Privacy Statement

The purpose of this statement is to describe NCAB Group’s ambition to ensure compliance with relevant data protection legislation, to outline the principles that guide our processing of personal data, explain how we collect and use your personal data and to inform you of your rights as a data subject.

Protection of your personal rights and privacy is the foundation of trust in NCAB Group’s business and employee relationships. As controller, NCAB Group is responsible for ensuring that all processing activities are performed in compliance with relevant data protection legislation, and to ensure an adequate level of protection for your personal data. 

Guiding principles 

NCAB Group is responsible for making sure that every performed data processing activity adheres to the principles that form the foundation of data protection. These following principles require that personal data shall be:

  • Collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those original purposes for which the personal data was collected.
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
  • Accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that is inaccurate, taking into account the purposes for which it is processed, is erased or rectified without delay.
  • Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
  • Processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.
Customers

What kind of customer personal data is processed by NCAB Group?

You as a customer or a potential customer

When NCAB Group is conducting business activities with you, such as delivering an order or presenting you with an offer or business proposal, we process your data as an existing or potential customer.

NCAB Group collects your data either directly from you, or using personal contacts, or by external monitoring (such as websites and social media), as well as other public sources. Your data is also collected by us if you choose to register in our customer portal.

Existing or potential customers

The following categories are the personal data that NCAB Group will process to facilitate our customer relationship with you:

  • Contact details: Name, email address, job title and the company you work for.
  • Demographic data: Country from which your place of work is located.

Sole proprietor

In the case you are a customer that is also a sole proprietor we process the following personal data in addition to the above:

  • Organization number
  • Contracts: Name, adress, signature.
  • Financial data: Invoices, bank account number, hourly rate.

If a data processing activity between us relies on consent NCAB Group will ensure that you have given us a clear consent that you can easily rescind if you choose to do so. 

NCAB will process your personal data based on consent for the following purposes:

  • Cookie management: If you are visiting our websites, we process your personal data depending on your consent. Please see our Cookie Policy for more information.
  • Accepting invitations to partake in webinars and other forums 
  • Newsletters and surveys 

Legitimate interest

We may process your personal data if there is a legitimate interest to either NCAB Group, or to you, of NCAB Group doing so. However, NCAB Group does not process your personal data with legitimate interest as a basis if you are a Chinese citizen. 

When we process your data based on legitimate interest we do so after having carefully considered whether:

  • The same objective could be achieved with other means.
  • The data processing activity might cause you harm or affect your ability to exercise your rights.
  • You would expect us to process your data in such a way.
  • You would consider it reasonable to process your data in such a way.

NCAB Group have a legitimate interest in processing your personal data for the following purposes:

  • Completing obligations to you as a customer, such as execution of purchase, invoicing and providing support.
  • Providing the products and services ordered by you.
  • Maintaining, improving, and documenting our customer relationship with you.
  • Identify and develop a new customer relationship with you.
  • Manage our partner relationship with you.
  • We also process personal data to defend our legal rights, including preventing and investigating fraud, industrial espionage and in cases of fraudulent behavior and activities that harms NCAB Group and or our partners.

There are many laws and regulations that NCAB Group needs to comply with, therefore there are situations where NCAB Group is obligated to process your data to ensure legal compliance. 

NCAB has a legal obligation to process your personal data the following purposes:

  • Complying with export control regulation.
  • Complying with requests from supervisory authorities and law enforcement.
  • Complying with financial laws.
Employees

What kind of personal data is processed by the NCAB Group regarding our employees?

We process your personal data to ensure that we adhere to our obligations as an employer towards you, as well as to ensure that you can perform your tasks according to your role. 

We collect your personal data either directly from you, or from a recruitment agency that helps NCAB Group in the recruitment process. 

