You have the right to receive information from us regarding how your personal data is processed and for what purpose, in cases where we are the data controller.
The information below summarizes how we ensure your rights regarding your personal data in accordance with the General Data Protection Regulation (GDPR).
- Right to Information
- Right to Correction
- Right to erasure (“the right to be forgotten”)
- Right to Restriction (effective May 25, 2018)
- Data Portability (effective May 25, 2018)
- Right to Object
- Automated Decision-Making
- Complaints
- Claim Damages
Right to Information
You have the right to request, free of charge, a copy of your personal data, specifying which information you wish to access. Please contact support@ngenic.se for this purpose.
Right to Correction
If you discover that the personal information we store about you is incorrect or incomplete, you have the right to request that we correct or supplement the information. Once the correction has been made, we will notify any partners and subcontractors who are also affected by the correction.
Right to erasure (“the right to be forgotten”)
As a customer, you have the right to have your personal data deleted if…
- …the data is no longer needed for the purposes for which it was collected.
- …you withdraw your consent for data that has no other legal basis.
- …the data is being processed for direct marketing purposes, and you object to the processing of your data.
- …you object to the balancing of interests as a legal basis, and there is no other legal basis that carries greater weight.
- …the personal data has not been processed in accordance with the General Data Protection Regulation.
- …deletion is required to comply with a legal obligation.
The exception is personal data required by law, such as billing information, which is retained for as long as required by the Accounting Act.
When the deletion is carried out, we will also notify any partners and subcontractors affected by the change.
Right to Restriction (effective May 25, 2018)
In certain cases, you have the right to request that the processing of your personal data be restricted. Restriction means that the data is marked so that, in the future, it may only be processed for certain limited purposes.
- If you believe that your personal data held by Ngenic is inaccurate and have requested that it be corrected or supplemented, you may request that processing be restricted pending an investigation into the correction.
- If the processing of your personal data is unlawful, but you object to having the data deleted, you may instead request a restriction on its use.
- When Ngenic no longer processes your personal data for the purposes of the processing, but you need it to establish, assert, or defend legal claims.
- Once you have objected to the processing, pending a review of whether Ngenics’ legitimate interests outweigh your legitimate interests.
When the restriction is lifted, you will be notified.
Data Portability (effective May 25, 2018)
In certain cases, you have the right to access and use your personal data elsewhere.
This applies to…
- …data that you yourself have provided to Ngenic.
- …measured values and sensor data that have been collected.
This does not apply when we process your data…
- …due to a balancing of interests.
- …legal obligation.
Ngenic is obligated to facilitate the transfer of your data.
Right to Object
You have the right to object to Ngenics' processing of your personal data if the processing is carried out…
- …to carry out a task in the public interest.
- …as part of the exercise of public authority.
- …after weighing the interests
If Ngenic objects to your objection, we must be able to demonstrate reasons that outweigh your interests.
With regard to processing for marketing purposes, you always have the right to object to such processing at any time.
Complaints
If you believe that we are processing your personal data in violation of applicable law, you should report this to our Data Protection Officer as soon as possible. You may also file a complaint with the Swedish Data Protection Authority.
Claim Damages
If you have suffered harm because your personal data was processed in violation of the General Data Protection Regulation, you may be entitled to compensation. In that case, you can submit a claim for compensation to our data protection officer or file a lawsuit for damages in court.