GDPR Policy

Handling of personal data and cookies

For us at Proton Group, your personal integrity is important. We therefore want to explain to you what kind of personal data we process, how we collect it, what we use it for and how long we keep it.

This privacy policy covers all services offered by Proton Group. If we change our handling of your personal data, we will inform you immediately on our website. If a conflict arises between this document and the terms of any contract between a customer and Proton, the contract takes precedence.

What personal data we collect

We collect personal data in order to provide you with our services. Depending on the service we offer, the data collected may vary. Typically, this includes name, photographs, contact information such as email address, telephone, address, organisation number and country. In cases where there are legal requirements, we also collect date of birth or social security number.

How we obtain the personal data

Some of this data comes to us directly, for example when you purchase one of our services or subscribe to our newsletter, make enquiries about services or by holding one of the services we offer. Some data also comes to us through the use of cookies on our website. In some cases, we may also receive data from third parties, such as when your employer registers you for a training programme.

How do we use your personal data

We only collect data that we need to provide the service you have requested. We will only process your personal data with your consent or when it is necessary, such as for issuing certificates, legal requirements, regulatory requirements or similar legitimate reasons. We need your personal data for one or more of the following reasons:

When assessing and receiving a customer, supplier or business partner
When developing services
In concluding and executing agreements with customers, suppliers and business partners.
For customer care and marketing
For business processes, internal management and reporting.
To ensure health, safety, security and privacy
To comply with legal requirements.

Where your personal information is stored

We use two main ways to store your personal data: in our internal databases and in online databases of external IT providers. We have a strict security policy to ensure reliable security of your personal data.

How long we store your personal data

Your personal data and other parties

In general, we do not share your personal data. If it is necessary to provide you with our services, this may mean that third parties may have access to your data.

Personal data of a sensitive nature is only shared when required by law.

Accessing your data

We allow limited internal access to your data, and we require third parties to similarly limit access to your personal data by assessing need and right of access. This also applies to our suppliers and third parties we work with.

Your personal rights

The General Data Protection Regulation (GDPR) gives you rights that are respected by us at Proton. These rights include the right to be informed that personal data is being collected, the right to access and rectify it if it is inaccurate. You also have the right, under certain conditions described in the GDPR, to request the deletion of your personal data or to restrict its use.

You have the right to request an extract of your data. Read more about GDPR on the website of the Swedish Data Protection Authority.

Questions about how we handle privacy

If you have any questions, comments or complaints about our privacy policy, you can find contact details on this website.