Privacy Policy – Becquerel Sweden

Becquerel Sweden AB (”Becquerel”), corporate registration number 559199–0360 (”we”, ”us” and ”our”), with postal address Staffansvägen 14, 741 42 Knivsta, is committed to protecting your personal privacy. Through this privacy policy, we aim to inform you about how your personal data is processed by us.

Data Controller

Becquerel is primarily the data controller for the processing of your personal data and is responsible for ensuring that such processing complies with applicable legislation. In certain cases, however, other parties, such as collaborative partners or clients (e.g., grid owners), may be data controllers for the processing, either independently or jointly with Becquerel. This will be indicated where relevant for the purposes described below.

Personal Data We Process About You

In your interactions with Becquerel, you will provide us with certain information. Becquerel may also obtain some of this personal data from our collaborative partners, such as grid owners, and from publicly available registers on the internet, e.g., the property register.

Becquerel processes personal data such as name, address, position, property designation with associated coordinates, organizational affiliation, and contact details. Name, address, position, organizational affiliation, and contact details are primarily processed during communication or collaborations with you or the organization you represent. Within the scope of our research projects where we collect data on solar PV installations, we only process data concerning property designations and coordinates, which may constitute indirect personal data. To limit personal data processing to what is strictly necessary for conducting the research, Becquerel does not conduct further investigations into which individuals can be attributed to respective property designations or coordinates, and does not collect any additional personal data within the scope of mapping solar PV installations.

Purposes and Legal Basis for Our Processing of Your Personal Data

Becquerel bases the processing of your personal data on two legal grounds and for several purposes, as described below.

The majority of the personal data processing we perform is based on a so-called balancing of interests. Examples include the processing of data for research and statistical purposes, as well as for information about our operations on our website.

In certain cases, Becquerel may have a legal obligation to process your personal data. This applies to the processing of personal data we undertake to comply with legal requirements, for instance, under the Swedish Accounting Act (1999:1078).

Detailed Description of Our Personal Data Processing

To Communicate with You
Why Do We Process Your Personal Data?	What Personal Data We Process	Legal Basis for Processing
To communicate with you via e.g., email or telephone; To answer your questions; To send out newsletters, for example, in collaboration with our partners.	Name; Contact details such as email address and telephone number; Information you provide to us in emails; Your title and the organization you represent or work for.	Balancing of interests The processing is justified by our legitimate interest in being able to communicate with you if you have contacted us or requested one of the newsletters we administer, or if we have contacted you regarding a matter related to our operations.
Storage period: We continuously purge your personal data. We regularly review and delete our emails. Individual emails are therefore only saved as long as there is a purpose for us to retain them. This assessment is made on a case-by-case basis depending on the type of inquiry we receive. If you have requested certain information from us, we store your personal data until we have answered your question and sent you the requested information, plus for 12 months thereafter to enable us to follow up on the contact we have had with you. If you have requested to receive a newsletter that we administer, we process your personal data for as long as we send out the newsletter and you do not inform us that you no longer wish to receive it. If we become aware that you no longer represent the organization with which we have a relationship, we will delete your personal data.

To Inform About Our Operations on Our Website
Why Do We Process Your Personal Data?	What Personal Data We Process	Legal Basis for Processing
To inform about ongoing or completed research assignments; To inform about ongoing or completed market assignments; To publish or refer to academic publications or other material.	Name; Your title, the organization you represent or work for, and which publication or assignment you have participated in.	Balancing of interests The processing is justified by our legitimate interest in being able to inform other interested parties about the activities we conduct.
Storage period: Your personal data will remain on our website (www.becquerelsweden.se) indefinitely. If you object to our processing and inform us that you no longer wish to appear on our website, we will delete your personal data unless there are compelling legitimate grounds for continuing to process your data.

