Privacy Policy
This information about the processing of personal data applies to the processing of personal data for which Cubus Verde AB, organization number 559495–3027, (herinafter referred to as “Cubus Verde”, “we”, “our” and “us”) is responsible and seen as the Personal Data Controller.
Your privacy is important to Cubus Verde and we aim to hold the highest level of integrity when managing your data. This policy describes how we process, store, and manage your personal data. It also describes your rights and how you can exercise them. It is important for us that you read and understand our Privacy Policy and feel secure in our handling of your personal data.
What is personal data and what is a processing of personal data?
Personal data refers to any information that can be directly or indirectly linked to a living
individual. This includes names, e-mailadresses, phonenumbers, images etc. Encrypted data and various types of electronic identifiers (e.g., IP addresses) also count as personal data when they can be connected to natural persons.
Processing of personal data encompasses any operation performed on the data, whether automated or manual. This includes actions like collection, registration, organization,
structuring, storage, processing, transfer and deletion.
What personal data do we collect about you and for what purpose?
Those who have a business relationship with us
To maintain business relationships with our customers, suppliers, consultants and partners, we need to process personal data for tasks such as communication, invoicing, and
conducting surveys. In this context, personal data is processed as follows.
| Purpose of the processing | Categories of data subject | Categories of personal data | Legal basis | Recipients of the data | Processing time |
| Communication within the framework of the business relationship | Representatives of Customers, Suppliers, Consultants, Partners | Name; Email address; Phone number; Title and Organizational affiliation | Fulfillment of an agreement | Employees of Cubus Verde; Consultants; System suppliers; Personal Data Processors | As long as the business relationship is current. |
| Administration of contracts and agreements | Representatives and Signatories of Customers, Suppliers, Consultants, Partners | Name; Email address; Phone number; Title and Organizational affiliation; Signature | Fulfillment of an agreement | The Management team and Sales team at Cubus Verde; Consultants; System suppliers; Personal Data Processors | As long as the business relationship is current and thereafter for 10 years to protect Cubus Verde´s interests. |
| Administration of invoicing and payments | Representatives of Customers, Suppliers, Consultants, Partners | Name; Email address; Phone number; Title and Organizational affiliation; Invoice mark; Reference | Fulfillment of an agreement | The Finance team and Authorizing managers at Cubus Verde; Consultants; System suppliers; Personal Data Processors; Auditors; Necessary authorities when required by law | 7 years for accounting records and 10 years for records needed to protect Cubus Verde´s interests. |
| Satisfaction surveys | Representatives of Customers, Suppliers, Consultants, Partners | Name; Email address; Phone number; Title and Organizational affiliation | Cubus Verde has a legitimate interest in improving its services and developing its business relationships | Employees of Cubus Verde; Consultants; System suppliers; Personal Data Processors | 3 months after the survey is compiled. |
| Assessing and managing candidates in connection with the recruitment and selection of consultants | Consultants | Name; Email address; Phone number; Title and Organizational affiliation; Education; Work experience; Skills; Certifications; References and reference statements and other information provided by the candidate or its employer | Necessary for the purposes of taking steps prior to entering into a contract or an agreement | HR, recruiting managers and CEO at Cubus Verde; System suppliers; Personal Data Processors | Until the end of the recruitment process and 6 months thereafter. |
Those who contact us or interact with us
Regardless of whether you contact us via email, phone, Teams, fax, letter, or interact with us on social media, we will likely process your personal data. Cubus Verde cannot control which personal data is sent to us. However, we will always assess whether there is a legal basis for processing the data once it has been received. If there is no legal basis, the data will be deleted.
| Purpose of the processing | Categories of data subject | Categories of personal data | Legal basis | Recipients of the data | Processing time |
| Communication with those who contact or interact with us | Those who contact or interact with us and possibly other data subjects that occurs in such contacts or interactions | Name; Emailadress; Phone number; Title and Organizational affiliation; Adress; Fax number; Pseudonym; IP address | Cubus Verde has legitimate interest in processing the personal data received through our contact surfaces. | Employees of Cubus Verde; Consultants; System suppliers and Personal Data Processors | The personal data is usually deleted after the current case is closed, for example when your question is answered or we can refere you further. We save the personal data for a maximum period of time of 3 months. |
Those who seek employment with us
Cubus Verde actively works with recruiting personnel. This involves maintaining a register of potential candidates, conducting competency tests, and performing different types of background checks.
| Purpose of the processing | Categories of data subject | Categories of personal data | Legal basis | Recipients of the data | Processing time |
| Administration of the recruitment process of employees | Candidates | Name; Emailadress; Phone number; Gender; Age; Social security number; CV; Personal letter; References; Education; Professional background; Qualifications; Experiences; Knowledge tests; Photo; Information from Social media plattforms; Other possible personal data, including sensitive personal data, that the data subject chooses to share in the recruitment process. | Cubus Verde has a legitimate interest in employing qualified personnel for the purpose of the operation of the business. It is also in the data subject’s interest to have their personal data processed for the purpose of possibly obtaining employment with Cubus Verde. In the case that the data subject chooses to share sensitive personal data, the legal basis for the processing of such data takes place on the basis of the data subject’s consent. | HR, recruiting managers and CEO at Cubus Verde; System suppliers; Personal Data Processors | Until the end of the recruitment process and 6 months thereafter |
| Administration of database of candidates for future recruitment purposes | Candidates | Name; Emailadress; Phone number; Gender; Age; Social security number; CV; Personal letter; References; Education, Professional background; Qualifications; Experiences; Knowledge tests; Photo; Information from Social media plattforms; Other possible personal data, including sensitive personal data, that the data subject chooses to share in the recruitment process. | Cubus Verde has an interest in retaining potential candidates for future recruitment. Therefore the data subject is given the opportunity to consent to their personal data being stored and processed for the purpose of future recruitments. In the case that the data subject chooses to share sensitive personal data, the legal basis for the processing of such data takes place on the basis of the data subject’s consent. | HR, recruiting managers and CEO at Cubus Verde; System suppliers; Personal Data Processors | The data subject’s consent is obtained and renewed every 12 months |
Transfer of Personal Data to Countries outside of EU/EEA
The processing of personal data primarily takes place within countries that are part of the EU/EEA. However, in certain cases, personal data may be transferred to countries outside the EU/EEA, for example, to provide system support or to enable specific system functionalities. For such processing activities, we have implemented appropriate safeguards to protect your personal data.
If the recipient organization is not located in a country that the European Commission has recognized as providing an adequate level of protection, we ensure that the transfer complies with the GDPR. This includes the use of Standard Contractual Clauses (SCCs) and the performance of a Transfer Impact Assessment (TIA) to evaluate the laws and regulations of the recipient country and verify that the SCCs offer sufficient protection in practice.
For transfers to the United States, we may rely on organizations that are certified under the EU-U.S. Data Privacy Framework (DPF), which has been recognized by the European Commission as ensuring an adequate level of protection for personal data. This allows us to securely transfer personal data to certified organizations in the U.S. in compliance with GDPR requirements.
On technical and organizational security measures
Cubus Verde is committed to protecting your privacy and ensuring the proper handling of your personal data. In all cases of personal data processing, Cubus Verde ensures that personal data is protected by appropriate technical and organizational security measures that comply with applicable data security regulations. We adhere to current legislation and industry standards to ensure that personal data is processed securely.
Cubus Verde uses various security measures, including encryption and authentication tools, to protect and keep your personal data secure, which also includes ensuring that the data is not altered and remains accessible. We employ the following protective measures, among others:
- Strict limitation of access to your personal data based on need and only for the specified purpose. This means that only authorized personnel have access to the personal data, and Cubus Verde uses recommended tools to regularly monitor and control access.
- IT systems are protected by firewalls to prevent unauthorized parties, such as hackers, from accessing the information.
- IT systems are continuously monitored to detect and prevent unauthorized use of personal data.
If we have provided you with (or if you have chosen) a password that gives you access to certain parts of our website or any other portal we provide, you are responsible for keeping the password confidential and for following any other security procedures we inform you about. We ask that you do not share your password with anyone else.
Cubus Verde, through our system provider, has a separate Security Operations Center (SOC) function that monitors and manages security incidents in real time, further strengthening protection against potential threats.
Our suppliers and partners acting as data processors must follow Cubus Verde’s instructions regarding security for your personal data.
About Cookies
A cookie is a small text-based data file that a web server requests to save in your browser. Since the contents of the cookie are generally sent back with each request to the relevant website, the server can keep track of the visitor’s preferences, behavior, or identity (to the extent it is known). We use the following cookies on our website:
Session cookies (a temporary cookie that expires when you close your browser or device).
Persistent cookies (cookies that remain on your computer until you delete them or they expire).
Third-party cookies (cookies set by a third-party website. We primarily use these for analytics, such as Google Analytics).
The cookies we use are aimed at improving the services we offer. Cookies enhance the functionality of the website and make it easier for you as a user. We also use cookies to collect and analyze behavioral data based on your usage of the website and services, to improve the user experience and enable personalized communication and messages to you as a user. We also use cookies to target relevant marketing to you.
How to Manage Cookies
You can change the settings for the use and scope of cookies in your browser at any time. You can choose to block all cookies, accept only certain cookies, or delete cookies when you close your browser. If you choose to block or delete cookies, some services may not be available, or the website may not function correctly in all respects.
By using our website, you consent to the use of cookies as described in this policy. You can withdraw your consent at any time by adjusting the cookie settings in your browser.
For more detailed information on how third-party cookies are used, please refer to the privacy and cookie policies of the relevant third parties, such as Google Analytics.
In accordance with the General Data Protection Regulation (GDPR), cookies that collect personal data or are used for marketing purposes will only be placed on your device if you have provided your consent. You have the right to withdraw your consent at any time.
The data subject’s rights
According to the Data Protection Regulation (GDPR), you as the data subject have several rights against us as the data controller. As a data subject, you generally have the right to:
- the right to information about if and when personal data is processed,
- the right to access the personal data being processed,
- the right to have inaccurate personal data corrected,
- the right to have personal data erased,
- the right to have the processing of personal data restricted,
- the right to object to the processing of personal data,
- the right to data portability, i.e., the right to obtain and use personal data elsewhere,
- the right to not be subject to automated decision-making, i.e., a decision solely based on automated processing, including profiling, if the decision has legal consequences or similarly significantly affects you.
It is important to note that these rights may have certain exceptions.
If you have any questions, concerns, or comments, you can contact Cubus Verde using the contact details below.
If you are dissatisfied with how we handle your personal data, you, as the data subject, have the right to file a complaint to the Swedish Data Protection Authority (Integritetsskyddsmyndigheten) using the contact details below.
Contact information
Cubus Verde
Email address: info@cubusverde.com
Integritetsskyddsmyndigheten
Phone number: 08 657 61 00
Email: imy@imy.se
You can also visit imy.se for more information.
