Privacy Policy – Information about the processing of your personal data
APV Utbildarna i Sverige AB, corporate ID no. 559243-3006, (“APV Utbildarna”, “we”, “our” or “us”) is the data controller for the processing of personal data handled within our business, including this website. This policy explains how we process your personal data in connection with your relationship with us as a website user or customer.
If you have any questions about our processing of your personal data, please feel free to contact us using the contact details in section 7 below.
What types of processing (which is a collective term in the EU’s General Data Protection Regulation (“GDPR) for actions related to your personal data) we perform regarding your personal data depends on the context in which you come into contact with us and the capacity in which you are acting. To make it easier for you, we have divided the policy into different category sections based on your relationship with us, where you can read about the processing activities performed under each category. Following the category sections is information in several sections that apply to all types of personal data processing. In these sections, you can read, among other things, about who we share your personal data with, where we process your personal data, what rights you have vis-à-vis us, and how you can contact us. Below is an overview of each section.
- What personal data is used for what purpose, on what legal basis, and for how long?
- Who do we share your personal data with?
- Where do we process your personal data?
- What rights you have in relation to us
- Cookies and other tracking technologies
- Changes to and updates of the Privacy Policy
- The easiest way to contact us
Please note that our website contains links to websites that are managed by parties other than us. These websites have (or should have) their own rules on how that company processes personal data. We have no control over what happens there, nor can we take responsibility for it. If you use these websites, you should therefore take a closer look at that website's privacy policy.
- What personal data is used for what purpose, on what legal basis, and for how long?
- Customers
For what purposes we process your personal data, i.e. what we do and why | What personal data we process and where it comes from | What is our legal basis for processing? | How long do we process your personal data for the specific purpose? |
To administer your purchase, including handling billing, issuing certificates, and reminding you when it's time to renew your course. | From you:
| Our agreement with you. | From the time of purchase and for the period thereafter that is necessary to remind you that your course needs to be renewed. Since different courses have different repetition cycles, the time varies depending on the course you are taking. |
To handle customer service matters by communicating with you via chat, telephone, and email, for example, to investigate complaints and claims and to guide you regarding the training you need. | From you:
| Our legitimate interest in being able to handle customer service matters. | For 12 months from the date you contacted us. |
To manage and administer your user account, for example, to grant login access and to give you access to the right courses. | From you;
| Our agreement with you. | From the date of your last purchase using the current email address and for the period thereafter that is necessary to remind you that your course needs to be renewed. Since different courses have different renewal cycles, the time varies depending on the course you are taking. |
To send out our newsletters. | From you;
| Your consent. | From the moment you give your consent until you withdraw it. |
To comply with legal obligations, such as documenting transactions in accordance with accounting legislation. | From you:
| Our legal obligation. | From the time the purchase was made and the time required to fulfill the respective obligation, for example, payment-related data is stored for seven (7) years in accordance with the Accounting Act. |
To assert and defend ourselves against legal claims. | From you:
| Our legitimate interest in being able to defend ourselves against and assert legal claims. | From the date of purchase and for ten (10) years thereafter if you, as a customer, represent a business, or for three (3) years if you, as a customer, are a private individual. |
- Website users
For what purposes we process your personal data, i.e. what we do and why | What personal data we process and where it comes from | What is our legal basis for processing? | How long do we process your personal data for the specific purpose? |
To optimize your experience of the website, for example by compiling and analyzing statistics. | From you:
| Our legitimate interest in providing and improving our website. | This processing takes place during your visit to the website and is stored for a maximum of 12 months thereafter. |
To provide customized marketing based on your interests and your use of the website.
If you do not want us to process your data in this way, please let us know by contacting us. We will then stop using your data for marketing purposes. | From you:
| Our legitimate interest in being able to provide you with marketing and offers about our services. | This processing takes place during your visit to the website and is stored for a maximum of 12 months thereafter. |
- How have we assessed the balancing of interests when the legal basis for processing your personal data is our legitimate interest?
