Last Updated: 19th Aug 2024
At Locus IT Services Nordic, we take your privacy and data protection seriously. We are committed to ensuring that our practices comply with the General Data Protection Regulation (GDPR) (EU) 2016/679. This page explains our approach to GDPR and how we handle personal data in line with these requirements.
1. What is GDPR?
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that governs the collection, use, and storage of personal data of individuals within the European Union (EU) and the European Economic Area (EEA). It sets strict guidelines on how organizations must handle personal data, ensuring that individuals have greater control over their information.
2. Your Rights Under GDPR
Under the GDPR, you have the following rights:
- Right to Access: You have the right to request access to the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete personal data.
- Right to Erasure (Right to Be Forgotten): You have the right to request that we delete your personal data when it is no longer necessary for the purposes for which it was collected.
- Right to Restrict Processing: You can request that we limit the processing of your personal data under certain conditions.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and you can ask us to transfer your data to another controller.
- Right to Object: You can object to the processing of your personal data for direct marketing or other purposes based on our legitimate interests.
- Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, unless necessary for entering into or fulfilling a contract.
3. Legal Basis for Processing Personal Data
We process personal data based on one or more of the following legal grounds:
- Consent: When you provide clear and explicit consent for us to process your data for specific purposes (e.g., signing up for a newsletter).
- Contractual Necessity: When the processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract.
- Legal Obligation: When the processing is required to comply with a legal obligation (e.g., tax laws).
- Legitimate Interests: When processing is necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms.
4. How We Handle Your Data
We implement strict data security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. We only collect the minimum amount of personal data necessary for specific purposes, and we retain your data only for as long as necessary to fulfill those purposes or as required by law.
5. Data Transfers Outside the EU/EEA
If we transfer your data outside the EU/EEA, we ensure that appropriate safeguards are in place to protect your information. These safeguards may include:
- Standard contractual clauses approved by the European Commission.
- Data transfers to countries deemed by the European Commission to provide an adequate level of data protection.
- Implementing additional technical and organizational measures.
6. Third-Party Processors
We may share your personal data with trusted third-party service providers who assist us in delivering our services (e.g., hosting, analytics, payment processing). All third parties are required to comply with GDPR standards and provide sufficient guarantees to protect your data.
7. Your Consent
Where consent is the basis for processing, you have the right to withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
8. How to Exercise Your Rights
If you wish to exercise any of your rights under GDPR, please contact us at:
Locus IT Services Nordic.
[email protected]
Regus Kista, Kistagången 20b, 164 40, Stockholm Sweden
+46 72 851 05 43
We will respond to your request within one month of receiving it.
9. Changes to This Policy
We may update this GDPR compliance statement as required to reflect changes in our practices or legal obligations. We recommend that you review this page periodically for the latest information on our GDPR compliance.
10. Contact Us
For any inquiries regarding GDPR or data protection matters, please contact our Data Protection Officer (DPO) at:
[email protected]
+46 72 851 05 43
Regus Kista, Kistagången 20b, 164 40, Stockholm Sweden