SNS, Centre for Business and Policy Studies, and its subsidiary Studieförbundet Näringsliv och Samhälles Service AB, process personal data in their business activities. This information text explains which personal data SNS may process and for what purposes this processing is done as well as what rights you have and what the obligations of SNS are in light of this personal data processing. SNS is the Controller for the processing performed by SNS and which is described herein. If you have any questions regarding the processing of your personal data, please contact SNS through the contact details specified in section 6.
1. Which personal data is processed
1.1 SNS may within the scope of its business activities collect personal data about you in various respects. The data we may collect is basic information about you such as name and contact details as well as information about your work, e.g. your employer, your position and possibly an invoicing address. This data is collected directly from you, your employer or, in some cases, from publicly available sources.
1.2 If you perform a service for SNS that involves a fee, we will also process data that is required to enable us to pay your fee, i.e. your account information and, in some cases, your personal identity number.
1.3 When attending conferences, seminars or other events we may record or take photographs. This means that you may figure in audio and video recordings or in photographs processed by SNS and which may also be published. SNS will notify you in advance if such recording or photography session will take place. We will not publish audio and video recordings where you have a prominent role without your consent.
2. Why your personal data is processed
2.1 SNS will process your personal data for the following purposes:
(i) Provide and manage your or your employer’s membership in SNS. Such processing is done to fulfil the commitments which SNS has towards you or your employer due to the agreement involved in the membership. If it is your employer that is a member of SNS, the processing is done for the legitimate interest of your employer and SNS that you should benefit from the membership and the services included herein.
(ii) Provide and manage conferences or other events that you register for or attend. Such processing is done to fulfil the commitments which SNS has towards you due to your registration. In connection with conferences a participant list will be sent to all participants and speakers and this may contain details of your name and your employer. Such mailings are done because of the legitimate interest of the participants in obtaining information that they may be assumed to have an interest in.
(iii) Mailings of newsletters and information to you regarding the activities of SNS and upcoming conferences and other events. These mailings are done purely to fulfil the legitimate interest of SNS to be able to inform you about our activities. You always have the option of saying no to such processing.
(iv) Nomination committee for the SNS board of trustees. The SNS nomination committee processes personal data to propose new members for the board of trustees. This processing is done in the legitimate interest of SNS to be able to maintain the board of trustees in its present form to ensure a wide range of expertise in the board of trustees.
2.2 SNS may if necessary update the information in our records. This is done in the legitimate interest of SNS to keep our records updated with correct information to be able to provide our services in a suitable manner.
3. How your personal data is processed
3.1 Access to personal data
3.1.1 Access to your personal data is often limited to those within SNS who need to process your personal data.
3.1.2 When providing events SNS may share personal data as set out above in section 2.1. In addition to this, your personal data may be transferred to our service providers who provide us with IT systems, help us with mailings of newsletters and other communication. SNS always ensures that such transfers are done securely and in accordance with the applicable data protection legislation.
3.2 Storage period
3.2.1 SNS will store your personal data for as long as this data is needed for the purpose it was collected. This means that we process your data for as long as you are a member, remain in our records for newsletters or for as long as we need to administer the services we provide you or your employer with.
3.2.2 SNS may store some personal data for a longer period than what has been stated above to meet the requirements of the law.
4. Your rights
4.1 Right to copies of records and rectification
You have the right to free of charge request copies of records regarding the personal data processing which SNS performs concerning you. If you believe that any of the personal data which SNS has concerning you is incorrect, you can request that this data should be rectified. SNS will rectify all personal data that turns out to be inaccurate with the exception of the personal data that is processed purely for archiving purposes.
4.2 Right to erasure
Your personal data will not be stored for a longer period than what is set out in section 3.2 and SNS will otherwise erase personal data in compliance with the applicable legislation. You do, however, have the right to request erasure of incorrect data and when processing of personal data is no longer necessary. A request for erasure may also be made for personal data that is processed due to legitimate interest.
4.3 Right to objection
You have the right to object to processing performed with reference to legitimate interest. The SNS processing that is done with reference to legitimate interest is described in section 2. The right to objection means that you can request that the SNS processing with reference to legitimate interest should not be done.
4.4 Right to restriction of personal data processing
You have the right to request restriction of personal data processing in the cases mentioned below:
1. If you question the correctness of the personal data.
2. If the personal data processing is unlawful and you choose restriction of personal data instead of erasure.
3. If the personal data is no longer needed for the purposes for which it had previously been processed but you need it for the establishment or exercise or defence against legal requirements.
4. If you have objected to processing with reference to legitimate interest.
A restriction of personal data processing means that the personal data will continue to be stored but will otherwise not be further processed by SNS without your consent.
4.5 Right to data portability
You have the right to request to receive personal data in a structured, commonly used and machine-readable format for data which you yourself have given to SNS when the data processing is based on your consent or based on an agreement.
4.6 Right to withdraw consent
If you have given your consent to SNS for processing in any respect, you have the right to withdraw this consent. When you withdraw your consent, the processing which the consent referred to will end and the personal data collected based on your consent will be erased provided that it is not required for any other purpose for which SNS has the right to process your personal data.
4.7 Exercising of your rights
If you wish to utilise one or several of your rights as set out above, you should contact SNS through one of the contact details listed in section 6.
SNS will process a request from you under this section 4.7 promptly. If SNS does not intend to grant your request or not grant it in its entirety, you will be notified of this as well as the reasons for the decision.
5. Competent authority
If you are dissatisfied with SNS’ processing of personal data or a decision concerning a request in accordance with section 4.7, you always have the right to contact the Swedish Data Inspection Board to lodge a complaint.
You can contact SNS regarding SNS’ personal data processing as described above at:firstname.lastname@example.org.