Privacy Policy

Privacy notice

Altaal cares about your privacy. In this privacy notice, we describe what personal data we collect about you, how the personal data is processed and what your data protection rights are.

Data controller

Altaal AB, reg.no 559221-7755 (“Altaal” or “we”) is the data controller of the processing of your personal data in accordance with the EU Data Protection Regulation 2016/679 (“GDPR”). If you have questions about the processing of your personal data, or wish to exercise any of your rights under section 7 below, you can contact us at:

Altaal AB
Skeppsbron 16
SE-111 30 Stockholm
legal@altaal.com

What personal data is Altaal processing?

Altaal processes the personal data that we receive in connection with your business relationship with us. We can receive certain information from the organization you are part of, and that has a business relationship with us. We may also supplement and check the data we collect by using publicly available records.

Personal data is any form of information that relates to an identifiable living person. The information we usually collect is, for example, name, e-mail address, telephone number, title and position, employer and personal data in notes and logs from calls or meetings with you.

In addition, we may process other personal data that you provide when using one of our services or applying for employment with us.

When visiting our website, we can compile statistics and general information related to, among other things, traffic patterns on our website. However, such statistics and information do not contain any data that makes it possible to identify you as a person.

How your personal data is processed

We process your personal data to administer our customer relationship according to our agreements with you. This includes, among other things, creating and sending information to you in electronic format. The legal basis for our processing of personal data is to fulfill our contractual obligations to you (Article 6(1)(b) GDPR).

We may also process your personal data in order to conduct our business and maintain contact with our business contacts, partners, and suppliers. Some personal data is processed to administer our investments in other companies and for statistical, follow-up and archival purposes. Personal data may also be used to send out financial reports, invitations to events and similar.

We may also process your personal data to provide marketing and offers to you about other products and services that we offer, which are similar to those you already use and which we think you would appreciate. If you do not wish to receive such marketing from us, you can notify us at any time, and we will then stop processing your personal data for marketing purposes.

We may process certain personal data when you have applied for employment with us, to determine who is best suited for a position and to ensure that the person in question has the necessary skills for the job.

The legal basis for the processing of personal data mentioned above, when it does not take place to fulfill our contractual obligations towards you, is our legitimate interest in the processing (Article 6(1)(f) GDPR). In each such processing of personal data, we have assessed through a balancing of interests that your interests and fundamental freedoms and rights do not outweigh our legitimate interests in processing the data. We thereby ensure that the processing that takes place is necessary to satisfy that interest.

In some specific cases, we may obtain your consent to the processing (Article 6(1)(a) GDPR). In such cases, you have the right to withdraw your consent at any time.

Some processing may also take place due to a legal obligation that we are subject to, such as accounting purposes (Article 6(1)(c) GDPR).

Transfer of personal data

We will not disclose personal data to any third party except (i) in cases where we have a specific agreement with you to do so, (ii) if it is necessary for us to fulfill our legal obligations, (iii) in the case where we cooperate with other companies or hire third party suppliers who provide services on our behalf, or (iv) in the event that we, for other reasons, need to share your data with another company in order to fulfill our agreement with you.

We will share personal data with other companies within the Altaal Group. This is necessary for Altaal to be able to provide its services and functionalities to you. The reason for this is because functions such as IT, marketing, HR, finance, as well as other administrative functions regarding customer relations, management of suppliers and subcontractors, are managed jointly within the group.

Furthermore, we store certain information in cloud services, which is why your personal data may be disclosed to providers of such cloud services. We may also disclose your personal data to other suppliers in our business when we cannot provide a certain service or functionality ourselves. These suppliers may need your personal data to be able to fulfill assignments that they perform on behalf of us. To the extent that personal data is shared with suppliers and subcontractors to Altaal, these suppliers are only entitled to process the personal data they receive from us on our behalf; they are so-called personal data processors. Under certain conditions, you may have the right to object to this processing, see further about your rights under section 7.

Personal data may also be transferred to authorities if it is required for us to fulfill legal obligations.

