Privacy Policy

Why and how we use your personal data


Combitech protects your integrity and takes care to protect the personal data being processed. Our processing of personal data is in accordance with applicable data protection laws, such as the EU General Data Protection Regulation, the “GDPR” (as well as national adaptations of this regulatory framework) aiming to the protection of the integrity of individuals in processing their personal data.

What do we do with your personal data

The following describes how Combitech collects, processes and shares your personal data. Furthermore, information is provided about your rights under the GDPR.

Read the "Data Privacy Statement" from our CEO, Jessica Öberg, here.

Your rights

Right to access the data

You are entitled to request more detailed information about how Combitech processes your personal data and what personal data is processed concerning you. You are also entitled to receive a copy of the personal data being processed.

 

Right to rectification, objection, erasure and restriction

If your personal data are incorrect, incomplete or irrelevant, you may want to have them corrected or deleted. If you do not agree with a balance of interests that Combitech has done, you may also object to the processing, or request it to be restricted. You may also on other legal grounds request a restriction of the processing performed.

For example, you may request a restriction of processing if you consider the personal data to be incorrect or if you consider that your personal data is no longer required for the purpose of the processing. Please note that restriction or erasure of your personal data may mean that we will not be able to fulfil our commitments to you.

 

Right to withdraw consent

If you have specifically provided your consent for a particular personal data processing, you are always entitled to withdraw the consent. You can do this by contacting us.

 

Right to data portability

To the extent that Combitech processes your personal data based on your consent or because it is necessary to fulfil an agreement with you, you may, upon request, obtain the personal data you have provided Combitech in a structured, widely used and machine-readable manner format and is entitled to transfer these to another controller.

 

Right to complain

It is important for Combitech to make sure that you are confident in personal data processing. Combitech protects your personal integrity and strives to treat all personal data with maximum respect. If you still consider your personal data being processed incorrectly, please feel free to contact us.

You also have the opportunity to file complaints about personal data processing to the relevant data protection authority or similar body within your jurisdiction. Your data protection authority is the authority that supervises the processing of personal data. In Sweden the data protection authority is Integritetsskyddsmyndigheten, and you can reach the authority on www.imy.se.

In Finland, the data protection authority is Office of the data protection Ombudsman. You can reach the authority on https://tietosuoja.fi.

 

The controller of your personal data

Combitech AB, Ljungadalsgatan 2, SE-352 46 Växjö, info@combitech.se, +46 (0)10 216 90 00, is the controller of your personal data. This means that Combitech AB is responsible for processing your personal data correctly and in accordance with applicable privacy laws.

If you wish to contact Combitech's Data Protection Officer, send an e-mail to dpo@saabgroup.com.

In Finland, the controller is Combitech Oy, Tampere, Åkerlundinkatu 11, Finland. Email privacy_fi@combitech.com.

Former Employees

Combitech processes personal data for former employees in order to fulfil our remaining contractual obligations that relate to the employment and to comply with applicable laws, such as employment and accounting laws.

 

Combitech processes the following personal data for former employees:

  • Name
  • Address
  • E-mail address
  • Telephone number
  • Employment time
  • Education paid by Combitech

 

Combitech applies different retention periods for different categories of personal data that is related to the ended employment. Your personal data will be saved as long as there is a legitimate purpose for Combitech to continue the processing and/or in accordance with the time period required by applicable law.

Job applicants

Combitech processes the following personal data for job applicants:

  • Name
  • Address
  • E-mail address
  • Telephone number
  • Position applied for
  • Current employment
  • Education
  • Job experience
  • Qualifications (such as language skills, computer knowledge and special skills)
  • References
  • Other information provided by you in your CV and/or cover letter
  • Photographs as may be included in your CV or personal letter
  • Correspondence with us during the recruitment process
  • Results from knowledge tests or personality tests

 

Combitech may ask you to provide additional information in order to perform a security assessment.

 

Combitech processes your personal data to administer your job application and assess your skills and suitability for the position and to communicate with you during the recruitment process.

 

The legal basis for our processing is that it is in our legitimate interests to process your personal data to manage and conclude the recruitment process. It is also in a job applicants interest to be able to apply for jobs at Combitech and to participate in a recruitment process.