For Research and Statistical Purposes
Why Do We Process Your Personal Data?	What Personal Data We Process	Legal Basis for Processing
To collect, process, evaluate, and analyze data on PV installations within the scope of our research projects, and to compile databases on PV installations.	Property identifiers; Coordinates for property identifiers and buildings.	Legitimate Interest Assessment The processing is justified by our legitimate interest in conducting work for research and statistical purposes when mapping PV installations
To engage in collaborations with other stakeholders and partners.	Name; Email address; Your title and the organization you represent or work for.	Legitimate Interest Assessment The processing is justified by our legitimate interest in conducting work for research and statistical purposes when mapping PV installations
Storage Period: We store your personal data for the duration of the respective research project and as long as they are necessary for statistical purposes or for future research projects. Role Distribution: Becquerel is primarily the data controller for the processing of your personal data for research and statistical purposes. Another party, acting as a data processor, may process this personal data according to our instructions. Should Becquerel gain access to data from another party or carry out assignments for another party, Becquerel may process the data as a data processor. In such cases, we process the personal data according to the data controller's instructions. The data controller is responsible in such situations for informing about the personal data processing.

To communicate with you and fulfill our agreements.
Why Do We Process Your Personal Data?	What Personal Data We Process	Legal Basis for Processing
To discuss/negotiate, enter into, and fulfill agreements and more informal collaborations with the organization you represent.	Name; Contact details such as email address and phone number; Information you provide to us in emails; Your title and the organization you represent or work for.	Legitimate Interest Assessment The processing is justified by our legitimate interest in being able to enter into and negotiate agreements and other collaborations, and subsequently to communicate with you as a representative of your organization
Storage Period: We store your personal data until the agreement or collaboration with the organization you represent has ceased and the obligations under the agreement are otherwise fulfilled. However, we will cease storing your personal data if we become aware that you no longer represent the organization with which we have a relationship. Some of your personal data may also be stored for a longer period to comply with the Accounting Act and for such time as is necessary to handle any claims and other issues arising after the termination of the agreement/collaboration. See these storage periods below.

To comply with the regulations of the Accounting Act.
Why Do We Process Your Personal Data?	What Personal Data We Process	Legal Basis for Processing
Compliance with accounting legislation.	Name; Payment history, transactions, and other material constituting accounting records.	Legal Obligation The processing is necessary to comply with mandatory law, i.e., the Accounting Act
To comply with the Accounting Act, we must process certain personal data about you as a representative of one of our customers, suppliers, or partners, e.g., information found on invoices and agreements. You must therefore provide such personal data to us so that we can fulfill our agreement with the organization you represent.
Storage Period: Personal data included in accounting records is stored in accordance with the Accounting Act until the end of the seventh financial year.

To manage potential claims.
Why Do We Process Your Personal Data?	What Personal Data We Process	Legal Basis for Processing
To manage potential claims.	Name; Contact details such as email address and phone number; Information from our communication with you in connection with the claim.	Legitimate Interest Assessment The processing is justified by our legitimate interest in being able to communicate with the organization you represent and resolve an arisen situation as effectively as possible, and if absolutely necessary, to act in a potential dispute with the organization you represent, including being able to defend ourselves against a potential legal claim
Storage Period: The data is stored from the initiation of the claim and for as long as the claim process is ongoing. However, we will cease storing your personal data if we become aware that you no longer represent the organization to which the claim pertains and the data is not necessary for the process.

Who may access your personal data?

Your personal data is primarily processed by us at Becquerel. To conduct our operations in the best possible way, we share your personal data with other parties we engage or collaborate with. We will share your personal data with:

Our partners who provide IT services, e.g., for storage purposes, and who process personal data on our behalf as data processors to enable us to conduct our operations in the best possible way.
Grid owners, who may act as both data controllers and data processors for the processing.
Research partners, such as universities and other researchers.
Other actors and stakeholders within the energy sector.
Authorities, representatives, and courts in cases where we have a legal obligation to do so, where we have a legal claim, in the event of a dispute, or in the context of cooperation within our operations.

Transfer of personal data to third countries

As a general rule, Becquerel and our suppliers and partners only process your personal data within the EU/EEA. In certain cases, we may transfer personal data to countries outside the EU and EEA (also known as third countries) as well as to international organizations. This is primarily relevant for research collaborations and similar contacts with organizations outside the EU/EEA. We only make such transfers after a specific risk assessment, provided that other regulations in the General Data Protection Regulation (GDPR) are complied with, and if one of the following conditions is met:

The EU Commission has decided that an adequate level of protection exists in the country concerned.
We have implemented other appropriate safeguards, such as standard contractual clauses or binding corporate rules.
There is a specific authorization from the Swedish Authority for Privacy Protection (IMY).
Where it is permitted in specific cases according to applicable data protection legislation.

