Privacy policy
Information about Swedish North Point Securities AB's processing of personal data in the capacity of personal data controller for direct marketing measures and the like. Swedish North Point Securities AB (hereinafter referred to as North Point) may process a range of personal data for direct marketing measures and the like in the capacity of personal data controller. It is up to a personal data controller to inform about its treatments.
1. What personal data is processed, for what purposes and what is the legal basis and how long is the data saved?
1.1 Direct marketing based on a balancing of interests
In order to provide direct marketing about North Point's service offering to both existing and potential customers of North Point, North Point may process personal data regarding the customers' representatives. The legal basis for this processing is a balancing of interests to satisfy North Point's legitimate interest in informing about and offering various marketing activities to a selected target group for a limited time and to a limited extent. The information that may be processed is name, address, telephone number and e-mail address for the workplace as well as any information about department affiliation and position. The information and the offer may be provided by telephone, letter, e-mail, SMS and/or corresponding contact channels for communication. In cases where there is an assignment agreement between the registrant's employer and North Point, the processing will take place during the contractual relationship and for a period of twenty-six (26) months after the contractual relationship has ended. In the absence of such a contractual relationship, the personal data will be processed for a period of eighteen (18) months. The data subject has the right to oppose this treatment at any time.
1.2 Direct marketing based on a consent
In the event that North Point wishes to continue processing personal data for marketing purposes belonging to representatives of potential and old customers (older than 18 months after the termination of the contractual relationship) after eighteen months have passed from the time of collection, the data subject's consent is required. If the data subject has provided such consent, the consent constitutes the legal basis for such processing. If the data subjects have voluntarily provided their personal data for a specific purpose and in connection with this have been informed about the processing, the data subject is considered to have consented to the processing. The information that may be processed is name, address, telephone number and e-mail address for the workplace as well as any information about department affiliation and position. Information and offers about marketing activities may be provided by phone, letter, e-mail, SMS and/or corresponding contact channels for communication. The processing will take place during the time that consent has not been withdrawn by the data subject. The data subject has the right to oppose this processing at any time and thereby withdraw his consent.
1.3 Implementation of market activity
If contact with the data subject has been made in accordance with the descriptions in points 1.1 or 1.2 above with the aim of inviting to a marketing activity (event, lecture, seminar or similar) and the data subject has actively registered for the activity, North Point will process personal data to the extent it is required to complete the activity. This means that North Point will process names and contact details in order to be able to send out invitations, participant lists and materials before and after the activity. In case meals will be served during the activity, information about special diets may need to be processed. The legal basis for this processing is that it is necessary to be able to fulfill North Point's commitment when registering an activity (agreement has been reached between the participant and North Point). In addition, after the activity has been carried out, North Point, through North Point's sales and marketing department, can follow up on who participated in the activity by taking part in participant lists and thereby be able to direct marketing measures towards them. The legal basis for the latter processing is a balancing of interests to satisfy North Point's legitimate interest in being able to direct the offer of North Point's service offering to the participants. The participant list is saved for administration and follow-up for a period of no more than twenty-four (24) months. The list of participants may also, where appropriate, form a basis for North Point's reporting in the accounting context of any representation.
1.4 Media production for marketing
In order to market North Point and spread knowledge about North Point's operations, North Point may process personal data in the form of images - both still images and moving images - and audio recordings. This treatment is carried out with the support of an express and informed consent from the data subject. The processing will take place during the time that consent has not been withdrawn by the data subject. The data subject has the right to oppose this processing at any time and thereby withdraw his consent.
1.5 Website Interaction
When visiting North Point's websites, information from browsers can be both retrieved and stored, usually in the form of cookies, in order to optimize both the function and experience of the website. The information usually consists of the website visitor's preferences and information about the device from which the visit takes place. However, no identification of the visitor takes place. Even if no identification takes place, express and informed consent from the website visitor is required for North Point to use cookies. If the website visitor has provided such consent, the consent constitutes the legal basis for such processing. The website visitor has the right to oppose this treatment at any time and thereby withdraw his consent.
1.6 Expression of interest and submission of CV
Personal data voluntarily provided by the user (via e-mail, forms on the website, submitted files, etc.) has at the same time expressed consent that North Point and its partners have the right to store the data in the way North Point and its partners deem appropriate, including digitally , for a maximum of three (3) years. The user has the right to oppose this treatment at any time and thereby withdraw his consent.
2. From where is the data collected?
Names and contact details of registered persons are collected partly from external address sources, partly from the registered person himself.
3. Transfer and disclosure of personal data
In order to fulfill the purposes of North Point's processing of the personal data stated above, North Point, where appropriate, engages service and system providers of IT, who process personal data on behalf of North Point. These service and system providers may only process the personal data according to North Point's express instructions and may not use the data for their own purposes. They are also obliged by law and contract to take appropriate technical and organizational security measures to protect the data.
Where applicable, North Point may also disclose personal data to recipients other than those specified above in order to comply with applicable laws and regulations, a request or an order from a competent court or authority, as well as to satisfy North Point's legitimate interest in determining, assert and defend legal claims. North Point may also transfer personal data to recipients located in countries outside the EU/EEA area and which do not have the same level of protection for personal data as the EU.
4. The protection of personal data
North Point's objective is to safeguard the protection of personal integrity and to take all the technical and organizational measures required to protect the personal data and ensure that the treatments take place in accordance with the current data protection legislation and internal guidelines, policies and procedures for handling personal data. This means that only the people who need access to the data to perform their duties have access to it. A more detailed description of North Point's security measures can be found in the attached sub-appendix.
5. The data subject's rights
5.1 Right of access (so-called register extract)
The data subject has the right to request confirmation from North Point if North Point processes personal data concerning the data subject, and in such case to request access to the personal data in the form of a so-called register extract.
5.2 Right to rectification
If the data subject considers that an information relating to the data subject is incorrect or incomplete, the data subject also has the right to request correction.
5.3 Right to object to processing for direct marketing purposes
If it is a question of the processing of the data subject's personal data for direct marketing purposes, the data subject has the right, at any time, to oppose it and request that the data subject be deregistered from further mailings by notifying North Point, e.g. by clicking on an unsubscribe link in the mailing.
5.4 Right to object to processing based on North Point's legitimate interest
In addition to the above rights, the data subject also has, to the extent applicable data protection legislation prescribes, the right to object to processing based on North Point's legitimate interest. However, North Point may continue to process the data subject's personal data, even though the data subject has objected to the processing, if North Point has compelling legitimate reasons for the processing that outweigh the privacy interest.
5.5 Right to request restriction or deletion, alternatively right to object to processing and data portability
Under certain conditions, the data subject also has the right to request restriction or deletion of his personal data or the right to object to the processing. Under certain conditions, the data subject also has the right to obtain the personal data relating to the data subject that he/she provided to North Point in a structured, generally used and machine-readable format (data portability) for transfer to another personal data controller.
6. Contact person for questions
For questions about the processing of personal data, please contact North Point at the following email address info@northpointsec.com
The registered person also has the right to contact the supervisory authority (Datainspektionen) in the event of a complaint.