Tietosuojakäytäntö

#Privacy notice

This privacy notice explains how we process personal data about visitors to our website and others who contact us, about persons who register in the Truster app in order to work through us and about our employees (in this notice, the "Employee", a person who has signed an employment agreement with us), and what rights these persons have.

#Controller

Truster Works Oy, acting through its Swedish branch Truster filial i Sverige (the "Company", "we")

Corporate identity number 516414-1011

c/o Metric Accounting, Kungsgatan 59, 111 22 Stockholm, Sweden

Email: billing@truster.com

#Where we obtain the data

We collect personal data from you, for example when you visit our website, fill in a form, contact us or register in the Truster app.

We collect personal data from the Employee, for example when the Employee registers in and uses the Truster app. We also receive data from the customer for whom the Employee works (for example name, personal identity number, contact details and information on assignments and payments), from the identity check at registration (Swedish BankID or the Employee's identity document) and from authorities such as the Swedish Tax Agency (Skatteverket) (for example decisions on tax deductions).

#Information about the processing

#Website visitors and others who contact us

If you have not signed an employment agreement with us, we only process the personal data that you provide yourself or that arises when you use the website.

#Data you provide yourself

• Type of personal data: Data you provide yourself, for example name, email address, company and the content of your message or question, when you fill in a form, request an invitation or contact us.
• Purpose: To answer your enquiry and contact you.
• Legal basis: The processing is necessary for the Company's legitimate interest in answering enquiries (Article 6(1)(f) of the General Data Protection Regulation (GDPR)).

#Use of the website

• Type of personal data: Data on how the website is used, for example pages visited, device, IP address and cookie identifiers, through the analytics tool Microsoft Clarity.
• Purpose: To understand how the website is used and to improve it.
• Legal basis: Your consent to analytics cookies (Article 6(1)(a) GDPR). You can change or withdraw your choice at any time via Cookie settings.

#Registration without an employment agreement

• Type of personal data: Data you provide when you register in the Truster app but do not sign the employment agreement.
• Purpose: To handle your registration.
• Legal basis: The processing is necessary to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

#Employees

If you sign an employment agreement with us, we also process the following personal data.

#Identity and contact details

• Type of personal data: Identity and contact details, such as name, personal identity number, address, telephone number, email address and bank details; data from the identity check, such as identity document and photograph; driving licence and other qualifications required for the assignments; data on assignments, working hours, salary and expenses; correspondence.
• Purpose: To verify the Employee's identity and enter into the employment agreement, and to administer the employment relationship and plan, organise, manage and follow up the work. For example, to offer and confirm assignments, pay salary and reimburse expenses, take out insurance, monitor the period of employment, handle any complaints and disputes with the customer, and fulfil the Company's obligations as an employer.
• Legal basis: The processing is necessary to take steps prior to entering into the employment agreement and to perform it. The processing is necessary to comply with the Company's legal obligations under employment, tax and accounting legislation.

#Health data

• Type of personal data: Health data, such as information on illness, sickness absence, pregnancy, medical appointments, etc.
• Purpose: To manage sickness absence, sick pay, work environment matters, rehabilitation, etc.
• Legal basis: The processing is necessary for the Company to fulfil its obligations under employment law (Article 9(2)(b) of the General Data Protection Regulation (GDPR) and Chapter 3, Section 2 of the Swedish Data Protection Act (2018:218)).

#Log data and use of the Truster app

• Type of personal data: Identity and contact details, log data and data on the use of the Truster app.
• Purpose: To keep the app and our services secure, prevent misuse, and establish, exercise or defend legal claims.
• Legal basis: The processing is necessary for the Company's legitimate interest in keeping its services secure and protecting its rights.

#Recipients or categories of recipients who may access the personal data

In some cases, we may share personal data with other legal entities.

• Companies within the same group: As certain functions are shared within our group, we may share personal data with other companies in the group.
• Other legal entities that are independent controllers: We share personal data with other independent controllers, i.e. companies or authorities that independently decide how the data disclosed to them is to be processed. The independent controllers with whom we may share personal data are:
• Authorities, such as the Swedish Tax Agency (Skatteverket), the Swedish Enforcement Authority (Kronofogdemyndigheten), the Swedish Social Insurance Agency (Försäkringskassan), the Swedish Police Authority (Polismyndigheten) and the Swedish Work Environment Authority (Arbetsmiljöverket), where we are required to do so by law, in order to fulfil our responsibilities as an employer, or in the event of suspected crime.
• Companies or other legal entities where the Employee has performed assignments, in order to perform our employment agreement with the Employee and our agreement with the customer.
• Insurance companies, insurance intermediaries and banks, in order to provide insurance and pay salaries.
• Processors: In order to offer our services and fulfil our obligations under the employment agreement, we share certain personal data with companies that help us with, among other things, IT solutions and operation of the app, identity checks, and payroll and accounting services. These companies are our processors, and we enter into agreements with them to ensure that they only process personal data in accordance with our instructions and for the purpose for which the data was collected.
• Suppliers in third countries: We always strive to keep the personal data we process within the EU/EEA. However, some of our suppliers may process personal data in countries outside the EU/EEA, so-called third countries. If personal data is transferred to a third country, we ensure that the transfer takes place in accordance with applicable data protection legislation. This may include transfers to countries covered by an adequacy decision of the European Commission, transfers to organisations certified under the EU-U.S. Data Privacy Framework where applicable, or the use of the European Commission's standard contractual clauses together with any supplementary safeguards required in the circumstances. The Employee may obtain a copy of the safeguards applied by contacting the Company.

#Retention period

The Company retains personal data about Employees for as long as the employment relationship remains in force, and thereafter as follows:

• Payroll and accounting information: retained in accordance with the requirements of accounting legislation, normally for seven years after the end of the financial year.
• Data on periods of employment and assignments: retained for five years after the Employee's most recent assignment, in order to calculate the period of employment under the Swedish Employment Protection Act (1982:80) and to handle any claims.
• Data on persons who register but do not sign the employment agreement: deleted six months after registration.

Other personal data is not retained for longer than necessary for the purpose for which it was collected.

The Company may retain personal data for a longer period if necessary to establish, exercise or defend a legal claim.

#Obligation to provide personal data

The provision of personal data is a contractual requirement under the employment agreement and in part a statutory requirement. The Employee is obliged to provide the data within the framework of the employment relationship. If the Employee does not provide this data, the Company may be unable to enter into or perform the employment agreement or fulfil its legal obligations. The personal data concerned are name, personal identity number, address, telephone number, email address, bank details, driving licence and other required qualifications, working hours, salary details, allowances/expenses and correspondence.

For visitors, providing personal data is voluntary. If you do not provide it, however, we cannot answer your enquiry.

#Your rights

In accordance with applicable legislation, the Employee has the right to request access to, rectification or erasure of, or restriction of the processing of, personal data concerning the Employee. The Employee also has the right to object to processing and the right to data portability in accordance with applicable legislation.

If the Company processes personal data on the basis of the Employee's consent, the Employee has the right to withdraw that consent at any time by written notice to the Company.

The Employee has the right to lodge a complaint about the Company's processing of the Employee's personal data with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden, imy@imy.se.

Corresponding rights apply to visitors and other persons whose personal data we process. Consent to analytics cookies can be withdrawn via Cookie settings.