Becquerel Sweden AB ("Becquerel"), reg. no. 559199-0360 ("we", "us" and "our"), with postal address Staffansvägen 14, 741 42 Knivsta, safeguards your personal integrity. Through this privacy policy, we want to inform you about how your personal data is processed by us.
Data controller
Becquerel is primarily responsible for the processing of your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable legislation. In some cases, however, other parties, such as partners or clients (e.g. network owners), may be data controllers for the processing on their own or together with Becquerel. This is stated where relevant for the purposes described below.
Personal data that we process about you
In your contact with Becquerel, you will provide certain information to us. Becquerel may also obtain some of this personal data from our partners such as network owners and publicly available registers on the Internet, such as the land register.
Becquerel processes personal data such as name, address, position, property designation with associated coordinates, organizational affiliation and contact information. Name, address, position, organizational affiliation and contact information are mainly processed in connection with communication or cooperation with you or the organization you represent. Within the framework of our research projects where we collect data on photovoltaic installations, we only process data on property names and coordinates, which may constitute indirect personal data. In order to limit the processing of personal data to what is strictly necessary to carry out the research, Becquerel does not carry out any further research on which persons can be attributed to the respective property name or coordinate and does not collect any additional personal data within the framework of the mapping of photovoltaic installations.
Purpose and legal basis for our processing of your personal data
Becquerel bases the processing of your personal data on two legal bases and for several purposes described below.
- The majority of the processing of personal data that we carry out is based on a so-called balance of interests. Examples of this are the processing of data for research and statistical purposes and for information about our activities on our website.
- In some cases, Becquerel may have a legal obligation to process your personal data. This applies to the processing of personal data that we do to fulfill legal requirements under, for example, the Accounting Act (1999: 1078).
Detailed description of our personal data processing
| To communicate with you | ||
| Why do we process your personal data? | What personal data we process | Legal basis for processing |
| To communicate with you via e.g. e-mail or telephone To answer the questions you ask usTo send out newsletters, for example in cooperation with our partners. | NameContact details such as email address and phone number Information you provide to us by email Your title and the organization you represent or work for. | Balancing of interests The processing is justified by our legitimate interest to be able to communicate with you who have contacted us or requested to receive one of the newsletters we administer, or because we have contacted you regarding a question linked to our business. |
| Retention period: We purge your personal data on an ongoing basis. We delete our e-mail on an ongoing basis. Individual e-mails are therefore only saved as long as there is a purpose for us to keep the e-mail. This assessment is made in each individual case depending on the type of question we receive. If you have requested to receive certain information from us, we save your personal data until we have answered your question and sent you the requested information, and for 12 months thereafter to be able to follow up the contact we have had with you. If you request to receive a newsletter that we administer, we process your personal data as long as we send the newsletter and you do not notify us that you no longer wish to receive the newsletter. If we become aware that you no longer represent the organization with which we have a relationship, we will delete your personal data. | ||
| To provide information about our activities on our website | ||
| Why do we process your personal data? | What personal data we process | Legal basis for processing |
| To inform about ongoing or completed research assignmentsTo inform about ongoing or completed marketing assignmentsTo publish or refer to academic publications or other material. | NameThe title you hold, the organization you represent or work for, and the publication or assignment you participated in. | Balance of interests The processing is justified by our legitimate interest in being able to provide information about our activities to other interested parties. |
| Storage period: Your personal data will be available on our website (www.becquerelsweden.se) until further notice. If you object to our processing and inform us that you no longer wish to appear on our website, we will delete your personal data unless there are compelling legitimate reasons for continuing to process your data. | ||
| For research and statistical purposes | ||
| Why do we process your personal data? | What personal data we process | Legal basis for processing |
| To collect, process, evaluate and analyze data on photovoltaic installations in the framework of our research projects To compile databases on photovoltaic installations. | LandmarksCoordinates of landmarks and buildings | Balancing of interests The processing is justified by our legitimate interest to carry out work for research and statistical purposes when mapping photovoltaic installations. |
| To cooperate with other stakeholders and partners. | NameE-mail addressWhat is your title and which organization you represent or work for? | Balancing of interests The processing is justified by our legitimate interest to carry out work for research and statistical purposes when mapping photovoltaic installations. |
