Exparang

For Company Representatives

We at Exparang AB (559139-0470) (“Exparang”, “we” or “us”) are committed to protect the privacy of individuals who represent a company that is (i) a potential, current and former customer, (ii) a supplier and (iii) a business partner (together referred to as “Company Representatives”, “you”).

This privacy notice (the “Notice”) describes how your personal data is collected, used and shared, as well as your rights and how to enforce them. Terms not otherwise defined in this Notice shall have the same meaning ascribed to them in the Terms of Use.

To the extent you are using the Platform as a member, please refer to the Privacy Notice for Members.

We are the data controller for the processing of your personal data as described herein. Please do not hesitate to reach out to us if you have any questions or comments on your privacy and our processing of your personal data.

You can reach us by using the following contact details:

Email: support@exparang.com
Postal address: Exparang AB, Slottsbacken 8, 111 30 Stockholm, Sweden

Personal Data That We Process

We collect information about you when you use the Platform or are otherwise in contact with us. We collect your personal data when you enter it on our website, send it to us, or provide it to us in any other way. You can learn more about how we process your personal data, including what types of personal data we process, below.

Information collected from you

Contact information like name, email address and phone number.
Company information like company name, job title, workplace, personal identification number (only if you are a sole trader) and sometimes information about your right to represent your company.
Information imported by you from third party sources, e.g., LinkedIn.
Communications data, i.e., conversations in email, or on the platform when you are in contact with us or a member of the Platform (only applicable for customers).
Information otherwise provided by you, e.g., in free-text fields on the Platform (only applicable for customers).

Information collected from others

From your LinkedIn or your workplace. We may collect information about you (email-address, name, title and employer) from LinkedIn, the webpage for the company you work for, from the company you work for or other external public sources in order to invite you to the Platform.

Information automatically collected about you when you use the Platform

Matching opportunities you view and respond to (only applicable for customers).
Technical data. We will collect technical data from your device in connection with your use of the Platform, such as IP address, browser type and version, screen resolution, preferred language, operating system and computer platform. Technical data may also include information about how you use the Platform, and if you encounter any technical errors. Even though we do not normally use technical data to identify individuals, sometimes individuals can be recognized from it. When you visit our website, we will collect technical data regarding your device from cookies and similar technologies. For more information on cookies view our cookie policy on our website.
User activity logs. We collect information about your activity on the Platform in order to analyze your use of the Platform for improving the Platform, but also to enable user support (only applicable for customers).

