Privacy policy
At Crowd Collective we are committed to protecting your personal privacy. To ensure that the personal data we collect is processed responsibly and securely, we work actively with privacy issues. You can learn more about how we process your personal data and what rights you have on this page.
If you have any questions about our privacy work or about our processing of your personal data, you are welcome to contact us on privacy@crowdcollective.com .
What information do we collect from you and why?
Crowd Collective may collect certain information about you within the framework of the services that we offer. The information is necessary for us to fulfill our obligations to you under the terms of use or otherwise fulfill the purpose of the information collection. For example, sometimes we may need to retain certain information in order to comply with legal requirements.
We will also collect your personal data when you visit our website by using cookies, with your approval. You can read more about how and when we use cookies. As a website visitor, you are not obligated to give us access to your personal data and can avoid this by not accepting our use of cookies on your device.
How do we access you information?
The personal data that we store about you is data that you provided us with yourself, such as when you register as a user on our website, when you apply for a job via Crowd Collective or other companies in our Group, such as Academic Work, when you contact us regarding other matters like our services and business, or information that you have made public via professional networks that you are a user of, such as LinkedIn.
Who will we share your information with?
In some cases, we might share your personal data with external parties. The external parties are other companies within our Group, vendors to Crowd Collective or authorities that we are under a legal obligation to provide with certain information. When we share your personal data with an external party, it will only be for those purposes for which the data was initially collected. We will always take the necessary precautions to ensure that the external party processes your data in a correct and secure manner, such as by entering into binding agreements with our vendors.
Your personal data may be shared with the following external parties:
In some cases, we might share your personal data with external parties. The external parties are other companies within our Group, vendors to Crowd Collective or authorities that we are under a legal obligation to provide with certain information. When we share your personal data with an external party, it will only be for those purposes for which the data was initially collected. We will always take the necessary precautions to ensure that the external party processes your data in a correct and secure manner, such as by entering into binding agreements with our vendors.
Your personal data may be shared with the following external parties:
Entities in the Akind Group – We may share your information with other entities in Akind Group (the Group that Crowd Collective belongs to). This may occur when another Group company acts like vendors to us, provides services to us that may result in processing your data on our behalf or when we work in group-wide applications.
Vendors – Your personal data may sometimes be shared with our vendors. These may be vendors of IT vendors used for storage and operations management, vendors of marketing tools, font embedding tools on our website, recruitment tools, and personality tests.
Authorities – If required by national or international legislation, we may need to share your personal data with authorities.
Clients – As a consultant company, employee's personal data such as names, CV: s and contact information will be shared with our clients. The client is responsible for how they handle the data that they receive. If you have questions about how our clients handle your personal data, we recommend that you turn directly to them. Crowd Collective is happy to assist you in contacting them.
You are always welcome to contact us for more detailed information about which external parties we share your personal data with
Where is your information handled?
We always do our best to ensure that your personal data is not stored or otherwise handled in countries outside the EU / EEA. However, your personal data may be transferred or processed at our suppliers in Canada, Norway, Switzerland, the UK, or the USA. In such circumstances, either a decision on an adequate level of protection is applied, in accordance with Article 45 of the General Data Protection Regulation, or appropriate protective measures are applied in accordance with Article 46 of the General Data Protection Regulation in the form of the European Commission's decided standard contractual clauses. If your data is transferred or handled in countries outside the EU/EEA, we will ensure that we have taken sufficient security measures (such as Standard Contractual Clauses (SCC), contractual, organizational and/or technical safeguards) which mean that your data is handled in a way that achieves a sufficient level of protection according to applicable regulations. If you would like a copy of the safeguards that have been taken or more information about where your information is available, you are always welcome to contact us.
Legal basis
Crowd Collective must document a lawful basis for each processing of personal data. If there is no legal basis, the processing is not lawful and thus not permitted. Private companies and organizations can rely primarily on these following four bases:
- consent
- performance of contract
- legal obligation
- legitimate interest
When using legitimate interest as a basis, we always conduct a balancing test from which we assessed that our legitimate interest in carrying out the processing outweighs your interest in not processing your personal data.
What are your rights?
Existing data protections laws give you a number of rights when processing your personal data. Below you will find a shorter description of them. Your rights may vary depending on the reason we process your information.
The right to information
You have the right to receive information about our processing of your personal data. Information about the processing of personal data must be provided by us as the data controller both when the data is collected and when you request access to it, which you can read more about under the heading Right to access below.
