Where do we process your personal data?

etimoni11223344

We always strive for your personal data to be processed within the EU/EEA and all our own IT systems are located within the EU/EEA. In the case of system support and maintenance, however, we may have to transfer the information to a country outside the EU/EEA, for example if we share your personal data with a personal data processor that, either itself or through a subcontractor, is established or stores information in a Phone Number List country outside the EU / EEA. In these cases, the assistant may only access the information that is relevant for the purpose, such as log files. Regardless of the country in which your personal data is processed, we take all reasonable legal, technical and organizational measures to ensure that the level of protection is the same as within the EU/EEA. In cases where personal data is processed outside the EU/EEA, the level of protection is guaranteed either through a decision from the European Commission that the country in question ensures an adequate level of protection or through the use of so-called appropriate protection measures. Examples of suitable protective measures are approved codes of conduct in the recipient country, standard contract clauses, binding company internal rules or the EU-US Data Privacy Framework. If you would like a copy of the safeguards that have been taken or information about where these have been made available, please contact us.

7.  How long do we save your personal data?
We never save your personal data longer than is necessary for the respective purpose. See more about the specific storage periods under each purpose. What rights do you have as a registered user?



Right of access
Right of access, so-called request for register extract. We are always open and transparent with how we process your personal data and if, where appropriate, you need to gain deeper insight into which personal data we process about you in particular, you can request access to the data. The request must be made in writing and the information provided in the form of a register extract. Keep in mind that in cases where we receive a request for access, we may ask for additional information to ensure efficient handling of your request and that the information is provided to the right person.

Download our form Request for register extract

Right to rectification
You can request that your personal data be corrected if the data is incorrect. Within the scope of the stated purpose, you also have the right to complete any incomplete personal data. Remember that as a customer or member of Srf consultants, you can change certain information directly via My Pages at srfkonsult.se

Right to erasure
You can request the deletion of personal data we process about you in the following cases:

The data are no longer necessary for the purposes for which they have been collected or processed.
You object to a balance of interests we have made based on legitimate interest and your reason for objecting outweighs our legitimate interest.
You object to processing for direct marketing purposes.
The personal data is processed in an illegal manner.
The personal data must be deleted to fulfill a legal obligation to which we are subject.
Also keep in mind that we may have the right to refuse your request in cases where there are legal obligations that prevent us from immediately deleting certain personal data. These obligations come from accounting and tax legislation, banking and money laundering legislation and from consumer law.

It may also happen that the processing is necessary for us to establish, assert or defend legal claims. Should we be prevented from complying with a request for deletion, we will instead block the personal data from being used for purposes other than the purpose that prevents the requested deletion.

Requests for deletion (withdrawal of consent) must be emailed to sent by post to Srf konsulterna AB, Box 143, 791 23 Falun

Right to limitation
You have the right to request that our processing of your personal data be restricted. If you dispute that the personal data we process is correct, you can request limited processing during the time we need to check whether the personal data is correct. If we no longer need the personal data for the stated purposes, but you, on the other hand, need them to be able to establish, assert or defend legal claims, you can request limited processing of the data from us. This means that you can request that we do not delete your data.

If you have objected to an interest balancing of legitimate interest that we have done as a legal basis for a purpose, you can request limited processing for the time we need to check whether our legitimate interests outweigh your interests in having the data deleted. If the processing has been restricted according to any of the situations above, we may only, in addition to the storage itself, process the data to establish, assert or defend legal claims, to protect someone else's rights or if you have given your consent.