Cookie and privacy policy

Cookie Policy

The following describes how Arlandastad Group AB, with company registration number 556694-0978 ("us", "we" or "our"), uses cookies and any other similar technologies that collect information about visits to and use of our websites www.arlandastadgroup.se,www.explorearlandastad.se and www.exploreskavsta.se and related pages, (hereinafter collectively referred to as the "Website").

1. Cookies

The website uses so-called cookies. Cookies are small text files that a website places or requests access to on the visitor's computer or mobile device. Cookies and other similar technologies allow websites to remember a visitor when they return to the website from the same device used on a previous visit and can be used for various functions on websites, such as saving previous searches or adapting the content of the website to the visitor's previous use. The cookies and other similar technologies we use on the Website are described in section 3 below.
There are two types of cookies: 1) permanent cookies that are stored on the visitor's computer for a set period of time and then disappear; and 2) session cookies that are temporarily stored in the computer's memory during the visit to the website and disappear when the visitor closes the browser.
Cookies are either: 1) a first-party cookie placed by the Website, or; 2) a third-party cookie placed by someone other than the Website. You can manage and turn off first-party cookies by using the Website cookie tools.
If you choose not to allow cookies, it is possible that some of the Website's features may not work in the way you expect.
Cookies have different purposes and can be divided into different categories according to their respective purpose, 1) strictly necessary cookies; 2) functionality and analytics cookies; and 3) marketing cookies.
Strictly necessary cookies are placed when you use our services and visit the Website. Functional, analytical and marketing cookies are only placed after you have given your consent to them. You can withdraw your consent at any time by changing your cookie settings.
Strictly necessary cookies are placed in order for the Website to function in the way you expect. Without such cookies, we cannot provide the service you request, as they are essential to the functionality of the Website.
Functionality and analytics cookies help us understand how visitors use the Website and ensure that it functions optimally. These cookies may collect information about how visitors use our Website.
Marketing cookies are used to show you advertisements for goods and services that you may be interested in. Such advertisements are based on information about how you use the Website.
Cookies can collect personal data, such as IP addresses. We process all personal data in accordance with the Website's privacy policy.

2. Other similar techniques

In addition to cookies, we also use so-called "pixel tags", "web beacons", "JavaScript" or similar technologies that make it possible, among other things, to track your activity when you use the Website or receive emails, (collectively referred to as "Similar Technologies"). In addition, similar technologies may be used in connection with our online advertising or in our emails, either by us or by our suppliers, business partners or other third parties.
Similar technologies are used to collect, typically, anonymous data to identify certain information, such as compiling reports of tracking information regarding demographics, usage patterns, and purchases of those who use the Site, as well as other information to improve the user experience and our services. We may disclose these reports to, for example, advertisers. The tracking information in these reports cannot be linked to the identity of individual users or other personal data. We may link tracking information with personal information voluntarily provided by users of the Site to analyze the information. Where such a connection occurs, the linked information is treated as personal data in accordance with our Privacy Policy.
We may use similar techniques in our HTML-based emails to find out which emails recipients have opened. In addition, similar technologies may be used to identify why you are visiting the Site and how you found it, such as whether a contributing factor has been one of our advertisements or emails.
In addition, similar technologies may be used by other companies to track visits to their websites in order to identify whether the visitor found their website through our Website or to confirm that you are an authorized recipient of their services or benefits.

3. Cookies and similar technologies on the Website

To see information about all the cookies the website uses, broken down by category, go to the "List of Cookies" tab located under "Cookie Settings" in the footer of the website. It provides detailed information, including the name, provider, purpose and storage period, of the cookies used on the website.

4. Browser settings

If you choose not to allow cookies, it is possible that some features of the websites you visit may not work as you expect them to. Your choice not to allow cookies does not result in the deletion of previously placed cookies.

Privacy Policy

Last updated on the 2^ndof January 2024.