How and Why We Use Your Personal Data

Purpose	Categories of personal data	Legal basis	Storage period
To ensure the functionality of our website.	Technical data.	Our legitimate interest in guaranteeing the functionality of our website (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	For 1 year since the latest activity.
To identify you as a Company Representative and the company you are working for.	Contact information and company information.	Our legitimate interest to identify Company Representatives (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	For as long as we have an agreement with you/the company you work for and for 5 years.
To register your account and/or administrate our contractual relationship.	Contact information, and information otherwise provided by you.	Our legitimate interest in fulfilling our agreed Terms of Use and other applicable agreements (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	For as long as we have an agreement with you/the company you work for and for 5 years.
To communicate with you (e.g., send you reminders, confirmations, application messages and other relevant information about the Platform or regarding our agreement).	Contact information and communications data.	Our legitimate to communicate effectively with you (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	For as long as we have an agreement with you/the company you work for and for 5 years.
For marketing of our Platform and other services (send newsletters or other information about the Platform and/or us).	Contact information.	Our legitimate interest of being able to market the Platform and ourselves to Company Representatives (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	For as long as we have an agreement with you/the company you work for and for 5 years.
To provide user support (respond to and resolve complaints and problems with the Platform (e.g., bugs) or other services).	Contact information, technical data and user activity logs.	Our legitimate interest to provide you with excellent functionality and support (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	For as long as we have an agreement with you/the company you work for and for 10 years.
To fulfil and uphold our legal obligations under applicable laws (e.g., for bookkeeping and reporting to the authorities).	Contact information, technical data and user activity logs.	Our legal obligation according to Chapter 7, Section 2, the Accounting Act (1999:1078). (GDPR art 6.1(c)).	For as long as we have an agreement with you/the company you work for and for 7 years.
If we need to defend ourselves in legal proceedings, in case of supervision or when responding to data subject requests or claims.	All categories of personal data.	Our legitimate interest to protect ourselves, you or others and to defend against or enforce legal claims or misconduct on the Platform (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	As long as we have to keep the data to be able to establish, exercise or defend the legal claim in question, we are under supervision, or have responded to the request.
Anonymization and aggregation of your personal data to enhance our services and products.	All categories of personal data.	Our legitimate interest in enhancing our services and products (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	Not applicable. Once anonymized/aggregated, it does not longer amount to personal data. However, please note that we may store your personal data for other purposes in accordance with this Notice.
Only applicable for our customers:
To invite you to the Platform.	Contact information and company information.	Our legitimate interest in finding relevant employers for the profiles our members have published in the Platform (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	We temporarily store this information for the sole purpose of sending a one-time email.
To provide the Platform to you and to manage your account.	Contact information, company information and technical data.	Our legitimate interest in fulfilling our agreed Terms of Use (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	For as long as you are active on the Platform and for 5 years since your last activity.
To share your contact information with a matching member.	Contact information	Our legitimate interest in fulfilling our agreed Terms of Use (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	Until the position has been filled.
To conduct user surveys (gain a deeper understanding of our Company Representatives’ problems and needs).	Contact information.	Our legitimate interests in developing and improving the Platform (GDPR, art 6.1(f)). Participation is always voluntary. Contact us if you want to learn more about how we have balanced your interests against ours.	For as long as you are active on the Platform and for 5 years since your last activity.
To develop and improve the Platform including troubleshooting, data analysis, research, statistical purposes and testing (such as beta testing and evaluation of new features, in line with the fundamental nature of the Platform), to understand how the Platform is used in order to make it more intuitive.	Contact information, technical data and user activity logs, information otherwise provided by you.	Our legitimate interests in developing and improving the Platform and its features (GDPR, art 6.1(f)). Contact us if you want to learn more about how we have balanced your interests against ours.	For as long as you are active on the Platform and for 5 years since your last activity.

With Whom We Share Personal Data

The information we gather will be shared with the following categories of third parties:

Our service providers. We share your personal data with our suppliers and partners who help us provide the Platform or supply other services to us which require the processing of personal data, this includes:

Hosting providers,
Electronic communication service providers (e.g., SMS and e-mail providers) and,
Advertising and marketing partners.

Members of the Platform. The purpose of our platform is to connect job seeking members with companies. To be able to do so we will share the information you choose to provide in your profile with members that you are interested in.
Authorities and other public actors. Sometimes legal obligations may require us to share information about you, e.g., to respond to lawful requests from law enforcement agencies, regulatory agencies, and other public and government authorities. We may also disclose information if needed to detect and prevent fraud or in connection with a legal process, for example to enforce our Terms of Use or to protect our rights, or the rights of our affiliates, you or others.
Merger, acquisition or other business transfer. We may share or transfer your personal data in connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Where We Process Your Personal Data

We always strive to process and store your personal data within the EU/EEA. However, your personal data may be processed in the United States when we analyze traffic and acquisition data, when managing our database and when providing our matching function on the Platform.

When your personal data is transferred outside the EU/EEA, we will ensure that it continues to enjoy the same level of protection as awarded within the EU/EEA. Hence, personal data will only be transferred outside of the EU/EEA if there is a valid transfer mechanism in place. In most situations, this includes the EU Standard Contractual Clauses, or alternatively the recipient country enjoys an adequacy decision by the EU Commission.

