Data & Integrity
Protecting Your Data with Committa
At Committa AB, we take your privacy and data security seriously. We are committed to complying with the General Data Protection Regulation (GDPR) and ensuring that your personal information is handled with the utmost care and transparency.
​
Our Approach to Data Privacy
Transparency: We are transparent about how we collect, use, and store your data. Our privacy policy outlines our data processing practices and your rights regarding your personal information.
Data Minimization: We only collect and process personal data that is necessary for the purposes outlined in our privacy policy. We do not retain your data longer than necessary and take steps to ensure its accuracy and relevance.
Security Measures: We implement appropriate technical and organizational measures to safeguard your data against unauthorized access, disclosure, alteration, or destruction. This includes encryption, access controls, and regular security assessments.
User Rights: Under the GDPR, you have the right to access, rectify, and delete your personal data. You also have the right to restrict or object to processing and the right to data portability. We respect these rights and provide mechanisms for you to exercise them.
​
Privacy Notice
Committa AB respects your privacy and the right to control your personal information. Our guiding principles are simple: we will be transparent about what data we collect and why.
Our processing of personal data is carried out in accordance with the provisions arising from the applicable personal data legislation, including the EU General Data Protection Regulation, EU 2016/679 (GDPR).
​
Personal Information We Collect
We collect data directly from you within the context of our relationship. You may be a contact person at one of our clients, suppliers, or partners, or you could be a consultant, job seeker, or student. Essentially, this applies to individuals we interact with during our business operations. We may process personal data for the purposes detailed below as part of managing and sustaining our commercial relationship with you or your employer.
Examples of personal information we might process include your name, contact details (like mobile number, address, and email), and profiles on LinkedIn and other social media platforms. We may also update your information from public records, such as those from the Swedish Companies Registration Office (Bolagsverket), SPAR, etc., when necessary to ensure data quality.
We may also register personal information provided when you engage with us digitally, such as:
-
Filling in your name, email, and/or mobile number on our websites.
-
Contacting us via email, websites, or social media.
-
Signing up for newsletters/events or digital services we offer.
-
Visiting or using our websites and/or apps, which can include traffic data, location data, web logs, and other communication data, such as IP address, device type, operating system, and browser type used.
​
Purposes and Legal Basis
We process your personal data for the following purposes and on the following legal bases:
-
Purpose: To manage and foster our customer, supplier, and/or partner relationships with your company (where you are employed) or you as a contractor/partner, and to fulfill the obligations of any applicable agreements, orders, and inquiries, which may involve processing personal data in digital business support systems like customer care systems and supplier databases.
-
Legal Basis: Our legitimate interest in nurturing our business relationships and fulfilling expectations under commercial agreements.
-
-
Purpose: To handle administration, invoicing, correspondence, etc., with our partners, and to provide good service, correct inaccurate information, and/or send information requested or deemed of interest to you (or your employer) in light of our business relationship.
-
Legal Basis: Our legitimate interest in maintaining our business relationships and meeting expectations under commercial agreements.
-
-
Purpose: To manage and foster our relationship with you as an individual contractor, job seeker, or student to match open assignments and positions.
-
Legal Basis: Our legitimate interest in maintaining and fulfilling expectations in our business relationships and contracts, to the extent you have registered/signed up for.
-
-
Purpose: To perform, manage, develop, and improve our digital services (websites, apps, databases, etc.), including analyzing user behavior and statistical data on an aggregated level.
-
Legal Basis: Our legitimate interest in ensuring the functionality of digital services and effective disclosure and promotion of our activities.
-
-
Purpose: To contact you via email, app, SMS, or mail about offers, promotions, or services we believe may interest your employer or you (note that you can opt out of this communication).
-
Legal Basis: Our legitimate interest in offering and marketing services and products deemed relevant to your employer or you.
-
​
Information That May Be Disclosed
We may share your personal information with any member of our corporate group if we believe it is relevant to our business relationship with your employer or you.
We may also share personal information with service providers hired to fulfill the purposes of our data processing. These providers offer IT services and marketing services unless otherwise noted.
If you are seeking a job assignment or are a candidate, we may share your information with external customer or partner companies as part of our effort to find assignments for you.
We only work with partners who process personal data within the EU/EEA [or with companies that maintain equivalent protection levels as in the EU/EEA]. Any data transfer complies with GDPR requirements.
​
Storage and Deletion of Personal Data
We process personal data according to current legislation, ensuring it is not retained longer than necessary. We will store your personal information for as long as you are an active or potential customer, candidate (including subcontractor or job seeker), or partner. If our relationship ceases or it is no longer deemed reasonable to retain the data, we will delete your information. These reviews occur periodically, at least once a year. Unless specifically addressed or with your explicit approval, personal information for inactive relationships is deleted after 3 years of inactivity.
Certain information may be retained longer due to legal requirements, such as the Accounting Act.
When processing and storing personal data, we ensure confidentiality and implement relevant organizational and technical security measures based on the risk and sensitivity of the data.
​
Personal Data Protection Agreement and Other Applicable Terms
If your personal data processed by us is subject to a representation agreement with your employer or another responsible party, the representation agreement (where appropriate) takes precedence over this policy. In such cases, we process your personal data in accordance with the representation agreement terms. Similarly, if you have registered for any of our services, communications, etc., the terms provided at registration apply.
​
Your Rights and Choices
You have rights regarding your personal information, including the ability to amend or delete it. At your or our partners' request, we will correct inaccurate information. You may also request data deletion or usage restrictions by contacting us (see “Contact Us” section). If you feel your rights are not respected, you can contact us or the privacy authority (formerly Data Inspection Board). You have the right to access your personal data in an electronic format and transfer it to another data controller (data portability). You also have the right to object to data processing, and we must demonstrate compelling legitimate reasons to continue processing.
You can opt out of marketing communications by updating your account settings on “My Pages” (or similar), clicking “Unsubscribe” in any email/SMS communication, or contacting us for help.
To obtain information about your registered data, you can request a register extract in writing.
​
About Cookies and Similar Technologies
When using our sites and apps, personal information may be collected via cookies. This means usage data and the websites/apps you visit are stored, including technical details about your device and internet connection, such as operating system, browser version, IP address, cookies, and unique identifiers. Various technologies can be used to recognize you and learn more about our users, either directly or through third-party technology. Similar technologies may be used in connection with our websites, online advertising (e.g., social media), or emails by us or our suppliers, business partners, or other third parties.
​
Links to Other Sites
Our website may contain links to third-party websites or materials posted with third parties. These links are for informational purposes only. We do not control these sites or their material, and we are not responsible for their content or any damages or losses arising from their use.
​
Your Trust Matters
At Committa, we understand the importance of trust in our client relationships. By prioritizing data privacy and security, we aim to earn and maintain your trust as a valued partner. If you have any questions or concerns about how we handle your data, please don't hesitate to contact us.
​
Contact Us
For further information on personal data management or if you have any questions, please feel free to contact us at: privacy@committa.se