Privacy Policy
It is important to us at Cornerstone Group AB that your personal data is handled securely and properly. Here we describe how and why we store your data, which we do, for example, when you book a training course or contact us.
How Cornerstone Group AB views the updated privacy protection
- We only collect the personal data we need to provide our services and to conduct our business operations
- We protect the personal data we collect
- We only use the collected personal data for the purpose for which it was collected
- We erase any personal data we no longer need
- We inform data subjects of how and when we collect personal data
- We inform affected parties, such as data subjects and designated authorities, in the event of an incident related to our processing of personal data
General
This privacy policy details how Cornerstone Group AB processes your personal data.
We respect your right to privacy, and we are committed to complying with the applicable rules on data protection and to protecting your rights. We want to make sure you know what type of information we collect from you, how this information is used and how we protect it.
This policy also describes your rights and how you can contact us with any questions about how your personal data is used.
Personal data responsibilities
Cornerstone Group AB is the data controller for processing your personal data in accordance with this privacy policy.
Contact information
Cornerstone Group AB
Box 1073
SE-164 25 Kista
Sweden
E-mail: personuppgifter@cornerstone.se
How do we process your personal data?
Cornerstone Group AB collects your personal data in several different ways and on several different occasions, including when you use our website, when you book a training course and when you contact us.
Data we may process
1. When you purchase a product or service from us
Personal data
Name, e-mail address, phone number, company, billing address, product/service purchased.
Purpose of data processing
To enable us to fulfil our obligations to you the customer and invoice for our product or service. We also need to be able to comply with laws and regulations.
Lawful basis for data processing
Agreements and legal obligation.
How long we keep your data for
We store your data for as long as necessary to fulfil the purpose.
2. When you are in contact with us regarding our products or services
Personal data
Name, e-mail address, phone number, company, address, department, role/position, any partner ID.
Purpose of data processing
To be able to answer questions, offer the right products and services, and provide relevant information.
Lawful basis for data processing
Legitimate interest or consent.
How long we keep your data for
We store your data for as long as necessary to fulfil the purpose.
3. When you visit our website
Personal data
Language settings, browser settings, use of our web, time zone, geographic information, operating system, platform and screen resolution (via statistical tools and marketing systems).
Purpose of data processing
To provide, perform and improve services.
Lawful basis for data processing
Legitimate interest.
How long we keep your data for
We store your data for as long as necessary to fulfil the purpose.
4. When you are in a photograph or video
Personal data
Photograph, video.
Purpose of data processing
When you attend an event or complete a training course, we may take photographs and record videos for marketing purposes.
Lawful basis for data processing
Legitimate interest.
How long we keep your data for
We store your data for as long as necessary to fulfil the purpose.
5. When you appear as a reference or in a statement
Personal data
Video, photograph, name, company, e-mail address, assignment.
Purpose of data processing
To market and provide information about the company’s products and services, for example through reference assignments or interviews.
Lawful basis for data processing
Consent.
How long we keep your data for
We store your data for as long as necessary to fulfil the purpose and for as long as there is consent.
6. When you visit our offices
Personal data
Video (CCTV by the entrance and emergency exit).
Purpose of the data processing
To be able to provide evidence to authorities in the event of a burglary or theft.
Lawful basis for data processing
Legitimate interest.
How long we keep your data for
The videos are automatically erased after seven days.
7. When you apply for a job or assignment with us
Personal data
Name, address, phone number, e-mail address, photograph, previous experience and other information you have chosen to include in your CV.
Purpose of the data processing
Recruitment and necessary documentation.
Lawful basis for data processing
Legitimate interest and legal obligation.
How long we keep your data for
We store your data for a maximum of two years with reference to our legal obligation.
8. When you are a supplier to us
Personal data
Name, company, address, e-mail address, phone number and other information relevant to the assignment.
Purpose of the data processing
To ensure a functioning operation.
Lawful basis for data processing
Agreements and legal obligation.
How long we keep your data for
We store your data for as long as necessary to fulfil the purpose.
With whom may we share your personal data?
We use various suppliers’ products and services in our IT infrastructure. This means that these suppliers may process your personal data. Cornerstone Group AB may also share your personal data with subcontractors in order to deliver an agreed product or service.
With whom may we share your personal data?
We use various suppliers’ products and services in our IT infrastructure. This means that these suppliers may process your personal data. Cornerstone Group AB may also share your personal data with subcontractors in order to deliver an agreed product or service.
Subcontractors and suppliers are then data processors for us and may only process your personal data according to our instructions.
In some cases, Cornerstone Group AB may be required by law or judgment to disclose information to authorities.
Where do we process your personal data?
We strive to always store your personal data within the EU/EEA. However, in certain situations, data may be processed by a third party outside of the EU/EEA, such as a technology supplier or subcontractor. We will always take all reasonable legal, technical and organizational measures to ensure that your information is processed with the same level of protection as that offered within the EU/EEA.
Your rights
The right to withdraw consent
You are entitled to withdraw your consent to certain personal data processing at any time. If you withdraw your consent, we will cease the processing for which you gave your consent and erase the personal data processed solely based on your consent.
The right to access
You have the right to access information about what personal data we store about you and how we process this data. You are also entitled to receive a copy of this information.
The right to rectification and erasure
You have the right to have incorrect data rectified and completed. In some cases, you also have the right to have your personal data erased, for example if it is no longer necessary for the purpose for which it was collected.
The right to object and the right to restriction
You have the right to object to the processing of your data for direct marketing, for example, and in cases where we process data on the lawful basis that we have a legitimate interest. You are also entitled to restrict the processing, for example, if you believe that the information is not correct.
The right to data portability
In some cases, you have the right to obtain the personal data you have disclosed to us. The data is provided in a structured, machine-readable format, and you are also entitled to have the data transferred to another data controller if technically possible.
Questions and complaints
If you have any questions about the processing of your personal data, please contact Cornerstone Group AB, personuppgifter@cornerstone.se. If you are not satisfied with the answers you receive, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection.