Privacy Policy

1. Purpose of the Policy

This privacy policy explains how Teqnion AB, registration number 556713-4183, collects, uses, and protects personal data. The policy applies to employees, job applicants, contact persons at customers/suppliers, business partners, and any other individuals whose personal data we process as part of our operations.

The purpose of this policy is to inform you about what personal data Teqnion AB processes about you and why. In addition to this privacy policy, Teqnion AB may in some cases provide supplementary information regarding specific personal data processing. Such information shall apply in addition to what is stated in this privacy policy.

2. Data Controller

Teqnion AB is the data controller for personal data processed within the scope of the company’s operations, unless otherwise explicitly stated.

The group includes several subsidiaries. As a general rule, each subsidiary is independently responsible for its own data processing. In some cases, the parent company may act as a joint data controller with its subsidiaries, for example, in relation to group-wide IT systems or HR administration.

The allocation of responsibilities between the parent company and subsidiaries is governed by applicable data processing agreements or joint controller agreements.

If you have any questions or comments about this privacy policy or how we process personal data, please feel free to contact us:
• Address: Dalvägen 14, 169 56 Solna
• Email: info@teqnion.se
• Phone: +46 8 655 12 00

3. What Personal Data Do We Process?

The personal data we process depends on your relationship with us, and may include:

• Name, contact details (address, phone number, email)
• Personal identity number (only when clearly justified by the purpose of the processing, the importance of secure identification, or another significant reason)
• Employment information (e.g. job title, start date, salary, bank details, health data)
• Information required by contracts or law
• Technical data (e.g. IP address, Office 365 login data, logs in Visma and other systems)
• Delivery and invoicing details (address, registration number, payment information)

Most personal data is obtained directly from you or public authorities (e.g., the Swedish Tax Agency). Some data may be obtained in connection with Teqnion AB’s acquisitions or investments. In such cases, the information is provided by the counterparty or the acquired/invested business or company.

4. Purpose and Legal Basis for Processing

We process personal data for the following purposes and legal bases:

• Employment administration – Contract performance
• Contract administration – Contract performance
• Communication with customer/supplier contacts – Legitimate interest (maintaining professional relations)
• Compliance with legal obligations (e.g., accounting, labour law) – Legal obligation
• B2B marketing – Legitimate interest (marketing our services; opt-out is available)
• Recruitment – Consent (if given; can be withdrawn at any time, see section 7) or Legitimate interest (securing staffing needs to run our business)
• Administration of business acquisitions – Legitimate interest (operating and planning the business)
• Legal defence or action – Legitimate interest (establishing or defending legal claims)

5. How Long Do We Store Personal Data?

We retain personal data only as long as necessary for the purposes for which it was collected, or as required by law. Some data may be retained for the limitation period in order to defend against legal claims. We aim to minimise storage time and follow ongoing procedures to ensure we do not retain personal data longer than necessary.

6. Sharing and Transfer of Data

Personal data may be shared with Teqnion AB’s service providers acting as data processors:

• Subsidiaries within the group
• Providers such as Visma (payroll system) and Microsoft Office 365 (email, documents, storage)

Data may also be shared with entities acting as independent data controllers:

• Public authorities (where we are legally obliged to do so)
• For employees: with Teqnion AB's customers

In the event of a merger or acquisition involving Teqnion AB, data may be shared with the involved parties.

Teqnion AB primarily processes data within the EU/EEA. If data is transferred outside the EU/EEA, Teqnion AB ensures appropriate safeguards are in place, such as standard contractual clauses in accordance with applicable laws.

7. Your Rights

Under applicable law, you have the following rights regarding your personal data:

• Right to information – to know how your data is processed
• Right of access – to request a copy of your data (data subject access request)
• Right to rectification – to request corrections to inaccurate or incomplete data
• Right to erasure – to request deletion of your data in specific cases (e.g., consent withdrawal, no longer necessary, unlawful processing)
• Right to restrict processing – to limit use under certain conditions (e.g., contested accuracy, legal claims)
• Right to object – to object to processing based on legitimate interests unless we demonstrate overriding legitimate grounds
• Right to data portability – to request transfer of your data to another provider (applies to data you provided, based on contract or consent, and processed automatically)
• Right to lodge a complaint – with the Swedish Authority for Privacy Protection (IMY)

You can exercise any of these rights at any time by contacting us (see section 2).

8. Security

We protect personal data using technical and organisational measures, such as access controls and staff training. When third-party processors handle data on our behalf, we ensure that data processing agreements are in place before any processing begins.

9. Policy Updates

We may update this policy from time to time. The most recent version is always available on our website or internal portal.

Last updated: 2025-05-27