Privacy Policy

Projektengagemang Sweden AB Company reg. no. 556330-2602 PE is a consulting group operating in Sweden. Our business concept is to deliver high-quality consulting services and solutions in and around all kinds of buildings. PE employs engineers, architects and specialists who work together with our clients to plan and design communities and cities.

PE and its subsidiaries respect your privacy and protect the personal data we process about you. All processing of personal data is carried out in accordance with the requirements of the EU General Data Protection Regulation (2016/679/EU) and other applicable data protection legislation. This Privacy Policy explains how we use personal data that is submitted to us or that we collect. The policy is published online at www.pe.se

Personal data means any information that can be directly or indirectly linked to you as an individual. Processing of personal data means any activity relating to your personal data, such as collecting, handling, storing, sharing of access, using, transferring or deleting your personal data.

This Privacy Policy is updated as and when needed.

The information in this policy is addressed to you, to the extent applicable, based on the relationship(s) you have with PE. You may read this message in your capacity as a:
• User of websites or social media
• Shareholder
• Person with a close connection to somebody in managerial positions
• Representative or employee of prospective or existing suppliers and customers (including subcontractors)
• Job applicant
• Visitor to the PE premises

PE processes personal data on the legal bases and for the purposes described below.

Website and social media users and marketing
When you visit our website(s), we collect personal data directly from you or information created by you, including by your devices. The processing of such information by us is necessary in order to fulfil our legitimate interests of improving our website and providing relevant services to our customers Representatives or employees of prospective or existing suppliers,
customers or subcontractors (hereinafter “Supplier”)and business partners. The purpose of the collection is to recognise you as a returning visitor to our website, to analyse visitor behaviour in order to improve the communication and structure of the website(s), and to create an interest profile in order to show you relevant advertisements about our products and services on other websites as well. We process your location data to ensure that we can offer you the services closest to your current location. The legal basis in this case is legitimate interest.

PE is active on several social media platforms, such as LinkedIn, Facebook, YouTube and Instagram. We collect personal data directly from you or from information created by you, including by your devices, when you interact with us on social media. We may also analyse your activities and address messages to certain audiences on social media for marketing purposes. The purpose of these analyses is to provide you, the customer, with relevant information. The legal basis for processing your personal data in this case is consent. You can withdraw your consent at any time.

For marketing purposes, we may offer newsletters and notifications, subscriptions and invitations to events and to participate in customer surveys. If you accept our offer, we may collect the following personal data: name, email address, phone number, name of the company you represent. The legal basis for processing your personal data in this case is consent. You can withdraw your consent at any time.

PE and the individual social media organisations have a joint data protection responsibility, which means that you, as a data subject, have the right to request any required information from either of the parties. PE is only responsible for the processing linked to PE.

Representatives or employees of prospective or existing suppliers,
customers or subcontractors (hereinafter “Supplier”) 
We collect the personal data provided to us by you or by the Supplier you represent in the context of our business or prospective business relationship.

Personal data that may be collected includes names, contact details, identity documents, and information that forms part of our communication
with you.

The legal basis in this case is legitimate interest. The processing of your personal data is necessary to fulfil our legitimate interest of administering our supplier relationships, entering into agreements or performing contractual obligations, and for example facilitating day-to-day communication.

We may also process your personal data for the purpose of establishing, exercising or defending legal claims, for example in connection with a dispute or legal proceedings. Personal data that may be collected includes names, contact details, identity documents, and information that forms part of our communication with you.

The legal basis in this case is legitimate interest. The processing is necessary for the purposes of our legitimate interest in establishing, exercising or defending legal claims, for example in connection with a dispute or legal proceedings.

If you visit us on our premises, we may collect personal data because it is in our legitimate interest to ensure that our premises are secure. Personal data that may be collected includes names, contact details, identity documents, and information that forms part of our communication with you.

Recruitment and employment
We collect and process your personal data when you apply for a job or internship at PE. We may get the data directly from you, or from publicly available sources, or external recruiters involved in the recruitment process.

Your personal data will be processed by us in the context of the recruitment process. In some cases, external recruitment agencies may be involved.

The information we may collect includes name, personal identity number, address, email address, telephone number, educational background, employment history, references, test results, curriculum vitae including certificates, information from cover letters and background checks.

The legal basis in this case is legitimate interest. The processing of your personal data is necessary to fulfil our legitimate interest to carry out background checks to ensure that we employ suitable candidates. When you apply for a position at PE, we will retain your personal data in accordance with the applicable laws and regulations.

Employment

When entering into an employment contract, we will collect and process your personal data. Categories of personal data that are collected include name, personal details, address, contact details, salary and benefits and references.

The legal basis in this case is contract. The processing of your personal data is necessary for us to take the required steps before entering into an employment contract with you.

