INTRODUCTION

The individual’s personal integrity and the security of his personal data is important to the company Ponce De La Cruz AB in Sweden (“Ponce De La Cruz AB”), which is responsible for ensuring that all personal data is handled correctly and in accordance with functional data protection legislation. This privacy policy (“Privacy Policy”) is a consent document and describes Ponce De La Cruz AB in Sweden’s processing of personal data.

In this Privacy Policy, Ponce De La Cruz AB company also refers to any company within the company unless otherwise stated.

1. Privacy policy scope

1.A.- To whom does the policy apply?

This Privacy Policy is relevant to individuals who are candidates, employees, customers, suppliers and other similar stakeholders. Different chapters will be appropriate for you depending on your relationship with Ponce De La Cruz AB.

1.B.- What about the policy?

Ponce De La Cruz AB is governed by this Privacy Policy with regard to the collection and handling of personal data for our service offering, which is the Employment Service, relocation, hiring, recruitment, consulting and other related activities (“the Service”). The policy also governs the handling of personal data for individuals at the parties with whom Ponce De La Cruz AB has a business relationship, such as suppliers and customers.

1.C.- When does the policy not apply?

Sometimes services from Ponce De La Cruz AB are advertised on external websites that are not owned or administered by Ponce De La Cruz AB. Ponce De La Cruz AB has not reviewed these websites or other websites that contain links to the Ponce De La Cruz AB website. This Privacy Policy does not apply to the handling of personal data that appears on such websites and Ponce De La Cruz AB is not responsible for personal data processing on websites that are not part of the Ponce De La Cruz AB website.

2. Processing of personal data

Ponce De La Cruz AB’s handling of personal data is described below based on your relationship with Ponce De La Cruz AB.

2.A.- For you who are a candidate

2.A.A.- The purposes of processing personal data

Personal data is handled only for the purposes and purposes described in this Privacy Policy. If you choose not to give us certain personal data, it may affect the Service, for example making it more difficult to be searchable for various job offers.​​
Ponce De La Cruz AB only processes personal data to the extent that such processing is essential for the Service or for such other purposes as shown below. This also applies to sensitive personal data.​​
Ponce De La Cruz AB handles the personal data of job seekers and employees in order to:

  • (i) provide the Service to Ponce De La Cruz AB customers and offer you the opportunity to be part of the Service.
  • (ii) Administer our relationship with you.
  • (iii) Handle any cases of alleged discrimination, handle disputes and complaint cases against you or Ponce De La Cruz AB customers and suppliers.

2.A.B.- Personal data

By accepting this Privacy Policy, you consent to Ponce De La Cruz AB handling your personal data in accordance with this Privacy Policy. If you do not consent to such processing, you must not provide us with personal data.

Below you will find information about what kind of personal data Ponce De La Cruz AB processes and how Ponce De La Cruz AB may receive/obtain this data.

2.A.B.A.- Candidate

The personal information Ponce De La Cruz AB processes about you as a candidate is based on the information you provide yourself to Ponce De La Cruz AB via the Ponce De La Cruz AB web, system or through contact with Ponce De La Cruz AB staff for Ponce De La Cruz AB provision of the Service. Ponce De La Cruz AB will not process your personal data without first giving your consent by accepting the Ponce De La Cruz AB Privacy Policy.

The personal data we may process about you consists of, among other things, name, address, e-mail address, social security number, grades, certificates, education and work experience, photograph, interview video, results from tests, information from background checks, results from drug tests, information from a reference person (such as reviews and health, e.g. remarks about sick leave) as well as information that is essential for following up, for example, the Service etc.
If you allow yourself to be photographed or if you provide us with a photograph of yourself without a request from Ponce De La Cruz AB, you consent to Ponce De La Cruz AB handling such photography.

Due to the fact that some of Ponce De La Cruz AB’s customers place high security requirements on individuals, Ponce De La Cruz AB may in some cases need to perform a background check, credit check, health check and/or drug test on you. Such checks may contain sensitive personal data about you and you will provide specific consent before a background check, credit check, health check or a drug test is/will be performed.

As part of a background check, Ponce De La Cruz AB may ask you to provide an extract from the criminal record. You yourself order such an extract from the relevant authority. It is up to you to decide whether you want to order a debit register extract. If you choose to opt out, it may affect your chances of being eligible for the Service. The extract will be opened by you together with Ponce De La Cruz AB and/or Ponce De La Cruz AB’s customer. The information in a charge register extract is handled with the utmost confidentiality and will never be processed by Ponce De La Cruz AB’s external partners. However, Ponce De La Cruz AB may orally agree the result with Ponce De La Cruz AB’s customer in order to be able to provide the Service.