Your Rights

You have certain rights concerning our processing of your personal data. Below you will find a more detailed description of your various rights. To exercise your rights, please contact us using the contact information at the bottom of this policy.

Right to Lodge a Complaint (Article 77 of the GDPR)

You have the right to lodge a complaint with a competent supervisory authority. The competent supervisory authority in Sweden is The Swedish Authority for Privacy Protection.

In detail. Your right to complain is without prejudice to any other administrative review procedure or remedy. Such a complaint should be submitted to the authority of the EU/EEA Member State where you have your habitual residence, where you work or where a breach of applicable data protection laws and regulations is alleged to have occurred.

Right to object (Article 21 of the GDPR)

You always have the right to object at any time to the processing of your personal data based on a balance of interests.

In detail. If you object, we may no longer process your personal data, except where we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.

Right of Access (Article 15 of the GDPR)

You have the right to obtain confirmation as to whether personal data concerning you is being processed by us, a copy of the personal data undergoing processing, and information.

In detail. The information we provide you access to in such cases includes:

the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing;
the right to lodge a complaint with a supervisory authority;
the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR; and
where personal data are transferred to a third country or to an international organization, you have the right to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR relating to the transfer.

You have the right to obtain a copy of the personal data undergoing processing by us. For any further copies requested by you, we may charge a reasonable fee based on our administrative costs. If you have requested the information in electronic form, you will receive the information in a commonly used electronic format, unless you request otherwise.

A request can be made by contacting us using the contact details provided at the bottom of this policy.

Right to Rectification (Article 16 of GDPR)

You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

In detail. We will notify each recipient to whom the personal data has been disclosed of any rectification made, unless this proves impossible or involves disproportionate effort. If you wish to receive information about these recipients, please contact us.

Right to Erasure (Right to be Forgotten) (Article 17 of GDPR)

You have the right to obtain the erasure of your personal data by us without undue delay.

In detail. We are obliged to erase your personal data without undue delay if one of the following grounds applies:

the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR;
the personal data has been processed unlawfully; or
the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which we are subject.

Please note that our obligation to erase personal data does not apply to the extent that the processing is necessary for the following reasons:

to exercise the right to freedom of expression and information;
to comply with a legal obligation requiring processing under Union law or under the national law of a Member State to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes under Article 89(1) of the GDPR, to the extent that your right to erasure is likely to render impossible or significantly impair the achievement of the purposes of that processing; or
to establish, exercise or defend legal claims.

We will inform each recipient to whom the personal data has been disclosed of any deletion carried out as described above, unless this proves impossible or involves a disproportionate effort. If you wish to obtain information about these recipients, please contact us using our contact details at the bottom of this policy.

Right to restriction of processing (Article 18 of the GDPR)

You have the right to request the restriction of the processing of your personal data.

In detail. Your right applies if:

you contest the accuracy of the data (but only for a period that allows us to verify this);
the processing is unlawful and you oppose the erasure of the personal data and instead request a restriction on the use of the data;
you need the personal data to assert or defend legal claims even though we no longer need the personal data for our purpose of processing; or
you have objected to the processing in accordance with Article 21(1) of the GDPR and we have not carried out a check whether our legitimate interest in processing your personal data outweighs your legitimate grounds for restricting the processing of your personal data.

If the processing is restricted, the personal data concerned, with the exception of storage, may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State. We will notify you before the restriction of processing ends.

We will inform each recipient to whom the personal data have been disclosed of any restriction of processing carried out as described above, unless this proves impossible or involves a disproportionate effort. If you wish to obtain information about these recipients, please feel free to contact us using our contact details at the bottom of this policy.

Right to Data Portability (Article 20 of GDPR)

You have the right to obtain from us your personal data in a structured, commonly used and machine-readable format. You also have the right to have your personal data transferred to another controller where technically feasible ("data portability").

In detail. The right to data portability applies to personal data that you have provided to us in a structured, commonly used and machine-readable format if the processing is based on the legal basis of performance of a contract (Article 6(1)(b) of the GDPR) and the processing is carried out by automated means.

Your right to data portability must not adversely affect the rights and freedoms of others.

Contact Us

If you wish to exercise your rights as set out above or otherwise wish to contact us regarding our processing of your personal data, you can do so by contacting us by phone +46 (0)768 511 773 or email johan@becquerelsweden.se.

______________________