NCAB group collects and process various types of personal data about you as an employee: 

  • Contact details: Name, address, email-address and phone number.
  • Demographic data: gender, age, language, nationality. 
  • Photo and video recordings from internal and external meetings.
  • Financial data: bank account and bank number to handle payments and payroll.
  • Compentece and qualifications: CV, credentials, education history, professional details.
  • Training and other education-related activities performed during your employment.
  • Performance indicators: we process performance indicators to measure your performance
    when working for NCAB.
  • Employement and career history: We process your personal data regarding accidents and attendance records, career development, when applicable, disciplinary actions and grievances, your health and wellbeing at work and work-related equipment and services. 
  • Background checks: In the event a background check was conducted when you applied for your role.
  • Security and IT service management data – data that is used for securing the use of our services and our premises, such as your password and login details, employee ID, security and IT logs, facility entry logs, and camera surveillance recordings (CCTV).

If a data processing activity between us relies on consent NCAB Group will ensure that you have given us a clear consent that you can easily rescind if you choose to do so.

NCAB will process your personal data based on consent for the following purposes: 

  • Employment contract management and general administration: we may use consent as a legal basis for these purposes when we are required to do so by applicable law.   
  • Cookie management: if you are visiting our websites, we process your personal data depending on your consent. Please see our Cookie Policy for more information.

Contract

NCAB Group will process your personal data to uphold and fulfil our contractual obligations with you as our employee or if you are a independent consultant with us. 

NCAB Group will process your data on this basis to ensure that the following is managed correctly:

  • Salary
  • Bonus
  • Benefits
  • Incintives

Legitimate interest

We may process your personal data if there is a legitimate interest to either NCAB Group, or to you, of NCAB Group doing so. However, NCAB Group does not process your personal data with legitimate interest as a basis if you are a Chinese citizen. 

When we process your data based on legitimate interest we do so after having carefully considered whether:

  • The same objective could be achieved with other means.
  • The data processing activity might cause you harm or affect your ability to exercise your rights.
  • You would expect us to process your data in such a way.
  • You would consider it reasonable to process your data in such a way.

NCAB group have a legitimate interest in processing data for the following purposes:

  • Employment contract management and general administration: NCAB Group process personal data to manage a professional recruitment process and onboarding with our employees. 
  • Employment contract management and general administration: We process personal data to manage the relationship with our employees, including management of contracts with employees. 
  • Service development & reporting: NCAB Group process personal data to improve and develop our People and Culture processes and other internal services based on a legitimate interest. Service development is done by collecting feedback directly from you in surveys and questionnaires; by utilizing the data generated from the use of our services in analytics; and by using recorded or transcribed training for quality improvement.

    We also have internal reporting processes that utilize employee data. In addition, employee data is used in limited scenarios for system testing. We employ adequate safeguards to minimize the impact of the processing of personal data when such data is used for testing.

    Examples of safeguards that are used within NCAB Group are documented instructions, training of the personnel performing tests and have access to the data, limited number of persons with access to the data used, logs and pseudonymization of personal data.
  • Ensuring security, safety and legal rights: At NCAB Group we use personal data to ensure the security and safety of our information, facilities, products, services, customers, and personnel. This is executed, subject to local law, by keeping access logs and system backups, preventing attacks on our information systems, monitoring system use, identifying and authenticating individuals, and monitoring access and facilities (including CCTV) and locating individuals in emergency situations.
  • Defense claims: NCAB Group also processes personal data for defending our legal rights, including preventing and investigating fraud, industrial espionage and other non-compliance. We base such processing on legitimate interest and in some cases legal obligations depending on local law.

NCAB Group process personal data to comply with our legal obligations, for example, to comply with tax, accounting, security, employment, whistleblowing, anti-bribery, health and safety rules and other legal obligations.

NCAB has a legal obligation to process your personal data to manage and ensure the following:

  • Holiday
  • Parental leave
  • Sick leave 
  • Other reasons for abscense 
  • Ensuring security, safety and legal rights: When required by law we may process your personal data for security and safety purposes and to defend legal rights. 
  • Employment contract management and general administration: NCAB Group will process our employees‘ and consultants‘ personal data when required by law to fulfill the purposes above.
Consultants

Consultants

NCAB Group will process your personal data when you work as a consultant for us to ensure that you can deliver according to the consultancy service you provide. 

We collect your personal data either directly from you or your consultancy agency. 

