PRIVACY POLICY FOR THE CHIEF AIRGONOMICS OFFICER INITIATIVE

CAMFIL AB

1 INTRODUCTION

The Chief Airgonomics Officer initiative is founded by Camfil AB (“we” or “us”). The Chief Airgonomics Officer initiative offers a training programme in which the participant learns about the importance of indoor air quality in the workplace. It is important for us to process your personal data responsibly and securely, and in accordance with applicable laws. This privacy policy describes how we process your personal data in the Chief Airgonomics Officer initiative and what rights you have in connection with it. For information on how we process your personal data in our other business activities, please refer to Camfil.com.

In the Chief Airgonomics Officer initiative, we process personal data about you who:

2 WEBSITE VISITORS, NEWSLETTER SUBSCRIBERS OR YOU WHO OTHERWISE COMMUNICATES WITH US

2.1 How do we collect your personal data?

We collect the data directly from you or data that is generated by you, including by your devices when visiting our website.

2.2 Purposes of the processing of your personal data
2.2.1 Maintain, protect and develop the website

When you are browsing the website, we will process your IP address and browser user agent string to help spam detection. In addition, your personal data may be processed to administrate and improve our website, for our internal records and for statistics.

Categories of personal data   Legal basis 
Legitimate interest. The processing is necessary to satisfy our legitimate interest to ensure that our website is continuously maintained and updated and protected against malicious attacks.
2.2.2 Marketing

When you are browsing the website, we will process certain information collected through the use of cookies for marketing purposes. However, the processing described in this section 2.2.2 only takes place if you have consented to it through your choice of cookies on our website.

Categories of personal data Legal basis
  • IP address
  • Browser user agent string (UA)
  • Information about how website visitors use our website. See our Cookie policy | Chief Airgonomics Officer for more information.
Legitimate interest. The processing is necessary to satisfy our legitimate interest to market and present information about the initiative.
2.2.3 Newsletters If you sign up for our newsletters, we will process your e-mail address in order to send the newsletters to you.
Categories of personal data   Legal basis 
  • E-mail address.
 Legitimate interest. The processing is necessary to satisfy our legitimate interest to provide you with requested newsletters and market our business. As this processing is limited to what is necessary in order to fulfil your request and that you at any time may unsubscribe, we have concluded that our legitimate interest in processing your personal data overweighs your interest in not having your personal data processed for such purposes.
2.2.4 Communicate with you and respond to your questions or feedback

Where we offer you a possibility to communicate with us by asking questions or providing feedback regarding the Chief Airgonomics Officer initiative, we will process your personal data.

Categories of personal data   Legal basis 
  • Contact details that you give us (e.g. name, address, telephone number and e-mail address).
  • Any information included in your message.
 Legitimate interest. The processing is necessary in order to fulfil our legitimate interest to communicate with our website visitors, e.g. in order to develop our initiative.
2.3 With whom do we share your personal data? 2.3.1 General

Where necessary in order to achieve the purposes set out in this Section 2, or in the event of a dispute or legal process, we share your personal data with others, as described below. Please note that we, regardless of the recipients’ capacity, only will share your personal data with entrusted actors and only to the extent necessary.

2.3.2 Data processors acting on behalf of us

In order to fulfil the purposes of the processing of your personal data, we transfer personal data to external parties such as third-party service providers that we have engaged, as well as other partners. These external parties will act as our data processors and may only process your personal data in accordance with our instructions and not for their own purposes. We are the data controller for the processing of personal data that these external parties carry out on our behalf. The purposes of the processing activities carried out by us are outlined in Section 2.2.

2.3.3 Recipients who act as data controllers

In the event of a dispute or legal process, we may share your personal data with recipients that will process personal data in the capacity as data controllers, such as courts and arbitration tribunals, public authorities and external advisers.

2.4 For how long do we process your personal data?

Your personal data will be processed for as long as necessary for the purposes described herein. For example, when processing your personal data for the purpose of maintaining the website, we will anonymize your data as soon as practicably possible and then use anonymized data for further website development. With respect to our communication with you, we will process your personal data for as long as it is relevant depending on the reason for our communication and with respect to our provision of newsletters, we will process your personal data until you opt-out from receiving the newsletters. See our Cookie policy | Chief Airgonomics Officer for details on how long different cookies are retained.