1. Introduction

This privacy policy (the "Privacy Policy") describes how Arlandastad Group AB, org. no. 556694-0978, with address BOX 214, 190 47 STOCKHOLM-ARLANDA ("Arlandastad", "we", "our" and "us"), processes personal data about you who visit and use one of our websites www.arlandastadgroup.se, www.explorearlandastad.se and www.exploreskavsta.se and related pages, (hereinafter collectively referred to as the "Website") as well as about you who come into contact with us in connection with applying for a position with us or in connection with our business and our services – usually because you are contact person at a corporate customer or partner or a supplier of ours.

We are responsible for the processing of personal data described in the Privacy Policy in our capacity as data controller. If you want to know more about our processing of your personal data, you are always welcome to contact us, for example via our email address: gdpr@arlandastad.se.

We are keen for you to feel safe with how we process your personal data and we therefore ask you to read the Privacy Policy, which we may update from time to time. If we change the Privacy Policy, the new version will apply from publication on our website. You can see when we last made updates at the top of the Privacy Policy.

2. How we collect your personal data

The data we process about you is mainly collected directly from you when you visit and use our website or in connection with us coming into contact with you - for example by e-mail, telephone or similar occasions. We may also collect information about you from third parties, usually from the company you represent, or publicly available information in order to supplement information already provided with, for example, industry, additional contact information, information about previous workplaces or job title. If you are a customer of ours, we may also supplement your information with previous information that you have provided to us, for example in connection with customer assignments.

3. How we process your personal data

3.1 Introduction

We will only process your personal data if the processing is permitted by applicable data protection legislation. This means, among other things, that we must have support for the purposes of the processing in the form of a so-called legal basis, which for our part mainly means one of the following grounds:

Flfilment of contracts – the processing is necessary for us to be able to provide you with our services or otherwise to fulfil agreements between us (applies to you who run a business through a sole proprietorship), or to take steps at your request before entering into an agreement.

If you are acting on behalf of someone else, for example in your capacity as a representative of a company (which is usually the case), our processing is based on a balancing of interests and our legitimate interests in being able to enter into or fulfil the agreement with the person you represent.

Fulfilment of legal obligations – the processing is necessary to comply with our legal obligations under e.g. law or other regulations to which we are subject or court or authority decisions that require us to process data about you.

Balancing of interests – the processing is necessary for the purposes of our legitimate interests or those of a third party, provided that your interests or fundamental rights or freedoms do not outweigh them (in which case the processing may not take place).

Consent – the processing takes place on the basis of your prior consent, where we have a responsibility to clearly inform you about what processing you consent to and the possibility of easily withdrawing your consent to our continued processing.

‍
Below we describe in more detail the categories of personal data we process, the purposes for which we process it and the legal bases on which our processing of your personal data is based, including how long the data about you is stored with us.

3.2 Maintain and improve our website

Purpose of the processing

Collect statistics on and analyze visitor traffic on our website as well as other technical information generated when visiting the website, in order to maintain and improve its functions, the user experience and our work to detect and counteract errors, intrusions and incidents.

This is done with the support of third-party analytics services. The statistics we compile and the analyses we carry out with the support of these services are made using data in aggregated form and with the support of de-identified or anonymised data.

Categories of personal data

The personal data we process relates to:

IP address
Other technical information generated when visiting our website, such as the type of technical device you used, browser, pages visited and times of visits (browser information, time zone from the location where you visited our website, other web traffic information).

Legal basis: Balancing of interests, where our legitimate interest is to gather data to maintain and improve the functionality, content and security of our website. The collection of information using cookies and similar technologies is based on your consent, with the exception of such use that is strictly necessary for you to be able to use our website appropriately. For more information about how we use cookies and other similar technologies, please see our Cookie Policy https://arlandastadgroup.se/sv/cookie-och-integritetspolicy.

Storage period: We process and store information about how visitors interact with our website for a maximum of six (6) months. In most cases, however, the collected personal data is converted into aggregated data (anonymized) at an earlier stage in connection with our production of statistics.