The categories of personal data that we process about you are:

  • Contact details: First and last name, work email.
  • Contact information: phone number and email address
  • Work related background information: Resumé, CVs, credentials and certificates.
  • Financial data: Billing address and bank details if you are a independent contractor.
  • Performance indicators 
  • Photo and videos
  • Background check: If necessary, we may perform a background check. The categories of personal data collected in the background check will be based on the specific role and task you as a consultant will perform at NCAB Group. In other words, we will only collect personal data based on necessity and what’s proportionate for the role. 
  • Security and IT service management data – data that is used for securing the use of our services and our premises, such as your password and login details, employee ID, security and IT logs, facility entry logs, and camera surveillance recordings (CCTV).

If a data processing activity between us relies on consent NCAB Group will ensure that you have given us a clear consent that you can easily rescind if you choose to do so.

NCAB will process your personal data based on consent for the following purposes:

  • Consultant general administration: we may use consent as a legal basis for this purpose when we are required to do so by applicable law.     
  • Cookie management: if you are visiting our websites, we process your personal data depending on your consent. Please see our Cookie Policy for more information.

Contract

To perform contractual obligations
NCAB Group will process your personal data to uphold and fulfil our contractual obligations with you as if you are an independent consultant at NCAB Group. 

Legitimate interest

We may process your personal data if there is a legitimate interest to either NCAB Group, or to you, of NCAB Group doing so. However, NCAB Group does not process your personal data with legitimate interest as a basis if you are a Chinese citizen. 

When we process your data based on legitimate interest we do so after having carefully considered whether:

  • The same objective could be achieved with other means.
  • The data processing activity might cause you harm or affect your ability to exercise your rights.
  • You would expect us to process your data in such a way.
  • You would consider it reasonable to process your data in such a way.

NCAB group have a legitimate interest in processing data for the following purposes:

  • Consultant contract management and general administration: NCAB Group process personal data to manage a professional recruitment process and onboarding with you as a consultant. 
  • Service development & reporting: NCAB Group process personal data to improve and develop our People and Culture processes and other internal services based on a legitimate interest. Service development is done by collecting feedback directly from you in surveys and questionnaires; by utilizing the data generated from the use of our services in analytics; and by using recorded or transcribed training for quality improvement. We also have internal reporting processes that utilize consultant data. In addition, consultant data is used in limited scenarios for system testing. We employ adequate safeguards to minimize the impact of the processing of personal data when such data is used for testing. 

Examples of safeguards that are used within NCAB Group are documented instructions, training of the personnel performing tests and have access to the data, limited number of persons with access to the data used, logs and pseudonymization of personal data.

  • Ensuring security, safety and legal rights: At NCAB Group we use personal data to ensure the security and safety of our information, facilities, products, services, customers, and personnel. This is executed, subject to local law, by keeping access logs and system backups, preventing attacks on our information systems, monitoring system use, identifying and authenticating individuals, and monitoring access and facilities (including CCTV) and locating individuals in emergency situations.  
  • Defense claims: NCAB Group also processes personal data for defending our legal rights, including preventing and investigating fraud, industrial espionage and other non-compliance. We base such processing on legitimate interest and in some cases legal obligations depending on local law.

NCAB Group process personal data to comply with our legal obligations, for example, to comply with tax, accounting, security, employment, whistleblowing, anti-bribery, health and safety rules and other legal obligations.

  • Ensuring security, safety and legal rights: when required by law we may process your personal data for security and safety purposes and to defend legal rights. 
  • Consultant contract management and general administration: NCAB Group will process our consultants‘ personal data when required by law to fulfill the purposes above.
Job applicants

What kind of personal data is processed by the NCAB Group when you apply for a position with us?

NCAB Group is constantly looking for new talents to strengthen our different teams within the NCAB Group. If you apply for a position at NCAB Group, we will process your personal data as part of our recruitment process. We will always inform you in the advertisement what personal data we will require from you as an applicant applying for a specific role. 

NCAB Group collects your personal data either directly from you, or from a contracted recruitment agency. We have the necessary agreements in place with all of our partners and recruitment agencies to ensure that your personal data is protected and processed in a compliant way. 

