2.1. Personal data: Any information relating to an identified or identifiable natural person. Examples of common personal information are: name, social security number, address, telephone number and e-mail address.
2.2. Personal data processing: A measure or combination of measures concerning personal data. For example, collection, registration, storage, structuring, etc.
2.3. Registered: The natural person who, directly or indirectly, can be identified through the personal data
2.4. Website: www.One4Tech.se .
3. Legal basis for the processing of personal data
3.1. According to the GDPR, a so-called legal basis is required for the processing of personal data to be legal. One4Tech bases the processing of personal data on mainly four legal bases: Agreement, Legal obligation, Consent and Balance of interests.
3.2. Agreement: This is the legal basis on which One4Tech primarily bases the processing of personal data. Through this legal basis, One4Tech has the right to process personal data in order to fulfill its contractual obligations. In the agreements entered into between One4Tech and customers, the names and e-mail addresses of the contracting parties' contact persons appear in some cases. The purpose of the processing of personal data belonging to the contracting parties' contact persons is to fulfill contractual obligations and enable contact between the contracting parties in matters relating to the agreement.
3.3. Legal obligation: Personal data may be processed when One4Tech has a legal obligation to process the data. For example, One4Tech may have a legal obligation under the Accounting Act (1999: 1078) to process and store personal data in accordance with the law. When One4Tech processes personal data based on this legal basis, only the personal data necessary for One4Tech to fulfill its legal obligations is processed (according to the principle of data minimization). Accounting documents that contain personal data will be stored for as long as required by law.
3.4. Consent: The data subject may give a voluntary and active consent to the processing of his personal data for certain specifically stated purposes, and then One4Tech may process the personal data on the basis of this legal basis. For example, consent can be given to One4Tech by the registered person actively ticking a box to approve the processing of personal data in connection with One4Tech being contacted through the contact form available on the Website. The data subject has the right to revoke a given consent at any time, in which case the processing shall cease to the extent that the personal data are not necessary to process.
3.5. Balance of interests: One4Tech may process personal data in order to market One4Tech's services / products, prevent fraud and protect its rights and property, based on the legal basis "Balance of interests". For example, direct marketing can take place through Balance of Interest, if One4Tech uses e-mail addresses that appear on, for example, invoices or in order confirmations, to market their services / products. However, One4Tech never processes sensitive personal data with the support of Balance of Interest as a legal basis. The data subject has the right to oppose direct marketing at any time and then the processing of his personal data for that purpose shall cease.
4. What personal data One4tech processes
4.1.According to the principle of purpose limitation and data minimization, One4tech strives to process only personal data that is necessary, adequate and relevant for each individual purpose. If One4tech wishes to register more personal data than necessary, One4Tech shall ask the data subject for his or her consent to such processing.
4.2. One4tech mainly processes the following personal data: name, social security number, telephone number, e-mail address and such personal data provided by customers or other persons in contact with One4tech.
- Technical data: For example, the visitor's IP address, unique device ID, browser type, language and operating system information, and statistics, location information, and user information provided through third-party services, such as Google Analytics and the Google Search Console.
5. The purpose of the processing of personal data
5.1.According to the GDPR and the principle of purpose limitation, personal data controllers may only collect personal data for special, explicitly stated and justified purposes. Personal data is processed by One4Tech primarily for the purpose of:
Fulfill contractual obligations (Legal basis: Agreement).
Provide and deliver products (Legal basis: Agreement).
Enable contact with contact persons, customers, suppliers, partners and other stakeholders (Legal basis: Balancing of interests with support in a legitimate interest).
Perform direct marketing (Legal basis: Balancing of interests with support in a legitimate interest).
Improving service (Legal basis: Balancing of interests with support in a legitimate interest).
Compile statistics, perform customer and market analyzes, follow up internal routines and policies (Legal basis: Balancing of interests with support in a legitimate interest).
Manage necessary administrative matters and fulfill legal obligations (Legal basis: Legal obligation).
6. How ONE4TECH collects personal data
6.1.One4Tech gains access to personal information by, among other things:
Personal information is provided to One4Tech in connection with One4Tech being contacted by telephone, e-mail or contact form from the Website.
