Personal data comprises all information that can be linked direct or indirect or in any way used to identify a specific individual. This Privacy Statement set out the types of personal information that Nynas AB and its subsidiaries processes, it also contains information required to comply with data regulations. Note that these guidelines never limit the rights under the GDPR or other legally binding provisions.
Personal data may be collected when contacting Nynas AB or one of our subsidiaries. Personal data may also be collected from other sources. The primary type of personal data possessed by Nynas AB comes from employees, emergency contacts of employees, consultants, existing or potential business contacts and job applicants. The information consists mainly of contact details such as names, addresses, phone numbers and e-mail addresses.
Nynas AB always processes personal data in an open, correct and respectful manner, and the kept personal data will be removed when it is no longer relevant for the purposes for which it was collected.
Nynas AB uses so-called cookies to ensure that functions and services at the website nynas.com shall function properly. For more information about cookies at Nynas AB's webpage, please see About Cookies.
Collection of personal data
Nynas AB is the data controller of personal data provided to us. The contact information for the data controller and data protection officer can be found under "Contact information".
Purpose and legal ground for which the personal data is collected
Nynas AB only collects personal data for objectives supported by the applicable data protection regulation. The purpose can, for example, be to fulfill responsibilities as an employer, to sell our products or to perform a service, such as mailing of newsletters requested or subscribed for by the person concerned. The legal ground to process personal data is considered in our business processes. Legal grounds used are, e.g. where we have an agreement with an individual it is the fulfillment of an agreement, and for representatives of business contacts where processing of personal data is performed based on its legitimate interest.
Nynas AB does not process personal data for reasons that are incompatible with the original purpose.
For how long does Nynas AB keep personal data
Nynas AB will keep personal data for the minimum amount of time that is required to fulfil the purposes for which the data was collected, including for satisfying any legal, accounting, or reporting requirements. This applies, for example, when an issue has been resolved or when a contractual relationship has been terminated, and the parties' balances have been finalized. However, some data may need to be retained thereafter, such as data used for statistics or as required under applicable laws, e.g. the bookkeeping act.
Transfer of data to a third party
Since Nynas AB has several group-wide functions, the personal data can be shared with Nynas AB's subsidiaries.
Under certain circumstances, Nynas AB may also transfer personal data to collaboration partners, vendors or other third parties. Where service providers process personal data on Nynas AB behalf (data processors), agreements are entered to ensure that the personal data is processed securely and legally.
Data subject's rights
Right of access
The data subject is entitled to receive information about and to what extent her/his data is being processed by Nynas AB. If such personal data is stored by Nynas AB, you may request information about which category of personal data is being processed, from where the data was collected, for which purpose the process takes place, which legal ground the processing covers, storage time and with whom the data is shared. Nynas AB will send an answer to the address where the person is being registered within a month from having received the request. Additional documentation and information may be requested to establish the identity of the person making the request.
Right to rectification
The data subject has the right to request rectification of her/his data that is being incorrect or being possessed in violation of applicable law.
Right to erasure
Nynas AB erases personal data when there is no legal ground for keeping it. Personal data can be erased if any of the following is true:
- The processing is based solely on a withdrawn consent
- The data is no longer required for the purposes for which they are being processed
- The processing is being done for direct marketing, and the person opposes the processing of the personal data
- The data is not processed under GDPR
- The person opposes processing that takes place based on a balance of interests, and Nynas AB's legitimate interest does not outweigh the person's interest
- Erasure is required to comply with a legal obligation
If data is erased upon request, Nynas AB undertakes to inform any third party with whom Nynas AB has shared the personal data.
Right to a restriction of processing
Processing of personal data may be restricted upon request by an affected person or upon initiative by the data controller. Restriction means that the personal data will be marked so that it, in the future, may only be processed for specific purposes.
Notification obligation regarding rectification or erasure of personal data or restriction of processing
Nynas will communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with GDPR to each recipient to whom the personal data has been disclosed unless this proves impossible or involves a disproportionate effort.
Right to portability
The data subject who has her/his data stored by Nynas AB is entitled to request her/his data in a generally used and machine-readable format, for example for transfer to another party.
Right to object
If Nynas AB processes personal data based on balancing of interests as a ground, it is possible to object to the processing. To do so, you must specify which processing the objection regards.
Right to compensation
It is possible to claim compensation, for example, if Nynas AB's processing of personal data violates the GDPR and has led to damages to the person in question. Claims can be made directly to Nynas AB.
Protection and safety
Nynas AB takes the appropriate organisational and technical security measures to protect personal data from being lost, destroyed, manipulated or made available to unauthorised parties. The measures aim to achieve a sufficient level of security considering the technical capabilities available.
Nynas AB may share personal data with the police or other authority if required to do so by law or by the decision of authority to protect Nynas AB legal interests or to investigate or prevent fraud, crime or security issues.
Changes to the personal data provisions
If there are changes to the provisions of Nynas AB regarding the processing of personal data, it will be announced on this page. If the processing of personal data has been regulated in an agreement with the customer, the provisions of the agreement apply until they are changed.
Contact information
If you have questions related to Nynas AB's processing of your data, please contact our Data Protection Officer (DPO).
E-mail: dpo@nynas.com
You always have the right to make a complaint regarding the processing of personal data to the supervisory authority.
Contact with supervisory authority is made via www.datainspektionen.se or, following name change, to www.integritetsskyddsmyndigheten.se
Latest update: March 2019
