Privacy Policy – EQi AB
These are the terms and conditions on the processing of personal data in accordance with the EU General Data Protection Regulation (2016/679) (GDPR).
Definitions
Personal Data Officer means; The physical or legal person who alone or together with others determines the purposes and means for the processing of Personal Data.
Personal Data Assistant means; The physical or legal person who processes personal data on behalf of the person responsible for personal data.
Personal Data means; Any information relating to an identified or identifiable physical person, hereinafter also referred to as a registered person, an identifiable physical person being a person who can be directly or indirectly identified specifically with reference to an identifier such as a name, identification number, location information or online identifiers or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.
Processing of Personal Data means; The measure or combination of measures linked to Personal Data which, regardless of whether they take place automatically or not, via e.g. collection, registration, organization, structuring, storage, processing or modification, production, reading, use, disclosure by transmission, dissemination or other provision of data, adjustment or merging, restriction, deletion or destruction.
Third Party means; A physical or legal person who is not the data subject, the Personal Data Controller or the persons under the direct responsibility of the Personal Data Assistant who are authorized to process the personal data.
Personal data manager
EQI AB
Organization number: 559279-8291
Address: Sjöfartsgatan 6, 120 62 Stockholm
Data Protection Officer
Alex Salinas
Email: info@eqinitiative.com
The data subject is recommended to contact the data protection officer in all matters concerning the processing of personal data and in situations concerning the exercise of his or her personal rights.
Name of the register
The personal information is collected in EQI AB
The grounds and purpose of the processing of personal data
The legal basis for the processing of personal data is:
– The data subject’s consent to the processing of personal data
– The contractual relationship between the data subject and the data controller
– Fulfillment of the statutory obligations of the data controller
– The public interest or the exercise of public power by the person responsible for personal data
The purpose of the processing of personal data is to provide a global eNPS benchmark and additional insights and analyses.
Legal data sources
The personal data to be processed is usually obtained from the following sources:
– The registered person himself
– Connected supplier
Personal data being processed
The person responsible for personal data only collects the personal data from the data subject that is relevant and necessary for the purposes described in this Privacy Policy.
The following information is processed if registered:
First name and last name
Email address
Company name
Country of operation
The size of the company
The company’s industry
The company’s eNPS (measured & shared consistently via your supplier)
The company’s answer frequency (measured & shared consistently via your supplier)
Disclosure of personal data
The data (the first & last name, email address, and company name) is not disclosed to third parties unless the law prescribes an obligation to do so. Information can thus exceptionally be disclosed to authorities if, for example, the law requires it. The rest of the data (the size, industry, and company’s eNPS and answer frequency) may be used and shared anonymously with third parties for the purpose of world awareness and learning.
Transfer of personal data to third countries
The data are not transferred outside the EU and the European Economic Area.
Protection of personal data
The person responsible for personal data processes personal data in a way that aims to guarantee the appropriate security of personal data, including protection against unauthorized processing and unintentional disappearance, destruction or damage.
The personal data controller uses appropriate technical and organizational protection measures to ensure this purpose, including the use of firewalls, encryption technology and secure spaces for equipment, appropriate access control, careful handling of usernames for information systems and guidance of staff involved in the processing of personal data.
The storage time of the data
The person responsible for personal data processes the personal data until the data subject chooses to close their account with the register. After this period, delete or anonymize the data controller within 3 months in accordance with his erasure processes.
The personal data controller may be obliged to process some of the personal data contained in the register for a longer period than specified above to comply with legislation or regulatory requirements.
Profiling
The data (the first & last name, email address, and company name) is not used for profiling or other automated decision-making.
The data registers rights
-Right to access personal data
-The data subject has the right to receive confirmation of whether her personal data is processed and whether they processed, the right to receive a copy of their personal data.
-Right to correct information
-The register has the right to request that incomplete and incorrect personal data concerning him be corrected.
The registered person also has the right to supplement incomplete personal data by submitting them necessary additional information.
Right to delete data
The data subject has the right to request deletion of his data (the first & last name, email address, and company name)
a. Personal data are no longer needed for the purposes for which they were collected;
b. The data subject withdraws the consent on which the processing of personal data is based and there is no other legal basis for the treatment, or
c. Personal data has been processed in an unlawful manner..
Right to limitation of treatment
The data subject has the right to restrict the processing of his data (the first & last name, email address, and company name)
a. The data subject disputes the accuracy of his personal data,
b. The processing is illegal and the data subject opposes the deletion of his personal data and require instead that their use be restricted; or
c. The person responsible for the data no longer needs the personal data for the original purposes for processing, but the data subject needs them to establish, exercise or defend a legal claim.
Right to object
he data subject has the right to object to the processing of the data (the first & last name, email address, and company name) on any grounds at any time relating to the specific situation of the data subject.
The person responsible for personal data may no longer process the data (the first & last name, email address, and company name) subject’s personal data, except if the person responsible for personal data can show that there is a compelling and justified reason for the processing which supersedes the data subject’s interests, rights, and freedoms, or if necessary to establish, exercise or defend a legal claim.
If personal data is processed for direct marketing, the data subject has the right to at any time object to the processing of their personal data for such marketing, including profiling if it relates to such direct marketing.
Right to withdraw consent
The data subject has the right to withdraw his consent to the processing at any time without it affecting the legality of the treatment previously performed with the support of the consent.
The right to transfer data from one system to another
The data subject has the right to receive his personal data and the personal data provided by the data subject himself has submitted (except the anonymous data of the company size, industry, and company’s eNPS and answer frequency) in a structured, commonly used, and machine-readable format and the right to transmit this information to another personal data controller.
The right to lodge a complaint with the supervisory authority
The national regulatory authority for matters relating to personal data is
the privacy authority. You have the right to transfer your case to the supervisory authority if you consider that the processing of your personal data violates applicable law.
Change of the privacy policy
The person responsible for personal data continuously develops his business and may therefore need to change and update their privacy policies as needed. The changes can also be based on changes in data protection legislation.
If the changes include new purposes for the processing of personal data or the policy on other methods changes significantly, the person responsible for personal data notifies them in advance and requests if necessary consent of the data subjects.
Information on the handling of personal data linked to children
Within the framework of this policy, the activity does not aim to either target or collect any information regarding children under 18 years of age.
Contact information
The registrant can contact Alex Salinas at info@eqinitiative.com to take care of their rights in accordance with this policy.