Privacy Policy

We respect your privacy and are committed to protecting it through our compliance with this privacy policy. This policy describes the types of information we may collect from you or that you may provide, and the way Nucleus process it.

Controller (i.e. responsible company)

Nucleus Agency AB
Org. no. 559351-4853
Postal address: Convendum City, Box 4011, 102 61 STOCKHOLM,
E-mail: [email protected]
Website: www.nucleus.se

Categories of Data subjects (you or other persons providing personal information)

A person whose personal information is processed is referred to as Data subject.

Nucleus processes personal information regarding the following categories of Data subjects:

• Persons who are customers or potential customers to Nucleus, persons from customer companies or potential customer companies.
• Persons who use Nucleus’s website to provide contact information.
• Persons at consultants, advisors and other agents with which Nucleus cooperates.
• Important persons in the industry in which Nucleus is active.
• Persons who participate in Nucleus’s seminars, events and the like.
• Persons who visit Nucleus’s office.
• Employees, potential employees and persons seeking employment at Nucleus.

Nucleus does not knowingly collect any Personal Information from children under the age of 18. If you are under the age of 18, please do not submit any Personal Information through the website. If you have reason to believe that a child under the age of 18 has provided Personal Information to Nucleus through the Website and Services, please contact Nucleus to request that we delete that child’s Personal information.

The subject-matter/types (categories) of personal information being processed

Basic information: name and address as well as other contact information, such as telephone number, e-mail address and social security number (when necessary).

If Data subject is Nucleus’s customer: Personal information related to the customer’s business. Personal information related to the customer’s finances. Personal information related to invoicing.

If Data subject is employed at Nucleus: Personal information related to the managing of employment such as information about salary, benefits, bank accounts, working hours, leave, absence, illness etc.

If Data subject has applied for employment/internship at Nucleus: Personal information about education, work experience, CV, references, grades, work certificates and similar matters.

The nature of the processing

Nucleus processes personal information as follows:

• Personal information is collected, structured, processed, stored and sorted out.

The purposes of the processing

Nucleus processes personal information for the following purposes:

• Nucleus shall be able to fulfill customer assignments and serve the customer’s interest
• Nucleus shall be able to assess customer’s or Data subject’s need for Nucleus’ services
• Nucleus shall be able to credit check Data subject or customer.
• Nucleus shall be able to market its services to customers and potential customers.
• Nucleus shall be able to develop its business as well as analyze its position on the market.
• Nucleus shall be able to fulfill its responsibilities towards employees.

The lawful grounds of the processing

Nucleus’s processing of personal information is based on the following grounds:

• Nucleus processes personal information to be able to fulfill contracts entered to/customer assignments as well as to take action on request of potential customers before a contract is entered to/an assignment is received.
• Nucleus processes personal information to fulfill legal obligations.
• Nucleus processes personal information based on its legitimate interest in being able to market Nucleus’s services to customers and potential customers (concerning information sent from Nucleus – see below.)
• Nucleus processes personal information on the basis of consent from the Data subject.

Withdrawal of consent

If certain personal information is processed based on consent from the Data subject, the Data subject has the right to withdraw his or her consent at any time.

Sources

Personal information is collected from the Data subject herself directly, via letter or e-mail or at Data subject’s visit to Nucleus’ website.

When a Data subject open the Website, Nucleus servers automatically record information that Data subject’s browser sends. This data may include information such as the device’s IP address, browser type, and version, operating system type and version, language preferences or the webpage visited before Data subject came to the Website and Services, pages of the Website and Services visited, the time spent on those pages, information you search for on the Website, access times and dates, and other statistics.

Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding the usage and traffic of the Website and Services.

Required information and missing information

As a starting point, the Data subject voluntarily provides personal information. For a Data subject who is a customer or employee of Nucleus, there may be agreed requirements to provide information, in some cases also legal requirements.

If a Data subject who is or wishes to become a customer does not provide the requested information, it may result in the Data subject not receiving Nucleus’s services.

Receivers within the EU

Personal information is processed by Nucleus’s staff at the office in Stockholm, Sweden.

Personal information may be transferred to the following receivers:

• Data processors hired by Nucleus, such as IT-suppliers or printing houses.
• Nucleus’s other chosen partners.

Receivers may exist in all EU countries depending on the character of the assignment.

Receivers outside the EU and international organizations

Nucleus may transfer personal information to the following companies outside of the EU/EEA or to international organizations:

Transfer of personal information to companies outside of the EU/EEA is made to countries which have an adequate level of protection according to art 45 in the GDPR, and to companies which are bound by the EU model clauses for transfer to third countries or which are otherwise bound to maintain an adequate protection level for personal information according to art 46 in the GDPR.

Automated decision making and profiling

Automated decision making and profiling (automatic processing and evaluation of personal information) by the Data subject may occur. Automated decision making and profiling primarily concerns all decisions regarding

• Credit checks for decisions about accepting assignments from customers.

Duration of personal information processing

Personal information is processed for 10 years after the last assignment/customer relationship or the longer period called for by the nature of the case. If the assignment no longer exists or has existed in Nucleus personal information will be processed for 5 years after application for engagement in Nucleus.

Personal information concerning employees is processed for 5 years after employment is terminated. Personal information concerning applicants for employment at Nucleus is processed for 3 years unless a shorter period is demanded by the applicant.

Personal information which is contact information concerning persons other than customers and employees is processed for as long as the information is correct and relevant for us.

Personal information is however always saved for as long as there is a legal obligation to save the information: For example, accounting material shall be saved for as long as accounting regulations require (currently 7 years).

Data subject’s right to information and Data subject’s rights

The Data subject has the right to receive information from Nucleus about what personal information Nucleus processes about the Data subject and the type of processing being performed. Requests are made to Nucleus, see address stated above.

The Data subject has the right to request rectification of personal information processed by Nucleus concerning the Data subject. The Data subject also has the right to request erasure or restriction of, or object to, the processing of personal information, to the extent permitted by applicable regulations (in particular the EU regulation on the processing of personal information). The same applies to the right to receive information in digital format (data portability).

Newsletters etc.

The Data subject may request that Nucleus apply a direct mail advertising block. The Data subject, then, does not receive information directly from Nucleus.

The right to file a complaint with a supervisory authority

The Data subject has the right to file a complaint concerning the processing of personal information by Nucleus to a supervisory authority.

In Sweden the supervisory authority is the Swedish Authority for Privacy Protection, Box 8114, 104 20, www.imy.se.

Information about the personal information being processed

Information about personal information which concerns the Data subject is provided electronically via e-mail, if the Data subject’s identity may be verified, or sent to the Data subject’s address registered in the Swedish Population Register, by ordinary post.

Changes to the privacy policy

Nucleus reserves the right to modify this policy or its terms at any time at our discretion. When we do, we will revise the updated date at the bottom of this page. We may also provide notice to you in other ways at our discretion, such as through the contact information you have provided.

Version

2022-12-14