In the initial stage of the recruitment process

  • Contact details:  Name, address, phone number, and your email address
  • Recruitment information: Your application and resume, interview information, video interviews, references from previous employers and other third-party references, information about your competencies, qualifications, skills, work experience, and education. 

During the recruitment process 

  • Online data & identifiers: data that is collected with cookies or similar technologies about your use of services, including your IP address, cookie ID and mobile device ID if you visit our website and have given your consent.
  • Security and IT service management data – in such cases you perform an interview on our premises we processes data that is used for securing the use of our services and our premises, such as your password and login details, security and IT logs, facility entry logs, and camera surveillance recordings (CCTV).

In the final stages of recruitment: 

  • Identification information: Proof of identity and your national identity number.
  • Demographic data: Gender, age, language and citizenship.
  • Background check: As we take steps prior to entering into a possible employment contract, we may also conduct a background check. The background check performed will be based on the specific role you are applying for. For clarification, the personal data collected in the background check will be proportionate according to what is necessary for that role.

NCAB group will use your personal data for predefined purposes based on legitimate interest and legal obligation when you apply for a position. Also, we may use your personal data based on your consent in addition to reliance on a legitimate interest (this is applicable if additional consents are needed under applicable law, for example background controls in certain countries).

If a data processing activity between us relies on consent NCAB Group will ensure that you have given us a clear consent that you can easily rescind if you choose to do so. 

We may contact and inform you regarding a different position that you applied for, in case you gave us permission to be contacted for this purpose. In certain cases, we may also need your consent to perform background checks as applicable by national law. 

  • Cookie management: If you are visiting our websites, we process your personal data depending on your consent. Please see our Cookie Policy for more information.

Legitimate interest

We may process your personal data if there is a legitimate interest to either NCAB Group, or to you, of NCAB Group doing so. However, NCAB Group does not process your personal data with legitimate interest as a basis if you are a Chinese citizen. 

When we process your data based on legitimate interest we do so after having carefully considered whether:

  • The same objective could be achieved with other means.
  • The data processing activity might cause you harm or affect your ability to exercise your rights.
  • You would expect us to process your data in such a way.
  • You would consider it reasonable to process your data in such a way.

NCAB group have a legitimate interest in processing data for the following purposes:

  • Recruitment and resourcing: we use your personal data to contact you to inform you about the status of your application or to obtain additional information when needed. We also use your personal data to set up and conduct interviews and assessments, evaluations, reference, credit and background checks as permitted by applicable law. 
  • Creating an employee record: if NCAB Group hires you, the personal data you have given during the application process will become part of your employee record and will be used to manage your career at NCAB Group.
  • Service development and analytics: in certain circumstances we use your personal data to improve and develop our recruitment processes and other related services, and to create analytics. We endeavor to use de-identified data or when possible
  • Security of our services and others: personal data is used for ensuring the information security of our services, for example, by keeping access logs and system backups, authenticating users, and preventing attacks.
  • Background check: before NCAB hires a candidate we will conduct a background check to ensure suitability for the role in question 

We process personal data to comply with our legal obligations, for example local labour law, anti discrimination and export control legislation.

Partners, suppliers and other third parties

What kind of personal data is processed by the NCAB Group with regards to our partners, suppliers and other third parties?

Our suppliers and partners

NCAB group collects and processes different kinds of personal data with regards to our suppliers and partners. Depending on the purpose and our agreement with you we process the following categories personal data: 

  • Contact details: Name, working address, phone number and work email address 
  • Demographic details: Gender, age, nationality, details about your profession and other identifying details which are national security number.
  • Financial data: Bank account details, travel details and expenditures, insurance details and tax identification numbers.
  • Administrative and work related information: CV and competences, information regarding earlier work assignments and projects you have been involved in, in applicable cases results of background checks and other security information which includes “Know your counterparty”-control with, photographs, accident register, attendance administration (including project time), information about work related equipment and other services you use when working with us including recordings of trainings and meetings, and messages and information you publish about yourself in our internal and external channels.
  • Information regarding security and administration when using our IT services: We process information that is used to secure usage of our services, programs and our premises. Information processed login details such as password, security logs when using our systems, entry logs to our premises and recordings from surveillance cameras. 

