Privacy policy

1. Processing of personal data

CK Trafikskola AB with organization number 559233-1986 (hereinafter referred to as "CK Trafikskola", "we" or "us") is responsible for the personal data about you that we process.

CK Trafikskola protects your personal data and your privacy. You should always feel safe when you submit your personal data to us. In this policy, we explain why we collect information about you and how we process it. Please feel free to contact us if you have any questions about how we handle your personal data. If you do not receive sufficient information or consider that we have failed in our handling, you can submit a complaint to the Swedish Authority for Privacy Protection.

We have taken the security measures required to protect your personal data from unauthorized access and unlawful processing and which are otherwise required to comply with current legislation and our internal guidelines and procedures. We have a data protection officer who checks that we follow the rules and have a high level of data protection. CK Trafikskola employees also undergo regular training to be able to handle your personal data safely and in accordance with current regulations.

1.1 Contact details

Contact details for us and our Data Protection Officer are listed below. Contact us whenever you want, we are happy to answer your questions.

Data controller
CK Trafikskola AB
Org nr. 559233-1986
Postal address: Oxbacksgatan 8, 151 73 Södertälje, Sweden.

Data Protection Officer
CK Trafikskola AB
Org no. 559233-1986
Att: Data Protection Officer
Postal address: Oxbacksgatan 8, 151 73 Södertälje
E-mail: info@cktrafikskola.se

1.2 What is personal data?

Personal data is any information that can be directly or indirectly attributed to a living natural person. A variety of information can be classified as personal data as long as it can be attributed to a natural person. Examples of typical personal data are names, social security numbers, addresses and telephone numbers. The categories of personal data that we process within our business include the following:

Basic identity information (name and social security number and copy of ID documents)
Contact details (such as address, telephone number and email address)
Information on financial situation (income and debt data or other assets)
Information on employment and business engagement (board memberships)

‍

We often process social security numbers and ID documents. This is because we need to be able to verify your identity. We are subject to regulations that set out a far-reaching obligation for us to ensure the identity of our customers.

‍

1.3 How do we access personal data?

1.3.1 Personal data processed under a contractual relationship

Personal data that we have about you has been provided in connection with the conclusion of a contract with us or collected in connection with the administration of the customer relationship and the use of our services. We also collect personal data about you from external parties, such as authorities, information providers and credit reference agencies.

We may obtain a credit report on you from a credit reference agency. The credit information about you is necessary for us to administer the customer relationship. The basis for the processing is to fulfill the agreement. Credit information is regulated by the Credit Information Act. When we have obtained the information, you will be informed and you will receive a copy of the information. If you have specific questions about the content of the credit report, you should contact the credit reporting agency directly.

1.3.2 Personal data processed due to access by CK Trafikskola

When you as a customer, for example, register with the traffic school, call or email the traffic school or make a request for a course on our website, you are providing us with your personal data.

Your personal data is used by CK Trafikskola. These are only disclosed to the Risk Education site, the Swedish Transport Administration's driving test system and the Swedish Transport Agency. This is to be able to book the driving test and report that you as a student have passed the mandatory training courses required, such as Risk Training and Introductory Training.

1.3.3 Personal data processed for marketing purposes

Personal data processed for direct marketing purposes is collected from external parties, usually from information providers. The personal data is processed only to contact you as a customer.

We never pass on, sell or exchange your personal data for marketing purposes to third parties outside CK Trafikskola AB.

1.3.4 Why do we process your personal data?

CK Trafikskola is entitled to process the personal data required for the fulfillment of our commitment to you as a customer, or that you have given your consent for us to process your data.

We may use your personal data for the following purposes, among others:

We administer and carry out enrolment at the driving school,
We manage and administer bookings in both the driving school's own booking system,
Trafikverket's booking system and reports training courses such as Risk Training 1 and 2 and supervisor training to the Swedish Transport Agency,
We provide WiFi service in our premises,
To provide you with relevant information such as bookings,
We send emails and text message notifications, including bookings for courses, driving lessons and driving tests.

