NORRA SKOG PERSONAL INFORMATION POLICY
WEBBASED TRAINING AND TESTING
2018-05-20

1. Background

GDPR is in place within the EU from May 25th 2018. All processing and storage of personal data must follow the appropriate Personal Data legislative act.

2. Affected personal data

Personal data stored with legitimate interest:

• Name
• Date of birth, Year-Month-Day (not full personal number)
• E-mail and/or mobile phone number
• Account information
• Visited sections of the training courses (can also be instructions or test)
• Certificate for finished training courses.

3. The reason for collecting personal data

To ensure our legitimate interests as Personal Data Controllers we collect personal data for the following reasons:

• To be able to provide training courses, grant certificate and handle your user account.
• To be able to communicate with you via e-mail or text message, e.g. send you notifications regarding updated courses or changes of the terms and conditions.
• To ensure a technically viable system.
• If you are working for a contracting company, your supervisor must be able to ensure that you have finished those courses stated in the contract, before starting your work.

4. Safety and transfer of personal data

We do our utmost to protect your privacy. We therefore have appropriate safety procedures in place to protect your data from unauthorized access, alteration, disclosure or destruction.

We will NOT sell, trade or otherwise transfer your personal data, unless lawfully obliged to do so following a court order.

We only work with contractors handling personal data within EU/ESS. When transferring personal information we use standardised methods agreed on by the EU commission.

5. Storage of personal data

The personal information will NOT be kept longer than necessary. The time frame will be determined depending on the reason for storing the personal data.

• Certificates are stored in 8 years.
• Accounts with no activity and no certificates will be erased 6 months after the latest log in.

6. Your legislative rights

GDPR gives you the following rights when processing your personal information

Access
You have the right to access the information stored about you.

Correction
You have the right to correct and/or supplement incorrect personal data.

Erase
You have the right to request your data to be erased, if there is no longer a purpose for storing them, see paragraph 3. Contact our Personal Data Processor, see paragraph 9.

Complain
You are welcome to contact us via our Personal Data Processor if you feel that we are not respecting your legislative rights. You are also entitled to report us to The Swedish Data Protection Authority.

7. Cookies

Cookies are small files transferred onto your computer or mobile unit (e.g. smartphone or tablet). We use cookies for our online courses.

An encrypted cookie is temporarily stored during your time spent on the site. It is used to keep track of your login. If you refuse cookies you will not be able to log in and use our courses.

You are welcome to contact our Personal Data Processor for further information on how we use cookies.

8. Revisions to the policy

We will inform you during your next login if revisions to the privacy policy have been made.

9. Contact information

For further information on how we store personal data please contact our Personal Data Processor, see paragraph 9, or us Personal Data Controllers.

9.1 Personal Data Controllers

NORRA SKOG

9.2 Personal Data Processors

Ampere Media AB processes personal data on behalf of the Personal Data Controller following the instructions in a written Personal Data Processing Agreement.