Other third parties

Shareholders 

NCAB Group has several obligations towards our shareholders, and to ensure that we live up to these requirements we process personal data about you as a shareholder. 

We collect your personal data either directly from you or from a central securities depository agency. 

The following categories are personal data that NCAB Group will process to manage our legal obligation to you as a shareholder: 

  • Contact details: First and last name, address
  • Voting rights: (based on NCAB stock ownership)
  • Identification number: such as national identification number

Potential investors 

As a growing business, NCAB Group processes your personal data as a potential investor to ensure that you get the necessary information you need about our business. We collect your personal data directly from you. The data we collect are:

Contact details: First and last name and email address.

We process your e-mail address to ensure that we provide you with necessary information through newsletters and press releases. 

Website visitors

NCAB Group will use cookies to enhance your experience as a website visitor as well as giving us information about how our website is used. Cookies are a type or personal data, and we will process cookies based on your consent. 

NCAB group will use your personal data for predefined purposes based on contract, consent, legal obligation and legitimate interest. In most cases the legal basis for processing your data is our legitimate interest in administering our contact persons’, external persons’ or consultants’ information for business operations related matters. In addition, we have certain legal and contractual obligations that require us to process personal data with regard to our partners, suppliers and stakeholders. Consent may be used in certain specific situations.

If a data processing activity between us relies on consent NCAB Group will ensure that you have given us a clear consent that you can easily rescind if you choose to do so. 

  • Supplier and stakeholder relationship management: when applicable and required by national legislation we may use consent as our legal basis to manage our relationship with suppliers and stakeholders
  • Cookie management: if you are visiting our websites, we process your personal data depending on your consent. Please see our Cookie Policy for more information.

Contract

NCAB will process personal data to perform and uphold our contractual obligations with our suppliers, partners and other third parties. 

Legitimate interest

We may process your personal data if there is a legitimate interest to either NCAB Group, or to you, of NCAB Group doing so. However, NCAB Group does not process your personal data with legitimate interest as a basis if you are a Chinese citizen. 

When we process your data based on legitimate interest we do so after having carefully considered whether:

  • The same objective could be achieved with other means.
  • The data processing activity might cause you harm or affect your ability to exercise your rights.
  • You would expect us to process your data in such a way.
  • You would consider it reasonable to process your data in such a way.

NCAB group have a legitimate interest in processing data for the following purposes:

  • Supplier and stakeholder relationship management: NCAB Group process personal data to manage professional relationships with our potential business partners. This involves contacting our stakeholders and arranging events.  We also process personal data in our corporate relations for transparency and lobbying purposes. The legal basis for these purposes is legitimate interest and consent.
  • Audits of our partner factories: we regularly audit our partner factories to ensure production standards and to support our partners in meeting both regulatory requirements and contractual requirements. Personal data is processed for these purposes both for accidents investigations, accident prevention, performance evaluation and training. The legal basis is based on legitimate interest. There are situations where NCAB Group performs such audits based on legal obligations. This depends on the specific local law requirements where our partner factories operate.
  • Managing work orders and assignments with regards to our partners and suppliers as well as evaluation and general administration: NCAB group process personal data of our factory partners‘ workforce in order to administer their work and assignments. We provide them with work related tools, training and services, manage travel and expense claims and project hours, conduct contract performance evaluation, and manage insurances and payments. Personal data is also processed in contract management, for example when signing non-disclosure agreements. The legal basis for these purposes is legitimate interest.

NCAB Group will process personal data to comply with our legal obligations, for example, to comply with tax, accounting, whistleblowing, securities, anti-bribery, anti-money laundering, health and safety rules and other legal obligation placed on NCAB Group. 

  • Ensuring security, safety, compliance and legal rights: NCAB group process personal data to ensure the security and safety of our information, facilities, products, services, customers, and personnel. 
    This is done subject to local law, for example by keeping access logs and system backups, preventing attacks, monitoring system use, identifying and authenticating individuals, and monitoring access and facilities (including CCTV) and locating individuals in emergency situations.  
  • Defense claims: we also process personal data to defend our legal rights, including preventing and investigating fraud, industrial espionage and in cases of fraudulent behavior and activities that harms NCAB Group and or our partners.

