Processing of personal data - visitors
Read about the collecting, processing, storage and transfer of personal data of individually identifiable current, past and future Visitors to RISE premises.
RISE Research Institutes of Sweden AB (RISE), as data controller, processes personal data regarding Visitors of persons visiting RISE premises (hereinafter referred to as the “Visitor”).
Personal data processed by RISE
The personal data of the Visitor that RISE processes are name and the employing/contracting company of the Visitor.
From which sources the personal data is collected
In addition to the information transferred to RISE from the Visitor, RISE may also collect information from third parties, e.g. the Visitors employer or principal.
Purpose and lawful basis
Based on RISE legitimate interest, RISE processes personal data for the following purposes:
- safety- and secrecy purposes (e.g. to ensure that no visitors are staying in RISE premises in case of fire or other safety incident, or to safeguard and exercise RISE rights and interest regarding safety and secrecy)
This processing falls within the scope of RISE legitimate interest and is not deemed to cause unjustified harm to the Visitor. By visiting the premises of RISE, the Visitor should reasonably expect the processing for safety- and secrecy purposes.
To whom the personal data is disclosed
RISE applies appropriate technical and organisational security measures to protect personal data against e.g. loss, misuse and unauthorised access. Only persons within RISE who need to process the personal data in accordance with the above stated purposes will have access to the data.
RISE transfer personal data to third parties acting as personal data processors, e.g. supplier of IT- and cloud services.
RISE transfer personal data to third parties acting as independent data controllers, if such transfer is required by applicable law, to authorities or other third parties to safeguard and exercise RISE rights and interests, e.g. in case of burglary at RISE premises or other safety- or security incidents, or in case of emergency where the health and safety of Visitor or other person is in danger.
Storage and disposal
RISE processes the personal data as long as it is necessary for the purposes for which the personal data was collected.
Certain data will be deleted in connection with the end of the visit. Other personal data will be processed for 3 months to safeguard and exercise RISE rights and interest regarding secrecy and safety.
Transfer to third countries
RISE strives to process personal data within the EEA. In cases where RISE is transferring or processing personal data outside the EEA, RISE will ensure an adequate level of protection in accordance with applicable legislation.
Legal rights as a visitor
The Visitor has the right to receive information regarding its personal data processed by RISE, and to request for rectification, limitation or deletion of these, by contacting the Data Protection Officer at RISE, at dpo@ri.se. The Visitor also has the right to file a complaint to the Swedish Data Protection Authority.
The personal data processor for the processing is RISE Research Institutes of Sweden AB (company registration number 556464-6874), with mailing address: Box 857 501 15 Borås Sweden.