In all cases of transfer of personal data, Altaal takes all appropriate safeguards to ensure that your personal data is processed with an adequate level of protection. We do not sell any personal data to third parties.

Processing of personal data outside the EU/EEA

As a general rule, we only process your personal data within the EU/EEA. However, we may share your personal data with suppliers and other companies located outside the EU/EEA, e.g. companies that provide CRM systems or data room functions to us. Should personal data be transferred outside the EU/EEA, such transfer takes place in accordance with current legislation, which requires that the country in question has an adequate level of protection or that other appropriate safeguards are provided, meaning that the transfer is lawful. This means that the transfer can be based on, for example, the European Commission’s adequacy decision or standard data protection clauses with additional security measures.

For how long time does Altaal store your personal data?

To the extent that Altaal processes your personal data to fulfill our contractual obligations to you, we will process the data for as long as it is necessary for us to administer the contractual relationship and exercise our rights and obligations in relation to the contract. When the processing takes place in accordance with our legitimate interest thereof, the data will be stored for as long as it is necessary for the purpose for which the data is processed. As regards the processing that takes place for marketing purposes, we will store the data until you unsubscribe or otherwise ask us to stop sending marketing. If the processing takes place based on an explicit consent from you, and you withdraw your consent, we will stop the processing as soon as such withdrawal has taken place. We may also store your personal data for a longer period if we are required to do so to fulfill legal obligations or if it is necessary for us to establish, exercise or defend any legal claims.

Your rights

Below you can read about your rights in relation to our processing of your personal data.

Right to have personal data deleted (‘right to be forgotten’)

In some cases, you have the right to have your personal data deleted. This applies, for example, to data that is no longer necessary for us to process or retain for the purpose for which the data was collected, or if you withdraw your consent to processing. In some cases, however, we have no possibility to delete your personal data, which may be because the data is either still necessary to process for the purpose for which it was collected, that Altaal’s interest in continuing to process the data outweighs your interest in having it deleted, or because there is a legal requirement for us to retain them.

Right to be informed

You have the right to be informed about how we process your personal data, which we do through this privacy notice and by answering any questions from you.

Right to access your personal data

You have the right to receive a copy of which personal data we process, a so-called data extract.

The right to access and transfer your personal data (data portability)

You have the right to request a copy of the personal data we hold about you in a machine-readable format so that you can transfer your personal data to another recipient.

Right to rectification

This right means that you can request that we correct incorrect or incomplete information about you, and that we supplement the information we have.

Right to restrict processing

In certain special situations, you may have the right to demand that we restrict our processing of your personal data. For example, if you have requested the correction of incorrect data, you have, during the time it takes to adjust the data or the matter is investigated, the right to demand that we restrict the processing of the data. Another example is if you have objected that your interest in the personal data not being processed outweighs our interest of processing the data. While we investigate this matter, you also have the right to demand that we restrict our processing of your personal data. In the event of a restriction, the data is marked so that it may only be processed for certain purposes. When a restriction ends, we will inform you.

Right to object

You can object to our processing of your personal data that takes place based on legitimate interest as a legal basis. You can also always object to us using your personal data for direct marketing. When you notify us that you no longer wish to receive direct marketing from us, we will stop marketing to you.

Right to withdraw consent

In cases where we process your personal data based on your consent or explicit consent, you have the right to withdraw your consent at any time. When you withdraw your consent, we will stop the processing.

Right to lodge a complaint

If you have a complaint about our processing of your personal data, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten), www.imy.se. You may also lodge a complaint with your national supervisory authority.

Cookies

We use cookies when you visit our website (www.altaal.com). Read more about how we use cookies in our https://altaal.com/cookie-policy.

Changes and updates

Altaal reserves the right to change and update this privacy notice. In the event of material changes or if existing information is to be processed in a different way than stated, you will be informed. If a change to our services means that consent is required, you will be notified and given the opportunity to give your consent.

This privacy notice was last updated 14 December 2022.