It can also in certain situations be essential for Ponce De La Cruz AB to get your approval to request a credit report via an external credit reporting company.

Ponce De La Cruz AB may also ask you to provide extra personal data, but in such cases you will specifically approve this. Even such personal data that is provided/processed through special approval will be covered by this Privacy Policy.

2.A.C.- Saving of personal data

How long personal data is saved depends on which personal data it is and the purpose of its handling.
The information you register in your profile or that Ponce De La Cruz AB registers in Ponce De La Cruz AB’s business system will be saved as long as your account is active, during an ongoing contractual relationship and thereafter, in some cases, for a period that complies with Swedish law . Your account is considered inactive if you have not logged into it for such a longer period that gives Ponce De La Cruz AB reason to believe that your personal data has become out of date, you do not have an employment relationship with Ponce De La Cruz AB or you revoked your consent to Ponce De La Cruz AB processing your personal data.

Ponce De La Cruz AB will, as a general rule, save personal data relating to:

a) data linked to the application and recruitment process, during the current year for the most recent activity and thereafter for two (2) years.
b) customer and supplier agreements as well as information about business events, such as information about time sheets, participants, assignments, salary, invoices, declarations, financial statements, during the term of the agreement and for ten (10) years thereafter; and.
(c) control information, until Ponce De La Cruz AB’s pension commitments have ended.

2.B.- For you who are a customer or supplier

2.B.A.- The purpose of processing personal data

Personal data is only handled for the goals and purposes described in this Privacy Policy. If you choose not to provide certain personal data to us, it may affect the use of the Service or the provision of the Service.

Ponce De La Cruz AB only handles personal data to the extent that such processing is essential for the Service and for services that suppliers provide for Ponce De La Cruz AB or for such other purposes as stated below. This also applies to sensitive personal data.

Ponce De La Cruz AB processes personal data about customers’ and suppliers’ employees in order to:

(a) you must be able to use the Service or provide other services to Ponce De La Cruz AB. (b) administer our relationship with you. (c) Ponce De La Cruz AB must be able to handle its obligations towards you or the individual concerned, handle cases of alleged discrimination, handle disputes and complaint cases. (d) enable future business relationships.

2.B.B.- Personal data

By approving this Privacy Policy, you give your consent to Ponce De La Cruz AB handling, in applicable parts, personal data about your employees and/or suppliers in accordance with this Privacy Policy. You also confirm that before you give your consent, you have received approval for Ponce De La Cruz AB’s personal data handling in accordance with this Privacy Policy from all affected individuals.

Ponce De La Cruz AB may also require the individual to provide more personal data than is covered below. Also such personal data that is submitted/processed through a special approval will be included by this Privacy Policy.

2.B.B.A.- Customers

Ponce De La Cruz AB may handle the personal data of contact persons. Such information may include name, address, e-mail address, title, occupation, areas of responsibility and other information that is necessary for the provision and follow-up of the Service and to prepare for future business relationships.

2.B.B.B Supplier

Ponce De La Cruz AB may handle the personal data of contact persons and other employees. Such personal data includes, among other things, the information given under clauses 2.B.B.A (Customers) and 2.A.B.A (Candidate) and other information required for the provision and follow-up of the Service, to ensure a good delivery of services to Ponce De La Cruz AB as well as for the possibility of creating future business relationships.

2.B.C.- Storage of personal data

How long a personal data will be saved depends on the personal data in question and the purpose of its processing. Ponce De La Cruz AB saves personal data only for as long as it is necessary and what may be essential with regard to the purpose, if nothing else is to be taken into account according to law.

The data that you as a supplier register in your profile(s) or that Ponce De La Cruz AB registers in Ponce De La Cruz AB’s business system, after approval from you or the person concerned, will be stored as long as the respective account is active or under ongoing contractual agreements.

Ponce De La Cruz AB will, as a general rule, save personal data that appears in:

(a) application and recruitment processes, during the current year for the most recent activity and thereafter for two (2) years (b) customer and supplier agreements and data on business events, such as data on time reports, participants, assignments, salary, invoice, declarations, financial statements , during the contract period and thereafter for ten (10) years.

2.C.- Personal data for marketing purposes

The consent given also includes that the information you provide to Ponce De La Cruz AB can, by Ponce De La Cruz AB and other companies in Ponce De La Cruz AB, be used for marketing and market research in order to provide candidates, employees, customers and suppliers with a better experience and improve and optimize the quality of the Service (for example, by displaying content that may be of interest to you and delivering more relevant information to you).

When you no longer wish to receive marketing, you can contact us and let us know that you do not wish to be contacted for marketing purposes.

2.D.- Users of the Ponce De La Cruz AB website

Copyright © 2024 Juristfirman Ponce De La Cruz AB. All rights reserved.