Your Rights

Right to access your data. You have the right to know if we process personal data about you. If we do, you also have the right to receive information about the personal data we process and why we do it. In addition, you may receive a copy of all personal data we have about you together with information on how the data has been collected, processed, shared, etc.

If you are interested in specific information, please indicate it in your request. For example, what contact and identification data we have about you or if you want information from a certain time period.)
Right to have erroneous data corrected. If the personal data we hold about you is incorrect, you have the right to have it corrected. You also have the right to supplement incomplete personal data with additional information that may be needed for the personal data to be correct.

Once we have corrected your data, or once it has been supplemented, we will inform those we have shared your personal data with about the update, unless this is impossible or too cumbersome. If you ask us, we will also tell you who we have shared your personal data with.

If you request to have data corrected, you also have the right to request that we restrict our processing during the time we investigate the matter.

Please note that you can always correct, supplement and delete your personal data by editing your profile on the Platform.
Right to have data deleted. In some cases, you have the right to have your personal data deleted. You have the right to have your data deleted if:
1. The personal data is no longer needed for the purposes for which it was collected,
2. You withdraw your consent (if applicable),
3. The personal data is used for direct marketing and you unsubscribe from it,
4. You oppose use that is based on our legitimate interest, and we cannot show compelling grounds that outweigh your interests,
5. The personal data has been used illegally, or
6. Deletion is required to fulfill a legal obligation.
Right to restriction. Restriction means that the personal data is marked so that it may only be used for certain limited purposes. The right to restriction applies:
1. When you believe the personal data is incorrect and you have requested correction. If so, you can also request that we limit our use while we investigate if the personal data is correct or not.
2. If the processing is illegal but you do not want the personal data to be deleted.
3. When we no longer need the personal data for the purposes for which we collected it, but you need it to be able to establish, assert or defend legal claims.
4. If you object to the processing. If so, you can request that we limit our processing while we investigate if our interest in processing your personal data outweighs your interests.
Even if you have asked us to restrict our processing of your personal data, we have the right to process it for storage, if we have obtained your consent to use it, to assert or defend legal claims or to protect someone else’s rights. We may also use the data for reasons relating to an important public interest.

We will let you know when the restriction expires. If we restrict the processing of your personal data, we will also inform those we have shared your personal data with, unless this is impossible or too cumbersome. If you ask us, we will also tell you who we have shared your personal data with.
Right to data portability. You have the right to receive personal data, that you have provided us with, in a structured, commonly used and machine-readable format, and transfer this personal data to another controller, provided that the processing is based on consent or a contract to which you are a party.
Right to object. You have right to object to processing that is based on our legitimate interest. If you object to the processing, we will, based on your situation, evaluate if our interests in using the data outweigh your interests in the data not being used for that purpose. This means we will no longer process the personal data for the purpose that you object to, unless we can demonstrate compelling legitimate grounds that outweigh your rights and freedoms. However, we may still use the personal data to establish, exercise or defend legal claims. If you object to the processing, you also have the right to request that we restrict our processing during the time we investigate the matter.

You may always object to your personal data being processed for direct marketing purposes. Feel free to set or turn off notifications in your account settings, or you can follow the unsubscribe instructions contained in the emails received from us (unsubscribe).
Right to withdraw your consent. You have the right to withdraw your consent for a specific processing at any time. You can withdraw your consent on the Platform or by contacting us by the contact details in the beginning of this Notice. However, please note that it will not affect any processing that has already taken place.
Right to lodge a complaint. Please let us know if you do not agree with the way we are processing your personal data. You may also lodge a complaint with the supervisory authority in the Member State where you live, work or where you believe and infringement of the GDPR has taken place. In Sweden the supervisory authority is the Swedish Authority for Privacy Protection (Sw. “Integritetsskyddsmyndigheten”) Swedish Authority for Privacy Protection.

Changes to this Notice

We reserve the right to change this Notice from time to time to reflect changes in the Platform or our collection and use of your personal data. You will be informed of any significant changes separately, but we also recommend that you review this Notice from time to time.