Privacy policy - Svalinn

This Privacy Policy tells you about:

the categories of personal data that we collect about you;
the purposes for which we use the personal data;
how we collect personal data;
who we share personal data with;
your rights in respect to the personal data we process about you;
the measures that Svalinn takes to ensure the confidentiality and security of your personal data; and
how you can contact us regarding our processing practices.

How to contact us

If you have a request or question about this Privacy Policy, please contact privacypolicy@svalinncapsystems.com.

What personal data do we collect?

We collect the following categories of personal data, including but not limited:

Name
Company
Position/Level
Phone number
Email address
Country
Your topics/areas of interest related to Svalinn
Your message

How do we collect personal data?

We collect personal data about you when you provide information on our Websites, including but not limited to:

you fill in a contact form on one of our Websites
you request information about a product or services
you submit an invention to our intention and fill in the inventor’s contact form
you sign up to receive news, updates or direct marketing communications
you participate in Svalinn campaigns, you apply for a job with Svalinn
you attend an event that Svalinn organises
you communicate with us such as through social media networks or by sending us an email

How we use the collected data

We collect and store your personal data in order to respond to your questions (via mail, e-mail or phone, as applicable), to provide you with specific information which you requested or applied for via the Contacts page, to contact you in relation to the submission of your request, to improve our services and products and/or for business development purposes. We also collect and process your personal data in order to update you on your areas of interests (e.g. sending newsletters), for our legitimate business interests, for compliance with our legal obligations and/or as otherwise permitted by law.

If you wish to submit your personal data to apply for employment with Svalinn, please note that you should post your application using the Svalinn recruitment system. You will find relevant information about our processing activities in relation to recruitment activities on Svalinn recruitment system.

Who do we share your personal data with

We may share your personal data with other Svalinn companies, or authorised third party analytics, for the sole purpose of responding to your questions or application, fulfilling your requests or providing you with requested information. We restrict access to personal data to Svalinn authorised employees, contractors and agents who need to access to the personal data in order to process it for us, and who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.

How we protect the collected data

We implement and maintain appropriate organisational, technical and physical measures designed to safeguard and protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. In particular, the following technical and organisational security measures are implemented to preserve the confidentiality, integrity and availability of your personal data, including but not limited to:

Encryption at rest of all personal data
Anonymisation where possible / required
Enhanced authentication methods, such as strong passwords and multi-layer authentication options
Procedures and processes for secure access of Svalinn authorised staff to personal data
Training to ensure awareness of security requirements applicable to all staff
Selection of appropriate processors and, as the case may be sub-processors, that can demonstrate compliance with applicable data protection and privacy laws
Due diligence around sub-processors, processes and procedures as well as updates to procedures or renegotiation of terms / instructions to sub-processors where necessary

International transfer of your personal data

As Svalinn operates at a global level, we may need to transfer personal data to other countries, in particular, head office for management purposes. Transfers may also need to be made to other countries where we operate. When we export your personal data to a different country, we will take steps to ensure that such transfer of personal data complies with applicable laws and legislation. For example, for transfers of personal data from the European Economic Area (EEA) to Svalinn group entities located outside of the EEA, we have implemented intra-group Standard Contractual Clauses approved by the European Commission to enable the transfer of the personal data. We have applied for Binding Corporate Rules (BCRs) in accordance with the process approved by the European Commission and the General Data Protection Regulation and we await final decision from the relevant data protection authority. These clauses are contractual commitments between Svalinn group companies binding them to protect the privacy and security of EEA personal data.

Likewise, when we use third party service providers and their services involve transfers of personal data outside of the country where the personal data was initially collected, we ensure that the third-party service provider has appropriate data transfer mechanisms in place such as data processor clauses and/or Standard Contractual Clauses to enable the transfer.

How long we keep the collected data

Personal data will be stored only as long as is necessary to carry out the purposes described in this Privacy Policy or as otherwise required by applicable laws. As regards your contact details, we keep your personal data as long as we are in contact with you. If you have not contacted us during 4 years, we will delete your personal data after expiration of that time.

As regards the content of your message or request to Svalinn, we keep it during 2 years. After 2 years, we anonymise the content and we keep it in an anonymised way for statistics purposes.

Your rights

You, as an individual whose personal data are processed by Svalinn, have certain data protection rights, which you may exercise by making a request to Svalinn. Your data subjects’ rights include the right to request:

Access to your personal data;
Rectification of your personal data;
Erasure of your personal data (this right is also referred to as the 'right to be forgotten');
Restriction of your personal data;
Portability of your personal data;
Processing of your personal data ceases (the right to object);
Not to be subject to automated decision making; and
Not to be sent direct marketing.