3 PARTICIPANTS IN THE CHIEF AIRGONOMICS OFFICER TRAINING PROGRAM

3.1 How do we collect your data?

We collect the data directly from you or data that is generated by you, when you sign up for and take part in the Chief Airgonomics Officer training program.

3.2 Purposes of the processing of your personal data 3.2.1 Administer your registration and participation in the Chief Airgonomics Officer training program

If you sign up to the Chief Airgonomics Officer training program, we will process personal data about you for the purpose of administrating your registration and participation in the program.

Categories of personal data   Legal basis 
  • Name
  • Company
  • E-mail address
  • Contry
  • User-ID
  • Password
  • Training results (i.e. information about whether you have completed the Chief Airgonomics Officer Trainings Programme or parts of the Chief Airgonomics Officer Training Programme.
Legitimate interest. The processing is necessary to satisfy our legitimate interest to provide you with requested training when you sign up for the Chief Airgonomics Officer Training programme and to communicate your training results with you.
3.2.2 Answering your questions and collecting feedback

Where we offer you a possibility to ask us questions or provide feedback regarding the Chief Airgonomics Officer Training Programme, we will process your personal data.

Categories of personal data   Legal basis 
  • Contact details that you give us (e.g. name, company, title/role, e-mail address)
  • Any information included in your message.
  • Feedback on completed training (e.g. star ratings, comments or surveys)
Legitimate interest. The processing is necessary in order to fulfil our legitimate interest to communicate with you and collect and respond to your feedback e.g. in order to develop our Chief Airgonomics Officer Training Programme or respond to your questions.

3.3 Communicate with you about future training opportunities

We will process your personal data in order to communicate with you about training opportunities that Camfil may offer in the future that may be of relevance to you.

Categories of personal data   Legal basis 
  • Name
  • Company
  • E-mail address
  • Country
Legitimate interest. The processing is necessary to satisfy our legitimate interest to present information about future training opportunities.

3.4 With whom do we share your personal data?

3.4.1 General

Where necessary in order to achieve the purposes set out in this Section 3, or in the event of a dispute or legal process, we share your personal data with others, as described below. Please note however that we, regardless of the recipients’ capacity, only will share your personal data with entrusted actors and only to the extent necessary.

3.4.2 Data processors acting on behalf of us

In order to fulfil the purposes of the processing of your personal data and to be able run our business, we transfer personal data to external parties such as third-party service providers that we have engaged, as well as other partners. These external parties will act as our data processors and may only process your personal data in accordance with our instructions and not for their own purposes. We are the data controller for the processing of personal data that these external parties carry out on our behalf. The purposes of the processing activities carried out by us are outlined in Section 3.2.

3.4.3 Recipients that act as data controllers

In the event of a dispute or legal process, we may share your personal data with recipients that will process personal data in the capacity as data controllers, such as courts and arbitration tribunals, public authorities and external advisers.

3.5 For how long do we process your personal data?

Your personal data will be processed for as long as necessary for the purposes described herein. When processing personal data to administer you registration and participation in the Chief Airgonomics Officer training, we will process your data until you have completed the training and for the additional period necessary, to enable you to obtain information about your training and training results and to enable you to proceed with your training at the right level.

4 PARTICIPANTS IN WEBINARS

4.1 How do we collect your data?

We collect the data directly from you or data that is generated by you, when you sign up for, and take part in our webinars.

4.2 Purposes of the processing of your personal data
​4.2.1 Administer your participation in a webinar

In connection to the Chief Airgonomics Officer initiative, we will occasionally arrange webinars connected to the Chief Airgonomics Officer initiative. When taking part of such webinar, we will process certain personal data about you for the purpose to administer your participation in the webinar.

Categories of personal data   Legal basis 
  • Name
  • E-mail address
  • Phone number (if provided by you).
Legitimate interest. The processing is necessary to satisfy our legitimate interest to provide you with a requested webinar when you sign up for such webinar.
4.3 With whom do we share your personal data? 4.3.1 General

Where necessary in order to achieve the purposes set out in this Section 4, or in the event of a dispute or legal process, we share your personal data with others, as described below. Please note however that we, regardless of the recipients’ capacity, only will share your personal data with entrusted actors and only to the extent necessary.

