Celsius Sweden AB, 556705-5784 (“Celsius” or “we” in any form) collects and otherwise processes personal data about you as you apply to a position at Celsius. This privacy notice (“Privacy Notice“) sets out information about the processing of personal data carried out by us in our role as controller, including what personal data we collect about you, for which purposes the personal data is processed and with whom we may share your personal data.
“Applicable Data Protection Laws” means all legislation and regulations, including regulations issued by relevant supervisory authorities, protecting the fundamental rights and freedoms of individuals and, in particular, their right to privacy with respect to the processing of personal data that from time to time applies to this Privacy Notice, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR“) as well as laws and regulations supplementing the GDPR.
Unless otherwise stated, terms defined in the GDPR, such as “personal data” and “processing“, shall have the same meaning in this Privacy Notice.
Accordingly, “personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
The term “processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Vi samlar in dina personuppgifter från:
If you have applied for a job or some other collaboration, in your capacity as a private individual, at Celsius we process your personal data to evaluate your application, i.e. in order to take steps at your request prior to entering into a contract.
(a) Categories of personal data
(b) Legal basis
We process your personal data in order to take steps at your request prior to entering into a contract to which you are a party (Art. 6 (1) (b) GDPR).
The processing of personal identity number is necessary for the purpose of the processing.
(c) Retention period
Your personal data will be processed until the position that you have applied for has been filled.
The personal data will, subject to your consent, be retained for a period of twelve (12) months after the application as an application might be relevant for a position in the future.
(d) Recipients of personal data
We may share your personal data with our service providers, such as IT-suppliers and recruitment agencies.
We process your personal data for legal defense purposes, including to establish, exercise or defend legal claims.
(a) Categories of personal data
(b) Legal basis
We base the processing of your personal data on the legal basis legitimate interest to satisfy our legitimate interest to establish, exercise or defend legal claims (Article 6 (1) (f) GDPR).
Any special categories of personal data, including information on criminal offenses, are only processed if it is necessary for the establishment, exercise and defense of legal claims (Article 9 (2) (f) GDPR).
(c) Retention period
In Sweden, the general statutory limitation period for discrimination claims is two (2) years.
(d) Recipients of personal data
We may share your personal data with advisors and authorities, such as courts, in order for us to be able to establish, exercise or defend legal claims.
We process your personal data for the purpose of complying with legal requirements placed upon us such as, corporate financial responsibilities including audit requirements and employment-related requirements such as e.g. income tax, social security deductions and immigration requirements.
(a) Categories of personal data
(b) Legal basis
We base the processing of your personal data in the legal basis compliance with a legal obligation to which the controller is subject (Article 6 (1) (c) GDPR).
(c) Retention period
Your personal data will be retained for as long as required under the relevant legal obligation.
For Sweden, the Bookkeeping Act requires that bookkeeping information is stored for seven (7) years following the end of the calendar year during which the financial year ended.
(d) Recipients of personal data
We may share your personal data with advisors and authorities, such as tax authorities, in order for us to fulfil the legal obligation laid upon us.
For the purposes set out in this Privacy Notice, we may transfer your personal data to our service providers and business partners, e.g. service providers. These parties will generally act as processors relating to the processing of personal data, which means that they are contractually obliged to process your personal data only on behalf of and in accordance with the our instructions. We may also share personal data within our company group if needed to liaise on a hiring decision (based on our legitimate interest Art. 6 (1) (f) GDPR).
Transfers of personal data outside of the EU/EEA
In case we transfer your personal data to a recipient in a country outside of the EU/EEA, such as to the US and the UK (“third country“), such transfer will only take place where an adequate level of protection is ensured in accordance with a decision by the EU Commission. Alternatively, we will ensure that appropriate safeguards have been implemented (such as those provided for in the EU Commission’s standard contract clauses). Where deemed necessary, such appropriate safeguards will be complemented by supplementary measures for ensuring an essentially equivalent level of data protection to that found under the GDPR.
You have the right, upon request, to receive a copy of the documentation demonstrating that the necessary safeguards have been put in place to protect your personal data when transferred to a third country. Such request may be made by contacting us on the contact details set out below.
We will ensure that access to your information is adequately protected by having appropriate security measures implemented and, depending on the circumstances, taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing as well as the risks. To uphold this warranty, we have also implemented appropriate technical, physical and organizational measures to protect your personal data from unlawful or accidental destruction, alteration or disclosure, misuse, damage, theft or loss by accident or unauthorized access.
Rights in relation to your personal data
In connection with our processing of your personal data, you may, under the conditions set out below, exercise the following rights:
Access
You can request confirmation of whether or not your personal data is being processed and, if it is being processed, request access to your Personal data and additional information such as the purpose of the processing. You also have the right to receive a copy of the personal data that is processed. If the request is submitted electronically, the information will also be obtained in a commonly used electronic form unless you request otherwise.
Rectification
If you notice that personal data about you is inaccurate or incomplete, you have the right to have your personal data rectified or completed.
Object to specific processing
You can object to processing of your personal data if it is based on a legitimate interest, on grounds relating to your particular situation or if the processing takes place for direct marketing purposes. Upon such an objection, we are obliged to cease the processing, unless we can demonstrate compelling legitimate grounds to continue processing and those grounds override your interests. We may also continue processing that is necessary to establish, exercise or defend legal claims. Processing for the purpose of direct marketing will, however, always be ceased upon your objection.
If you object to processing of your personal data, you have the right to request restriction of the processing pending our verification of whether we may continue to process it, in accordance with the below (see Restrict processing).
If, upon your objection, we no longer have a right to process your personal data, you have a right to have the personal data erased in accordance with the below (see Erasure).
Erasure
You can have your personal data erased under the following circumstances;
The right to erasure does not apply when our processing of your personal data is necessary for compliance with a legal obligation which requires the processing; or for the establishment, exercise or defense of legal claims.
Restrict processing
Under the following circumstances, you can request that we restrict the processing of your personal data to only involve the storage of your personal data;
We may, however, still use your personal data for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
Withdraw consent
To the extent that the processing of personal data is based on your consent, you always have the right to withdraw your consent. If there is no other legal ground for the processing, you have the right to have the relevant personal data erased in accordance with the above (see above Erasure).
Data portability
Unless it adversely would affect the rights and freedoms of others, you have the right to request a machine-readable copy of the personal data processed based on your consent or when the processing is necessary to fulfil an agreement with you as well as when personal data has been obtained from you (data portability), and to request that the information be transferred to another data controller (if possible).
Complaints to the supervisory authority
You are welcome to contact us with questions or complaints regarding the processing of your personal data on the contact details set out below. However, you also have the right to lodge a complaint regarding the processing of your personal data to the Swedish Authority for Privacy Protection.
If you have any questions regarding the processing of your personal data or if you wish to exercise any of your rights pursuant to applicable data protection legislation, please contact by using the contact details below. If needed, we have the right to change and supplement the Privacy Notice.
The controller is:
Celsius AB
Mariehällsvägen 37 F
168 65 Bromma
Tel: 08-515 185 00
Please see the table below for detailed information regarding which personal data that we process.
| Categories of personal data | Examples of personal data |
|---|---|
| Contact information | Name, email address, phone number, postal address, entrance code |
| Correspondence data | Personal data that is included in your communication with us |
| Employment data | CV, grades, cover letter |
| Personal identity number and date of birth | Photographs, videos and voice recordings |
| Social media content | Content from social media accounts, such as Instagram and TikTok |
| Work related information | Title, position, employer |
