1. Introduction
This Privacy Notice outlines the processing of Personal Data on this website (the “Website”) and applies to our Website visitors and journalists. This Privacy Notice describes our policies and practices regarding our collection and use of your Personal Data and sets forth your right to privacy.
Personal Data will be processed in compliance with European data protection legislation (including the EU General Data Protection Regulation (Regulation (EU) 2016/679 (“GDPR”)) and any other EU or national legislation which implements or supplements the foregoing. “Personal data”, “Controller” and “Processor” have the meanings given in the Applicable Data Protection Laws.
2. Who is the Controller for the processing of your Personal Data?
This Website is operated by Nalka Invest AB a company incorporated under Swedish law whose principal place of business is at Mäster Samuelsgatan 42, 111 57 Stockholm, Sweden, hereafter referred to as “Nalka Invest”, “Nalka”, “us” or “we” or “our”.
3. How do we collect your personal data?
We collect the following types of Personal Data when you visit and use the Website:
Information you provide to us: We collect Personal Data when corresponding with us on this Website, or contact Nalka through the Website via the general contact email emails, the careers and internship recruitment email address.
4. Our processing of personal data
We process the following categories of Personal Data when you visit the Website for the following purposes, based on one of the following lawful bases and for the following retention periods:
4.1 To be able to communicate with you who contact us
| Purpose of processing: We process your personal data for internal management purposes and to answer your questions or otherwise communicate with you by e-mail, phone, text message or on our corporate social media accounts (e.g. media related queries). | Categories of personal data: First and last name Employer/company name and your job title Phone number and email address Your correspondence with us Any other information you might have provided | Retention period: Your personal data is processed for up to 90 days, unless circumstances clearly require otherwise and we need to keep your personal data for a longer period of time to follow up on correspondence. For example, we may process your personal data for a longer period of time if we need to save your personal data for any other purpose stated in this Privacy Notice. |
Legal basis: Legitimate interest. The processing is necessary for our legitimate interest to answer any questions or otherwise communicate with you who contact us. We have assessed that our interest outweighs your right not to have your personal data processed for this purpose.
4.2 To administer recruitment processes and communicate with candidates
| Purpose of processing: We process your personal data to collect, store and review your job application provided by you and communicate with you throughout the recruitment process. | Categories of personal data: First and last name Phone number and email address Your correspondence with us | Retention period: Your personal data is processed for up to 90 days. |
Legal basis: Legitimate interest. The processing is necessary for our legitimate interest to administrate recruitment processes and communicate with candidates. We have assessed that our interest outweighs your right not to have your personal data processed for this purpose.
4.3 To provide, administer and maintain our website
| Purpose of processing: We process your personal data to provide, administer and maintain our website, e.g., to help diagnose server problems. | Categories of personal data: First and last name Phone number and email address | Retention period: Your personal data is processed for up to 90 days. |
Legal basis: Legitimate interest. The processing is necessary for our legitimate interest to provide, administer and maintain our website. We have assessed that our interest outweighs your right not to have your personal data processed for this purpose.
4.4 To defend our interests in the event of a dispute
| Purpose of processing: We may need to process your personal data to defend our interests in the event of a dispute, such as to establish, exercise, or defend legal claims, e.g., in the event of a discrimination dispute. | Categories of personal data: First and last name Phone number and email address Your correspondence with us Any other information you might have provided | Retention period: Your personal data is retained for as long as it is needed to establish, exercise, and defend our interests in the event of a dispute, e.g., during the time that the dispute is ongoing. |
Legal basis: Legitimate interest. The processing is necessary for our legitimate interest to defend our interests in the event of a dispute. We have assessed that our interest outweighs your right not to have your personal data processed for this purpose.
5. Legitimate interest
When we have stated “legitimate interest” as the legal basis in the section above, it means that we have assessed that we or a third party have a legitimate interest in the processing being carried out. In addition to identifying the legitimate interest, we have also weighed this interest against your interests or fundamental rights and freedoms that require the protection of personal data. We can only base the processing of your personal data on a legitimate interest as a legal basis if we have carried out a balancing of interest and concluded that our or a third party’s interests outweigh your interests or fundamental rights and freedoms. If we process your personal data on the basis of a legitimate interest, you can contact us through the contact details provided in [section 11] to obtain further information about the performed balancing of interest, through a so-called legitimate interest assessment.