For how long does NCAB process your personal data?

NCAB Group strives to only process personal data for as long as it is necessary to achieve the purpose for which they were collected from you. We have implemented settings and routines for deletion within our systems and have Registers of Processing Activities with accompanied retention times for different processes. 

How do the NCAB group protect your personal data?

NCAB Group employs appropriate organizational and technical security measures to protect your data from loss, alterations or misuse. We have implemented an information security governance model which describes roles and responsibilities. We also have polices, procedures and instructions on how personal data must be handled within the NCAB Group.

By conducting trainings and awareness programs, we engage our employees to adhere to privacy and security requirements. In situations where we contract third-party suppliers to provide services that entail access to or processing of your personal data by the supplier, we require them, by contract, to have similar security controls in place. We also conduct regular audits of our partner factories and suppliers to ensure that our standards are met, and that the processing of personal data is compliant with the applicable regulations. 

Sharing your personal data 

NCAB Group may come to share your personal data with, or make your personal data available to, other parties. The purpose for doing so varies but it will either be to ensure that NCAB Group adheres to legal obligations or to serve a legitimate interest, either to us or to you. 

Suppliers and vendors

NCAB Group uses several personal data processors to facilitate our business. Processors may only process your personal data in accordance with clear instructions given by us, and they may not use your personal data for their own ends. 

NCAB Group is obligated to ensure that we only contract processors that can provide sufficient guarantees that the requirements of the GDPR and other data protection legislation will be met, and also that the rights of the data subjects are sufficiently protected. Our processors are not allowed to engage another processer without prior and specific, or general, written approval by us. All processors that we use are bound by a data processing agreement, regulating the data processing they perform on our behalf. 

Whether NCAB Group uses a processor to process your personal data or not, we are still responsible for ensuring that your personal data is sufficiently protected, and we take all the necessary steps to ensure this is fulfilled. Either by audits or other such activities. 

Government agencies and public authorities

In certain situations, NCAB Group is obligated to provide government agencies and public authorities with your personal data that we have collected or that you have provided to us. This includes providing government agencies with your personal data for the government agency to perform its task, such as national taxations agencies. In addition, we might disclose your personal data to adhere to lawful requests by national security agencies or law enforcement. 

Unions and Employers’ organizations

We will share your personal data with Unions and Employers’ organizations in certain situations to fulfill national labor law regulations.

External advisors

NCAB Group will share your personal data with external advisors, such as law firms, to meet and manage legal demands, in case of litigation and legal process, should they arise. 

In addition, we might share your personal data collected by us with PR agencies, customer survey and marketing providers and other such parties to ensure that NCAB Group’s services reach our target groups and are optimized based on customer feedback. 

Do NCAB Group transfer personal data to any third countries (Outside EU/EEA)?

As a global company, NCAB Group is comprised of entities and affiliates outside of the EU/EEA and we might use processors that are established in countries outside of Europe. Therefore, it is possible that your personal data will be transferred or made accessible to entities outside of the EU/EEA

In these cases, the recipient countries provide adequate levels of data protection by decision of the Commission, such as the US if the recipient entity is bound by the EU-US Data Privacy Framework. If there is not adequacy decision in place, NCAB ensures that other transfermechanisms are in place, such as standard contractual clauses. 

To ensure that your personal data is given an adequate protection when your data is processed outside of the EU, UK or countries that provide adequate levels of data protection by decision of the Commission, we ensure that appropriate legal, technical, and organizational safeguards are put in place. For example, NCAB ensures the following safeguards: We have documented policies and procedures for ensuring that processing of personal data is done in a secure and legal manner. Our personnel are appropriately trained according to their roles and positions for handling personal data. We have robust and adequate protection of our data systems with firewalls and other technical safeguards. NCAB Group also actively follows up on documented risk and procedures to minimize both the probability and consequence of risks we identify. When entering into agreements with third parties that entail processing of personal data, we also have the necessary data protection agreements in accordance with the applicable data protection regulation.

Cookies

When you visit our websites

By visiting our websites, we will to some degree, depending on your choice and consent, collect personal data from you. The personal data collected and the different choices you can make is explained in our cookie drop down menu.