3. The protection of personal data

Ponce De La Cruz AB has implemented adequate technical and organizational measures to secure personal data against loss, misuse, unauthorized access, disclosure, alteration and destruction. To ensure that personal data is handled in a safe and confidential manner, we use a regularly updated data network that is equipped with security programs including firewalls and password protection according to industry standards. To ensure the integrity of the personal data you provide via the Internet, we may use encryption technology when we transmit such personal data over the Internet to our servers. Ponce De La Cruz AB employees and suppliers have committed to a confidentiality agreement and are expected to follow Ponce De La Cruz AB rules for information and IT security, this Privacy Policy and other internal regulations that also govern the handling of personal data.

4. Sharing of personal data internal to Ponce De La Cruz AB

Ponce De La Cruz AB Ponce De La Cruz AB has as a principled rule regarding the sharing of personal data that originally comes from a candidate, employee, customer and supplier’s employees with all employees within Ponce De La Cruz AB in order to be able to deliver the Services. The sharing is essential in order to quickly and efficiently offer candidates and employees suitable and appealing assignments and provide the best competence for Ponce De La Cruz AB’s customers and which hopefully opens the door to new business relationships.

As a general rule, personal data of a sensitive nature is not shared between employees of Ponce De La Cruz AB. Before a sharing of sensitive personal data is carried out, Ponce De La Cruz AB always makes an assessment if such sharing is really necessary for the purpose for which the sensitive personal data was collected. Consideration is also given to whether more consents are needed for the sharing or whether there is legal support to rely on for sharing the personal data.

A basic principle for sharing personal data internally in Ponce De La Cruz AB is that it is realized in accordance with this Privacy Policy and relevant personal data legislation.

5

Ponce De La Cruz AB will not sell, give out or distribute personal data to third parties, with the caveat announced in this Privacy Policy within the framework of the Service, personal data may be passed on to a Ponce De La Cruz AB customer, suppliers, subcontractors, and collaboration partners if is essential for the execution and provision of the Service. Ponce De La Cruz AB may also release your personal data to another third party, such as Ponce De La Cruz AB’s suppliers for our operations, for example for payroll administration, technical support, operation of IT systems, external companies or suppliers that handle job searches for our bill. Parties to which Ponce De La Cruz AB may release personal data may be outside the European Economic Cooperation Area, EEA, which means that personal data may be forwarded to countries outside the EEA. If Ponce De La Cruz AB releases personal data to Ponce De La Cruz AB suppliers outside the EEA, we will carry out efforts to ensure that the personal data continues to be protected, preserved and intact and also take the necessary measures to legally transfer personal data to countries outside EEA.

Furthermore, we can share personal data if this is required by applicable law, court order or if such disclosure is otherwise necessary to be helpful to a legal investigation. In the event that Ponce De La Cruz AB is subject to a reorganization, merger or sale, we may transfer personal data to the relevant third party, provided that the third party undertakes to handle the personal data in accordance with this Privacy Policy.

6. Personal data controller

Ponce De La Cruz AB, org N° 556831–9825

Antonio Ponce De La Cruz, Västra Trädgårdsgatan 39, 611 32 Nyköping, phone: 070-9370046, is the personal data controller for the processing carried out regarding your personal data and is responsible for such processing being carried out in accordance with applicable legislation.

7. Ponce De La Cruz AB's personal data assistant

The person responsible for personal data in Ponce De La Cruz AB is Antonio Ponce De La Cruz. However, there may be occasions where Ponce De La Cruz AB is not directly responsible for personal data but only acts as a personal data assistant for third parties. On the occasions that Ponce De La Cruz AB handles personal data as a personal data processor, it is carried out on behalf of a third party and Ponce De La Cruz AB is then asked to adhere to the instructions that Ponce De La Cruz AB received from the personal data controller. If this were to happen, compliance with this Privacy Policy cannot be followed to the letter, but Ponce De La Cruz AB aims to always ensure that the handling is carried out in accordance with applicable legislation and as much as possible in accordance with this Privacy Policy.

8. Your Rights

You as an individual can, free of charge, after a written and signed application sent to Ponce De La Cruz AB at the address above (under “Personal data controller”) receive an answer to which personal data Ponce De La Cruz AB processes about you as well as information and the reason for such processing. You as an individual can at any time demand that we block, delete or update your personal data. You always have the right to withdraw the submitted consent and you always have the right to revoke a given consent and notify that you do not want us to have access to your personal data.

9. Contact Us

Please contact us at this email address sekreterare@poncedelacruz.se if any questions arise regarding this Privacy Policy or our use of your personal data.

In other respects, we apply the data protection regulation, GDPR, (2016/679/EG).

Quote the Service Privacy Policy