‍

The purpose of the processing of personal data (the legal basis) is the performance of contracts, compliance with legal obligations and legitimate interests. Our legitimate interests are to detect and prevent breach of contract, to avoid credit losses and to establish, exercise and defend legal claims.

1.3.5 Have you been contacted by us by phone or email? Then you should read here.

We process personal data about you in order to tell you about our services (marketing purposes). The personal data is necessary for us to contact you as a customer or the legal entity you represent.

Processing for marketing purposes is based on a balance of interests where CK Trafikskola's legitimate interest is to market its existing or new services.

You can always contact us and let us know that you do not want us to process your data for marketing purposes. We will then immediately stop using your data for that purpose and delete the data if there is no legal basis for processing.

For those customers who have declined to be contacted for marketing purposes, a very limited amount of personal data is retained for the sole purpose of making it possible to exclude them from future marketing activities.

1.3.6 Your rights as a data subject

Access to your personal data - extract from the register

You have the right to obtain confirmation as to whether we are processing personal data concerning you. If we process data about you, you also have the right to access the personal data we process and information about the purposes of the processing - a register extract. You can send your request for a register extract to info@cktrafikskola.se or to the following postal address:

‍

CK Trafikskola AB
Att: data protection
Oxbacksgatan 8, 151 73 Södertälje, Sweden

‍

Once we have received your request, we will contact you to verify your identity. We can only disclose personal data that we can verify relates to you.

The extract from the register will then be sent to an email address provided by you or to your registered address.

Rectifying inaccurate data we hold about you

If you believe that we have inaccurate data about you, you have the right to request that we correct the inaccurate data. You also have the right to supplement personal data that you consider incomplete with regard to our purpose of processing personal data.

1.3.6 Deletion of personal data

We never process your personal data for longer than necessary and permitted. You have the right to request that we delete your personal data and we are obliged to delete the data without delay in the following situations:

When the personal data is no longer necessary for the purposes for which we collected and process it,
Where the processing of personal data is based solely on your consent and you withdraw your consent,
When you object to personal data processing that we have based on a balance of interests and we do not have compelling legitimate grounds that outweigh your interest in the processing,
When personal data has been processed unlawfully,
When personal data must be erased in order to comply with a legal obligation to which we are subject,
When personal data has been processed for direct marketing purposes and you object to the processing.

‍

We would like to inform you that we may refuse your request for erasure if we have an obligation to retain the data under mandatory legislation (legal obligation). The obligation to retain personal data arises, inter alia, from accounting and anti-money laundering legislation.

We would also like to inform you that we may refuse your request if the processing is necessary for the establishment, exercise or defense of legal claims.

Limiting data processing

You have the right to request that the processing of your personal data be restricted. Restricting the processing means that - in addition to storing your personal data - we may only process the data if you have given your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another person. The right to request restriction applies in the following situations:

‍

When you dispute the accuracy of the personal data we hold about you, you can request that we restrict the processing of your personal data for a period of time that allows us to verify the accuracy of the data,
When the processing is unlawful and you oppose the erasure of the data and instead request a restriction on the use of personal data,
When we no longer need the personal data for the purposes for which we processed the data but you need them to establish, exercise or defend legal claims,
Where you have objected to a processing operation based on our legitimate interest after a balancing of interests, you can request that the processing be restricted for the time necessary to verify that our legitimate grounds outweigh your legitimate grounds.

‍

Opposition

You have the right to object to personal data processing that we base on a balance of interests. In order for us to continue processing personal data thereafter, we must demonstrate compelling legitimate grounds for the processing which override your interests, rights or freedoms. If we cannot demonstrate this, we may only process personal data for the establishment, exercise or defense of legal claims.

You always have the right to object to the processing of personal data for direct marketing purposes. The right to object to the processing of personal data includes objection to the analysis of personal data for direct marketing purposes (profiling).