4.3.2 Data processors acting on behalf of us

In order to fulfil the purposes of the processing of your personal data and to be able run our business, we transfer personal data to external parties such as third-party service providers that we have engaged, as well as other partners. These external parties will act as our data processors and may only process your personal data in accordance with our instructions and not for their own purposes. We are the data controller for the processing of personal data that these external parties carry out on our behalf. The purposes of the processing activities carried out by us are outlined in Section 4.2.

4.3.3 Recipients that act as data controllers

In the event of a dispute or legal process, we may share your personal data with recipients that will process personal data in the capacity as data controllers, such as courts and arbitration tribunals, public authorities and external advisers.

4.4 For how long do we process your personal data?

Your personal data will be processed for as long as necessary for the purposes described herein. When processing personal data in order to administer your participation in our webinars, we will process the personal data until the webinar is completed.

5 APPROPRIATE SAFEGUARDS FOR TRANSFERS OF PERSONAL DATA OUTSIDE OF THE EU/EEA

We may transfer or disclose personal data to recipients located outside the EU/EEA (third country), mainly in situations where we are using third-party data processors in a third country who may access personal data for the purpose of providing maintenance and support. When we transfer or disclose your personal data to a recipient in a country outside of the EU/EEA, we will always ensure that appropriate safeguards have been taken (such as the EU Commission's standard contract clauses, including other supplementary safeguards as necessary in each case) to protect the personal data. Further, we are regularly carrying out risk assessments to assess what supplementary measures that needs to be taken to protect the personal data subject to the transfer or disclosure. If you would like further details about the processing of your personal data and whether your personal data is transferred to a third country, please contact us on the contact details as set out below under Section 7.

6 YOUR RIGHTS

Under applicable data protection laws, you have certain rights in relation to the processing of your personal data. We process your personal data to the extent necessary in order to fulfil your rights. Please submit requests for exercising your rights by contacting us on the contact details set out in Section 7 below. You have, under certain circumstances, the right to exercise the following rights:

Access

You may request confirmation whether or not personal data is processed and, if that is the case, access your personal data and additional information such as the purposes of the processing. You are also entitled to receive a copy of the personal data undergoing processing. If the request is made by electronic means the information will be provided in a commonly used electronic format if you do not request otherwise.

Object to certain processing

You have the right to object to the processing of your personal data based on a legitimate interest for reasons which concerns your particular situation. In such a situation, we will stop using your personal data where the processing is based on a legitimate interest, unless we can show that the interest overrides your privacy interest or that the use of your personal data is necessary in order to manage or defend legal claims.

Rectification

You have at any time the right to have inaccurate personal data rectified, as well as, taking into account the purposes of processing, the right to have incomplete personal data completed which relates to you.

Erasure

You may have your personal data erased under certain circumstances, such as when your personal data is no longer needed for the purposes for which it was collected. However, we cannot delete your personal data if we e.g. are obligated under law to keep the data.

Restriction of processing

You may ask us to restrict the processing of your personal data to only comprise storage of your personal data under certain circumstances, such as when the processing is unlawful, but you do not want your personal data erased. If the processing of your personal data has been restricted, we may only, besides storing the data, process your personal data with your consent, or in order to establish, exercise or defend legal claims or to defend rights of others.

Withdrawal of consent

You have the right to at any time withdraw your consent to processing of personal data to the extent the processing is based on your consent.

Data portability

You may ask to receive a machine-readable copy of the personal data processed on the basis of your consent or on the basis that the processing is necessary in order to perform an agreement with you, and which personal data have been provided to us by you (data portability) and ask for the information to be transferred to another data controller (where possible).

Complaints to the supervisory authority

You acknowledge that you always have the right to lodge complaints pertaining to the processing of your personal data to Integritetskyddsmyndigheten (IMY).

7 CONTACT INFORMATION

If you have any questions or concerns regarding the processing of your personal data, please contact us on the contact details set forth below.

The data controller for your personal data is:

Camfil AB

Contact us via datarequest@camfil.com