Your privacy is important to us at Industri Support Värmland AB. The purpose of this policy is to ensure that personal data is handled in accordance with the EU General Data Protection Regulation (GDPR). This privacy policy is a consent document and describes Industri Support Värmland AB’s processing of personal data. The policy describes routines and processes regarding our collection, processing, and storage of your personal data and states your rights. We ask you to carefully read the privacy policy before sharing your personal data with us.

The information you provide to us is voluntary. Information that is not relevant to the purpose does not need to be provided. If you choose not to provide us with certain personal data, it may affect the service. This applies to all categories of registered individuals who provide their personal data to us.

Industri Support Värmland AB processes personal data only to the extent that such processing is necessary for the service and for the services provided by the supplier or for the purposes stated in the Privacy Policy.

We recognize that data protection and privacy issues are a long-term responsibility, which is why we may from time-to-time update, develop, or adopt new policies.

Personal data is information that, individually or in combination with other data, can be used to identify you as a user. This can include your name, email address, or phone number.

Each processing of personal data must comply with the following principles:

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Responsible data processing

Compliance requires good internal instructions with an internal regulatory framework with good internal control. Our stationary employees are given continuous training so that Industri Support Värmland AB can maintain the requirements for safe processing, storage, and deletion of personal data. The training also includes Information and IT security within the company.

Industri Support Värmland AB is a staffing and recruitment company. The privacy policy regulates how Industri Support Värmland AB collects, processes, and stores personal data for our service offerings, which include leasing, recruitment, personality and aptitude tests, second opinion, and related activities.

Data Controller:

Industri Support Värmland AB (556573-7482) Korpralsvägen 3 671 34 Arvika 0570-130 60

The CEO has overall responsibility for the content of this policy and its implementation and compliance by the organization. Berndt Levin has been appointed as the company’s representative for handling personal data and ensuring compliance with the policy. All stationary employees are responsible for acting in accordance with this policy and what it aims to ensure. If you have any questions or complaints regarding our use of your personal data, please contact us via this email address: dataskydd@industrisupport.com

Industri Support Värmland AB is responsible for all personal data you provide when contacting us. For example, personal data processed is obtained via the website, telephone, email, fairs, through the recruitment platform, search, reference checks, to maintain the employment relationship. The privacy policy regulates the handling of personal data for individuals at the partners with whom Industri Support Värmland AB has a business relationship, such as customers, suppliers, or other contacts within the business. The privacy policy thus applies to individuals who are candidates, employees, customers, suppliers, etc.

Industri Support Värmland AB is not responsible for cases where personal data is handled on websites not administered by Industri Support Värmland AB, such as other websites that have linked our services to their pages.

Our primary purpose for processing your personal data is to fulfill our commitments to you as a candidate, employee, supplier, or customer. We also collect data about you who are not yet a customer but wish to be contacted by us. The personal data processing carried out depends on the relationship we have with you. We only process personal data to the extent that such processing is necessary for the service or as stated below.

We process your personal data for the following purposes:

• Recruitment, administration of your application, so that you can take advantage of the services we deliver to our customers. We must, among other things, be able to evaluate who is the right person to recruit.
• To manage our relationship with you and inform you about the progress of the recruitment process.
• Handle any cases of alleged discrimination, disputes, and complaints against you or Industri Support Värmland AB or to fulfil other legal obligations, etc.
• To conduct internal demographic studies to optimize the business.
• To manage the employment relationship and be able to contact you during employment. This includes contacts via telephone, email, and social media.
• Your information may be used in marketing and market research. This is to enhance the quality of the service. Contact us if you do not wish to participate for marketing purposes. Contact us via this email address: dataskydd@industrisupport.com

We process your personal data for the following purposes:

• To be able to offer and deliver the service.
• To enable future business relationships.
• To manage, maintain contact, and fulfil obligations between the parties. This includes contacts via telephone, email, and social media.
• To handle any disputes and complaints, etc.
• To be able to purchase a product or service and contact the supplier with questions, etc.
• Your information may be used in marketing and market research. This is to enhance the quality of the service. Contact us if you do not wish to participate for marketing purposes, contact us via this email address: [dataskydd@industrisupport.com](mailto:dataskydd@industrisupport.com)

Below are the categories of personal data collected and processed and the legal basis for handling the personal data. The personal data processed is based on the information provided by the candidate. When the candidate provides their personal data via our recruitment platform, the candidate consents to a user agreement to be fully searchable for recruitment and staffing.