Data portability

You have the right to obtain personal data that you have provided to us in a structured format and you have the right to transmit the data to another controller if the personal data is processed with your consent or to perform a contract concluded with us. The right to have the data transferred to another controller applies where technically feasible.

Complaints to the Data Protection Authority

If you feel that we have failed in our handling, you can file a complaint with the Swedish Authority for Privacy Protection. You can find a link to the Authority's website here.

https://www.imy.se

Storage and deletion of personal data

We never store personal data longer than is necessary and/or required to fulfill the purposes of the processing. How long we store the personal data depends on the reason for the processing of personal data.

Personal data processed on the basis of a contractual relationship

If the processing of personal data is based on the fact that you or a company you represent has entered into a contract with us, the data is processed during the period of an ongoing contractual relationship with us. During the contract period, the data is checked to ensure that it is up to date and the data that is no longer needed is deleted.

When the contract is concluded, only the data that we need to store to comply with legal obligations (accounting legislation), or to be able to establish, exercise or defend legal claims (balance of interests) is stored. The storage obligation for us under the Accounting Act is 7 years.

Data provided to third parties

We use third-party companies for services that are necessary to offer our services and fulfill agreements and may therefore disclose your data to third-party companies that we use. This may include, for example, services that we use for electronic identification and signing, payment and banking solutions and IT solutions. Suppliers who process data on our behalf are so-called data processors and may only process the data according to our instructions. We take measures to ensure that data processors process data securely and in accordance with applicable regulations. We may also disclose your personal data to authorities to comply with mandatory legislation.

Intra-group transfers of personal data

Personal data may be disclosed to companies that are part of the same group as CK Trafikskola. Transfer of personal data within the group always follows CK Trafikskola's personal and privacy policy and applicable legislation. The IT systems that we use for storage and processing have been checked to meet the requirements for secure storage. All technical measures required to protect stored personal data against unauthorized access and destruction have been taken. The personal data processed within our business is stored on servers within the EU.

Job seekers and expressions of interest

If you submit a job application or an expression of interest, your application will be processed by the person in charge. If your application does not match any of our vacancies, you will be notified and your personal data will be deleted. If your profile matches a vacancy, you will be contacted and your personal data may then be processed until the recruitment process is completed. The purpose of the personal data processing is to recruit staff.

Security

2. Management of cookies

When you visit our website, so-called cookies are saved. As a user, you can decide whether you want to accept cookies or deny that cookies are saved during your visits. Depending on the browser you use, there are different settings that you can make in your browser regarding cookies. The following text describes our handling of cookies.

When do we use cookies?

When you visit our website, we use cookies to, for example, customize the visit so that you do not have to see the same pop-up window several times during a visit or to store other settings. If you do not accept the use of cookies, you can click on "Refuse" or change the settings in your browser.

Cookies that relate to our website that you visit are called first-party cookies. We also handle so-called third-party cookies from, for example, Google Analytics and Facebook in order to display more relevant ads or to measure traffic such as the number of visitors.

Your consent

We use cookies to make sure we give you the best experience on our website. By continuing to use the site or clicking "Accept", you agree to our use of cookies.

You have the right to decide whether to accept or reject cookies. By not clicking "reject", no cookies will be stored on your computer or device. Not accepting cookies may result in certain information on the website not being available or not functioning as intended.

If you opt out of cookies in your browser, this will only apply to the browser you are using. You will need to follow the same process for all the different browsers you use.

Please note that not accepting cookies is not a way to avoid advertising on websites. The same amount of advertising will be displayed as before and in some cases the advertising may be less relevant to you as a user.

3. information provision and updates

This policy was updated and published on 1 November 2023. The latest version of our policy for handling personal data and cookies is always published on our website. If necessary, we may update our privacy policy. If the updates are of significant importance for the processing of your personal data, you will be notified.