| Storage period: We store your personal data for the duration of the respective research project and as long as they are necessary for the statistical purposes or for future research projects. Distribution of roles: Becquerel is primarily the data controller for the processing of your personal data for research and statistical purposes. Another party may, in the role of data processor, process this personal data according to our instructions. In the event that Becquerel gains access to data from another party or performs assignments for another party, Becquerel may process the data as a personal data processor. We then process the personal data according to the controller's instructions. In such situations, the data controller is responsible for providing information about the processing of personal data. | ||
| To communicate with you and perform our contracts | ||
| Why do we process your personal data? | What personal data we process | Legal basis for processing |
| To discuss/negotiate, conclude and fulfil agreements and more informal cooperation with the organisation you represent. | Name Contact details such as email address and phone number Information you provide to us by email Your title and the organization you represent or work for. | Balance of interests The processing is motivated by our legitimate interest to be able to conclude and negotiate contracts and other collaborations and to subsequently communicate with you as a representative of your organization. |
| Storage period: We store your personal data until the contract or cooperation with the organization you represent has ended and the obligations under the contract are otherwise fulfilled. However, we will stop storing your personal data if we become aware that you no longer represent the organization we have a relationship with. Some of your personal data is also stored for a longer period of time to comply with the Accounting Act and such time as is necessary to handle any claims and other issues that arise after the termination of the agreement/cooperation. See these retention periods below. | ||
| To comply with the rules of the Accounting Act | ||
| Why do we process your personal data? | What personal data we process | Legal basis for processing |
| Compliance with accounting legislation | Name Payment history, transactions and other material constituting accounting records | Legal obligation The processing is necessary to comply with mandatory law, i.e. the Accounting Act. |
| In order to comply with the Accounting Act, we need to process certain personal data about you as a representative of one of our customers, suppliers or partners, such as information contained in invoices and contracts. You therefore need to provide such personal data to us in order for us to perform our contract with the organization you represent. | ||
| Retention period: Personal data contained in accounting material is stored in accordance with the Accounting Act until the end of the seventh financial year. | ||
| To deal with possible claims | ||
| Why do we process your personal data? | What personal data we process | Legal basis for processing |
| To deal with possible claims | Name Contact details such as email address and phone number Information from our communication with you in relation to the claim. | Balancing of interests The processing is justified by our legitimate interest to be able to communicate with the organization you represent and to resolve a situation as well as possible and, if strictly necessary, to act in a possible dispute with the organization you represent, including to be able to defend ourselves against a possible legal claim. |
| Storage period: The data is stored from the initiation of the claim and as long as the process regarding the claim is ongoing. However, we will stop storing your personal data if we learn that you no longer represent the organization to which the claim relates and the data is no longer necessary for the process. | ||
Who can access your personal data?
Your personal data is primarily processed by us at Becquerel. In order for us to conduct our business in the best possible way, we share your personal data with other parties that we engage or cooperate with. We will share your personal data with:
- Our partners who provide IT services, e.g. for storage purposes, who process personal data on our behalf as a data processor to enable us to carry out our business in the best possible way.
- Network owners, who may be both controllers and processors of the processing.
- Research partners, such as universities and other researchers.
- Other actors and stakeholders in the energy sector.
- Authorities, agents and courts where we have a legal obligation to do so, where we have a legal claim, in the event of a dispute or when cooperating in the context of our activities.
Transfer of personal data to third countries
Becquerel and our suppliers and partners generally only process your personal data within the EU/EEA. In some cases, we may transfer personal data to countries outside the EU and EEA (also called third countries) and to international organizations. This is mainly relevant for research collaborations and similar contacts with organizations outside the EU/EEA. We only make such transfers after a specific risk assessment and if other rules in the General Data Protection Regulation are followed and if any of the following conditions are met:
- The European Commission has decided that there is an adequate level of protection in the country concerned.
- We have taken other appropriate safeguards, such as standard contractual clauses or binding corporate rules.
- There is a specific authorization by the Integrity Protection Authority.
- Where permitted in specific cases by applicable data protection legislation.
Your rights
You have certain rights as a result of our processing of your personal data. Below you will find a more detailed description of your various rights. To exercise your rights, you are welcome to contact us using the contact details at the bottom of this policy.
Right to lodge a complaint (Article 77 of the GDPR)
You have the right to lodge a complaint with a competent supervisory authority. The competent supervisory authority in Sweden is The Swedish Authority for Privacy Protection.