 

Personal data which you provide as part of your job application will be kept by Combitech during a period of three (3) years.

Business contacts

Combitech processes the following personal data for business contacts:

  • Name
  • Telephone number
  • Email address
  • Fax number
  • Job title
  • Role
  • Work address

In the event your employer or assignor is subject to Combitech´s due diligence process for business partners, additional personal data will be processed.

We collect the personal data is directly from you or from the organization that you represent or in some cases from publicly available services or registers,  authorities or institutions.

The purpose of Combitech´s processing of your personal data is (i) to provide relevant information to you/your employer about Combitech´s products and services, and (ii) to facilitate current and/or future engagements between Combitech and your employer.

Combitech´s processing of your personal data is based on the legitimate interests pursued by Combitech. This means that Combitech is of the view that its interest in processing your personal data for the purposes listed above prevails the privacy violation that you are exposed to as a result of the processing. This conclusion from our balance of interest test is made especially due to the fact that (i) it is crucial for Combitech to process contact information to a representative of Combitech´s business partners, and (ii) that the processing of your personal data is limited to the extent possible.

Combitech applies different retention periods for different categories of personal data that is related to business contacts. Your personal data will be saved as long as there is a legitimate purpose for Combitech to continue the processing and/or in accordance with the time period required by applicable law.

Facility visitors

Combitech processes the following personal data in connection with visits to our facilities:

  • Name
  • National ID number
  • Passport number (if Swedish national ID number is not provided)
  • Citizenship (if Swedish national ID number is not provided)
  • Name of the organisation you represent on the day of the visit
  • Duration of visit
  • Entry log of our visit
  • E-mail address
  • Telephone number
  • Title
  • Car registration number (if you use the visitors’ parking)
  • Surveillance camera (“CCTV”) recordings or images

In Finland, for facility visitors Combitech is currently collecting

  • Name
  • Name of the organization you represent on the day of the visit
  • Arrival/Departure date and time
  • Surveillance camera ("CCTV") recordings or images

The personal data is collected directly from you or from the organisation that you represent, or through the use of CCTV.

Combitech processes your personal data for the purposes to comply with national security legislation and to maintain safety and security at the facilities. 

Combitech will process your personal data for the following legal reasons:

  • in order to comply with national security legislation (e.g. security legislation or security protection agreements entered into with government authorities)
  • when it is necessary in order to fulfil a contract with you or your employer
  • when it is necessary to process your personal data for purposes that concern Combitech´s legitimate interests and when the interest in processing the data is greater than your interest in the data not being processed (e.g. when processing is performed to maintain safety and security at the facilities)

 

Combitech will store your personal data for ten (10) years if Combitech is required to process the personal data according to Swedish national security legislation. If your personal data is processed to maintain safety and security at the facilities, it will be stored for three (3) years.

In Finland, if your personal data is processed to maintain safety and security at the facilities, it will be stored for two (2) years, and surveillance camera recordings are stored for three (3) months. Otherwise, it is processed according to Finnish national security legislation.

Digital visitors

You are free to explore our Combitech sites without providing any personal data about yourself.

 

Upon visiting our sites, we will ask for you consent to place cookies. Cookies are small text files that a website transfers to your hard disk or browser, which will then store the cookie on your hard drive. Cookies will tell us the time and length of your visit, the pages you look at on our sites, and the site you visited just before coming to ours. We will also record the name of your internet service provider. Cookies does not identify you as an individual. Only "Necessary" cookies are mandatory. If you change your mind you can change or revoke your consent in relation to cookies.

 

When you visit one of our pages and register yourself through any form, we may request that you enter personal data about yourself. This is used to provide you with your requested information and may be used in further marketing programs.

 

Combitech processes your personal data for the purposes of enabling use of our services, such as subscription to our newsletters and press releases and participation in our webinars and other digital events.

 

The legal basis for the processing is that Combitech has a legitimate interest in providing services to our digital visitors such as subscriptions and registrations.

 

Combitech applies different retention periods for different categories of personal data that is related to digital visits. Your personal data will be saved as long as there is a legitimate purpose for Combitech to continue the processing and/or in accordance with the time period required by applicable law.

Want to know more?