OWNERSHIP

In compliance with Regulation (EU) 2016/ 679 of the European Parliament and of the Council of 27 April 2016 (hereinafter referred to as GDPR) we inform you that the personal data communicated to SECURITI ALLY SALLY AB (hereinafter referred to as SALLY) will be incorporated into a Database owned by SALLY:

SALLY: Skinnarviksringen 18, 117 27 Stockholm,  Sweden.

E-mail: hello@iamsally.io

CONTACT

For any matter related to the processing of personal data by SALLY, please contact us at the following e-mail address: hello@iamsally.io.

PERSONAL DATA

SALLY will collect the following data provided by the interested party:

COMMERCIAL CONTACT: attention to queries and contact requests received by any means, as well as the maintenance of commercial relations related to SALLY’S services.

Data collected: Name, telephone, email and query.

Purpose: To respond to requests for information that the interested party has made by any means regarding the products and services of SALLY, and to establish and maintain commercial relations.

Legitimacy: Based on the provision of consent to SALLY, it is legitimized to process the data of the interested party provided through the contact request, and in accordance with the legitimate interest for the development and maintenance of commercial relations.

Storage periods: the data will be kept until such time as the interested party requests the cancellation or deletion of their data and once deleted will be kept for a maximum period of 6 years at the disposal of the public administration, judges and courts, for the attention and defense of possible liabilities arising from the treatment.

PROMOTIONAL or NEWSLETTERS: the remission of information, news, notices, reminders and promotions that may be of interest to you, related to the activities of SALLY.

Data collected: e-mail address, telephone, position, company name and surname.

Purpose: the registration of interested parties for the sending of information, news and promotions, and to establish and maintain commercial relations.

Legitimacy: provision of the interested party’s consent to SALLY to register for promotional services, and the legitimate interest for the development of commercial relations.

Conservation periods: the data will be kept until such time as the interested party requests the cancellation or deletion of their data and once deleted will be kept for a maximum period of 6 years at the disposal of the public administration, judges and courts, for the attention and defense of possible liabilities arising from the treatment.

CURRICULUM OR EMPLOYMENT: sending of the Curriculum through the web or by any means to SALLY.

Data collected: professional area, name, surname, telephone, e-mail, CV, cover letter and any other personal data associated with the CV or professional profile.

Purpose: management of the interested party’s candidacy for published selection processes or for other vacant positions in accordance with their professional profile that may arise in the future within SALLY’s activities.

Retention periods: the data will be kept until you are awarded a job or until you ask us to delete it. They will therefore be kept for the time necessary for the purpose of processing, and once completed, they may be kept for a period of six years at the disposal of the public administration, judges and courts, for the attention and defense of possible liabilities arising from the processing.

Legitimation: provision of the consent of the interested party.

Recipients: the data provided and derived from the selection process may be transferred to:

– Third party companies identified by the interested party for requesting references that may be necessary for the selection of the candidate.

SERVICES: 

Data provided for the provision of SALLY’s services. The services will be identified at the time of data collection and registration of the same.

Data collected: Name, Surname, ID number VAT number, contact address, address, position, company, e-mail, contact telephone number, and other data necessary according to the registration requested, and which will be exclusively necessary for registration in the services of SALLY.

Purpose: the registration of interested parties for the provision of SALLY’s services, and to establish and maintain commercial relations.

Legitimacy: the legal relationship or execution of the service by SALLY for the services indicated and the legitimate interest for the development of commercial relations.

Conservation periods: the data will be kept for the time necessary for the purpose of processing or until such time as the interested party requests the cancellation or deletion of the same, and once deleted the same may be kept for a period of six years at the disposal of the public administration, judges and courts, for the attention and defense of possible liabilities arising from the processing.

Registration and Monitoring of Corporate Social Network accounts on the web: the personal data that you provide or enable to social networks when you become a follower of them. 

Data collected: Name, Surname, ID number, VAT number, contact address, address, email, contact telephone number, other data provided by the corresponding social network.

Purpose: social network monitoring and to establish and maintain business relationships.

Legitimation: provision of the consent of the Interested Party and the legitimate interest for the development of commercial relations.

Conservation periods: the data will be kept for the time necessary for the purpose of processing, and once the same will be kept available to the public administration, judges and courts, for the legal periods established for the care and defense of possible liabilities arising from the treatment.

CUSTOMERS/SUPPLIERS: Professional personal data provided by Customers/Suppliers for the provision of services and management of the legal or contractual relationship on the part of SALLY.

Data collected: Name, Surname, ID number, professional contact address, e-mail address, contact telephone number.

Purpose: management of the contractual relationship of the service.

Legitimation: the existing legal or contractual relationship necessary for the provision of the service.

Storage periods: the data will be kept for the time necessary for the purpose of processing or deletion of the same, and once completed or deleted may be retained for a period of six years at the disposal of the public administration, judges and courts, for the attention and defense of the possible responsibilities born from the treatment.

The interested party knows and expressly accepts that the acceptance of any of the aforementioned purposes implies the incorporation of his/her data in the SALLY’s Databases.

There are communications of data to third parties for the provision of services by third parties as data processors with whom SALLY has signed the corresponding Data Processor contracts and verified that these have sufficient guarantees to apply appropriate technical and organizational measures, in such a way that the processing is carried out in accordance with the requirements of the RGPD guaranteeing the protection of the rights of the data subject, even in cases in which the service providers are located outside the European Union.

EXERCISE OF RIGHTS

The interested party has recognized their rights to access, rectification, suppression, limitation, opposition and portability of their data under the responsibility of SALLY. As long as the purpose of the data processing exists or you have not expressly deleted your personal data from our databases, we will continue to process your data as they are necessary for the processing and you continue to be interested in forming part of them. At any time, the interested party may exercise their rights by sending a postal communication to SALLY at the address indicated above or via e-mail to the address hello@iamsally.io

The interested party is protected by the right to withdraw its consent for processing by SALLY. Likewise, he/she has the right to address any claims arising from the processing of his/her personal data to the Swedish Authority for Privacy Protection.

TECHNICAL AND ORGANIZATIONAL SECURITY MEASURES

SALLY  has adopted the necessary technical and organizational measures to guarantee the security and integrity of the data, as well as to avoid its alteration, loss, treatment or unauthorized access.

DATA PROVIDED

The data requested in the different forms of the Web Page or facilitated by the interested party by other means are those strictly necessary to attend to his request, which the interested party communicates voluntarily. The refusal to provide the data qualified as mandatory will result in the non-provision or the impossibility of accessing the service for which they were requested. In order to keep your personal data updated, you must inform us of any changes that occur with respect to them, otherwise, we are not responsible for their accuracy. Likewise, in those cases in which third party data is provided, the interested party undertakes to inform them of the content of this privacy policy.

The interested party undertakes to inform SALLY as soon as possible of any modification and rectification of his or her personal data so that the information contained in the Activity Registers of SALLY is at all times up to date.

Based on the legitimate interest of SALLY, the personal data of the interested party may be used for the establishment or maintenance of commercial relations by any means, including electronic means, to inform you about products and services offered by the latter, and you may at any time object to said processing for commercial purposes by sending a postal communication to the address indicated above, or by e-mail to the address hello@iamsally.io

Stockholm, April 2023