Sharing of personal data: We may share your data with our web and IT providers and group companies.

3.3 Create, maintain, and develop potential business relationships

Purpose of the processing

Contact and communication with you for the purpose of creating, maintaining and developing a business relationship with you or the company you represent, such as potential tenants, suppliers and partners.

This includes, among other things, communication via our forms on the website and via email about our business, our services and our ongoing activities (see section 3.7 below).

Categories of personal data

The personal data we process relates to:

First and last name
Contact information such as email address, telephone number, location and address
Type of rental object when registering interest
Job title and details of the company you represent
Information that you otherwise provide to us in connection with our communication with you.

Legal basis: Balancing of interests, where our legitimate interest is to create and subsequently maintain and develop a business relationship with you or the company you represent.

Storage period: We process and store your personal data for a period of twelve (12) months after the data was collected. However, if a business relationship is established between us and you or the company you represent during the said period, your personal data will continue to be processed in accordance with sections 3.4-3.8. below.

Sharing of personal data: We may share your data with our suppliers and group companies.

3.4 Maintain and develop existing business relationships

Purpose of the processing

Contact and communication with you in your capacity as a contact person for any of our existing customers, tenants, partners, suppliers, e.g. contractors, property management and development, or business contacts in general, to maintain and develop our business relationship with you or the company you represent.

This includes, among other things, customary administration of and communication about our customer, partner and supplier agreements, as well as communication via email about our business, our services and our ongoing activities (see sections 3.5 and 3.7 below, respectively).

Categories of personal data

The personal data we process relates to:

First and last name
Contact information such as email address, telephone number, location and address
Job title and details of the company you represent
The information that you otherwise provide to us in connection with our communication with you.

Legal basis: Balancing of interests, where our legitimate interest is to maintain and develop our business relationship with you or the company you represent.

Storage period: We process and store your personal data for as long as we have a business relationship with you or the company you represent, but for a maximum of two (2) years from the last time we were in contact with each other due to our business relationship.

However, we may need to retain data for a longer period of time for other purposes, e.g. if it turns out that we need to take steps to be able to establish, exercise or defend legal claims. We will also need to store data for a longer period of time in order to comply with legal obligations, for example, regarding bookkeeping under the Accounting Act (see further in section 3.8 below).

Sharing of personal data: We may share your data with our suppliers and group companies.

3.5 Administer the conclusion and performance of contracts

Purpose of the processing

Administration and communication to enter into or perform contracts between us and you or the company you represent.

This includes, among other things, invoicing and customary handling, handling of any fault reports, follow-up and documentation of contract-related issues.

Categories of personal data

The personal data we process relates to:

First and last name
Contact information such as email address, telephone number, location and address
Rental object
Job title and details of the company you represent
The information you provide to us in contractual matters, such as questions about or comments on contracted services.

Legal basis: The processing is necessary for us to be able to enter into and perform a contract with you or the company you represent. If you act on behalf of someone else, for example in your capacity as a representative of a customer, partner or supplier to us, our processing takes place on the basis of a balancing of interests, where our legitimate interest is to be able to enter into or fulfil the agreement with the company you represent.

Sharing of personal data: We will share your data with our suppliers, group companies, advisors and authorities.

3.6 Recruitment

Purpose of the processing

When you apply for or register an interest in a position via our website, we process your personal data for the purpose of selecting and recruiting candidates based on submitted application documents (such as CVs and cover letters), reference checks, where applicable personality and intelligence tests, and determining whether the prerequisites for employment and work in Sweden are met, which includes, where applicable, checks of citizenship and work permits/residence permits, and notification to the Swedish Tax Agency.

Categories of personal data

The personal data we process relates to:

Contact information such as email address and telephone number
first and last name
Address
Application documents such as CV and cover letter
Image (if applicable)
Information provided about you during reference checks, such as reviews from previous employers
Test results from personality and intelligence tests
Personal identity number (or equivalent information)
Copy of a decision from the Swedish Migration Agency on residence and work permits
Residence permit card/LMA card.