What are cookies? 

Cookies are small text files with information that are stored on your computer (or other Internet enabled devices, such as smartphones or tablets) when you visit a website. A cookie normally contains the name of the website it originates from, the duration period of the cookie (i.e. how long the cookie will be stored on your device) and a value, which is usually a randomly generated unique number.

What does NCAB Group use cookies for?

Cookies are used to make our website work more efficiently, but also to provide us with certain information. Cookies make it possible to distinguish between users, which can give each user a more customized and positive experience of the website.

Cookies that are used on the websites

There are five types of cookies on the websites:

  • Necessary cookies help us to make our websites usable by enabling basic functions like page navigation and access to secure areas of the websites. The websites cannot function properly without these cookies.
  • Preference cookies enable our websites to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
  • Statistic cookies help us as website owners to understand how you interact with our websites by collecting and reporting information anonymously.
  • Marketing cookies are used to track you across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.
  • Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.

To see the current list of cookies please click here.

Your rights according to GDPR and other data protection legislations and how you can exercise your rights

Your rights as a data subject

As a data subject, you are entitled to the following specific rights under data protection legislation such as the GDPR, UK GDPR, PIPL and the CCPA/CPRA. Please use the contact information at the end of this policy if you would like to exercise any of these rights. We always verify the identity of any individual making such a request. This is done to ensure that your personal data and information is protected and not disclosed to anyone that claims to be you. 

Right of access

You have the right to obtain information from NCAB Group regarding whether we process your personal data. If that is the case, we are obligated to inform you of:

  • the purpose of the processing
  • the legal basis of the processing
  • the categories of personal data processed
  • the recipients of categories, especially if these are located outside of the EU and the UK
  • if possible, how long we will store your personal data
  • your other rights as a data subject 
  • your right to lodge a complaint with a supervisory authority
  • any available information we have about the source from which we collected your data if it was not from you yourself 
  • the existence of automated decision-making, including profiling

Right to rectification

You have the right to have inaccurate personal data rectified or completed if it is incomplete. 

Right to erasure

You have the right to have your personal data deleted, also known as the right to be erased. However, this right is not absolute, seeing as there are situations when, for example, NCAB Group is legally obligated to continue to process your personal data even if you make a request to have it deleted.

Right to restrict processing

You have the right to request the restriction or suppression of your personal data. However, this right is not absolute seeing as there are situations when, for example, NCAB Group is legally obligated to continue to process your personal data even if you make a request to restrict the processing of your personal data. 

Right to data portability

You have the right to data portability which allows you to obtain and reuse your personal data for your own purposes across different services. It allows you to move, copy or transfer personal data easily from one IT environment to another in a safe and secure way, without hindrance to usability. However, this right only applies if NCAB Group processes your personal data based on your consent or an agreement with us and that the personal data is processed by automated means (for example: in a computer system). 

Right to object 

You have the right to object to processing based on legitimate interests, including profiling and direct marketing. 

If NCAB Group is processing your personal data based on your consent, you have the right to withdraw that consent at any time. To withdraw your consent does not require any specific formal process. 

Right to lodge a complaint with a supervisory authority 

If you are in any way dissatisfied with how we process your personal information, you have the right to lodge a complaint to a supervisory authority. The supervisory authority with the primary jurisdiction over NCAB Group is the Swedish agency Integritetsskyddsmyndigheten (IMY). You can lodge any complaint you have with us, with regards to processing personal data, to IMY here. 

NCAB Group’s ambition is to make sure that anytime you want to exercise your rights, we will adhere to your request within 30 days. 

Contact information and how to exercise your rights

If you have any questions regarding this Privacy Policy, the processing of your personal data, or any other question regarding data protection or cookie management at NCAB Group, feel free to contact us at: info@ncabgroup.com

If you want to contact the data protection officer with questions and or concerns, feel free to contact the data protection officer at: dpo@ncabgroup.com 

If you want to exercise any of your rights, please contact us at: dpo@ncabgroup.com

NCAB GROUP AB
Löfströms allé 5 
172 66 Sundbyberg 
Sweden 
+46 8 403 000 50