Carbon Compute

Privacy policy

How is your personal data collected?

“We never share any of your data and we do not collect any of your data either, unless you contact us first. That is our privacy policy in a nutshell.”

Privacy policy

Information about Carbon Compute Sweden AB’s processing of personal data

Last updated 28 August 2023

This is an English translation provided for convenience. In case of any discrepancy, the Swedish version applies.

Carbon Compute Sweden AB, hereinafter the Company, cares about your personal privacy and about protecting the personal data we process. All processing of personal data takes place in accordance with applicable data protection legislation. Below we provide information about our processing of personal data.

Data controller

Company: Carbon Compute Sweden AB

Corporate identity number: 559344-0596

Contact person: Andreas Schennings

Postal address: 121 54 Johanneshov, Sweden

Email: info@carboncompute.com

Website: https://www.carboncompute.com

Data protection officer

The Company’s data protection officer can be reached at:

Carbon Compute Sweden AB, Data Protection Officer, Fyrskeppsvägen 62, 121 54 Johanneshov, Sweden

Categories of data subjects

The Company processes personal data relating to the following categories of data subjects:

  • Persons at companies that are existing customers, or companies that may become customers in the future
  • Persons at suppliers and partners
  • Persons at consultants, advisers and other contractors
  • Key persons in the industries in which the Company is active
  • Relevant contact persons at public authorities
  • Visitors to the Company’s website
  • Employees, future employees and persons applying for a job with the Company
  • Owners of the Company

A person whose personal data is processed is referred to as a Data Subject.

Types (categories) of personal data processed

A. Basic data: name and address and other contact details, such as telephone number and email address

B. If the Data Subject is an employee of the Company: personal data related to the management of employment, such as personal identity number, salary, benefits, bank accounts, working hours, leave, absence, illness, etc.

C. If the Data Subject is a customer of the Company: personal data related to the Company’s products. This is typically information about a trip, e.g. place of departure, destination, time and cost. It may also be information about the person who travelled, e.g. department, name and job title.

Nature of the processing

The Company processes personal data in the following way:

  • Personal data is collected, structured, processed, stored and erased.

The Company processes personal data in order to:

  • Market the Company’s products (purpose). Concerns personal data in category A above. The processing is based on the Company’s legitimate interest in being able to market its products (legal basis).
  • Develop the Company’s products and business and analyse its position in the market (purpose). Concerns personal data in categories A and C above. The processing is based on the Company’s legitimate interest in being able to market its products (legal basis).
  • Deliver products ordered by the Data Subject or customer (purpose). Concerns personal data in categories A and C above. The processing is carried out in order to perform contracts entered into and to take steps at the request of the Data Subject prior to entering into a contract (legal basis).
  • Fulfil the Company’s obligations towards employees and owners (purpose). Concerns personal data in categories A and B above. The processing is carried out in order to perform contracts entered into, to take steps at the request of the Data Subject prior to entering into a contract, and to comply with legal obligations (legal basis).

If certain personal data is processed on the basis of the Data Subject’s consent, the Data Subject has the right to withdraw that consent at any time.

Sources

Personal data has been collected from one or more of the following sources:

  • The Data Subject directly, by letter or email or when visiting the Company’s website
  • The Swedish Tax Agency / population register
  • The Data Subject in connection with the purchase of products or services, or from the Data Subject’s employer.

Requirement to provide information, and consequences of not providing it

As a starting point, the Data Subject provides personal data voluntarily. For Data Subjects who are customers or employees of the Company, there may be contractual requirements to provide information, and in some cases statutory requirements. If a Data Subject who is or wishes to become a customer does not provide the requested information, the Data Subject may not be able to receive the Company’s products.

Recipients within the EU/EEA

Personal data may be transferred to the following recipients:

  • The Company’s various units in Sweden
  • Data processors engaged by the Company, such as IT suppliers or printers
  • The Company’s selected partners, such as Yelles AB (Inleed), 556931-6788, and Microsoft (SharePoint)
  • Recipients are located in Sweden. In some cases, recipients may also be located in another EU/EEA country.

Recipients outside the EU/EEA and international organisations

The Company does not transfer personal data to companies outside the EU/EEA or to international organisations.

Automated decision-making and profiling

  • Automated decision-making (automatic processing and evaluation of personal data) concerning Data Subjects does not take place. Some limited profiling of people’s travel habits may occur.

Retention period

Personal data is processed for 18 months after the most recently completed assignment or customer relationship. If no assignment exists or has existed with the Company, personal data is processed for 5 years after the application for engagement with the Company.

Personal data relating to employees is processed for 5 years after the end of employment. Data relating to persons who have applied for a job with the Company is processed for 3 years, unless the person requests a shorter period.

Personal data consisting of contact details of persons other than customers and employees is processed for as long as the information is correct and relevant to us.

Personal data is, however, always retained for as long as there is a legal obligation to retain the information. For example, accounting records are retained for as long as applicable accounting rules require (currently 7 years).

The Data Subject’s right to information, and other rights

The Data Subject has the right to obtain information from the Company about which personal data the Company processes about the Data Subject and what type of processing is carried out. Requests are made to the Company at the address above.

The Data Subject has the right to request rectification of personal data that the Company processes about the Data Subject. The Data Subject also has the right to request erasure or restriction of, or to object to, the processing of personal data to the extent permitted by applicable law (in particular the EU General Data Protection Regulation). The same applies to the right to receive the information in a digital format (data portability).

Opting out of direct marketing

The Data Subject may request that the Company blocks direct marketing. The Data Subject will then not receive marketing information directly from the Company.

The right to lodge a complaint with a supervisory authority

The Data Subject has the right to lodge a complaint regarding the Company’s processing of personal data with a supervisory authority.

In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten), Box 8114, 104 20 Stockholm, www.imy.se.

Information about the personal data being processed

Information about personal data relating to the Data Subject is provided in a separate document. Such information

  • is provided electronically by email if the Data Subject’s identity can be verified, or
  • is sent by ordinary post to the Data Subject’s registered address.