Thank you for using Byggjobb.app, ByggPedia.app, ByggTender.app, jobbfixer.app and/or visiting sweajobb.se or the EHRAB websites. The apps and the websites are provided by Sweapp AB, SweaJobb Arbetsförmedling AB or EHRAB Holding AB (“we” or “us”).

Our apps are used to match experienced workers with well-paying jobs. We focus on sustainability and social responsibility. It ismost important to us to be transparent about the personal data we collect about you, how we use it and with whom it is shared.

This privacy policy applies when you use our apps or visits our websites. It explains what information we collect and why, how we use it, and how you can review and update it. If you move forward and find a job through the apps we will provide additional information regarding how we process your personal data in that case.

SUMMARY

• If you visit our websites or use our apps, we process your personal data to:
• analyse your use of the app/website with Google Analytics and Brightbid;
• show you interesting offers from us on websites and social media that you visit with the marketing services; and
• to provide a working app/website and to remember your choices.
• If you register as a candidate, we process your personal data to:
• enable your use of the app;
• use algorithms, AI and machine learning to better match you with a job;
• publish your profile on our app/website; and
• send you information, marketing, push notifications and newsletters about relevant companies and projects that you could be interested in. You can unsubscribe at any time, in such case we store your e-mail address in our unsubscribe-list to make sure that we do not send any marketing to you.
• If you communicate with us, we will process your personal data e.g. to be able to answer your questions.

Your rights – Below you can find a detailed description of your rights and how to exercise them. In summary you have the following rights:

• The right to lodge a complaint with a supervisory authority,
• The right to withdraw your consent,
• The right of access,
• The right to object,
• The right to erasure,
• The right to rectification,
• The right to restriction of processing, and
• The right to data portability

If we, against all odds, have a discussion regarding a complaint or claim or discrimination claim we will process your personal data to handle the complaint or claim or to defend us in the event of future discrimination claims.

 

PRIVACY POLICY – MORE DETAILS

Click on the links below to read more about:

Who is responsible and how to contact us?

How do we share your personal data?

Do we transfer your personal data outside the EU/EEA?

How can you manage your personal data?

Detailed description of how we process your personal data

What are your rights when we process your personal data? Detailed description

Balancing of interests assessments when processing personal data based on the lawful basis “legitimate interests”

Questions, comments or concerns?

Who is responsible and how to contact us?

• Sweapp AB (Swedish registration number 556936-2238) is responsible for processing your personal data when you use ByggJobs, Byggpedia, ByggTender and Jobbfixer.
• EHRAB Holding AB (Swedish registration number 556983-6694) is responsible for processing your personal data when you use the EHRAB websites.
• SweaJobb Arbetsförmedling AB (Swedish registration number 559005-7294) is responsible for processing your personal data when you use SweaJobb.se.

Should you have any questions or want to exercise any of your rights, please feel free to contact us. You can reach us at dataprivacy@ehrab.com or at Victor Hasselblads gata 16 A, 42131 Gothenburg, Sverige.

How do we share your personal data?

We do not sell your personal data or share it with other parties unless it is necessary. This means that your personal data will be handled by our employees, but only by the personnel in need of such access to conduct their work.

Companies seeking candidates

If you are validated as a candidate at the app, we will share your profile information (e.g. your photo, education, work experience, skills, and endorsements) on our app/website directly with relevant companies that are seeking candidates for a project. We only share your profile and information in the app with companies that have been validated by us beforehand. The validation process means that we evaluate whether the companies follow applicable tax- and employment laws and regulations and that the companies provide fair and reasonable conditions for their employees.

Your employer

If you are validated to be employed, we share your personal data with the relevant company within the EHRAB Holding AB Group that will hire you. Which company that is relevant depends on in which country and field you will work. We state which company that will be your employer when you are hired, generally it is any of the following:

• EHRAB ByggBemanning AB, org. nr. 556822-8588, Victor Hasselblads Gata 16A, 421 31 Västra Frölunda, Sweden.
• Sweajobb Arbetsförmedling AB, org. nr. 559005-7294, Victor Hasselblads Gata 16A, 421 31 Västra Frölunda, Sweden.
• EHRAB Byggresurs AB, org. nr. 559005-7302, Victor Hasselblads Gata 16A, 421 31 Västra Frölunda, Sweden.

These companies are located within the EU och EES and will inform you separately about their processing of your personal data during the employment.