To provide the service, the following information is processed, including but not limited to name, address, username, password, email. As well as personal data provided via CV documents and other application documents, grades, certificates – including but not limited to contact information, personal identification number, information about education, information about the date of birth, preferences, interests, information about work experience, information about willingness to relocate, photograph. If the candidate has submitted a photograph, the candidate consents to Industri Support Värmland AB processing such a photograph in accordance with the user agreement. The candidate can edit their own user profile at any time.

We may use third parties to carry out all or part of the recruitment process. In such cases, we have ensured that these partners comply with this Privacy Policy.

We may collect more information from you to process your job application, such as references, information about skills, or any professional license. If you participate in interviews and undergo knowledge tests as part of the recruitment process or the requested service, we collect additional information such as answers to your interview questions, knowledge skills. Tests may thus occur in the recruitment process.

If you agree to be photographed or if you, without prompting from Industri Support Värmland AB, submit a photograph of yourself, you consent to us processing such a photograph.

We work with reference checks in our recruitment processes. Candidates are responsible for informing any references that their contact details are provided to Industri Support Värmland AB. It is of interest for data processing within the recruitment process to obtain information from references. During reference checks, information about sensitive personal data such as assessments and health may be collected, for example, information about sick leave and information necessary for recruitment. If sensitive information is processed, explicit consent will be obtained.

For the processing of the reference’s personal data, the support is a balance of interests. The candidate is responsible for informing the reference that their personal data has been disclosed. Additional information about the processing of the reference’s personal data is provided at the first contact.

We use LinkedIn as a professional tool in recruitment. Information may be obtained from these media in accordance with the platform’s terms of use.

For certain customers and assignments, high security requirements are set for the business. This may mean that we need to process information about background checks, credit checks, health checks, or checks via drug tests. Such checks may contain sensitive personal data. Before a check, explicit consent from the candidate will be obtained. In cases where we have received consent for a background check via the criminal record, you order the extract yourself. It is up to you to decide whether you want to order the document. If you choose to abstain, it may affect your chances of being considered for the position. The extract is opened by you together with Industri Support Värmland AB. The information will be handled confidentially and will never be processed by Industri Support Värmland AB. However, Industri Support Värmland AB may verbally confirm the result with the customer in order to provide the service.

If you communicate with us via email, mail, phone, voicemail messages, or other forms of communication, we may retain such communication, and the information provided to us. This is to handle your case with us, answer your question, handle your complaint, etc. If you want us to refrain from communicating with you or delete your personal data, please contact us at[dataskydd@industrisupport.com](mailto:dataskydd@industrisupport.com)

Searching for potential candidates may occur. Personal data is processed in such cases with a balance of interests as the legal basis. The interest is to be able to find competent candidates for recruitment processes and to be able to contact or convey job offers to these candidates. This promotes mobility in the labor market and ensures that the right person ends up in the right job. Additionally, there is a commercial reason as it constitutes an important part of Industri Support Värmland AB’s core business. Through the search, potential candidates also get the opportunity to take advantage of job offers that have not been publicly advertised and that are tailored to their competencies. The search may only include information that is relevant and of significant importance for assessing the registered person’s professional qualifications and contact details. The potential candidate must be informed about the processing of personal data before a recruitment process begins or before information about the registered person is shared with the customer. No later than one month from the collection of the data, the potential candidate must be informed about the collection or if the data was collected to contact the registered person, it must be done at the first contact.

If the potential candidate registers in the recruitment database after contact has been initiated, they consent to the terms of use applicable to the service to be fully searchable for recruitment and staffing.

Employees

In addition to the personal data provided to us as a candidate as mentioned above, personal data is also processed for the purpose of administering the employment relationship based on the employment contract. This includes, among other things, contact details of relatives, salary and account information, as well as other additional information handled in an employment relationship. Other personal data required to fulfil payroll management for the employee is also processed. The employee is responsible for informing their relatives that their personal data has been disclosed.

