Privacy policy

This is CWN

Civil Works Nordic AB
Company registration number: 559417-8567
+46 (0) 920-26 26 00
info@cwn.se

For privacy questions, contact: Editor in Chief, Fredrik Palmquist, fredrik.palmquist@cwn.se, 0920-239100

We care about you feeling secure with how we handle your personal information according to the General Data Protection Regulation (GDPR). The regulation became effective within the EU on May 25, 2018, and has replaced the Swedish Personal Data Act (PuL). Through external services, we collect data about how you browse our website. This is done to improve and analyze how our services are used and to create the best possible experience for you.

Read more about your rights and our policy below.

What personal information do we collect, and why do we collect it:

What personal information about you do we process?

To be able to offer our products and services, we need to process some of your personal information. Depending on your relationship with us at CWN, we process different categories of personal information. See the table of personal data processing below to understand which categories of personal information about you that we process.

Why do we process your personal information?

For us to process your personal information, there must be support in the GDPR. There must be a purpose and a legal basis for the processing. Depending on your relationship with us at CWN, we process your personal information for different purposes and legally.

Sometimes, we can process your personal information to fulfil our obligations under applicable regulations. For example, we save documents under accounting laws. See the table of personal data processing below to understand the purpose and legal basis for processing your personal information.

How long do we keep your personal information?

We do not keep your personal information longer than necessary for processing and up to 24 months after that. We may keep the information longer for specific purposes, such as:

Invoicing and payment purposes – as part of accounting records, we retain data for up to 10 years from the document’s creation or as long as any dispute is ongoing.
Sub-suppliers and external suppliers – as part of accounting records, we retain data for up to 10 years from the creation of the document or as long as any dispute is ongoing.
To fulfil obligations under applicable regulations, we retain personal information for as long as it is required by law.

See the table of personal data processing below to understand how long we retain your personal information.

To whom do we disclose your personal information?

To subcontractors and, in some cases, companies within our own group that process data on our behalf.

Sometimes, we hire subcontractors or companies within our own group to deliver our products and services to you. This means they process your personal information, but they are not allowed to use your personal information for purposes and conditions other than those specified by us.

Transfer to third countries

We may also engage suppliers outside the EU/EEA, a so-called third country. If we transfer your personal information to a third country, we ensure that there is an adequate level of protection in that country or that there are specific guarantees to protect your personal information and your rights.

Other recipients

We also disclose information about you to other parties where we are obligated by law or official decision to do so.

Your rights

You have several rights that allow you to obtain information about and control your personal information.

Typically, you have the right to exercise your rights free of charge. However, if your request is clearly unfounded or excessive, we may charge a reasonable fee or choose not to fulfil your request.

We will respond to your request promptly and within one month. In cases where we need more time or cannot fulfil your request, we will inform you. We may also ask for additional information to verify your identity and confirm that the submission comes from you.

Right to information and access to your personal information

You have the right to request confirmation that we are processing your personal information and, if so, how your personal information is being processed. You also have the right to receive a copy of the personal data we process about you.

Right to rectification

If your personal information is incorrect or incomplete, you have the right to contact us and have the information corrected. If necessary, we will notify those we have provided your personal data that a correction has been made. At your request, we will also inform you who received information about the correction.

Right to erasure

You have the right to contact us to have your personal information erased:

If the information is no longer needed for the purposes for which it was collected;
If processing is based solely on your consent and you withdraw your consent;
If processing is for direct marketing purposes;
If you object to processing based on a balance of interests and there are no legitimate grounds that outweigh your interests;
If the processing does not comply with the law; or
If erasure is required to fulfil a legal obligation.

In cases where there is a legal obligation to retain your personal information, we cannot comply with your erasure request. If necessary, we will notify those we have provided your personal data that the erasure occurred. We will also inform you who has received the erasure information at your request.

Right to object

In some instances, you have the right to object to us processing your personal information:

If processing is for direct marketing purposes, you can contact us, and we will no longer process your personal information for that purpose;
If processing is based on a balance of interests, you can object to us processing your personal information. If no legitimate reasons outweigh your interests, we will cease processing for that purpose.

