Privacy Policy

How we process your data

QRIOS is part of the PION Group.

Within PION Group, certain personal data processing is carried out jointly between the companies in the group, while each company also carries out processing that is specific to its own business. The information below refers to the processing that takes place when you are in contact with any of the companies within PION Group.

The data controller for the processing of your personal data is the company within PION Group with which you were in contact when you provided your data. This is also the company you should contact if you have questions about the processing or wish to exercise your rights as a data subject under the General Data Protection Regulation (GDPR). In some cases, we may share your data with other companies within PION Group, for example in order to match you with the most relevant role. The group company to which you provided your personal data is responsible for ensuring that any such sharing is carried out in accordance with applicable data protection legislation and that appropriate technical and organizational security measures are taken to protect the data when shared.

The following companies within PION Group are data controllers for their respective processing of your personal data:

• Poolia AB
• QRIOS AB
• Uniflex AB

Contact details for each data controller are provided at the end of this privacy policy.

Purpose of processing and legal basis

We process your personal data for the purpose of recruitment, administration of your application, and informing you of the progress of the recruitment process, on the legal basis of consent.

When you apply for a position at QRIOS, or when you register a CV with us, we ask you to provide certain information about yourself in order for us to manage you in our candidate database. In order for QRIOS to offer the job application function based on your consent, we process the following information including, but not limited to, your name, email address, and personal data shared with us through CV documents and other application documents, including, but not limited to, contact information, personal identity number, information about education, date of birth, and gender. We may also request additional information from you in order to process your job application, such as references, information about skills, or professional licenses where relevant.

As a data subject, you may always contact support to keep your data up to date.

Recipients of data

In certain cases, we may share your personal data with external parties. These may either be our customers, i.e. our clients, with whom we share your data in recruitment processes, or third-party suppliers that we engage to perform services on our behalf, such as IT suppliers. If we share your data with an external party, this is always only for the purposes for which we originally collected the information. When we engage external parties, QRIOS is responsible for ensuring that the engaged party also handles your data in a correct and secure manner. This is ensured through agreements with our suppliers.

We may also need to share your data with public authorities that, by law, may require us to disclose certain information to them.

Your personal data may also be shared with other companies within PION Group, the group of which QRIOS is a part, for internal administrative purposes, for example where by sharing the data we can provide you as a candidate with a better match against vacant positions.

Transfer to third countries

QRIOS strives, as far as possible, to avoid transferring data to a country or company located outside the EU/EEA. If such a transfer should nevertheless become necessary, QRIOS will implement appropriate safeguards to ensure, as far as possible, that our candidates’ personal data is protected.

Storage

In order to fulfil our commitments to you, QRIOS will store your personal data for three (3) years after you provide your consent, or until you choose to withdraw your consent.

Well before these three years have passed, we will remind you and give you the opportunity to provide new consent to remain in our candidate database, so that we can continue to offer you interesting assignments with us.

Please note that QRIOS may need to retain information about you for longer than three years to the extent that we are required to do so by law, regulation, or authority decision

Your rights

As a data subject registered with QRIOS, you have a number of rights regarding the personal data we collect and process. Among other things, you have the right to:

• Request an extract of the personal data processed by QRIOS and information about how it is processed
• Request correction of any inaccurate data
• Request erasure. However, this can only be fulfilled provided that QRIOS is not required to retain your personal data in accordance with applicable law, regulation, or authority decision
• Request that processing be restricted under certain circumstances, for example while an issue regarding whether data is accurate or not is being investigated, and
• Exercise your right to data portability

You have the right to withdraw your consent at any time. You may withdraw your consent at any time by contacting us at dataskydd@qrios.se.

Right to lodge a complaint with the Swedish Authority for Privacy Protection

If you are in any way dissatisfied with how QRIOS handles your data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten). This is the authority in Sweden that supervises personal data processing and data protection. You can contact them by email at imy@imy.se, or by telephone at +46 8 657 61 00.

Other

QRIOS reserves the right to make changes to this policy. The current version is always available at www.qrios.se.

Your rights under the GDPR

As a data subject, you have the right, in accordance with applicable data protection legislation, at any time to:

• Request access to the personal data being processed about you
• Have inaccurate personal data corrected
• Request erasure of your personal data or restriction of our processing
• Exercise your right to data portability
• Object to the processing of your personal data

If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint at any time with the Swedish Authority for Privacy Protection (IMY) if you believe that your personal data is not being processed in accordance with applicable data protection legislation.

If you wish to exercise any of your rights, please contact the data controller using the contact details below. The company within PION Group with which you were in contact when you provided your data is the data controller for the processing of your personal data.

Contact details

QRIOS AB
Company registration no.: 556599-5999
Email: dataskydd@qrios.se
Head office visiting address: Vasagatan 7, 111 20 Stockholm
Postal address: c/o Uniflex AB, Arenavägen 41, 121 77 Johanneshov