Privacy Information
 

Data Controller

Secure by Q (organization number 559470-5989), located at Engelbrektsgatan 6, 211 33 Malmö, is the data controller for the processing of personal data within the company's operations. This information explains why and how we process your personal data. It also outlines how you can exercise your rights as provided by the General Data Protection Regulation (GDPR).

 

This information is directed at customers and counterparties, course participants, suppliers and partners, and visitors to our website.

 

How Do We Process Your Personal Data?

 

Customers and Counterparties

We process your contact details and other relevant information that you provide to us in connection with preparing and executing tasks on behalf of you or your counterparty, for billing purposes, and to comply with our legal obligations. Contact details include name, role, work email, work phone number, and information about your employer. We may also collect personal data about you from public and private registers, courts, and authorities. The legal bases for this processing are the performance of a contract, our legitimate interest in investigating and defending legal claims, and compliance with legal obligations. Personal data processed for this purpose is retained for as long as you are a customer with us and up to 2 years after the task is completed. Exceptions apply for data that must be retained by law, such as accounting laws or archiving requirements.

 

We document and archive tasks in a document management system to protect ourselves and our customers from future legal claims and to fulfill legal obligations. The legal basis for this processing is our legitimate interest in investigating, defending, and asserting legal claims, as well as fulfilling legal obligations. Archived documentation is retained for up to 10 years after the task is completed.

 

Course Participants

We process your contact details when you participate in one of our courses. If you have a sole proprietorship, we also process your personal ID number as it constitutes your organization number. The data is processed to administer and conduct the course, follow up on quality, and for billing purposes. The legal basis for this processing is our legitimate interest in fulfilling the course agreement with your company. If you have a sole proprietorship, the legal basis is the performance of the agreement concerning course participation. Personal data processed for this purpose is retained for 2 years after the course is completed.

 

Suppliers and Partners

We process contact details about you if you are a contact person/employee at one of our suppliers or business partners. We do this to maintain the relationship with the supplier or partner, which constitutes a legitimate interest. Personal data used for this purpose is retained for as long as you are a contact person at the supplier or partner and up to 1 year after the contractual relationship has ended. Information about you on invoices is retained for as long as required by law.

 

Prospective Customers and Partners

To contact you for marketing purposes, we collect your contact details sometimes directly from you, from a recommender, or from publicly available information, such as from the Swedish Companies Registration Office, to market our services. The legal basis for this processing is our legitimate interest in marketing ourselves.

 

Cookies

Our website uses cookies to process your personal data as described in this privacy policy. You can read more about the cookies we use and their purposes in our Cookie Policy.

 

Who Do We Share Your Personal Data With?

We may share your personal data with our subcontractors when performing tasks on your behalf. We may also store information in services managed by other companies such as email and conference tools. In such cases, your personal data is always treated confidentially and protected with appropriate security measures. We have written agreements to ensure that your data is handled securely and to prevent the provider from using your data for their purposes.

 

Your contact details may also be shared with contracted providers of financial services for accounting and billing purposes.

 

We may also share your personal data within the framework of a task, for example, with an authority or court. If you are our customer, we will always inform you of such sharing in advance.

 

We may also share your data with authorities to the extent required by legal obligations.

 

Where Do We Process Your Personal Data?

Secure by Q uses Swedish and European providers for email, videoconferencing, document storage, and website management. Depending on the providers you or your company use, your personal data may be transferred to a country outside the EU/EEA. Secure by Q is not responsible for the providers you use for your email, document management, or conference tools in our interactions with you. Please inform us if you have specific communication preferences when we perform tasks on your behalf.

 

What Are My Rights?

The GDPR provides you with several rights as a data subject. Some of these may be limited due to legal requirements for retaining the data for a certain period or our legitimate interests that justify retaining the data for an additional period.

 

Right of access – the right to obtain confirmation of whether we process your data and information about the processing.

Right to rectification – the right to have incorrect data corrected.

Right to erasure – the right to have certain data deleted, provided the data is not processed to protect our rights in case of a dispute or due to legal obligations requiring retention, such as accounting laws.

Right to object – the right to object to our processing if it is based on a balance of interests or for direct marketing.

Right to restriction – the right to request that the processing of personal data be restricted, for example, if you contest the accuracy of the data.

Right to data portability – the right to request that personal data be transferred from us to another data controller.

Right to withdraw consent – the right to withdraw your consent at any time.

Right to lodge a complaint – the right to lodge a complaint with the Swedish Authority for Privacy Protection if you believe that your personal data is processed in violation of applicable regulations.
 

Contact

If you wish to exercise your rights, have questions, or complaints regarding the processing of your personal data, contact us at management@securebyq.se. If you wish to file a complaint with the supervisory authority, contact the Swedish Authority for Privacy Protection.

​