More information about the right to information can be found on the Swedish Authority for Privacy Protection website or the Finnish Authority for Privacy Protection website.
The right to withdraw consent
When our right to process your personal data is based on your consent, you always have the right to withdraw your consent. The easiest way for you to do this is by contacting us at privacy@crowdcollective.com. Until you withdraw your consent, we have a legal basis and thus the right to process your personal data. After your consent is withdrawn, we will stop processing your personal data.
The right to access
You have the right to know Crowd Collective processes your personal data and to receive a copy of your personal data – a register extract – free of charge. The register extract will state what information we have about you, the purpose of the personal data processing, and how we process your personal data.
More information about the right to access can be found on the Swedish Authority for Privacy Protection website or the Finnish Authority for Privacy Protection website.
The right to rectification
You always have the right to demand that Crowd Collective corrects incorrect or incomplete information about you and that we supplement your information. Additionally, you always have the opportunity to change the information you provided in your candidate profile.
More information about the right to rectification can be found on the Swedish Authority for Privacy Protection website or the Finnish Authority for Privacy Protection website.
The right to object
You have the right to object to Crowd Collectives’ processing of your personal data, such as when it concerns direct marketing (including profiling). In all cases where we process your personal data based on our legitimate interest (including profiling), you have the possibility to object to the processing. If you object and notify us, we will stop processing your personal data.
More information about the right to rectification can be found on the Swedish Authority for Privacy Protection website or the Finnish Authority for Privacy Protection website.
The right to restriction
In some cases, you have the right to request that Crowd Collective restricts the processing of your personal data. This applies if, for example, you question that the personal data we process is correct. You can then request a restriction of processing for the time that we need to verify whether the personal data is correct. In that case, we may only (in addition to the storage itself) process the data upon your consent. It applies with the exception of establishing, asserting, or defending legal claims, to protect someone else’s right, or to protect an important public interest.
More information about the right to rectification can be found on the Swedish Authority for Privacy Protection website or the Finnish Authority for Privacy Protection website.
The right to erasure
As a starting point, you have the right to request that Crowd Collective deletes your personal data. This applies in the following cases (among others):
- If the data is no longer necessary for the purposes it was collected for.
- If you withdraw your consent and we do not need to keep your data for other purposes, such as legal obligations.
- If you object to processing based on legitimate interest and your reason for objection outweighs our interest.
- If you object to our processing of your data for direct marketing purposes and we do not need to process your data for other purposes.
- If your personal data is processed in an illegal manner.
- If your personal data must be deleted due to legal obligations.
In some cases Crowd Collective does not have the possibility to delete your personal data. This occurs when the data is either still necessary to process for the purpose for which it was collected or because there is a legal requirement that Crowd Collective must keep it for a certain period of time. It may also be because Crowd Collective interest in continuing to process the data outweighs your interest in having it deleted, which we then need to be able to demonstrate decisive justified reasons why our processing outweighs your interests.
More information about the right to rectification can be found on the Swedish Authority for Privacy Protection website or the Finnish Authority for Privacy Protection website.
The right to data portability
In cases where we process your personal data with your consent, or to fulfil an agreement you entered with us, you have the right to demand that Crowd Colletive provide you with the personal data you have given us in a structured format. When exercising the right to data portability, you have the right to transfer your personal data directly from Crowd Collective to another personal data controller when this is technically possible. You can make such an extract yourself under My pages on our website.
More information about the right to portability can be found on the Swedish Authority for Privacy Protection website or the Finnish Authority for Privacy Protection website.
If you want to pursue your rights, you are always welcome to contact us on privacy@crowdcollective.com If you are dissatisfied with how Crowd Collective processes your personal data, you are always entitled to lodge a complaint with the supervisory authority, In Sweden Integritetsskyddsmynigheten, and in Finland the Data Protection Ombudsman.
Cookies
For information on how we at Crowd Collective use cookies, see our Cookie Policy.
Changes in our information of personal data processing
We may make changes to the information about our personal data processing. The latest version will always be available on our website. In case of more extensive updates (such as changing the purposes for which we process your information or changing what information we collect about you), we will send information to you via the email address you provided for us.
Contact us
Crowd Collective Group (559268-4020) is the data controller for the processing of your personal data. We follow applicable European, Swedish and Finnish data protections legislations and have a committed privacy team that actively works with data protection issues to ensure that we process your data in a responsible and secure manner. You are always able to contact us at privacy@crowdcollective.com.