top of page

Privacy policy

​

SBQ Certification AB (hereafter SBQ) will protect the privacy and security of your personal information. This Policy describes how we collect, use, and disclose personal information that we collect from or about you when you visit our website, use our services, or otherwise interact with us. By visiting our website or using our services, you agree to the terms of this Policy.

 

Confidentiality

We commit to handle your information safely and confidential, not sell your information or forward it without your consent, and give you the opportunity to manage and review your data at any time

 

Legal background

According to the General Data Protection Regulation, (EU) 2016/679 (GDPR), we may only handle personal data if we have a legal reason to do so. This also includes processing outside of our group of companies. The law means we must meet one or more of these reasons:

 

  • Fulfil an agreement or a contract

  • Comply with legal obligations

  • When it is our legitimate interest/balance of interest

  • When consent is given

 

Balance of interest means that we can process personal data without consent if our interests weigh heavier than the individual’s and whether the processing is necessary for the particular purpose.

​

Information that may be gathered/collected

SBQ may collect and process the following information about you, based on type of relationship:

 

Certification of individuals

 

Collected personal data

  • Contact information: full name, e-mail address, company name and address, phone number

  • Information provided via web forms, e.g. during application for certification including address where to send certificates

  • Payment/invoice related information: company and company number, payment & bank information, full name of the invoice approver, job title

​

Purpose and legal basis for processing

SBQ collect and process the information about you for the following purposes:

 

Contractual purposes:

  • To provide our services to you

  • To issue and process invoices and payments

  • To evaluate experience and competence for the purpose of certification

 

Legitimate interest

  • To process and fulfil your orders or requests

  • To communicate with you about our services

  • To send you marketing communications about our services or to conduct market research

  • We may also send you promotional materials or communications regarding services provided that we believe may be of interest to you. You may at any time request that we discontinue sending you emails

 

If you choose not to give us access to your personal information, it will prevent us from completing the certification process. This may mean that we cancel or terminate our service.

 

Protection of personal information

We use reasonable and appropriate physical, technical, and administrative measures to protect the confidentiality and security of personal information. We limit access to personal information to only those employees, contractors, and service providers who require the information to perform their duties.

 

Sharing of information

We may share your personal information with third-party service providers who perform services on our behalf, such as payment processors, customer service providers, and marketing service providers. We may also share your personal information with third parties if we believe it is necessary to comply with a legal obligation or to protect our rights or the rights of others.

​

Sending personal information outside the EEA area

In the event SBQ transfers personal data to a processor outside the EU/EEA, SBQ has ensured that the processor’s level of protection is adequate by controlling that any of the following requirements are fulfilled:

​

  • the EU Commission has determined that the level of protection is adequate in the third country where the data is processed;

  • SBQ and the processor have both signed up to the EU Commission’s standard contract clauses for data transfer to non-EU/EEA countries; or

  • the processor has taken other appropriate safeguards prior to the transfer and that such safeguards comply with applicable data protection legislation.

 

Marketing

We may use your personal information to tell you about relevant services and offers.

​

The personal information we have about you consists of what you tell us, the data we collect when you use our services, or from any third party we cooperate with.

 

We assess your information to understand what you may want or need, or what may be of interest to you. This is how we find out what products, services and offers may be relevant to you.

 

You may at any time ask us to stop sending you promotional messages by contacting us.

 

We may ask you to confirm or update your information if you purchase services from us in the future. We will also ask you the same if there are changes in the law, regulations or structure of our business.

 

If you change your mind, you can at any time update your information by contacting us.

 

Retention time

The time span for how long your personal data is stored is depending on usage, system and purpose, see below:

 

  • The basis for orders and invoicing are stored for 7 years according to the Swedish Accounting Act

  • Communication that forms the basis for certification is stored as long as the certificate is valid plus 2 years after the calendar year your certificate is expired. We will send due reminders for recertification.  

  • Inquiries and other communication that do not need to be archived as described above are deleted after 24 months by automatic deletion processes

  • Customer database information is saved as follows:
     

a. Suspects, i.e., possible customers according to Balance of interest – until cancellation

b. Prospects, i.e., received inquiries – until cancellation

c. Customers, i.e., product and services orders – until cancellation

d. Data on unsubscribed or relocated individuals is stored separately if the information is the basis for course certification, however, max 7 years after last contact

e. Data on unsubscribed individuals is stored separately and blocked to avoid re-introduction

f. Other data that cannot be updated is deleted immediately

 

  • Information saved by suppliers with access to personal information as above and in accordance with a data processor agreement

 

We may handle your personal information for an indefinite period and if we do, we will ensure that your privacy is protected and secure and we commit to using the information for its specified purposes only.

 

Security

SBQ has implemented appropriate technical and organizational measures to ensure that the Data Subject’s personal data is processed in a secure manner and that they are protected from loss, abuse and unauthorised access.

 

Your rights

This section describes your rights related to your personal information. Please contact us if you want to exercise your right.

​

Access – The Data Subject is always entitled to be given information about the collection and use of the personal data being processed about him/her.

 

Rectification – If the personal data that SBQ processes about the Data Subject is inaccurate, the Data Subject has the right to have the information rectified.

 

Erasure – The Data Subject has the right to have his or her personal data erased in the following cases:

​

  • the data is no longer needed for the purposes for which it was collected;

  • the data is processed unlawfully;

  • the processing of data is not necessary in order to comply with applicable laws or legislation or to determine, make or defend legal claims; and

  • the processing of data is not permitted for archiving, research or statistical purposes.

​

Right to complain – If the Data Subject suspects that SBQ processes its personal data in a way that violates applicable data protection legislation, the Data Subject has the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) (Sw. Integritetsskyddsmyndigheten) or any other competent supervisory authority.

 

Changes

We reserve the right to change Privacy Policy. Any changes will be described here and come into effect immediately. Your ongoing and continued use of our websites or services means you agree to these changes.

 

Contact

If you have any questions or concerns regarding this Privacy Policy or the Company’s privacy practices, please contact us at info@sbq.nu 

bottom of page