Legal basis: Balancing of interests, where our legitimate interest is to be able to evaluate your qualifications and personal qualities in connection with decisions on recruitment and for the fulfilment of a legal obligation to document information about education, professional experience and other qualifications for the persons who are employed in order to meet the legal requirements in Chapter 2. Section 4 of the Discrimination Act (2008:567) and to check and document the right to be and work in Sweden, and to inform the Swedish Tax Agency about the employment.

Storage period: Data collected about you in connection with your application for a position with us will generally be deleted after the recruitment process has been completed and, if you have consented to this, for a maximum of two (2) years thereafter.

The information relating to the assessment of whether the prerequisites for employment and work in Sweden are met are generally stored for up to one (1) year after the employment has ended.

Sharing of personal data: We will share your personal data with our supplier of recruitment systems, the Swedish Tax Agency and the Swedish Migration Agency.

3.7 Newsletters and other marketing mailings

Purpose of the processing

Administer and carry out e-mails, in order to inform about our business, our services and ongoing activities.

Categories of personal data

The personal data we process relates to:

Email address
First and last name

Legal basis: We will only send you marketing emails if the content is relevant to you and the company you represent. Our mailings are then made on the basis of a balancing of interests, where our legitimate interest is to be able to market ourselves and our services.

Storage period: We process and store your personal data in order to carry out marketing mailings via e-mail to you as long as you have not unsubscribed from receiving further mailings. You can unsubscribe at any time by using the unsubscribe link included in our mailings.

Sharing of personal data: We will share your data with our marketing service providers and group companies.

3.8 Fulfilling legal obligations and defending legal claims

We may process your personal data for us to be able to comply with our legal obligations under e.g. laws or regulations to which we are subject or court or authority decisions that require us to process data about you.

We may also process your personal data in order for you or the company you represent, ourselves or the relevant third party to be able to establish, exercise or defend legal claims, for example, in the event of an imminent or ongoing dispute.

4. Safety Precautions

We take security measures to ensure that our handling of your personal data is secure. For example, the systems in which personal data is stored are only available to our employees and service providers who need the data to fulfil their assignments. They are also informed about the importance of security and confidentiality in relation to the personal data we process. We take appropriate security measures and standards to protect your personal information from unauthorized access, unauthorized disclosure, and misuse. We also monitor our systems to detect vulnerabilities.

5. With whom do we share your personal data?

Access to your personal data is limited to persons who require such access for the purposes described in Section 3 above. Your personal data may therefore be shared with the following recipients:

Companies within our group: We may share your personal data with companies within our group. If we share your personal data within our group, we will ensure that the data continues to be processed only in accordance with this Privacy Policy.
Our suppliers: We use third-party service providers to manage parts of our business. We may share personal data with these suppliers in order for them to be able to perform services on our behalf, such as providing us with support and business systems or performing assignments as subcontractors for us in connection with our own services. When we use suppliers in accordance with this section, we establish data processing agreements and take other appropriate measures to ensure that your personal data is processed in a manner that is consistent with this Privacy Policy.
Partners: We occasionally collaborate with external parties to improve our services and operations. These parties process personal data either as data subjects in accordance with their own terms and conditions and guidelines for the processing of personal data, or as data processors to us in accordance with our instructions for the processing. In the latter case, we will establish data processing agreements and take other appropriate measures to ensure that your personal data is processed in a manner consistent with this Privacy Policy.
Sale or Transfer: We may transfer your personal data to a buyer/investor or potential buyer/investor in connection with the sale or other transfer of all or a portion of our shares, assets or business. In the event of such transfer, we will take steps to ensure that the receiving party treats your data in a manner consistent with this Privacy Policy. The purpose of such a transfer is to allow a (potential) buyer/investor to conduct a review of our business and, where applicable, to take measures and preparations prior to a possible purchase or investment, where the transfer is made with reference to the legitimate interest of such an opportunity for review or any measures and preparations.
Authorities: We may also share your personal data with, for example, the police, the Swedish Tax Agency or other authorities when we are obliged to do so by, for example, law or other regulations or by court or authority decisions.