In detail. Your right to complain is without prejudice to any other administrative review procedure or remedy. Such a complaint should be submitted to the authority of the EU/EEA Member State where you have your habitual residence, where you work or where a breach of applicable data protection laws and regulations is alleged to have occurred.
Right to object (Article 21 of the GDPR)
You always have the right to object at any time to the processing of your personal data based on a balance of interests.
In detail. If you object, we may no longer process your personal data, except where we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
Right of access (Article 15 of the GDPR)
You have the right to receive confirmation of whether personal data relating to you is being processed by us, a copy of the personal data being processed and information.
In detail. The information we give you access to in such cases is:
- the purposes of the processing;
- the categories of personal data concerned by the processing;
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
- where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
- the existence of the right to request from us rectification or erasure of the personal data or restrictions on the processing of personal data concerning you or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- the existence of automated decision-making, including profiling under Article 22(1) and (4) of the GDPR; and
- if the personal data is transferred to a third country or to an international organization, you also have the right to be informed of the appropriate safeguards that have been put in place for the transfer in accordance with Article 46 of the GDPR.
You have the right to receive a copy of the personal data processed by us. For any additional copies you request, we may charge a reasonable fee based on our administrative costs. If you have requested the information by electronic means, you will receive the information in a commonly used electronic format, unless you request otherwise.
A request can be made by contacting us using our contact details at the bottom of this policy.
Right of rectification (Article 16 of the GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purpose, you also have the right to complete incomplete personal data, including by providing a supplementary statement.
In detail. We will notify each recipient to whom the personal data has been disclosed of any rectification made, unless this proves impossible or involves a disproportionate effort. If you would like information about these recipients, please contact us.
Right to erasure (right to be forgotten) (Article 17 of the GDPR)
You have the right to have your personal data erased by us without undue delay.
In detail. We have an obligation to delete your personal data without undue delay if any of the following apply:
- the personal data are no longer necessary for the purposes for which they were collected or processed;
- you object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR;
- the personal data has been processed unlawfully; or
- the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which we are subject.
Please note that our obligation to erase personal data does not apply to the extent that the processing is necessary for the following reasons:
- to exercise the right to freedom of expression and information;
- to comply with a legal obligation requiring processing under Union law or under the national law of a Member State to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes under Article 89(1) of the GDPR, to the extent that your right to erasure is likely to render impossible or significantly impair the achievement of the purposes of that processing; or
- to establish, exercise or defend legal claims.
We will inform each recipient to whom the personal data has been disclosed of any deletion carried out as described above, unless this proves impossible or involves a disproportionate effort. If you wish to obtain information about these recipients, please contact us using our contact details at the bottom of this policy.
Right to restriction of processing (Article 18 of the GDPR)
You have the right to request the restriction of the processing of your personal data.
In detail. Your right applies if:
- you contest the accuracy of the data (but only for a period that allows us to verify this);
- the processing is unlawful and you oppose the erasure of the personal data and instead request a restriction on the use of the data;
- you need the personal data to assert or defend legal claims even though we no longer need the personal data for our purpose of processing; or
- you have objected to the processing in accordance with Article 21(1) of the GDPR and we have not carried out a check whether our legitimate interest in processing your personal data outweighs your legitimate grounds for restricting the processing of your personal data.
If the processing is restricted, the personal data concerned, with the exception of storage, may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State. We will notify you before the restriction of processing ends.
We will inform each recipient to whom the personal data have been disclosed of any restriction of processing carried out as described above, unless this proves impossible or involves a disproportionate effort. If you wish to obtain information about these recipients, please feel free to contact us using our contact details at the bottom of this policy.
Right to data portability (Article 20 of the GDPR)
You have the right to obtain from us your personal data in a structured, commonly used and machine-readable format. You also have the right to have your personal data transferred to another controller where technically feasible ("data portability").
In detail. The right to data portability applies to personal data that you have provided to us in a structured, commonly used and machine-readable format if the processing is based on the legal basis of performance of a contract (Article 6(1)(b) of the GDPR) and the processing is carried out by automated means.
Your right to data portability must not adversely affect the rights and freedoms of others.
Contact us
If you wish to exercise your rights as set out above or otherwise wish to contact us regarding our processing of your personal data, you can do so by contacting us by phone +46 (0)768 511 773 or email johan@becquerelsweden.se.
______________________