We respect your privacy and are committed to protecting it through our compliance with this privacy policy. This policy describes the types of information we may collect from you or that you may provide, and the way Nucleus process it.
Nucleus Agency AB
Org. no. 559351-4853
Postal address: Convendum City, Box 4011, 102 61 STOCKHOLM,
E-mail: [email protected]
Website: www.nucleus.se
A person whose personal information is processed is referred to as Data subject.
Nucleus processes personal information regarding the following categories of Data subjects:
Nucleus does not knowingly collect any Personal Information from children under the age of 18. If you are under the age of 18, please do not submit any Personal Information through the website. If you have reason to believe that a child under the age of 18 has provided Personal Information to Nucleus through the Website and Services, please contact Nucleus to request that we delete that child’s Personal information.
Basic information: name and address as well as other contact information, such as telephone number, e-mail address and social security number (when necessary).
If Data subject is Nucleus’s customer: Personal information related to the customer’s business. Personal information related to the customer’s finances. Personal information related to invoicing.
If Data subject is employed at Nucleus: Personal information related to the managing of employment such as information about salary, benefits, bank accounts, working hours, leave, absence, illness etc.
If Data subject has applied for employment/internship at Nucleus: Personal information about education, work experience, CV, references, grades, work certificates and similar matters.
The nature of the processing
Nucleus processes personal information as follows:
Nucleus processes personal information for the following purposes:
Nucleus’s processing of personal information is based on the following grounds:
If certain personal information is processed based on consent from the Data subject, the Data subject has the right to withdraw his or her consent at any time.
Personal information is collected from the Data subject herself directly, via letter or e-mail or at Data subject’s visit to Nucleus’ website.
When a Data subject open the Website, Nucleus servers automatically record information that Data subject’s browser sends. This data may include information such as the device’s IP address, browser type, and version, operating system type and version, language preferences or the webpage visited before Data subject came to the Website and Services, pages of the Website and Services visited, the time spent on those pages, information you search for on the Website, access times and dates, and other statistics.
Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding the usage and traffic of the Website and Services.
As a starting point, the Data subject voluntarily provides personal information. For a Data subject who is a customer or employee of Nucleus, there may be agreed requirements to provide information, in some cases also legal requirements.
If a Data subject who is or wishes to become a customer does not provide the requested information, it may result in the Data subject not receiving Nucleus’s services.
Personal information is processed by Nucleus’s staff at the office in Stockholm, Sweden.
Personal information may be transferred to the following receivers:
Receivers may exist in all EU countries depending on the character of the assignment.
Nucleus may transfer personal information to the following companies outside of the EU/EEA or to international organizations:
Transfer of personal information to companies outside of the EU/EEA is made to countries which have an adequate level of protection according to art 45 in the GDPR, and to companies which are bound by the EU model clauses for transfer to third countries or which are otherwise bound to maintain an adequate protection level for personal information according to art 46 in the GDPR.
Automated decision making and profiling (automatic processing and evaluation of personal information) by the Data subject may occur. Automated decision making and profiling primarily concerns all decisions regarding
Personal information is processed for 10 years after the last assignment/customer relationship or the longer period called for by the nature of the case. If the assignment no longer exists or has existed in Nucleus personal information will be processed for 5 years after application for engagement in Nucleus.
Personal information concerning employees is processed for 5 years after employment is terminated. Personal information concerning applicants for employment at Nucleus is processed for 3 years unless a shorter period is demanded by the applicant.
Personal information which is contact information concerning persons other than customers and employees is processed for as long as the information is correct and relevant for us.
Personal information is however always saved for as long as there is a legal obligation to save the information: For example, accounting material shall be saved for as long as accounting regulations require (currently 7 years).
The Data subject has the right to receive information from Nucleus about what personal information Nucleus processes about the Data subject and the type of processing being performed. Requests are made to Nucleus, see address stated above.
The Data subject has the right to request rectification of personal information processed by Nucleus concerning the Data subject. The Data subject also has the right to request erasure or restriction of, or object to, the processing of personal information, to the extent permitted by applicable regulations (in particular the EU regulation on the processing of personal information). The same applies to the right to receive information in digital format (data portability).
The Data subject may request that Nucleus apply a direct mail advertising block. The Data subject, then, does not receive information directly from Nucleus.
The Data subject has the right to file a complaint concerning the processing of personal information by Nucleus to a supervisory authority.
In Sweden the supervisory authority is the Swedish Authority for Privacy Protection, Box 8114, 104 20, www.imy.se.
Information about personal information which concerns the Data subject is provided electronically via e-mail, if the Data subject’s identity may be verified, or sent to the Data subject’s address registered in the Swedish Population Register, by ordinary post.
Nucleus reserves the right to modify this policy or its terms at any time at our discretion. When we do, we will revise the updated date at the bottom of this page. We may also provide notice to you in other ways at our discretion, such as through the contact information you have provided.
2022-12-14
© 2023 Nucleus Agency AB