Your data subject’s right request or any question in this context should be sent to privacypolicy@svalinncapsystems.com.

We will respond to your request to change, correct, or delete your personal data within a reasonable timeframe and notify you of the action we have taken.

Svalinn is only permitted to decline to act on a request if the request is excessive and/or manifestly unfounded (for example because repetitive requests having been made). In which case, Svalinn must be able to demonstrate the request is excessive and/or manifestly unfounded. In some cases, specific additional exemptions may apply. If Svalinn is exempt from the requirement of fulfilling your data subject’s rights request, then Svalinn will notify you if it intends to decline your data subject’s rights request and explain that an exemption applies. Svalinn is not permitted to charge for acting on a data subjects’ rights request unless Svalinn is exempt from the obligation to act on the request but is prepared to act on the request anyway. In which case a reasonable fee may be charged taking into account the administrative costs of proofing the information or communication or taking the action requested.

You have a right to lodge any complaints with the national data protection authority in your country although we ask that you raise your objects with us in the first instance.

Information About Children

Svalinn Websites are not intended for or targeted to children under 13, and we do not knowingly or intentionally collect information about children under 13. If you believe that we have collected information about a child under 13, please contact us at privacypolicy@svalinncapsystems.com, so that we may delete the information.

Changes to Our Privacy Policy

All changes to this Privacy Policy are effective when they are posted on our Websites. When we change the Privacy Policy in a material manner, we will let you know via prominent notice on our Websites.

Svalinn Cookie policy

A cookie is a small piece of data (text file) sent from a Svalinn Website or Svalinn App (“Websites / Apps”) and saved in your web browser of your computer or similar devices such as tablet or smart phone.

Social Media Widgets

The Websites / Apps may use social media widgets to enable visitors to engage with content from our Websites on various social platforms (Facebook, YouTube, Twitter, LinkedIn etc.). To understand how and what information is collected and what cookies are set by these third parties, please refer to the privacy policy of the respective social platform.

List of cookies we use

Cookie name	Saved by	Purpose	Duration	Type
orejime	Svalinn	Save your choice regarding the use of cookies.	12 months	Mandatory
svalinn_session	Svalinn	Save the user's session.	2h	Mandatory
XSRF-TOKEN	Svalinn	Authenticate requests.	2h	Mandatory
_gat_gtag_UA_72655143_1	Google	Analytics	1min	Optional
_gid	Google	Analytics	24h	Optional
_ga	Google	Analytics	24 months	Optional

Manage cookies

External websites and linking

Links from our websites

We, the Svalinn Group, create links to other websites for the purpose of offering you an opportunity to review connected and interesting information related to us and our businesses. These third party websites are outside our control and are not covered by this Privacy Policy. If you access other websites using the links provided, the operators of these websites may collect your personal data. Svalinn is not liable for any personal data that you submit to third party website linked to our Websites. Your browsing and interaction on any third party website or service, including those that have a link or advertisement on our Websites / Apps, are subject to that third party’s own rules and policies.

External links to Svalinn websites

Linking from an external party to a website owned and controlled by us is only allowed if, and on the condition that the external website does not contain material which could be considered unlawful, threatening, defamatory, obscene, scandalous or profane or that could constitute or encourage a conduct that would be considered a criminal offence, give rise to civil liability or otherwise violate any law. We do not assume any responsibility whatsoever for the content or functionality of external web sites which are not operated or controlled by the Svalinn Group.

Disclaimer

We endeavour to keep the information of our Websites accurate, including but not limited to, text, photographs, graphics and figures. This information is provided "as is" and we disclaim all warranties, expressed or implied about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information for any purpose to the extent permitted by applicable law. Further, we disclaim any warranty that our websites are free from infection by virus or anything else that has contaminating or destructive properties.

Except as provided by applicable law, we do not accept any responsibility for damage, resulting from your use or inability to use this site or any content, services, or materials provided by or on this site.

Copyright

You may not reproduce, republish, translate or in any way distribute any parts of this website or the Content without the written permission from the owner, except that You may make one copy or download to a local hard disk for your personal and non-commercial use only.

Any copies of the Content which has been duly and legally shared are only made available by the owner on the condition that you will not alter or modify such content, nor remove or change any proprietary notice on such Content.