For certain purposes, we process your personal data and rely on our legitimate interest as the legal basis for the processing. When assessing the legal basis, we rely on a balancing test, through which we have determined that our legitimate interests in the processing outweigh your interests and fundamental rights not to have your personal data processed. We have specified our legitimate interest in the tables above. Please contact us if you would like to read more about how we have conducted this test. You will find our contact details in section 7 below.
- Who do we share your personal data with?
In order to fulfill the purposes set out in section 1 above, we sometimes need to use third-party services. In such situations, we may transfer your personal data to such third parties, e.g. authorities or third parties that provide services to us. We always exercise great caution when transferring your personal data, and this is only done in accordance with applicable law and this privacy policy. When we share your personal data with third parties, we ensure that the recipient is obliged to process your personal data in accordance with the GDPR and this privacy policy, e.g. by entering into personal data processing agreements with the third parties with whom we share your personal data. In such agreements, the third party is instructed on how they may and may not process your personal data.
Your personal data may be transferred to the following categories of recipients:
Who are the recipients? | Categories of persons whose personal data may be shared with the recipient | Personal data shared with the recipient | Purpose and legal basis for sharing your personal data |
Authorities |
| All personal data requested by a public authority, if we are required by law to provide such personal data, such as name and social security number. | In order for us to fulfill a legal obligation, or with your consent (if you have requested that we disclose personal data about you to a public authority). |
IT suppliers, suppliers of digital solutions, such as for conducting marketing analyses. |
| All personal data contained in documents stored on our servers, such as names, social security numbers, and emails. | Our legitimate interest in being able to conduct our business. |
Advisors, such as legal, financial, or tax advisors |
| Any personal data that the advisor needs to perform the services for which we have engaged the advisor, e.g., personal data relating to your agreement with us. | Our legitimate interest in being able to obtain help and advice regarding our business. |
Providers of various services such as payment intermediaries and credit companies, analysis of information. |
| Any personal data that the advisor needs to perform the services for which we have engaged the advisor, e.g., personal data relating to your agreement with us. | Our legitimate interest in being able to access services that are necessary for the operation of our business. |
Potential buyer, new owner, the Company's advisors, and potential buyer's advisors |
| All personal data that will be transferred in connection with the acquisition. | Legitimate interest: In the event that APV Utbildarna is sold to or integrated with a third party, your personal data may be shared for the purpose of conducting due diligence, completing the merger or acquisition, and subsequently operating the business. |
- Objections to the sharing of your personal data
You have the right to object to the processing of your personal data on grounds relating to your particular situation. For more information about your right to object, see section 4.5 below.
- Where do we process your personal data?
If APV Utbildarna or a business we work with is located in a country outside the EU/EEA, your personal data may be transferred to that country, which may not maintain a level of protection equivalent to that within the EU/EEA. In such cases, we will take the necessary measures to protect your personal data in connection with such transfers, e.g. by entering into an agreement with the recipient and attaching the European Commission's standard contractual clauses in accordance with Implementing Decision 2001/497/EC, 2010/87/EU, or 2021/914/EU to ensure that your personal data is adequately protected.
Right to receive a copy – If you would like additional information about transfers to countries outside the EU/EEA, or if you would like to receive a copy of the safeguards we have implemented, you can contact us using the contact information provided in Section 7 below.
- What rights you have in relation to us
Under applicable law, you have certain rights when we process your personal data. Below, we describe each right and what it means for you in relation to the personal data we process.
If you wish to exercise any of these rights, learn more, or have questions, please contact us using the contact details provided in section 7 below.
- Right to information
You have the right to be informed about how we process your personal data. In this privacy policy, we describe in general terms what personal data we process in different contexts. If you would like to know more about whether we process your personal data, and to what extent, you can contact us as above and request information about what personal data we process.
- Right of access (register extract)
We can also provide you with a copy, known as a register extract, of the personal data we process. In the register extract, we provide information about, among other things, the categories of personal data that are processed, what the personal data are used for, how long the data will be stored, with whom the personal data have been shared, and where the data come from.
