Privacy Policy

1. Introduction
When visiting the CSI Nordic website, CSI Nordic (“CSI Nordic”, “CSI”, “we”, “us”) can collect and process personal information (“Personal Information”) about you.

CSI is the personal data controller for the processing of personal data in accordance with this Privacy Policy.

This Privacy Policy (“Privacy Policy”) describes what Personal Information CSI collects and for what purposes personal data is processed.

In this Privacy Policy, the term “processing” includes any activity involving your Personal Information including the collection, management, storage, spreading, generation, use, transfer and deletion or destruction of information.

“Applicable data protection legislation” means data protection legislation and other regulations that have been created by the implementation of Directive 95/46/EC of the European Parliament and of the European Council and, from 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of physical persons with regard to the processing of personal data and on the free flow of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).

“Personal data” means any information that is attributable to an identifiable or identified natural person.

2. Cookies
CSI uses cookies and other similar techniques to collect information about you and your device (such as phone or computer) when you visit our site. Click here for more information about CSI’s use of cookies.

3. From where do we collect your personal information?

3.1 We collect Personal Data from you (such as name and e-mail address) if you choose to contact us through the website.

3.2 We can also collect Personal Data from other sources when we measure and analyze our activity in social media (e.g. from published articles and social media channels).

4. Why do we collect and process your personal data

4.1 Give you information in eg. newsletters, directories and press releases.
If you subscribe to newsletters, catalogs, press releases and similar information about CSI and its activities or order such information on occasional occasions, we treat your Personal Information in order to provide you with requested subscription or information. Personal data processed for these purposes include:

Categories of personal data

First name
Surname
E-mail address
Phone number
Company / organization
The legal basis for processing these Personal Data is set out in Article 6.1 (f) of the GDPR. The treatment is allowed because the processing is necessary to be able to meet our legitimate interest in providing you with subscriptions and information that you requested. If you do not provide us with information marked with * on the website’s contact form, we will not be able to provide the requested services.

4.2 Answer Your Questions and Manage Feedback
Our website offers visitors an opportunity to communicate with us by asking questions or giving us feedback regarding our services and our business. If you use such a function, CSI will process your Personal Information in order to answer your questions or handle your feedback. Personal data processed for these purposes include:

Categories of personal data

First name
Surname
E-mail address
Address
Phone number
Feedback and comments from you
The legal basis for the processing of these Personal Data is set out in Article 6.1 (f) of the GDPR. The treatment is allowed because the treatment is necessary to be able to satisfy our legitimate interest in answering questions and managing feedback from you. If you do not provide us with information marked with * on the website’s contact form, we will not be able to provide the requested services.

5. How long do we keep your personal data
CSI preserves your Personal Information as long as it is necessary to fulfill the purposes set forth in this Privacy Policy unless a longer preservation period is required or permitted by local law to which CSI is bound. We use the following criteria to determine the conservation period: (i) as long as we have an ongoing relationship with you (either as an individual or in your role as an employee of one of our corporate customers, suppliers or partners); (ii) as long as required by legal obligations to which CSI is bound (such as tax and accounting obligations); and (iii) as long as appropriate in the light of our legal position (such as applicable statutory limitation provisions).

6. Disclosure and transfer of Personal Data

Other recipients

CSI may disclose Personal Information to other recipients such as:

Courts and Delegates for Determining, Applying and Defending Legal Claims.
The legal basis for the processing of these Personal Data is to satisfy our and your legitimate interest in obtaining disputes by competent courts.

Event companies and partners to prepare and organize events and conferences.
The legal basis for the processing of these Personal Information is to meet our legitimate interest in organizing events and conferences.

Personal data assistants acting on behalf of CSI.

Furthermore, CSI may disclose Personal Information to external parties such as IT suppliers, communications agencies, sellers and others who provide services that process Personal Data according to CSI’s instructions. When such disclosure involves the transfer of Personal Data outside the EU / EEA, CSI will ensure that security measures are in place before such transmission takes place.

Appropriate security measures for countries outside the EU / EEA area

According to Applicable Data Protection Law, you, upon request, have the right to receive a copy of documentation showing that appropriate security measures have been taken to protect your Personal Data when they are transferred outside the EU / EEA area.

If you want to know more about the processing of your Personal Information and if your Personal Information is transferred outside the EU / EEA areas, please contact us at the contact details provided in section 9.

7. Security
We will ensure that access to your data is adequately protected by the application of appropriate security measures and, depending on the circumstances, taking into account the latest developments, implementation costs and type, extent, circumstances and purpose of the processing and the risk. To maintain this warranty, we have also implemented appropriate technical, physical and organizational measures to protect your personal data against: unauthorized or accidental destruction, alteration or disclosure; improper use; damage; theft or loss by accident; or unauthorized access.

8. Your rights
8.1 Right to correction
CSI will take action in accordance with Applicable Data Protection Law to ensure that Personal Data processed is accurate, complete and up-to-date. If you find that Personal Information related to you is incorrect, incomplete or incorrect, you have the right to have your Personal Information corrected.

Furthermore, you have the right to request access to your Personal Information we process.

8.2 More rights as of May 25, 2018
From May 25, 2018 you have the right to / to:

(i) Access

You may request confirmation of whether or not Personal Data is processed and, if processed, request access to your Personal Information and additional information such as the purpose of the processing. You also have the right to receive a copy of the Personal Data processed. If the request is submitted electronically, the information will also be obtained in an electronic format that is widely used if you do not request anything else.

(ii) Applying for special treatment

You can object to the processing of your Personal Information based on a legitimate interest, in the light of the particular situation and the processing that is done for direct marketing purposes. If you have signed up for a subscription via e-mail, in each e-mail there will be an easily accessible unregistered function to end your subscription.

(iii) Deletion

You may have your Personal Data deleted under certain circumstances, for example, when the data is no longer needed to achieve the purpose for which the data was collected.

(iv) Restriction of treatment

You may ask us to limit the processing of your Personal Information to include only the storage of your Personal Information under specific circumstances, for example, when the processing is illegal but you do not want your Personal Data to be erased.

(v) Revoke consent

You always have the right to withdraw your consent to the processing of Personal Data to the extent that the processing is based on your consent.

(vi) Data portability

You have the right to request a machine-readable copy of the Personal Data processed on the basis of your consent or when the processing is necessary to fulfill an agreement with you, and when Personal Information is obtained by CSI from you (data portability), and to request the information transferred to another person responsible for personal data (if possible).

8.3 Complaints to the supervisory authority
You are aware that you always have the right to complain about the processing of your Personal Data to the competent data protection authority if possible, in accordance with Applicable data protection legislation. The Data Protection Authority can be reached here https://www.datainspektionen.se/