In connection with the conclusion of an agreement and by a registered or personal data controller submitting personal data to One4Tech, in order for One4Tech to be able to perform contractual obligations.
One4Tech processes all personal data carefully and does not share personal data with unauthorized persons.
7. Where the personal data is stored
7.1. One4Tech strives to store all personal data in Sweden and within the EU (according to the principle of integrity and confidentiality). If personal data is stored in a country outside the EU, One4Tech shall ensure that such storage site undertakes to comply with the provisions of the GDPR.
7.2. One4Tech's starting point is not to disclose personal data to third parties without the consent of the data subject or if it is not necessary for One4Tech to fulfill its legal or contractual obligations.
8. How long the personal data is stored
8.1. According to the GDPR, personal data may not be stored for longer than is necessary to fulfill the purposes for which they were collected. Personal data that can no longer be stored is thinned (deleted) at least annually (according to the principle of storage minimization). Follow-up and evaluation of One4Tech's handling of personal data also takes place at least annually.
8.2. One4Tech saves personal data for as long as it is needed and necessary, to fulfill the purposes for which the data was collected. The information can be stored for a longer period of time if it is necessary for One4Tech to comply with current legislation as well as for backup, archiving, auditing or to otherwise maintain and improve One4Tech's services.
9. To whom personal information may be shared
9.1.One4Tech works with subcontractors as part of the delivery of its services, such as business systems, mail providers and others. Such subcontractors act in the role of sub-assistants and through these, certain personal data may be processed on behalf of One4Tech. This means that One4Tech can disclose personal data to a subcontractor, to fulfill its obligations under agreements, applicable law, requirements from authorities, to safeguard One4Tech's legal interests or to detect and prevent internal technical or security problems.
9.2. One4Tech can share personal data to a country outside the EU / EEA, if any of One4Tech's assistants are there. However, One4Tech does not transfer personal data to a country outside the EU / ESS, unless the transfer meets the requirements of the GDPR. One4Tech must notify the data subjects before changes in sub-assistants take place that significantly affect the data subjects.
9.3. The registrants have the right at any time to request a complete overview and more detailed information about which sub-assistants are involved in the processing of the registered personal data in order to enable the delivery of One4Tech's services.
9.4. One4Tech may share personal information with relevant authorities in the event of breach of contract, non-payment or if it otherwise follows from government decisions or legislation.
10. Rights of data subjects
10.1. The registered persons have:
Right to have incorrect personal data corrected.
The right to have personal data removed.
Right to request data portability.
Right to object to the processing of personal data.
Right to demand that the processing of personal data be restricted.
The right to access their personal data (register extract) and the right to receive confirmation and information about the processing of the data subject's personal data.
Right to information about any data breach and personal data incident concerning the data subject's personal data.
The right to submit a complaint to the Data Inspectorate.
10.2. Registered users should contact One4Tech if they require any of the above. However, some of the rights only apply in certain situations and provided that the personal data is not necessary for One4Tech to process.
11.1.One4Tech observes and applies various technical and organizational security measures to protect personal data against intrusion, misuse, loss, destruction and other changes that may pose a risk to privacy (according to the principle of privacy and confidentiality). For example, One4Tech conducts regular password changes of password-protected registers and systems used in the business. Password changes take place annually and when needed. One4Tech also takes into account the data protection principles according to the GDPR when processing personal data.
12. Personal data incidents and complaints
12.1. A data breach or other event, which means that control over processed personal data is lost, involves a personal data incident. Any personal data incidents must be reported to One4Tech's personal data contact person without delay. One4Tech documents such incidents internally and reports to the Data Inspectorate within 72 hours.
12.2. If a data subject has any complaints about One4Tech's processing of personal data, notification can be made to One4Tech's contact person for personal data matters or to the Data Inspectorate (name change 2021-01-01: Integrity Protection Authority) which is the supervisory authority in Sweden.
12.3. One4Tech's personal data contact person:
Name: Ali Taleb
Tel: 073-988 96 84