Right to restriction

You have the right to request that processing be restricted and that data be stored only with us in the following cases:

During the time it takes for us to verify that the data is correct in cases where you dispute the accuracy of the data;
If processing is unlawful and you do not want the data to be restricted and not deleted;
If, despite no longer needing the data, you want us to retain the data so you can use it to establish, assert, or defend legal claims; or
Pending verification of whose legitimate reasons, yours or ours, are more critical if you object to the processing.

Right to data portability

You have the right to request your personal information in a machine-readable format and to use it with, for example, another data controller. This right applies if processing is based on consent or an agreement as the legal basis.

Contact information for CWN and our Data Protection Officer

If you have questions or want to exercise your rights, contact CWN at +46 (0) 920-23 91 00 or email info@cwn.se. Our Data Protection Officer monitors that we comply with applicable laws and process your personal information correctly. If you want to contact our Data Protection Officer, email dataskyddsombud@bdx.se (CWN is a part of the BDX group).

If you believe that your personal information is being processed in violation of applicable law, you can submit a complaint to us or to IMY (Swedish Authority for Privacy Protection).

BDX is the data controller for the personal information covered by this privacy policy.

Changes to the privacy policy

All changes we make to our privacy policy will be published on our website. Visit our website regularly to stay informed about any updates or changes to this privacy policy.

Table of personal data processing

Categories of data subjects	Purpose	Categories of personal information	Legal Basis	Deletion periods
Customers and customer representatives	Delivery of products and services.	Name, address, phone number, email, and personal identification number. Personal identification numbers are not processed for customer representatives.	Agreement and legal obligation.	Up to 24 months after the customer relationship has ceased.
Co-supplier	Completion of agreements. Allow co-suppliers to use agreements that BDX has with suppliers.	Name, address, phone number, email, and personal identification number. Personal identification numbers are only processed for sole proprietors.	Agreement and legal obligation. Balance of interests.	Up to 10 years from the outcome of the last financial year, which the information refers to.
Drivers with co-supplier	Completion of agreements.	Name, address, phone number, email, next of kin, and personal identification number.	Agreement and legal obligation.	Up to 24 months after the driver has retired from the co-supplier.
External suppliers	Completion of agreements.	Name, address, phone number, email, and personal identification number. Personal identification numbers are only processed for sole proprietors.	Agreement and legal obligation.	Up to 10 years from the outcome of the last financial year, which the information refers to.
Shareholders	To have the correct voting register and comply with the law.	Name, address, phone number, email, personal identification number, and bank account number.	Legal obligation.	The data is saved for 10 years according to The Limited Liability Companies Act.
Contact via email	Completion of agreements or to answer you when you contact us.	Name, email, and other personal data you choose to share with us.	Completion of agreements or balance of interests.	Upp till 24 månader efter det att uppgifterna inte längre behövs för de syften de är avsedda för.
Job applications with co-suppliers	Helping drivers and co-suppliers to connect.	Name, email, and other personal data you choose to share with us.	Balance of interests.	Up to 7 months on our co-supplier portal.

Cookies

This website only uses cookies for short-term storage of non-personal data. These cookies disappear when the browser is closed and are only used to assist with the logistics of the webpage itself.

If you have an account and log in to this website, we will create a temporary cookie file to check if your browser accepts cookie files. This cookie file contains no personally identifiable information and disappears when you close your browser.

Furthermore, when you log in, we will create multiple cookie files to save information about your login and your choices for screen layout design. Login cookie files are valid for two days, and layout choice cookie files are valid for one year. If you check “Remember me”, your cookie will persist for two weeks. If you log out of your account, the login cookie files will be removed. If you edit or publish an article, an extra cookie file will be saved in your browser. This cookie file contains no personal data and only indicates the post ID of the article you just edited. It is valid for 24 hours.

If you do not consent to the use of cookies, you can disable cookies in your browser’s security settings. However, this will limit the functionality of all websites and may prevent you from using all internet services.