6. When and how we share your information with others
We may share your information with other third parties (such as persons employed by or working on behalf of our affiliates or data processors engaged by us) for the purposes described below. We will only disclose your Personal Data to those with a legitimate business need and after we have taken steps to ensure that your Personal Data is processed in a manner consistent with this Privacy Notice.
These include:
- Our affiliates to provide you with the services: For the purpose of providing you with the services and due to the internal structure of Interogo Holding, we may disclose Personal Data that you provide via this Website to our affiliates (i.e. other companies within the Interogo Holding group (the owner of Nalka) that are entrusted to process your information on our behalf in accordance with our instructions, this Privacy Notice and other appropriate measures for privacy and security.
- Our Service Providers: Your Personal Data may be disclosed to our service providers who perform services on our behalf. They provide services such as cloud hosting and website maintenance. Our service providers are subject to contractual obligations to safeguard your Personal Data and to only process the Personal Data as instructed.
- Other third parties when necessary pursuant to regulatory obligations: We may disclose your Personal Data to third parties to comply with court orders, other legal obligations, to enforce or apply our terms of use and other agreements and protect the rights, property, or safety of Nalka Invest or its affiliates or others.
We do not sell Personal Data to anyone and only share it with third parties when this is necessary.
7. Data subject rights
Subject to applicable laws, you are entitled to a number of rights over the processing of your Personal Data. You may exercise these rights at any point by contacting us via privacy@nalka.com. We will consider all such requests and, in accordance with the Applicable Data Protection Laws, will provide our response within a reasonable period, or within the period prescribed by law. If we do not comply with your request within such time frame, we will explain why. We may request you to provide us with information necessary to confirm your identity before responding to any request you make.
You have the following rights:
- The right to access: subject to exceptions, you have the right to request access to the Personal Data we hold about you;
- The right to rectification: if the Personal Data we hold about you is inaccurate you are entitled to have it updated or rectified;
- The right to deletion: subject to exceptions, you can ask us to delete your Personal Data.
- The right to object: under certain circumstances, you have the right to ask us to stop processing your Personal Data. For example you may object to processing for direct marketing activities (for example, by clicking on the unsubscribe link in our emails) and where we are relying on our or a third party’s legitimate interests to process the Personal Data (unless we can demonstrate compelling legitimate grounds to continue processing your Personal Data);
- The right to withdraw consent: where we rely on your consent to process Personal Data, you have the right to withdraw consent at any time. Such withdrawal will not impact the lawfulness of any data processing activities prior withdrawal;
- The right to restriction of processing: under certain circumstances you have the right to restrict the processing of your Personal Data such as if you believe (i) the Personal Data we have about you is not accurate; (ii) the Personal Data is not being processed lawfully, but instead of deleting the Personal Data, you would prefer us to restrict processing; or (iii) we no longer need your Personal Data for the purposes we collected it, but you require the data in order to establish, exercise or defend legal claims;
- The right to data portability: under certain circumstances you have the right to obtain Personal Data (in a structured, commonly used and machine-readable format) you’ve provided us with and to reuse it elsewhere or to ask us to transfer this to a third party of your choice; and
- The right to lodge a complaint with a supervisory authority: you also have the right to file a complaint to the data protection authority in the country where you usually live or where the alleged infringement of Applicable Data Protection Laws has taken place.
- Please note that if you ask us not to contact you by email at a certain email address, we will retain a copy of that email address on our “master do not send” list in order to comply with your no-contact request.
8. How do we protect Personal Data?
We have implemented adequate technical and organizational measures to safeguard the Personal Data we process. We update and test our security technology on an ongoing basis. In addition, we restrict access to your Personal Data to employees on a need-to-know basis and train all staff about the importance of confidentiality and maintaining the privacy and security of your information.
9. How long do we keep and store your Personal Data?
We may change this Privacy Notice from time to time by posting the updated version of the Notice on our Website. We will give you reasonable notice on our Website of any material change. The “effective date” at the top of this Notice indicates when such changes will take effect. We encourage you to visit our Website frequently to stay informed about how we use your Personal Data.
11. Questions, concerns or complaints
To ask questions or to comment about our Privacy Notice and our privacy practices, you may contact privacy@nalka.com. You may also at any time write to our Personal Data Representative at: Nalka Invest, The Personal Data Representative, Mäster Samuelsgatan 42, 111 57 Stockholm, Sweden
12. Questions of journalists
If you are a journalist or otherwise have a media related question, please contact the Media Team of Nalka Invest by emailing media.relations@nalka.com
13. Cookie Notice