We at Carl-Olof och Jenz Hamrins Stiftelse take the privacy of our stakeholders, suppliers, and applicants very seriously. We want to ensure that your personal data are kept updated, protected, and managed correctly on a continuous basis. Our priority is to make you feel confident when you share your information with us, when you contact us, and when you utilize any of our services. In order to provide you with our services properly, we need to process certain types of personal data. The term ‘processing’ refers to the collection, storage, handling, changing, and use of personal data. This privacy statement explains how we handle your personal data and what your rights are.
Personal Data Controller
Carl-Olof och Jenz Hamrins Stiftelse is a personal data controller and is thus responsible for the processing of your personal data. Personal data that we collect will only be used by us unless otherwise stated when you register or in the information that you receive after contacting us.
Please contact the Carl-Olof och Jenz Hamrins Stiftelse via one of the addresses below if you have questions about how we process your personal information.
Corporate registration number: 556098-9625
Postal address: Skolgatan 24, 553 16 Jönköping, Sverige
Street address: Skolgatan 24, 553 16 Jönköping, Sverige
E-mail: info@herenco.com
Phone: +46 (0)36-550 17 00
Protection of your personal data
We protect your personal data using a variety of technical and organizational measures. To prevent any unauthorized access to our systems, we continuously update and test our security technology. Our employees are only permitted access to data on a need-to-know basis in order to perform their duties. As part of our information security training, we make sure that our staff understands the importance of confidentiality and how to protect personal data.
How we collect and use (process) personal data
In order to provide our services, we process personal data in the following situations and for the following purposes.
- Personal data is not kept for longer than necessary.
- This data is collected to manage and review your application, and to contact you. We use information from the thesis, grades, and contact information to manage and review your application.
- We will delete your information after we have announced the scholarship winner.
For the provision of products and services
Data is processed so that we can manage, deliver, and charge for services and products we provide as described in the contract or agreement. We also process personal data to enable us to handle any claims or complaints. Lawful basis: performance of a contract.
Retention period: Under the provisions of the Swedish Accounting Act (Bokföringslagen), we are required to keep financial records for a period of seven years for the purposes of accounting. Other personal data are retained for a period of three years after the last time a purchase was made.
In our communications
We process personal data in connection with our communication with stakeholders, such as suppliers and applicants, when we send you information or contact you about our products and services. We consider it very important that our contacts receive information about us, our products and services. Lawful basis: legitimate interest.
Retention period: Three years following the last contact.
To ensure compliance with legislation
Data is processed for the purpose of complying with our statutory obligations.
Lawful basis: Legal obligation
Retention period: As required by applicable laws.
When and how we share personal data with others
All personal data that we process are held by our IT operations providers, which are based in EU/EES countries. Data about you is never sold to third parties and is only shared to enable those companies to provide our customers with products and services. If that is the case, personal data may only be used to provide products and services to our customers. Data Processing Agreements containing the legally required provisions about how your personal data may be handled are always in place whenever we share your data with a third party.
In some circumstances, the company may be forced to disclose personal information if required by law or if instructed by a government agency. Additionally, we may be compelled to disclose personal data for legal reasons or to detect and prevent fraud.
Individual rights
GDPR gives you several rights in regard to how your personal data is managed. For any questions or concerns about your rights, please contact us via one of the above means. To ensure the accuracy of our data, we will correct, update, delete, or de-identify it as needed. Whenever you find any data to be inaccurate or misleading, you should inform us right away. If you think we have been processing your personal data incorrectly in any way, you have the right to complain to the supervisory authority, which is the Swedish Data Protection Authority (Integritetsskyddsmyndigheten). Contact information can be found under the heading “Supervisory Authority”.
Right to be informed
At no cost, you are entitled to be informed once a year of which of your personal data we process. Specifically, the information we provide will identify what types of personal data we hold about you, our purposes for processing your data, if we have shared your data with any third party, if so, with whom, the source of the data, if it was not collected directly from you, and how long we plan to retain your data.
Right to rectification
You may ask us to correct or complete your information if you believe it is inaccurate or misleading. Our response to a request for rectification also includes notifying the companies with whom we have shared personal data.
Right to erasure
The data we hold about you can be erased upon your request in some circumstances, for instance, if the data no longer serve the original purpose for which they were collected. The right to erasure does not apply if the processing of personal data is necessary for the performance of our contract with you as a customer or supplier, or to comply with a legal obligation. Whenever we erase personal data, we inform any other companies with which we shared that the data must be erased.
Right to restrict processing
The right to request the restriction of your personal data may apply to you in certain circumstances, for instance, in the event that your data are inaccurate and that you have requested them to be einav.peretz-andersson@hamrinfoundation.com
Supervisory authority
The contact details of the supervisory authority, the Swedish Data Protection Authority (Integritetsskyddsmyndigheten):
Phone: +46 (0)8-657 61 00
E-mail: imy@imy.se
Postal address: Integritetsskyddsmyndigheten (Swedish Data Protection Authority), Box 8114, 104 20 Stockholm, Sweden