Privacy Policy

Human&Heart's handling of your personal information

That your integrity is handled with most respect and care is of fundamental importance to us. It is therefore an important matter for us to protect your personal information in the best possible way. In this privacy policy, we would like to inform you about how we treat your personal data and what rights you have. Below we describe how and why we process your personal information and how you can influence our processing of your personal information.

Who is responsible for processing your personal information?

Within Human&Heart's mission for your employer, Human&Heart is responsible for personal data processing. In this context, treatment refers to Human&Heart's handling of personal data.

Human&Heart is a company that works to support development and change in individuals and organizations by focusing on the individual's and organization's entire potential. We have expertise and experience in leadership, recruitment, general and strategic HR, second-opinions, external HR, communication and also we have extensive experience in investigating cases of offensive discrimination and bullying at workplaces.

If you have any questions regarding our processing of your personal information or if you wish to exercise any of your rights as described below under the heading "Your rights regarding your personal information", please contact our Data Protection Officer. Contact information can be found under the heading Data Protection.

What personal data does Human&Heart handle and why? What legal rights do we have to use your personal information?

As your employer has hired Human&Heart, we will have access to personal information about you, such as your name, position, phone number, and e-mail address. In addition, Human&Heart through its investigative work may also receive other personal information about you, such as evaluative assessments and information about your health. Human&Heart will only handle and save such personal information about you who have any significance for the inquest.

Human&Heart uses personal data to identify the various persons who are interested in the inquest, as well as to investigate what has happened in certain situations and answer questions within the scope of the assignment.

Your employer has a legal obligation to fulfill his / her occupational health and safety responsibilities according to applicable occupational health and safety legislation, such as AFS 1993: 7, AFS 2023:1, AFS 2023:2 and the Anti-Discrimination Act, and therefore has the legal right to process your personal data for this purpose. As a result of this responsibility, your employer has entered into an agreement with Human&Heart to carry out the current inquest. Human & Heart is thus entitled to use the personal data to fulfill the agreement.

In addition, Human&Heart processes the data by filing completed inquest in order to avoid any legal claims from the client and persons who participated in the reports / inquests.

From what sources do we get personal information about you?

The personal data we process about you is information that you have chosen to submit to us. In addition, we have received and / or may receive personal information about you from your employer and your colleagues, and in some cases also from external persons related to events investigated within the scope of the assignment. The data can come to us through interviews, phone calls, documentation, letters and e-mail.

Who can we share your personal information with?

We will never disclose your personal information to any external person or organisation outside the inquest. All material within the inquest is strictly confidential. Once the inquest is completed, it is handed over to the client (your employer). It is then up to the employer to determine how the data in the inquest is to be handled, and whether any information should be forwarded to any external party (such as the police).

However, in order to perform our services, we hire service providers located within and / or outside the EU / EEA, such as Microsoft for our email management. In cases where we use such so-called third parties, we have entered into a so-called personal data grant agreement with the hired service companies who thereby undertake to process your personal data in accordance with applicable data protection legislation.

How long does Human&Heart save personal information?

Completed inquests, including the personal data contained therein, will be saved if necessary for a period of up to 10 years from the date of completion of the inquest in order to handle any claims directed against Human&Heart due to the work we performed. However, we are aware that the material may contain sensitive personal data and, therefore, we are very careful to handle personal data and other types of information that we may receive while considering the highest level of security and confidentiality. For this reason, the material is stored password-protected in locked, secure and stand-alone storage media in operating environments that only authorized Human&Heart personnel have access to.

Your rights regarding your personal information

If you want information about what personal information Human&Heart stores about you and how they are treated, you can get a so-called registry extract that shows this. You also have the right to have your personal information corrected or supplemented if you find that Human&Heart has inaccurate or incorrect personal information about you.

You may also, under certain conditions, request that your personal information be discontinued by Human&Heart or deleted. In some cases, we may refuse your request, for example, if there are legal obligations that require us to continue processing your personal information. Should we be prevented from meeting a request for deletion, however, we will only use the personal data for the purpose preventing the requested deletion.

If you believe that Human&Heart handles your personal information incorrectly, please inform us immediately. In addition, you have the opportunity to file a complaint with the supervisory authority, which in Sweden is the Data Inspection. The Data Inspectorate is responsible for monitoring the application of data protection legislation.

Data Protection

Human&Heart has a Data Protection Officer responsible for data protection issues. If you have any questions about this privacy policy, processing your personal information or how to exercise your rights, please contact our Data Protection Officer at the following contact information:

Human&Heart HR AB, Att: Data Protection Officer, Pelle Bergs backe 3c, 791 50 Falun, info@humanheart.se

Other

Human&Heart reserves the right to revise this policy. If we make any changes to the policy, we will provide you with the revised version and in the case of updates that are critical to our processing of personal data or of particular importance to you, you will receive specific information about the changes before they begin.