Who is responsible for your personal data
Kanozi is the controller of your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection regulations.
Who do we process personal data about?
We process personal data on the following categories of persons
- Visitor, i.e. the private individual who visits our website.
- Newsletter recipient, i.e. the private individual who, when visiting our website, registers to receive our newsletters.
- Customers and partners who buy or ask questions about Kanozi's services.
- Suppliers, i.e. the private person representing our suppliers.
What personal data do we process about you?
- For visitors We may process the following personal data about you as a visitor: - IP number and information about your use of the Kanozi website.
- For newsletter recipients We may process the following personal data about you as a newsletter recipient: Email address, as well as IP number and information about your use of the Kanozi website.
Why and on what legal basis do we process your personal data?
- In order to enter into and manage agreements with you as a customer, partner or supplier, Kanozi collects and processes your personal data. The legal basis for our processing of your personal data is that it is necessary to fulfill our contract with you or to take measures before entering into such a contract. If you do not provide your personal data mentioned above, we will not be able to offer our services or otherwise fulfill our commitments to you. If you are a representative or contact person for an organization that is a customer, partner or supplier of Kanozi, the legal basis for our processing of personal data about you is a balance of interests, i.e. that the processing is necessary for a purpose related to our legitimate interest in maintaining and fulfilling our commitments in contractual relationships. If you do not provide your personal data, it is not certain that we can fulfill our commitments to the organization.
- Kanozi also collects and processes personal data belonging to you as a visitor to our website, newsletter recipient, customer, partner or supplier in order to quality assure our business, to contact you and offer and market our services to you. We may also send you relevant marketing offers in the form of newsletters, promotional offers via social media and e-mail. The legal basis is that the processing is necessary for our legitimate interest in being able to develop our business and meet your needs, market our products and services that we believe you may be interested in. Our interest in processing your personal data for this purpose overrides any interest you may have in protecting your privacy in light of the potential benefits of the marketing to you. However, you have the right to object at any time to the processing of personal data for direct marketing purposes.
- Some personal data may also be processed because Kanozi has a legal obligation to fulfill, such as personal data resulting from Kanozi's accounting obligations or other legal obligations.
- When entering into customer contracts, the parties may need to agree on additional personal data processing in specific projects, such as website work, social media work, etc. Separate information on personal data processing in specific projects will be provided and designed individually for each project.
How long do we keep your personal data?
- Kanozi never stores data longer than necessary for the purposes of processing. We therefore conduct regular screenings of stored personal data and delete the data that is no longer needed.
- Kanozi saves data about you as a customer, partner or supplier as long as there is an active contract. After the termination of the contractual relationship, Kanozi retains the personal data for as long as a legal claim is made or can be enforced in relation to the contract. However, Kanozi may need to store the personal data even after this period of time, among other things to administer any warranties, complaint deadlines, to comply with legal requirements, to handle other legal claims that may be directed against Kanozi that do not arise from any agreement or to market services and send offers that Kanozi considers may be of interest to you.
- Kanozi stores data about you as a visitor to our website and newsletter recipient until you object to the processing of your personal data. If you object to the processing, Kanozi will delete your personal data as soon as possible.
Who has access to your data?
Your personal data may be disclosed to and processed by third parties. These may be group companies, service providers, legal advisors, auditors, business consultants, authorities, etc. Examples of situations where your personal data may be transferred to third parties are when such action is required by law, dispute, authority request or decision, at your own request or when it is required to fulfill a legitimate interest for Kanozi. Kanozi remains the controller of the personal data transferred, while the third party, depending on the circumstances, becomes either an independent controller, a joint controller with Kanozi or Kanozi's data processor.
Cookies for marketing
Marketing cookies are used to place cookies on your device and display relevant content to you that suits your interests. These cookies may be placed on our website by our advertising partners or us to build a profile of your interests and show you relevant content on our and third party websites. In order to display content that suits your interests, we use your interactions together with personal data that you provide to us on our website. To present relevant content on third-party websites, we share this data and a customer identifier, such as an encrypted email address or device ID, with third parties, such as advertising platforms and social networks. To ensure that the content is as relevant as possible for you, we may link this data to the different devices you use.
What are your rights as a registrant?
Right of access
You have the right to contact Kanozi as a data controller and request access to the personal data that we process, as well as request information about, among other things, the purposes of the processing and the recipients of the personal data. Kanozi, as data controller, will provide you with a free copy of the personal data processed.
Right of rectification and restriction
You have the right to have your personal data rectified or, under certain conditions, restricted without undue delay. If you believe that Kanozi is processing personal data about you that is inaccurate or incomplete, you may request that it be rectified or completed.
Right to erasure
You also have the right to have your data erased, inter alia, if it is no longer necessary for the purpose or if its processing is based on consent and this has been withdrawn. However, there may be legal requirements or a contractual relationship that prevents us from erasing your personal data.
Right to object
As a data subject, you have the right to object at any time to the processing of your personal data if the legal basis for the processing is a legitimate interest. As a data subject, you also have the right to object at any time to the processing of your personal data if it is processed for direct marketing purposes.
Right to data portability
As a data subject, you have the right to obtain the personal data that you have provided to Kanozi as controller and have the right to transmit those data to another controller (data portability). However, this applies provided that it is technically possible and that the processing was necessary for the performance of a contract.
Right to lodge a complaint
If you are dissatisfied with how we have processed your personal data, please contact us. You also have the right to file a complaint about our personal data processing to:
104 20 Stockholm
Changes to the policy
Kanozi reserves the right to change and update this policy. In the event of material changes to the policy or if existing information is to be treated differently than stated in the policy, Kanozi will provide appropriate notice.
For questions or other requests regarding personal data, please contact Kanozi's contact person for personal data management:
Kanozi, Järntorget 3
413 04 Göteborg
We are keen to have an open corporate climate and do the right thing in what we do. In the first instance, you should contact your immediate manager or HR if you think something is wrong or should be changed in the company. If your case is of more serious misconduct, which falls under cases that can be whistleblown, we are keen to ensure that there is a safe, secure and anonymous way to report this without fear of reprisals. At Kanozi, direct retaliation or the threat of retaliation is not allowed.
What can I whistleblow?
To be protected by the Whistleblower Act, the information reported must be of public concern and in the public interest. The public interest includes breaches of laws and regulations, but not trivial offenses or violations of mere formalities. Whistleblowers are also protected when it comes to misconduct related to product safety, public procurement, environmental protection, etc. Serious breaches of internal rules and principles such as codes of conduct may also be covered. The protection of a reporting person shall also apply when reporting information on breaches covered by and listed in the EU Whistleblowing Directive. These include breaches against the EU's financial interests or breaches related to the internal market. This includes, for example, competition rules and state aid rules. It is not in the public interest to report on mere personal dissatisfaction with pay and employment conditions.
Who can blow the whistle?
Employees, former employees and trainees of Kanozi, job seekers and our clients, sub-consultants and suppliers.
How do I blow the whistle?
By following the link below, you can report your case. This is an external channel that ensures your anonymity. You will receive a response to your case in the portal where you submit your case. You can also report your case orally by phone or book a meeting with HR.