Privacy Policy 

Our processing of your personal data

You have been directed here because PipeChain AB (556578-2504), PipeChain SCM Tyringe AB (556124-4962), PipeChain Networks AB (556619-0624) and PipeChain SCM AB (556196-3678) (together the ”PipeChain group”, ”we” or ”us”) processes your personal data, which we do because you are an important person for us and our business. The processing takes place in accordance with current regulations, including the data protection regulation (“GDPR“) and what is otherwise stated below.

In addition to ensuring that our processing of your personal data is correct and transparent in relation to you, we always strive to maintain a high level of security in all processing of personal data where we continuously assess and take into account both technical and organizational risks in order to best protect your personal data from unauthorized access, use, alteration, and deletion.

What is personal data and what is processing

“Personal data” is any kind of information that can be directly or indirectly linked to a physical person who is alive. This can be information such as name, address, phone number and email address, but also more complex information such as IP addresses if these can be linked to a natural person.

The term “processing of personal data” covers almost any form of action that can be performed on personal data. This concerns, for example, collection, registration, structuring, storage, processing and transmission.

Data controller

The data controller for the processing of your personal data is the company in the PipeChain group with which you have direct contact and/or have applied to work for, i.e. PipeChain AB, PipeChain SCM Tyringe AB, PipeChain Networks AB or PipeChain SCM AB. In some cases, responsibility for personal data may be joint between several companies within the PipeChain group or separated. In addition, the companies can in some cases act as data processors to each other.

The companies in the PipeChain group have entered into a so-called intra-group agreement to ensure a high level of protection for your personal data. If you have any questions regarding this agreement or how we process your personal data, please contact us via the contact details below.

What kind of personal data we collect and why

Our processing of your personal data is described in four sections below, one or more of which may concern you depending on the relationship you have with us, followed by a general description of how and what you can contact us about regarding our processing of your personal data.

• (1) Section 1 – Networking, marketing, and knowledge exchange – covers the personal data processing that takes place in connection with us communicating and maintaining our networks for marketing and knowledge exchange as well as for managing our suppliers.
• (2) In Section 2 – Jobseekers – we address you who have or plan to submit a job application to us, or who are part of a recruitment process for a company in the PipeChain group.
• (3) Section 3 – Personal data of customers and customer representatives – explains how we process personal data about you as a customer. Either as a private person or as a representative of a company or other business.
• (4) In Section 4 – General information and your rights – you can read more about who can access your personal data, what rights you have as an individual, and how you can contact us to find out more.

1. Networking, marketing, and knowledge exchange

1.1 Why we process (Purpose)

We process your personal data to maintain our contacts and networks within our industry and among our existing and potential customers. We further process your personal data to keep our knowledge and information about you up-to-date and current, as well as to market our services in relation to existing and potential customers and keep in touch with our suppliers.

We also process personal data to fulfill our accounting obligations in connection with representation and in relation to our suppliers.

1.2 How we process

We collect the personal data that you voluntarily provide by contacting us and/or by filling in one of our forms on the website and compile them, i.a. based on the type of service or product we judge that you, or the company you represent, are interested in.

1.3 What we process

We mainly handle your contact details in the form of name, telephone number, and email address, your role in your organization, and information about which type of service or product we perceive to be most interesting and relevant to you. In addition, we also process certain other free text information that you provide via email or our forms. We urge you to never send sensitive information to us via email or in our free text fields.

1.4 Legal basis for processing

1.4.1 Legitimate interests

We base our processing of your personal data, which we describe above in sections 1.1 – 1.3, on the legal basis of legitimate interest. In assessing our legitimate interest, we take into account and weigh your interest in privacy against our interest and purpose (as set out above) in carrying out the processing. We then make a balance between these interests in which we take into account both positive and negative effects and conclude that our interest is legitimate.

1.4.2 Legal obligation

We also process your personal data in the form of name, company affiliation, and, where applicable, contact details in order to fulfill our legal obligations regarding correct documentation for accounting of representation and invoicing in accordance with the Accounting Act.

1.5 Collection and possible transfer

The personal data we have about you is primarily collected from you. We share the personal data only with such suppliers as are necessary for the execution of the processing, and within the scope of the purposes stated above. For example:

• (i) Marketing (via advertising agencies, web/media agencies and related distribution and social media).
• (i) IT services (companies that manage the necessary operation, technical support, and maintenance of our IT solutions).

1.6 Collection and possible transfer

We only store your personal data for as long as we deem necessary taking into account what is stated above about our legal basis and purpose for the processing, in this case two years from when we last heard from you. Any personal data processed for accounting purposes is saved as long as required by the Accounting Act.

2. Jobseekers

2.1 Why we process (Purpose)

We process your personal data to administer the recruitment process, handle your application and to be able to assess, compare and match against the needs we have for resources.

We store your personal data as stated below in order to be able to contact you again if a new need arises within the time of storage. We also store your application after the end of the recruitment process in order to protect ourselves against legal claims.

