The controller is GleSYS AB, org. no. 556647-9241, ("GleSYS", "we", "us" or "our"). The way in which we process your personal data varies depending on whether you are a customer or a customer’s representative (e.g. using our services), a potential customer or the representative of a potential customer, the representative of a supplier or a business partner, or whether you are visiting our website, shopping in our online store or applying for a job with us.
The privacy policy also explains your rights as a data subject and how your rights are enforced. We always apply applicable privacy legislation, such as the General Data Protection Regulation ("GDPR") and other supplementary legislation.
If you have any questions about our processing of your personal data, please feel free to contact us at dpo@glesys.se.
We continually strive to improve our processes and handling of your personal data. As a result, we may update our data protection policy and we recommend that you read through the document at regular intervals. In the event of significant changes to the policy, we will always inform everyone who has an ongoing relationship with us (e.g. customers and representatives of partners) directly.
In cases where we process personal data on behalf of third parties, e.g. if we are instructed to store your information for you as a customer, we become the processor and we will need to enter into a personal data processing agreement. Contact us via support@glesys.se and we will be glad to help you.
Personal data consists of all information that can be linked to a living natural person in any way. This could for example be information which directly identifies an individual, such as a name, social security number or photograph, or indirectly such as information which, when combined with other information, can be linked to a particular person.
The personal data we may process are names, contact details (address, e-mail address and telephone number), organisation number, billing information, login details, information in and about communication between us, and IP addresses and other information collected through cookies and other similar technologies. We collect most of the personal data directly from you when we establish a contract with you, when we communicate with you by phone or email, and when we provide you with support or you apply for a job with us. Other possible sources of data include public registers for marketing purposes, information published on websites and the device you use when you visit our website.
If you are a private individual or a sole trader and a customer of ours, basically all the information about you that we access and process will consist of personal data. We also store and manage information about your use of our services. The personal data is processed to enable us to:
If you come into contact with GleSYS as an employee of a customer of ours or as a user of our services, we will process your personal data, including information about your use of our services, to enable us to:
We will process your personal data to enable us to:
If you are employed by a company that is a supplier or business partner of ours, we will process your personal data to enable us to:
When you visit our website, we collect information via cookies. More information about our cookies and how we use them can be found in our cookie policy. If the information we collect contains personal data, we will process it to enable us to:
On our website, you can get in touch with us directly by using our chat feature or by filling in a form. We will then process your e-mail so that we can get in touch with you. The processing is necessary to fulfil our legitimate interest in being able to communicate with you and provide you with the information you are looking for. We may save and process e-mail addresses and other information which you provide for other purposes; see sections 1.1, 1.2 and 1.3. above.
Our online store is available through the website and if you place an order with us, we will process your personal data to enable us to:
If you apply for a job with us, we will also process information which is provided in personal letters and CVs, such as skills, expertise, work experience, education, grades, references and other information which you include in your application. We will process the personal data to enable us to:
Sensitive personal data will only be processed as and when necessary or if you expressly consent to such processing. For example, sensitive personal data may be processed if you have a disability or other special needs that we need to take into account in the recruitment process.
Your personal data will be shared with selected companies to help us provide our services. For example, we use suppliers that provide CRM tools, mailings, payment solutions, accounting services, analysis tools and recruitment services. The suppliers who process personal data on our behalf have entered into personal data processing agreements with us in accordance with applicable legislation. Companies which we hire to assist us with regard to recruitment and which select people for us have separate responsibilities as regards their processing of your personal data.
Your personal data may sometimes need to be shared with authorities, courts and other parties. This applies if we are required to do this in order to comply with the law, in connection with a legal process or to respond to a request from supervisory or other authorities.
In the event that we decide to sell or transfer all or part of GleSYS in the future, your personal data may have to be shared with or transferred to parties involved in that process.
We will save your personal data for as long as is justified for the purpose of the processing. The data will then be erased or de-identified ("anonymised").
The length of time we save your personal data for depends on the type of data concerned. The same information can sometimes be saved for different purposes. For example, data may be saved because the law requires it, even though it has been singled out and anonymised for other purposes.
We regularly check the need to save your data, taking into account applicable legal requirements.
GleSYS strives to minimise its transfer of personal data to third countries. In the event of such transfer, e.g. because a service provider is based in a third country, the transfer is executed in accordance with applicable law.
When you wish to exercise your rights, please use the contact details for our Data Protection Officer given below. To ensure that we share the information with the right person, you must submit a photograph of a valid ID document when you submit your request. The photograph on the ID document will be deleted as soon as your request has been processed.
As a customer or user, you can log in to GleSYS Cloud at any time and check the information that has been saved to your account. In most cases, you can also change or delete the information. You have the right to ask us to delete all the information we have saved about you (right to erasure). Please note that, for certain purposes e.g. due to the Swedish Accounting Act (1999:1078) and other relevant laws, we are sometimes required to save data even after a request for erasure has been processed.
If you have any questions regarding the processing of your data, please contact our Data Protection Officer at the following e-mail address dpo@glesys.se.
Last updated: 31 March 2021