Processing of Personal Data
Hedbergs Utvecklingsbyrå AB (HUAB) is the data controller for the processing of personal data for which the company determines the purposes and means of processing. For example, HUAB processes personal data when handling inquiries from prospective customers, business partners, support requests, and subscriptions.
This notice provides an overview of the personal data processing activities for which HUAB acts as the data controller.
How HUAB Processes Personal Data
Personal Data in the Trygg.chat Service
HUAB owns and operates the digital service Trygg.chat. Trygg.chat is used by organizations (customers of HUAB) to communicate with their visitors and individuals seeking support. HUAB acts as a data processor for these organizations and processes personal data on their behalf and according to their instructions.
If you have questions about, or concerns regarding, how such an organization processes your personal data, you should contact that organization directly.
Inquiries
HUAB processes personal data to communicate with individuals who submit inquiries and to handle the matter. The legal basis for processing is legitimate interests.
Support Requests and Issue Reports
HUAB processes personal data to communicate with individuals requesting support or reporting an issue in the use of our services and products, and to handle the matter. In some cases we process personal data concerning a contact person at the organization to which the support request relates. The legal basis for processing is legitimate interests.
Direct Marketing
HUAB processes personal data in order to contact organizations that are potential customers of HUAB. The legal basis for processing is legitimate interests.
Contract Preparation
HUAB processes personal data relating to designated contact persons and authorized signatories of prospective customers in order to prepare agreements for the delivery of a specific service. The legal basis for processing is performance of a contract or legitimate interests.
Invoicing
HUAB processes personal data relating to designated contact persons, invoice recipients, and authorized signatories in order to administer and issue invoices. The legal basis for processing is performance of a contract or legitimate interests.
Granting Access to Services and IT Systems
HUAB processes personal data relating to designated contact persons and service providers at customer organizations in order to grant access to services and systems for which HUAB is responsible, such as Trygg.chat. The legal basis for processing is legitimate interests.
Training, Conferences, and Meetings
HUAB processes personal data relating to participants in training sessions, conferences, or meetings arranged by HUAB. The processing is carried out to administer registrations, conduct the activity, and follow up on it. The legal basis for processing is legitimate interests and, in certain cases, performance of a contract.
Newsletter Subscriptions
HUAB processes personal data in connection with subscription requests for our newsletters. The processing is carried out so that HUAB can administer the subscription and distribute the information. The legal basis for processing is performance of a contract.
Customer Communications Subscriptions
HUAB processes personal data in connection with subscription requests for our customer-specific communications. The processing is carried out so that HUAB can administer the subscription and distribute the information. The legal basis for processing is performance of a contract.
The trygg.chat Website
The trygg.chat website does not use cookies or other tracking technologies to collect or process personal data relating to website visitors.
Categories of Personal Data Processed
The categories of personal data processed include names and contact details of individuals who have contacted HUAB, as well as individuals representing organizations that are potential customers of HUAB. If a matter concerns an organization of any kind and a contact person has been designated for the organization, the name and contact details of that contact person are processed.
Matters submitted via contact forms on the website or via email are subsequently processed through email correspondence. Personal data is further processed in the IT systems and structures required to carry out the relevant task. Examples include services used by HUAB for newsletter distribution, video meetings, and digital documents and spreadsheets.
Documents and messages submitted to HUAB often contain other types of personal data. Such information is processed within the scope of the relevant matter. The information is not separately registered.
Processing of Special Categories of Personal Data
On occasion, special categories of personal data are submitted to HUAB. This information is processed in order to handle the matter. However, the information is processed only within the scope of the relevant matter and is not separately registered. The legal basis for the processing of special categories of personal data is legitimate interests.
Who May Access the Information
The employees of HUAB who will have access to the information require it in order to perform their duties.
In certain cases, HUAB uses data processors, for example to manage email distributions (see above).
The data processors engaged may process personal data only in accordance with the purposes and instructions provided by HUAB. The processor and persons acting under the processor's authority may never access more information than is necessary to perform the service covered by the agreement with HUAB.
Whenever personal data is processed by a data processor, HUAB enters into a data processing agreement. HUAB uses data processors for various types of IT services.
Retention Period for Personal Data
Personal data is retained only for as long as necessary for the purposes for which it is processed.
Documents containing personal data that no longer need to be retained are deleted or cleared of personal data where possible.
Documents of minor or temporary significance may be deleted immediately.
Personal data relating to newsletter subscribers is deleted when the subscription ends.
Your Rights as a Data Subject
As a data subject, you have several rights. If you wish to exercise your rights in relation to HUAB or have questions regarding our processing of your personal data, you may contact us by sending an email to adm@huab.se.
Detailed information about your rights as a data subject within the European Union is available for example on the website of the Swedish Authority for Privacy Protection (IMY):
The data subject’s rights [https://www.imy.se/en/organisations/data-protection/this-applies-accordning-to-gdpr/the-data-subjects-rights/]
A summary is provided below.
Right to Information
You may request confirmation as to whether HUAB processes personal data relating to you and, if so, obtain a copy of the personal data undergoing processing together with additional information regarding the processing.
Right to Rectification
If you believe that the personal data relating to you is inaccurate or incomplete, you may request that the information be corrected or supplemented.
Right to Erasure
In certain circumstances, you may have the right to have your personal data erased by HUAB.
Right to Object
Where HUAB processes your personal data, you have the right to object to the processing at any time. If we cannot demonstrate legitimate grounds for continuing the processing, we must stop processing the data.
Right to Limitation of Processing
In certain circumstances, for example if you have objected to the processing of your personal data, you may require the processing of your personal data to be restricted for a certain period of time.
Right to Data Portability
If you have consented to HUAB's processing of your personal data, or if you have a contract with HUAB, you may in certain circumstances obtain personal data relating to you for use elsewhere. For example, you may transfer the data to another data controller.
If You Have Concerns About HUAB's Processing of Your Personal Data
If you believe that HUAB is processing your personal data incorrectly, we encourage you to contact us and explain your concerns. For example, you may send an email to adm@huab.se. This gives us an opportunity to address the issue.
If you are not satisfied with our actions, you may submit a complaint to the Swedish Authority for Privacy Protection (IMY). If you wish, you may contact IMY directly without first contacting us.
For more information about complaints, please visit the IMY website: https://www.imy.se/en/individuals/forms-and-e-services/file-a-gdpr-complaint/