Good N You AB, registration number 559234-5887, (below referred to as ”Allihoop”) is the data controller. Contact details of Allihoop: Malmskillnadsgatan 32, 11151, Stockholm, SWEDEN, e-mail:
Allihoop needs to process your personal data with the aim to fulfil our commitments towards our applicants, customers, suppliers, partners and to provide the Allihoop service. Allihoop may also process your personal data to be able to answer requests from you, correct wrongful information or send information which you have required, such as new openings, updates or new available locations. Allihoop also needs to process personal data to be able to fulfil legal obligations. Furthermore, Allihoop may process personal data for marketing purposes.
Processing: operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Data protection legislation: means such data protection legislation and all other possible legislation (including ordinances and regulations) which is applicable on the processing of personal data which is being performed, including EU’s General Data Protection Regulation (GDPR) and the Swedish supplementary act on data protection and the Swedish Data Protection Authority’s decisions, regulations and guidelines.
Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
Data processor: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.
LEGAL BASIS AND TYPE OF DATA
Allihoop processes personal data which data subjects have provided themselves or which Allihoop has collected itself. Allihoop processes personal data concerning natural persons alone, or natural persons who are representatives of or contact persons for or employed by customers, suppliers and partners to be able to perform contracts with such persons and parties. Furthermore, personal data concerning persons who are visiting our offices or our website or who contact Allihoop via telephone, e-mail or otherwise is processed. Information that will be processed is name, address, telephone number, e-mail, birthday, Allihoop location(s)/room preferences, personal description and interests.
Personal data about applicants may be processed for the performance of a contract or our legitimate interest as the legal basis. Information may include name, address, telephone number, personal identification number, e-mail.
Personal data about customers may be processed for the performance of a contract or our legitimate interest as the legal basis. Information may include name, address, telephone number, personal identification number, e-mail.
Information about name, address, telephone number, birthday, interests (should you provide such information within our service) and e-mail may also be used for business and method development, marketing analysis, statistics and risk management. The legal basis for the processing of personal data with the aim to develop and analyse the business is our legitimate interest.
Allihoop has a legitimate interest to process the personal data because the processing is necessary in order for us to be able to perform, fulfil and administer our business and serve our customers’, partners and other stakeholders’ interests and legal claims.
Allihoop also has a legitimate interest to distribute marketing and offers about our business as such information may be of interest for our applicants, customers, partners and other stakeholders and that the integrity risk for natural persons is very small.
We will only process your personal data for marketing purposes as long as we have an active customer relationship with you. In each marketing message the possibility to say no to further marketing is given.
Allihoop also processes personal data to be able to fulfil legal obligations under e.g. the Swedish Bookkeping Act.
TRANSFER OF PERSONAL DATA
Allihoop will not transfer personal data to any third party except if i) it has been specifically agreed between Allihoop and you, ii) it is necessary within the framework of a specific assignment to take account of your rights, (iii) it is necessary for us to be able to fulfil our legal obligations, adhere to a decision of an authority or of a court, or iv) we engage an external service supplier who process personal data on our behalf (data processor), such as IT providers, property owners or other partners. We always ensure that the data processors we engage have taken appropriate security measures and process your personal data in accordance with data
protection legislation (please see the section on data processors below for further information).
Personal data is only stored as long as it is necessary for the purpose of the processing. In general, we only process personal data concerning you as a customer for as long as you are a customer and/or user of the Allihoop service. However, we may be required to process your personal data for a longer period in order to fulfil our legal requirements under e.g. the Swedish Bookkeping Act.
Personal data about applicants is not stored longer than twelve months after that the application was received/the applicant has been inactive by Allihoop, unless the applicant has provided her/his consent to the personal data being stored for a longer period.
The Swedish Bookkeeping Act, Swedish Discrimination Act and other laws and regulations may require us to save your data for longer periods.
Right to access to personal data
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data.
Right to withdraw your consent
You may at any time withdraw the consent you have given us, either as a whole or partly, with effect from the day of the withdrawal.
Right to rectification
Allihoop shall make sure that the personal data which is processed is correct and is kept up to date. You have the right to have inaccurate personal data about you rectified.
Right to erasure
You have the right to have your personal data erased in some situations. This is the case if the personal data is not required anymore for the purpose which it was collected for, if the personal data has been processed unlawfully or if the processing is based on the legal basis legitimate interest and there exists no legitimate interest which weighs heavier than your interest of having your personal data protected.
Restriction of processing
You have the right to demand that the processing is restricted.
You have the right to so called data portability in certain situations, i.e. to get access to personal data about you which you have provided to Allihoop, in a structured, commonly used and machine-readable format, and have such personal data transmitted to another data controller.
Right to object to the processing
You may object to our processing of your personal data for marketing purposes. We will then cease to process your personal data for marketing purposes. You also have the right to object to the processing of your personal data on the basis of a balance of interests.
To be able to show that the processing is performed in accordance with the data protection legislation and taking into consideration the nature, scope and context and purposes of the processing and the risks for natural persons’ rights and freedoms, Allihoop performs appropriate technical and organisational measures to ensure a level of security which is appropriate in relation to the risks. Such measures shall be reviewed and updated when needed.
Allihoop engages in some cases data processors, which perform processing of personal data on behalf of Allihoop. The data processors shall provide sufficient guarantees that they have implemented appropriate technical and organisational measures in such a manner that the processing fulfils the requirements of the data protection legislation and ensures that the data subjects’ rights are protected.
Allihoop enters into an agreement with each data processor in which the agreement stipulates the subject-matter of the processing, the duration, nature and purpose of the processing, the type of personal data and categories of data subjects and the rights and obligations of the parties.
The Swedish Data Protection Authority is the supervisory authority as regards processing of personal data. You can read more on the Swedish Data Protection Authority’s website datainspektionen.se.
RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with the Swedish Data Protection Authority if you are of the opinion that the processing of personal data concerning you is in breach of the data protection legislation.
If you have questions regarding our processing of personal data please contact us at