2.2 How we process

We compile the information you sent and compare it with other candidates and with our needs. We limit internal access to your personal data to those employees (e.g. HR manager and CEO) who need it to evaluate your suitability as a candidate in relation to our specific needs and the position you have applied for. We check the information verbally with the references you have provided and supplement the information with information we receive from these references.

2.3 What we process

Primarily, we process such information as you have sent us in your application, i.e. your CV and cover letter, grades and service certificate, including contact details in the form of name, telephone number and email address as well as social security number if you have specified this.

We supplement this information with data and reviews from the references you have provided in order to get the most appropriate picture possible of you as a candidate.

In the event that knowledge or personality tests are to be carried out as part of the recruitment process, you will be informed of this separately.

2.4 Legal basis for processing

2.4.1 Legitimate interests

We base our processing of your personal data, which we describe above in sections 2.1 – 2.3, on the legal basis of legitimate interest. In the processing we describe above, we take into account and weigh your interest in privacy in relation to our interest and purpose (as set out above) in carrying out the processing. We then make a balance between these interests in which we take into account both positive and negative effects and conclude that our interest is legitimate.

2.5 Collection and possible transfer

The personal data we process about you is primarily collected from you. In connection with the application, we may collect personal data from the references you provide to us in the application. We will not share your application unless specifically asked.

2.6 Retention period

We only store your personal data for as long as we deem it justified taking into account what is stated above about our legal basis and purpose for the processing, in this case twelve months from the time of your application (unless you request otherwise, which we will of course respect). If you are employed by us, the data in your application will be stored and processed in accordance with what is stated in our policy for the processing of employee personal data, which is only provided to our employees.

3. Personal data of customers and customer representatives

3.1 Why we process (Purpose)

We process the personal data to perform and administer our services, including possible follow-up and for accounting and invoicing purposes.

The data can also be used for business development, statistics and risk management.

3.2 How we process

We collect the personal data that you voluntarily provide by contacting us and/or by filling in one of our forms on the website and saving it in our systems for order and invoice management. We also compile the data in our systems for customer management and customer care.

3.3 What we process

The personal data we process about you is mainly your contact details in the form of name, telephone number and email address, your role in your organization and information about which type of service or product we perceive to be most interesting and relevant to you. In addition, we also process certain other free text information that you provide via email or our forms. We urge you to never send sensitive information to us via email or in our free text fields.

3.4 Legal basis for processing

3.4.1 Legal obligation

We also process your personal data in the form of name, company affiliation and, where applicable, contact details in order to fulfil our legal obligations regarding correct documentation for accounting of representation and invoicing in accordance with the Accounting Act.

3.4.2 Legitimate interests

In addition to the processing that is necessary to fulfill our legal obligations, we also base certain processing on the legal basis of our legitimate interest. In doing so, we take into account and weigh your interest in privacy in relation to our interest and purpose (as set out above) in carrying out the processing. We then make a balance between these interests in which we take into account both positive and negative effects and conclude that our interest is legitimate.

3.5 Collection and possible transfer

The personal data we store and process about you is primarily collected directly from you. In connection with taking on a new customer, we may need to collect information from public registers such as www.allabolag.se, UC AB and similar to supplement and confirm the information we have received from you about the business you represent as well as about you as a person and other representatives for the business.

In addition to such transfer of your personal data that results from the data being stored with our IT system providers or suppliers, we will not transfer personal data to third parties except in cases where it has been specifically agreed between us and you.

3.6 Retention period

We store your personal data only as long as we deem it necessary, taking into account what is stated above about our legal basis and purpose for the processing. If nothing else is specified, the data is stored during the time that an active customer relationship exists and after the end of the customer relationship for a period of two years or until any warranty periods expire. Personal data processed for accounting purposes is saved as long as required by the Accounting Act.

4. General information and your rights

You have the right, in accordance with current data protection legislation, to request access to the personal data processed about you at any time. You also have the right to have incorrect personal data corrected, to request deletion of your personal data or limitation of our processing of your personal data, exercise your right to data portability and object to the processing of your personal data.

If processing is based on consent, you have the right to withdraw your consent to the processing at any time.

If you wish to exercise any of your rights, please contact us using the contact details below.

You also have the right to lodge a complaint with the applicable supervisory authority at any time (the Swedish Authority for Privacy Protection, www.imy.se) if you think that your personal data is not processed in accordance with applicable data protection legislation.

5. Contact details

If you have questions regarding how PipeChain AB processes your personal data, please contact us via the following contact details:

PipeChain AB

Box 45063, SE-104 30 Stockholm

info@pipechain.com

If you have questions regarding how PipeChain SCM Tyringe AB processes your personal data, please contact us via the following contact details:

PipeChain SCM Tyringe AB

Box 134 SE-282 23 Tyringe

info@pipechain.com

If you have questions regarding how PipeChain Networks AB processes your personal data, please contact us via the following contact details:

PipeChain Networks AB
Box 45063, SE-104 30 Stockholm

info@pipechain.com

If you have questions regarding how PipeChain SCM AB processes your personal data, please contact us via the following contact details:

PipeChain SCM AB

Box 45063, SE-104 30 Stockholm

info@pipechain.com