Privacy Policy
Policy for the Processing of Personal Data
Purpose
HIAK AB values privacy. Counterparties should feel confident when entrusting us with their personal data. This policy is based on applicable data protection legislation (GDPR) and clarifies how we work to uphold rights, obligations, and privacy.
The purpose of the policy is to ensure that the counterparty understands how HIAK AB processes personal data, what it is used for, who has access to it, under what conditions, and how the counterparty can exercise their rights.
Background
HIAK AB processes personal data to fulfill the company’s obligations. The guiding principle is to process no more personal data than necessary for the intended purpose. The company always strives to minimize the use of sensitive data.
Personal data may be necessary to provide good service in terms of follow-up, analysis, and communication, as well as in interactions with customers and suppliers. It is also required to comply with laws and regulations.
Counterparties have the right to object to the company’s use of personal data for direct marketing. If HIAK AB intends to use personal data for direct marketing, the counterparty shall be informed and asked for consent.
Guidelines
HIAK AB processes personal data only when there is a legal, factual, or business-related basis. The company does not process personal data unless it is necessary to fulfill legal or contractual obligations. Examples of processed personal data include:
Non-sensitive data:
- Name
- Address
- Telephone number
- Email address
- Job title
- Information voluntarily submitted by the counterparty
- Content published by the counterparty, i.e., user-generated content
Sensitive data:
- Salary information
- CVs for job applications
- Union membership (employees)
- Medical certificates (employees and CEO)
- Personal ID numbers (employees, board members, and CEO)
- Bank account numbers and related details (employees)
- Employment number
- Username
- Working hours, absences, etc.
- Photographs
- Etcetera.
HIAK AB will obtain consent before processing personal data when there is no legal, factual, or business-related basis.
Consent is given by the counterparty either by accepting the company’s data processing policy or when signing an employment contract. Consent may be withdrawn at any time, in which case HIAK AB will cease processing existing data and stop collecting new data, provided it is not required to fulfill legal or contractual obligations.
HIAK AB may access personal data in the following ways:
- Information provided directly to the company
- Data that is registered when visiting the company’s website
- Data obtained from public records
- Data obtained when a counterparty hires one of our employees
- Data obtained during contact with the company, job applications, visits, or other interactions
Counterparties may contact the company’s Data Protection Officer to request their personal data or for other inquiries regarding personal data.
Security
HIAK AB Group has procedures and practices in place to ensure that personal data is handled securely. The principle is that only employees or individuals within the organization who need access to sensitive personal data for their job duties should have it.
Regarding sensitive data, high data security applies, meaning strong protection of individuals’ personal information.
Security systems are developed with a focus on individual privacy and provide a high level of protection against breaches and alterations that could pose a risk to personal integrity.
HIAK AB employs IT security measures to ensure that personal data is processed securely and protected.
We do not transfer personal data except as explicitly stated in this policy.
HIAK AB does not disclose sensitive personal data to third parties without consent or unless necessary to meet legal or contractual obligations. Where disclosure of sensitive personal data to third parties occurs, confidentiality agreements are in place between the parties.
