Personal Data and Data Protection

We primarily process your personal data to fulfill our obligations to you, based on the agreement you entered into when you became a member with us. Our starting point is not to process more personal data than what is necessary for each purpose, and we always strive to use the least privacy-sensitive data and continuously work towards deleting unnecessary personal data.

We also need your personal data to provide you with good service, for example, in terms of marketing, follow-up, and information. We may also need your personal data to comply with laws and collective agreements or if there is a significant public interest. Additionally, we can use the information you provide us for statistics needed to protect your interests in the short or long term.

When we first collect personal data about you, you will receive more information about this. In addition, there is information on our website on how you can object to our processing, question our balancing of interests, correct incorrect data, transfer data, or if you wish to remain anonymous in any regard.

When you become a member, you acknowledge that we process your personal data in accordance with what is described here.

Thus, there is an agreement for the processing of personal data that you have entered into by accepting this policy when you become a member. If your membership was granted before the date when the General Data Protection Regulation came into effect (May 25, 2018), it is stated in the regulation (recital 171) that new consent is not necessary. However, despite this, we want to remind you of your rights.

If there is no room in the membership agreement to manage personal data, for example, concerning member offers, we will obtain your consent before we begin processing your personal data. In the case of the academic insurance, the trial period is a part of the agreement, and after that, your consent should be obtained.

You have the right to withdraw consent at any time. We will then no longer process your personal data or collect new data, provided it is not necessary to fulfill our obligations under a contract or the law. Please be aware that revoking consent may potentially mean that we cannot fulfill our obligations to you.

Naturvetarna may also have legal requirements or requirements under collective agreements to manage certain personal data, and these do not require your consent.

If it is clear that our interest outweighs, for example, in statistical processing, consent is not required. We are committed to keeping statistical data to a minimum and anonymizing the data when possible.

Our mission is trade union activity, and the data can be considered sensitive in nature. Below are examples of personal data that we process in our Customer Relationship Management, called CRM:

• Name

•  

  Address

•  

  Email address

•  

  Phone number

•  

  Personal identification number

• Gender

•  

  Title

  Employer

•  

  Position

•  

  Education

•  

  Activities when contacting Naturvetarna's advisory services

•  

  Information that you voluntarily provide

•  

  Membership number

• Protected address (only: yes/no)

•  

  Professional association affiliation

•  

  Fee and associated fee category

•  

  Membership duration

• The labor union matter that you have entrusted us to handle

Information you provide to us directly is:

• Information recorded when you visit our website, through cookies, or data you provide. However, please note that the website is subject to a publishing license and is not covered by the regulations of the Data Protection Regulation.
• Information we receive from public records or from authorities, companies, or organizations when we assist you in labor law contexts.
  
  
• Information we receive when you contact one of our employees or elected representatives regarding a labor-related matter.
  
  
• Information we receive when you sign up for our courses or seminars.
  
  
• Information you provide at the reception when visiting Naturvetarna.
  
  
• Information you provide when signing up for newsletters or other mailings.
  
  
• Information we receive when you respond to surveys and questionnaires.
  
  
• Information we receive when you otherwise contact us, apply for a position with us, visit us, or reach out to us in any other way.
  
  
• Information we receive when you use member benefits, such as insurance offers, income insurance, or other services.
  
  
• Information we receive from a professional association, if you are a member of one.

When you send an email to us, we either enter your message into a case management system if the data is required to fulfill the task, and the original email in Outlook is deleted. Otherwise, your email and other correspondence are deleted after the staff has handled the issues.

If you log in to our website, you can change information that may later be transferred to the CRM system mentioned above.

When we collect your personal data for the first time, we will contact you through the means you used to contact us to inform you about how we obtained your personal data, what we will use it for, the legal basis, whether the data will be shared, what rights you have under the Data Protection Regulation, and how you can exercise these rights.

If you express interest in membership through our simplified SMS service, your expression of interest is handled by our designated data protection officer. They will delete the information in their database after you have received the link to our website. Your submitted expression of interest may be stored in our own database until you have been contacted by us according to our procedures and still choose not to become a member.

You will also be informed about who is responsible for processing personal data and how to contact us if you have questions or need to make a request or inquiry regarding your personal data or your rights.

We develop procedures and practices to ensure that your personal data is handled securely. The principle is that only employees and other individuals, such as elected representatives, within Naturvetarna who need the personal data to perform their duties should have access to them.

Regarding sensitive personal data, we have established special authorization controls, providing higher protection for your personal data.
Our security systems are designed with your privacy in mind and offer a high degree of protection against breaches, destruction, and other changes that could pose a risk to your privacy. Internet communication is encrypted.

We have several data security policies in place to ensure the secure processing of your personal data. We have also entered into data processing agreements with IT support, server adminstrator, and others to limit the risk of unauthorized data transmission. According to the agreement, data to these processors may not be transferred without our consent.
We do not transfer personal data in cases other than those explicitly stated in this policy.

Our starting point is not to disclose your personal data to third parties outside our mission unless you have consented to it or unless it is necessary to fulfill our obligations. In cases where we disclose personal data, we establish special agreements or ensure in other ways that the personal data is processed securely. This may also involve sharing lists with other unions or educational providers who will be participating in a course. It may also be printers who receive personal data to send out printed materials, such as magazines, that you wish to receive.

Naturvetarna is part of the Saco federation, and it is natural that your rights are safeguarded through cooperation between Saco and Naturvetarna. Membership in Naturvetarna also implies that you accept the processing of personal data within Saco and within the councils or associations that operate locally within the common activities of the Saco associations.

Naturvetarna has agreements with Saco regarding responsibilities for processing personal data.

Professional associations are responsible for their own personal data management, but the transaction between the associations and the union is regulated – to achieve the necessary data protection – through statutes, formalized data management, agreements, and other limiting measures.

A Data Protection Officer is the person at Naturvetarna who serves as the point of contact for data protection matters.

At Naturvetarna, an expert ombudsman serves as the Data Protection Officer and is responsible for ensuring that Naturvetarna's processing of personal data complies with the General Data Protection Regulation and related regulations. They respond to your questions about data protection and can be reached at dataskyddsombud@naturvetarna.se or by phone at 08-466 24 35.

If you wish to have an action taken by Naturvetarna regarding your personal data, you can request an action through this form.

Mobile BankID serves as the primary login system for secure identification.

We will then respond promptly and inform you of our action in response to your request from Naturvetarna through postal delivery.

You can do this with the supervisory authority, the Data Inspection Board.

Naturvetarna strives to delete unnecessary personal data as soon as possible. However, sometimes data needs to be retained for administrative reasons or legal requirements.

• If there is a customer relationship, the data is retained for three years.
• If the data is based on business transactions, it is retained for the business year plus seven years, in accordance with accounting regulations.
• Exiting with regulated transactions or individual cases is retained for ten years.
• Exiting with unregulated transactions without individual cases is retained for three years.
• Exiting through expulsion is retained without a time limit.
• Record extracts are deleted no later than three months.
• Tips about new members are deleted no later than three months.
• Cases of deceased individuals are retained for one year to potentially fulfill the obligations of estate executors.
• In other cases where claims may be made against Naturvetarna, the data is retained for ten years.

A list of the registers we maintain, the processing and information channels of personal data, is available and can be provided upon request by the supervisory authority.