Furthermore, personal data is used to match potential assignments for the customer. This requires that information about you is disclosed to customers and potential customers. Information about grades and assessments or evaluative information from, for example, development discussions may be processed if required for the employment or to fulfil legal obligations.

Industri Support Värmland AB may also need to handle sensitive information to fulfil its obligations as an employer. This includes, for example, health information and information about import requirements. Additionally, there is a legal obligation to transfer personal data to various authorities, etc.

Customers, Suppliers, and Potential Customers

Industri Support Värmland AB processes personal data about employees of customers, suppliers, and potential customers. The handling is carried out in accordance with this Privacy Policy. Before contact details are obtained, the customer or supplier must have given approval for us to handle the personal data. Categories of personal data processed include, in addition to billing information, contact details. Contact details regarding customers and suppliers include name, address, email, position, areas of responsibility, and other information necessary to provide and follow up on the service or to ensure good deliveries and enable future business relationships. Contact details are needed for existing relationships to maintain obligations under the agreement. Regarding potential customers, this is a balance of interests as it is in Industri Support Värmland AB’s core business to present services for future business relationships. The Privacy Policy also covers personal data used to provide information and proposals within Industri Support Värmland AB’s service areas. This is so that customers and potential customers can access content that may be of interest. If you no longer wish to receive this type of information for marketing purposes, you can contact Industri Support Värmland AB.

Cookies

We use cookies on our website. Cookies are small text files placed on your computer, tablet, or mobile phone. These files identify your computer, tablet, mobile phone, and store your choices and other data during your visit, including tracking usage in the system and, for example, indicating where you have applied for a specific job or made a spontaneous application. You do not need to accept cookies from our website. Most browsers have the option to disable them. For information on how to disable cookies, go to the browser’s help menu. If cookies are not accepted, functionality on the site may be affected. For more information about our use of cookies, see our Cookie Policy on our website.

Sharing of Personal Data

If your personal data is processed as an employee or candidate, it is partly handled for the purpose of matching potential assignments with customers. To fulfil these purposes, it is often necessary to disclose and compile your personal data to customers and potential customers. The sharing is necessary to quickly offer candidates and employees current and interesting assignments and to provide customers with the best competence and to open up new business relationships. In some cases, if required to administer the employment relationship and the obligations that come with it, it may be necessary to share your personal data with occupational health services and employment agencies. Personal data may also be disclosed to other partners if necessary for the execution and provision of the service.

Data may be shared with customers or potential customers outside the EEA. If we disclose personal data outside the EEA, we will ensure that the personal data remains protected and we will take the necessary measures to legally transfer the personal data to countries outside the EEA.

Before sharing sensitive data, it must be assessed whether the sharing is necessary for the service and the purpose of the collection. Additionally, it is assessed whether explicit consent is required for sharing or if there is legal support for sharing the data.

Information about your user profile as a candidate and employee is stored in databases hosted by third parties located in Sweden. These third parties do not use and do not have access to your personal data for any purpose other than providing cloud services and storage services.

For all categories of registered individuals, Industri Support Värmland AB may disclose your personal data to other third parties such as suppliers for our operations, for example, for support and technical issues of our IT systems, testing companies, etc. We do not sell personal data to anyone and only share personal data with third parties that facilitate the provision of our service, such as subcontractors, for which we are responsible.

We do not share your personal data with third parties other than as stated above unless:

• You request or approve it
• Information must be disclosed to comply with the law (e.g., search warrant, subpoena, or court order) or to comply with an agreement we have with you, or to protect our rights, property, or the safety of the service, or other users or our employees
• To handle emergencies or force majeure events
• To handle disputes, claims, or respond to individuals acting on your behalf
• To handle a reorganization of the company, merger, or sale
• We may also collect aggregated data about our candidates and make this information available at an aggregated level to our partners, service providers, or partners for marketing purposes.

Security

Personal data is protected through appropriate technical and organizational measures. To ensure confidential and secure processing, we use data networks protected by firewalls and password protection according to industry standards. To ensure the integrity of personal data submitted via the internet, we may use encryption technology when transferring personal data to servers. The stationary employees at Industri Support Värmland AB are bound by confidentiality agreements and must follow rules for information and IT security as well as the privacy policy and other internal guidelines to protect personal data.