- Right to rectification
We strive to always have accurate personal data about you and update it when necessary. If you discover that we are still processing inaccurate data about you, you have the right to contact us as above to have it corrected. You also have the right to ask us to supplement incomplete data if this is relevant to the purposes for which your data is processed, by providing us with additional information.
- Right to erasure (right to be forgotten)
You have the right to request the deletion of your personal data. However, this right is not absolute. Certain conditions must be met for us to delete your data. For example, you may have the right to have data deleted if it is no longer necessary for the purposes for which it was collected, if you withdraw your consent, or if you object to our use of your data for direct marketing.
The right to erasure is also limited in cases where an exception applies to the data in question. For example, we have the right to retain the data if it is necessary to establish, assert, or defend legal claims.
- Right to object
You always have the right to object to our processing if the legal basis for the processing (as specified for the various types of processing in section 1 above) is that it is necessary for purposes related to our legitimate interests.
If you object, we will no longer be entitled to process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if it is for the establishment, exercise, or defense of legal claims. If we believe we have such legitimate grounds, or if the data is necessary for the establishment, exercise, or defense of legal claims, we will notify you of this and the reasons for the assessment.
You may also object to your personal data being processed for marketing purposes (including profiling if this is part of this). If you do so, we will cease processing for these purposes.
- Right to restriction
You may request that the processing of your data be restricted, for example if you believe that the data we hold about you is incorrect or if you consider the processing to be unlawful. You may also request that the processing of personal data be restricted during the period in which we are checking whether our legitimate interest outweighs your privacy interest when you have objected to the processing (see more about this in section 4.5 above).
- Right to transfer personal data (data portability)
If the legal basis for our processing is consent or the performance of a contract, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. However, this requires that the processing is automated (i.e., not in physical form on paper). If it is technically possible, and you so desire, we can transfer your data to another data controller.
- Right to withdraw your consent
You may withdraw all or part of the consent you have given at any time, with effect from the date of withdrawal (i.e. the processing of personal data that we have carried out prior to the withdrawal is not affected). You can do this by contacting us using the contact details in section 7 below. In the case of direct marketing via email, withdrawal can be done via a link in the relevant mailing.
- Right to lodge a complaint with the competent supervisory authority
You may lodge a complaint with IMY (or another supervisory authority) if you believe that our processing of your personal data does not comply with applicable law.
- Conditions for exercising your rights
To protect your privacy, we may, if necessary, require you to verify your identity when you contact us to exercise your rights. We will process your request to exercise your rights promptly. Your request will normally be answered within one month of the date we receive it. Only in the case of an unusually complex request, or if we have received a large number of requests, may the response time be extended by up to two months. If the response time is extended, you will be notified.
- Cookies and other tracking technologies
In order to deliver our services with the highest possible quality, we use cookies and similar tracking technologies on our website.
I samband med att du besöker webbplatsen får du en fråga om du samtycker till vår användning av cookies (med undantag för sådana nödvändiga cookies som inte kräver ditt samtycke). Du kan när som helst ta bort cookies från din webbläsare och justera dina inställningar för användningen av cookies. Detta kan du läsa mer om i vår cookiepolicy som du hittar [https://kravkompetens-techops.wisdmlabs.net/cookie-policy/]. I cookiepolicyn beskriver vi bl.a. vilka typer av cookies vi använder, vad de används till och hur länge de lagras.
- Changes to and updates of the Privacy Policy
We may make changes to the privacy policy if this is necessary to describe how we process your personal data. All such changes will be published here on the website, which is why you should read through the privacy policy regularly and each time you use our services.
- The easiest way to contact us
If you have any questions or comments regarding the processing of your personal data, you can reach us using the contact details below.
Data controller | |
Name | APV Utbildarna i Sverige AB |
Address | Drakegatan 10, 412 50 Gothenburg, Sweden |
Telephone number | 010-4911211 |
Cookie Policy