevant supervisory authority, in this case with the Swedish Data Protection Authority. You may also complain to the supervisory authority where you work or reside. Link to register, see below.

https://www.datainspektionen.se/globalassets/dokument/blankett-klagomal.pdf

Contact us

If you have questions about this Confidentiality Policy or the processing of your personal data, or if you want to erase or correct incorrect information or otherwise exercise your rights according to GDPR, contact us at the contact information below:

Personal data controller is Q-linea AB, Corporate Registration Number 556729-0217

Dag Hammarskjölds väg 52 A
SE-752 37 Uppsala
contact@qlinea.com