Processing and management of documents and agreements between parties is done through our digital solution Oneflow, where secure handling is verified via, for example, bank ID and two-factor authentication.

Subprocessors

For some of our services within the business and cloud solutions, Industri Support Värmland AB uses subprocessors. Industri Support Värmland AB has data processing agreements with these subprocessors. These agreements must comply with the rules in accordance with GDPR and the agreements must not conflict with this privacy policy.

Storage and Deletion

Employees’ and candidates’ personal data is stored by us on our servers and on servers belonging to our cloud service provider that we use, located in Sweden. How long personal data is stored depends on the type of personal data and the purpose of its processing. The data registered in your profile will be stored as long as your account is active, during the ongoing contractual relationship, and thereafter for two years, in some cases for a longer period if required by law.

Your account is considered inactive if you have not logged in for a period that gives reason to believe that your personal data has become outdated, that you no longer have an employment relationship with Industri Support Värmland AB, or that you have withdrawn your consent to the processing of your personal data.

As a general rule, Industri Support Värmland AB will store personal data related to the application process and recruitment process for the current year of the latest activity and thereafter for two years, with an addition for an established employment contract for the current year and thereafter for 10 years, and for data included in customer and supplier agreements as well as data on business events, such as data on time reports, participants, assignments, salary, control data, invoices, declarations, financial statements during the contract period and thereafter for 10 years. The storage period also includes the reference’s data.

Personal data collected by Industri Support Värmland AB during a search will be deleted as soon as it is clear that the candidate will not accept or be offered the position or assignment. This means when the recruitment process is finished. If the personal data is to be stored for future assignments, the candidate must be informed and given the opportunity to have the data deleted if desired.

Personal data related to contact persons for customers and suppliers will be stored during the ongoing business relationship and for the current year of the latest activity and thereafter for two years. If personal data is included in customer agreements and data on business events in invoices, time reports, financial statements, the data will be stored during the contract period and thereafter for 10 years.

Register Extract, Correction, and Deletion

You have the right to obtain information about the processing of personal data that is carried out by us. You have the right to request a register extract once a year, where you can see what personal data we process about you, as well as information about the scope and purpose of such processing.

You have the right to request correction if we have incorrect personal data about you. You also have the right to be deleted under certain conditions; the data is not required for the purpose, if the data about you has been saved with consent as the legal basis and you withdraw your consent, if the personal data is based on a balance of interests and there are no longer reasons that outweigh your interest, if the personal data has been processed unlawfully. You do not have the right to be deleted if we are legally obliged to retain the data.

Restriction of Processing and Objection

You have the right to request a restriction in the processing of your personal data. The request will not be fulfilled if it is a requirement that the processing must take place for the service to be fulfilled and function.

You also have the right to object to the processing of personal data. Industri Support Värmland AB will then cease processing while the matter is being investigated.

Data Portability

You have the right to data portability provided that the legal basis is consent or contract, and what you can obtain are personal data that concern you, which you have provided yourself or which have been generated by your activities.

Withdrawn Consent and Sensitive Personal Data

You always have the right to withdraw consent and notify that you object to the continued processing of your personal data.

Industri Support Värmland AB may, in accordance with the provision of the service and this privacy policy, need to process sensitive data. For the processing of sensitive data, there is explicit consent. Sensitive data may also need to be processed for Industri Support Värmland AB to fulfill its obligations as an employer.

Supervisory Authority

The supervisory authority for the handling of personal data is the Swedish Authority for Privacy Protection. If there are complaints about the handling of your personal data, you can contact them.

Exercising Rights

You can contact us via  dataskydd@industrisupport.com if you want to exercise your rights or via phone number 0570-130 60. Berndt Levin is the company’s representative for this type of issue.

Changes to the Privacy Policy

Industri Support Värmland AB may from time to time update and develop the service offering regarding recruitment services, which is why the privacy policy may also be updated. Changes are published on our website. If required by law, those affected will be informed in other ways. If we make changes that significantly differ from what you have consented to, you will be notified of these changes and asked to consent again to the handling of the relevant personal data. The current policy is updated on 2025-04-30.