Personal Data Protection Policy


CBG Konsult & Information AB’s Personal Data Protection Policy according to EU’s GDPR [General Data Protection Regulation (EU) 2016/679].

 

Purpose of this policy

 

Personal data is information that can be used to identify you or which may otherwise be linked to you. It is important that you feel secure when you provide your personal data to CBG Konsult & Information AB and its subsidiaries in the Group, hereinafter referred to as CBG. Therefore, CBG has worked out this policy to explain to you for what your personal data may be used for and how, and what rights you have and the obligations CBG as Data Controller has in the processing of your personal data.

 

What personal data is processed?

 

CBG will mainly process personal data that you have provided when we have been in contact with each other and personal data that CBG gets access to when performing different assignments according to business agreements. For example, it may have been in connection with a customer contact, assignments, and recruitment or in any other context. Therefore, the personal data CBG processes depends on what kind of contact it concerns. CBG stores complete name, job title, address, phone number, email address, the legal entity you represent, owe or where you work for the following categories:

 

  1.  Person making an inquiry regarding CBG’s services on the web
  2.  Applicant for language-related freelance assignments
  3.  Representative – Potential customer
  4.  Representative – Active customer
  5.  Representative – Potential supplier
  6.  Representative – Supplier

 

If a contact is developed and leads, for example, to a freelance cooperation, CBG will request additional personal data necessary to carry out the processes related to a freelance cooperation.

 

Some personal data about you may have been obtained from other sources, such as standard search engines, professional online directories and social media for the purpose of developing and marketing our business mainly in terms of freelance resources like translators and customers.

 

Since CBG’s organization is constituted by teams with team members located in different countries, it has a legitimate interest to transfer personal data between CBG's various entities in the Group in a continuous information and knowledge exchange in order to ensure that the global operations can be conducted in a manner consistent with established business goals.

 

We will also transfer personal data between the CBG’s entities in China (P.R.C) and the U.S. In these cases we apply EU’s standard agreement clauses. 

 

You are not required to provide your personal data to us, but if requested personal data is not disclosed, CBG cannot for example initiate a recruitment process, undertake an assignment or place an order.

 

The purpose of processing personal data

 

CBG uses your personal data for the purpose to:

 

  • Manage contacts and the cooperation with customers, freelance resources like translators and providers of different services, which require that accurate and updated personal data is maintained in CBG's various systems.
  • Fulfill CBG's obligations according to legal requirements including for example accounting and invoicing purposes.
  • Prevent abuse of a service, prevent, discourage and investigate criminal actions against CBG, e.g. possible fraud or other offenses or protect and improve CBG’s IT environment against attacks and intrusion.
  • Use for the development of CBG’s business activities like sales, marketing, production processes, methodology, services.
  • Fulfill the obligations towards the customers according to concluded agreements.

Personal data that CBG possesses will be processed based on the following legal grounds:

 

  • To fulfill concluded agreements with customers, freelance resources like translators or providers of different services.
  • To comply with legal requirements.
  • To fulfill a purpose to meet CBG’s or a third party’s legitimate interest.

CBG only uses your personal data for the purpose for which you provided the data.

 

Who may access your personal data

 

CBG is responsible in ensuring that its personnel shall only have access to your personal data on a need-to-know basis and be committed to keep such data confidential. CBG will not disclose personal data to third parties other than when:

 

  • When it has been agreed upon between CBG and you.
  • It is necessary for CBG to comply with legal requirements from e.g. government authorities.
  • It is necessary to fulfill CBG’s commitments to customers by contracting external service providers, so-called Data Processors(*), like financial institutions, insurance companies, companies providing fringe benefits, companies providing occupational healthcare, freelance language resources such as translators, IT service providers, provider of telecom services and, where required by law, regulation or government decision as in the case of auditors.

(*) A Data Processor is a company that processes personal data on behalf of CBG in accordance with CBG's instructions. A Data Processor is not entitled to use the data for purposes other than those agreed in a Data Processing Agreement, where the Data Processor undertakes to ensure the security of the personal data processed and undertakes to comply with detailed security requirements and to take the necessary technical and organizational measures to protect your personal data.

 

Storing of personal data

 

CBG will save your personal data as long as the information is required for the purpose they were collected. CBG will delete the data that is no longer required but may retain certain personal data to meet legal requirements.

 

Certain personal data regarding freelance language resources like translators, which are stored in CBG’s business system, are considered crucial for CBG’s business activities.

 

Data processed for the purpose of developing, and marketing CBG’s business is stored for a period of one year from the last contact.

 

If you opt out of receiving newsletters or participating in CBG’s yearly customer survey, CBG will stop using your personal data for these purposes.

 

Personal data related to taxes and bookkeeping will be stored according to the period of time stipulated in the current legislation of the country where the CBG entity has its legal domicile.

 

Your rights as registered

 

Right to register extract

 

You have the right to receive information regarding what personal data we process about you.

 

Please bear in mind that if CBG receives a request for registry extracts, it may be necessary to ask for additional information to ensure the effective handling of your request and that the information is provided to the correct person.

 

Right to ask for correction

 

You have the right to request your personal data to be corrected if the data is incorrect. Within the stated purpose, you also have the right to supplement any incomplete data.

 

Right to erasure

 

Personal data will not be stored longer time than stated previously (see section “Storing of personal data”) and CBG will delete personal data in accordance with applicable law. You may request the deletion of your personal data that is stored at CBG. CBG may also correct or delete data that is incorrect or limit the processing of such data on its own initiative. CBG may have the right to deny your request if there are legal obligations that prevent CBG from immediately deleting certain personal data or if the personal data is needed for another purpose.

 

Right to dataportability

 

You also have the right to receive your personal data in a commonly used machine-readable format that you have previously submitted to CBG for processing in the event that this data was processed according to your consent or because of agreement.

 

Right to withdraw your consent

 

If you have given your consent to CBG, you have the right to withdraw your consent. When you withdraw your consent, the processing that the consent intended will cease and the personal data collected by your consent will be deleted provided that the personal data is not required for any other purpose that CBG has the right to process your personal data for.

 

Right to object to and restriction of processing

 

You can always object to our processing of your personal data for marketing purposes or to any processing carried out for the purpose of fulfilling CBG’s or third party’s legitimate interest.

 

In some cases you also have the right to request that we restrict the processing of your personal data.

 

Exercise of your rights

 

If you wish to exercise any of your rights listed above, please contact us. Contact details are provided in the section “How do you contact CBG?”

 

CBG will promptly handle your request. In case CBG does not intend to concede your request or to not concede it in full, you will be informed and the reasons for the decision.

 

Data Protection Authority

 

In every EU country where the parent company and its subsidiaries are established, there is an authority that is responsible for monitoring the application of the GDPR. If you believe that your personal data has been handled in violation of current legislation, you will be able to file a complaint with the respective authority.

 

How do you contact CBG?

 

CBG takes privacy and data protection seriously. CBG continuously monitors the security measures that it considers necessary to protect personal data through confidentiality and ensure its availability and accuracy. Contact information in the event of a request for register extract/amend/delete data as well as other questions relating to personal data processing is as follows:

 

Name: CBG Konsult & Information AB

Corporate ID number: 556172-1993

Postal address: Box 1036, 172 21 SUNDBYBERG, Sweden

Visitor’s address: Löfströms allé 6 A, 3rd floor, 172 66 SUNDBYBERG, Sweden

Telephone: +46(8)555 84 00

 

You can reach our Data Protection Officer (D.P.O.) on the following e-mail address.

Email: dataprotectionofficer@cbg.com