Management of personal data
At NMV Group, it is important to us that you feel secure about how we manage your personal data. That is why we are completely open about how we collect, process and share the information we save about you.
As of 25 May 2018, NMV Group follows the new European General Data Protection Regulation – GDPR. This new regulation replaces the previous Swedish legislation on data protection (the Swedish Personal Data Act, 1998:204, commonly known as “PuL”).
Our policy for personal data management
The purpose of our policy for personal data management is to ensure that NMV Group manages personal data in accordance with the EU’s new General Data Protection Regulation (GDPR). The policy covers all types of processing involving personal data, be it structured or unstructured data. This policy has been presented to and agreed with all our employees.
Each type of personal data processing is performed in accordance with the following principles:
- Lawfulness
- Restriction of purpose
- Minimisation of data
- Accuracy
- Minimisation of storage
- Privacy and confidentiality
When we manage email correspondence, be it internal or external, data is only stored for a limited period of time and/or for no longer than is necessary for the purpose at hand.
Our processing of data is documented in our register of the various registers we maintain.
We monitor and evaluate our management of personal data at least once a year.
Any incidents/breaches regarding the personal data we process are reported without delay to the Data Protection Officer. In turn, the Data Protection Officer reports the incident/breach to the Swedish Data Protection Authority (Datainspektionen) without undue delay and no later than within 72 hours, and otherwise takes the measures necessary in relation to the incident/breach.
Our requirements on the management of personal data in accordance with GDPR are always assured in connection with the procurement and development of IT solutions and services, and are included as part of the requirements specification and in any contracts and agreements.
What is personal data?
Personal data is any type of information that can directly or indirectly be related to a living natural person.
Why do we need your personal data?
The information is such that is both provided by you, and that we collect about you, as an employee, job applicant, customer or supplier.
NMV Group may also register your personal data:
- When you visit our website
- When you contact us via email, telephone or social media
- When you subscribe to the company’s newsletter
The data is stored in our data system and is used to support our business operations. The aim is to be able to offer you a service that is as effective and professional as possible, and to be able to offer you solutions and services that are designed to suit your particular needs.
When you visit our website
When you visit our website, we collect data regarding your IP address, geographical location and search patterns and interests, with the aim of being able to adapt our marketing to your particular situation and needs.
When you visit our website you also consent to us storing cookies on your computer. We use such cookies to track your online behaviour, in order to be able to provide you with marketing that is based on your particular interests and needs.
To whom might we disclose your data?
You privacy is of the utmost importance to us. We do not disclose your data to any other party without good reason, and we will never sell your data.
Within various areas, we engage the services of suppliers and subcontractors and, in certain cases, companies within our own group, in order to be able to deliver our solutions and services to you. This also means that such suppliers, subcontractors and companies may require certain information about you as the customer. However, such parties may not use data about you for any reason other than for the purpose of providing the service we specify.
What rights do you have?
As a data subject, by law you have certain rights in connection with the processing of your personal data. These rights include, among other things, the right to know whether your personal data is being processed by NMV Group and, if so, the right to receive a copy of such data as well as information about the processing (in the form of a register extract).
You also have the right, in certain cases, to request rectification or erasure of data. Furthermore, you have the right to object to the processing and to request that we restrict the processing of your personal data. However, please be aware that we may be subject to certain legal obligations that prevent us from immediately erasing parts of your data.
Contact
If you have any questions regarding our processing of personal data, you are very welcome to contact us via email at info.kiruna@nmvgroup.se
You can also call our switchboard on +46 980 640 80, and our staff will be pleased to forward your enquiry to the appropriate person.