Candidate database
If you are not offered a position, we may still have an interest in storing your personal data so that we can contact you regarding future vacancies that fit your profile. We will keep your personal data only for this purpose, and only if you give us your consent. As a candidate, you will also be asked on a regular basis if you want to remain in our candidate database or if you want to be removed from it.

When insider information arises at PE, a list of persons with access to the insider information is drawn up (“Insider List”). PE shall also keep a list of persons with managerial responsibilities and anyone with a close connection to them.

We collect and process your personal data in connection with the establishment of the Insider List or the list of persons with managerial responsibilities. The categories of personal data that are collected include name, contact details, personal identity number, shareholding and information about the relationship between the person with managerial responsibilities and the person with a close connection to them.

The legal basis for our processing in this case is legal obligation, i.e. we need to process your personal data to fulfil our legal obligations.

In order for PE to fulfil its commitments, your personal data may be shared and transferred to other companies within the PE Group or other contractual and business partners. We will ensure that your personal data is protected in the event of it being transferred to another legal entity.

Examples of third parties we share your personal data with outside the Group include IT and cloud service providers, background check providers, public authorities, legal advisors, insurance companies, auditors, advertising agencies, and financial and lending institutions. We may also disclose your personal data to authorities or other public bodies if we are required to do so by law or legal process.

Your personal data will be kept only for as long as this is necessary for the purposes for which it is processed or for as long as is required by law or regulations. The retention period is influenced by the type and sensitivity of the personal data, the purposes for which we use your personal data, and also statutory retention and limitation periods.

If you, as a data subject of PE, wish to exercise your rights or have questions regarding our processing of your personal data, please contact PE by email on info@pe.se

Access to personal data (register extracts)
You have the right to know whether PE is processing personal data about you, and if so, to get access to your personal data and be informed of the purpose of the processing.

Correction
If you believe that the personal data concerning you is inaccurate or incomplete, you can request that it be corrected or supplemented.

Objection to the processing of personal data
You can object to the processing of your personal data based on legitimate interest on the grounds of your personal circumstances. If we cannot demonstrate that there are compelling or legitimate grounds to continue processing the data, we must cease the processing. If you object to receiving direct marketing, we are not allowed to process your personal data for such purposes. If you inform us that you no longer want to receive direct marketing from us, we will stop sending you such marketing material.

Restriction of processing
In some cases, you can request the restriction of the processing of your personal data. The right to restrict the processing of your personal data means that, in certain specific situations, you have the right to request that the processing of your personal data is restricted.

Deletion
In some cases, you can have your personal data deleted. An example of such a situation is if your personal data is no longer needed for the purposes for which it was collected. However, we cannot delete your personal data if, for example, we are obliged by law to keep it.

Withdrawal of consent
You can withdraw your consent to the processing of your personal data at any time, to the extent that the processing of your personal data is based on your consent. Such requests can be sent to info@pe.se

Right to move your personal data (data portability)
You have the right to obtain a machine-readable copy of the personal data processed about you on the basis of your consent or because the processing is necessary for the performance of a contract with you, for which you have provided us with the personal data (data portability). You have the right to request that the information is transferred to another data controller, provided that this is technically feasible.

Complaints to the supervisory authority

In addition, you have the right to submit any complaint you may have regarding our processing of your personal data to the supervisory authority, the Swedish Authority for Privacy Protection (IMY). IMY can be contacted via this link: Swedish Authority for Privacy Protection | IMY

You are also welcome to contact us directly if you have any questions or complaints.

Please note that we will perform an identity check on all requests of the type stated above to ensure that any measures requested are correct and in accordance with the law.

PE strives to protect your personal data and takes appropriate technical and organisational measures to protect your personal data against loss, unauthorised access or processing, disclosure, alteration, deletion, destruction or accidental damage. Such measures include internal policies, and physical and technical safeguards (e.g. encryption, anti-virus software, passwords and firewalls). Access to your personal data is only given to individuals within the organisation, for the sole purpose of enabling them to perform their duties.

As a general rule, the processing of your personal data is carried out within the EU/EEA, but in some cases personal data is transferred to and processed in countries outside the EU/EEA. Such transfers will only take place after a specific risk assessment has been performed and in compliance with any other rules in the GDPR.  If personal data is transferred outside the EU/EEA, PE will implement appropriate and necessary safeguards to ensure the protection of your personal data and the observance of your rights and freedoms.

This Privacy Policy is updated as and when needed.

If you have any questions about PE’s processing of your personal data or wish to make a complaint relating to your personal data or security, please contact us via info@pe.se

Please note that we will perform an identity check on all requests of the type stated above to ensure that any measures requested are correct and in accordance with the law.

To request an extract from the register, please send your request to:

Projektengagemang Sweden AB
Box 22078
104 22 Stockholm