6. Where we process your personal data

Our goal is to always process your personal data within the EU/EEA. However, since some of our suppliers work internationally, your personal data may be transferred to countries outside the EU/EEA in accordance with the agreements we have with the suppliers. In such cases, we have an obligation to ensure that the transfer takes place in accordance with applicable data protection legislation before the data is transferred, for example by ensuring that the country to which the data is transferred meets the adequacy requirements set out in the European Commission's decision, or by ensuring that the transfer is subject to appropriate safeguards in the form of, for example, standard contractual clauses adopted by the European Commission and further appropriate measures to safeguard your rights and freedoms.

Via the following link, you will find information on the countries outside the EU/EEA that the European Commission has decided meet an adequate level of protection for the permitted transfer of personal data:

https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_sv

Via the following link you will find the standard contractual clauses decided by the European Commission:

https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_sv

7. Your rights

You have rights in relation to us and our processing of your personal data. Information about your rights and how to exercise them is set out below.

Please note that your rights apply to the extent provided by applicable data protection legislation and that there may be exceptions to these rights. We also ask you to note that we may need more information from you in order to, among other things, confirm your identity before proceeding with your request to exercise your rights.

To exercise your rights or request more information about them, please contact us, which is easiest by email: gdpr@arlandastad.se.

7.1 The right of access

You have the right to receive confirmation as to whether we are processing personal data relating to you. If this is the case, you also have the right to access this personal data through a so-called register extract and further information about the processing in question, such as the purpose or purposes for which the processing takes place, the categories of personal data concerned and the recipients to whom the personal data has been disclosed.

7.2 The right to rectification

You have the right to have incorrect information about you corrected without delay. You may also have the right to complete incomplete data.

7.3 The right to erasure

You can request that we delete your personal data without delay if:

The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
Our personal data processing takes place on the basis of your consent and you withdraw your consent to the processing in question;
You object to processing that we carry out on the basis of a balancing of interests and your objection outweighs our or someone else's legitimate interest in the processing;
The personal data has been processed unlawfully;
The personal data must be deleted in order to comply with a legal obligation.

7.4 The right to restriction of processing

You have the right to request that we restrict the processing of your personal data if:

You contest the accuracy of the personal data, for a period of time that allows us to verify whether the data is accurate or not;
The processing is unlawful and you oppose us deleting your personal data and instead request that we restrict its use;
We no longer need to process the data for the purposes for which it was collected, while you need the data to be able to establish, exercise or defend legal claims;
You have objected to the processing that we carry out on the basis of a balancing of interests and are waiting for verification of whether your objection outweighs our or someone else's legitimate interest in continuing with the processing.

7.5 The right to object

You have the right to object to such processing of your personal data that takes place based on our or someone else's legitimate interest. If this happens, in order to continue the processing, we must be able to demonstrate compelling legitimate reasons that outweigh your interests, rights and freedoms.

7.6 The right to data portability

If we process your personal data on the basis of an agreement with you or on the basis of your consent, you have the right to receive the personal data that you have provided to us and that concerns you in an electronic format. You have the right to have the data in question transferred from us directly to another data controller, when this is technically possible.

Please note that this right to data portability does not apply to data processed manually by us.

7.7 Right to withdraw your consent

If our processing of your personal data is based on your consent, you always have the right to withdraw your consent at any time. A withdrawal of your consent does not affect the lawfulness of the processing that took place based on the consent before it was withdrawn.

8. Complaints to the supervisory authority

In Sweden, the Swedish Authority for Privacy Protection is the authority responsible for monitoring the application of applicable data protection legislation. If you believe that we are processing your personal data incorrectly, we encourage you to contact us in the first instance so that we have the opportunity to review your comments. However, you can always file your complaint with the Swedish Authority for Privacy Protection.