Our suppliers and partners

We need to work with suppliers and partners to conduct our business. Such parties will therefore process your personal data. We are responsible for any sharing of your personal data to such suppliers or partners and to make sure your personal data are safe when shared with third parties as set out below.

We will share your personal data with the following recipients:

• If you interact with us or visit our social media accounts, the social media platforms that you use will process personal data about you as a user.
• When you use our app/website and have given your consent, your personal data will be processed by the analytics- and marketing services that we use, i.e. Google (including YouTube), Brightbid, Meta (Facebook and Instagram), LinkedIn, TikTok and/or Twitter. These recipients process personal data on our behalf as processors but are also processing your personal data as controllers. These services inform you separately about the processing that they are responsible for.
• If you receive our newsletters your personal data will be processed by our newsletter providers Salesforce and Mailchimp, which process your personal data on our behalf as processors.
• We will share your personal data with our IT suppliers who will process these on our behalf and on our instructions to ensure good and secure IT operations. We only share your personal data with our IT suppliers if it is necessary for them to fulfil their obligations towards us according to the contract that we have with them. The IT suppliers include computing- and storage services and customer management systems.

Do we transfer your personal data outside the EU/EEA?

The use of your personal data by our suppliers and other partners stated here means that your personal data are processed outside of the EU/EEA. To us it is essential that all such transfer is made in accordance with the GDPR. However, we do not send your personal data outside the EU/EEA without caution. The suppliers are using servers based in the EU/EEA and if they in rare cases would get access to information from outside the EU/EEA, the supplier/partner avoid using your personal data in a clear format and does not actively try to identify you.

Transfers only takes place in accordance with applicable data protection legislation meaning that we will transfer your personal data outside the EU/EEA when we can ensure an appropriate level of protection of your personal data. We will transfer your personal data under the standard contractual clauses (article 46.1 c GDPR), Module 1 (controller to controller) and Module 2 (controller to processor). You can find the standard contractual clauses here. In those situations where we have made an assessment that legislation and similar in a specific country outside of EU/EES, to which we transfer your personal data, affects the effectivity of the standard contractual clauses, we will take supplementary measures to ensure an appropriate level of protection of your personal data.

If you want to know more about what safeguards we implement for transfers of personal data or receive a copy of the safeguards you are always very welcome to contact us.

How can you manage your personal data?

We store most of your personal data related to your profile for as long as you continue to have an account on the platform. Even if you only use our app occasionally, we will retain your personal data in order to keep your profile open. You can find a more detailed description of the storage periods in the tables below.

Your personal data can be managed by logging into your account and editing/deleting the information. However, you can exercise your right to rectification, right to erasure, right to object to our processing and other rights by contacting us.

Detailed description of how we process your personal data

In the information and tables below you can read more about what personal data we process about you, why we process your personal data, how long we store your personal data and our legal basis for the processing.

If you visit any of our websites or use our apps

We process technical and other information that are considered personal data when you visit our app/website. To protect your privacy, we have taken measures to avoid identifying you when you visit any of our apps/websites. For instance, we only store an encrypted version of your IP-address to reduce the risk of being able to identify you.

The personal data are gathered from your device and from the companies we cooperate with (see below). Such companies will also use previous information they have about you.

We use cookies and similar technology on our app/website. How we do this is described in our text about cookies which you find here.

To analyse how our app/website is used
Our purpose for processing	What personal data we process	Our legal basis for the processing
Analyse how you use our app/website to improve our app/website and services. To do this we use the analytic service Google Analytics and Brightbid. The analytic service means that we place a random ID on your device to distinguish your device from other visitors and to acknowledge patterns in how our app/website is used. We will however not know who you are. The personal data we gather will be used e.g. to optimize functions and to adapt the app/website to suit our visitors.	–  An encrypted version of your IP- address which we ourselves cannot connect to you as an individual –  Information about your device/browser (which area in the country you use our app/website from and which screen resolution you have) –  Information about your activities on the app/website –  Other information Google have about you, e.g. information about from which site you found us	Consent (GDPR art. 6.1 a) The personal data will be processed based on your consent. You can withdraw such consent at any time. You can prevent Google Analytics to use your personal data by downloading and install this this browser add on.
Storage period: We will continue to process your personal data for some months after your visit our app/website. You can withdraw your consent at any time. Google and Brightbid will continue to store your personal data for their own purposes and Google and Brightbid will inform you separately about such storing.

To show you relevant marketing from us
Our purpose for processing	What personal data we process	Our legal basis for the processing
Market our services by showing you offers we believe you could be interested in. We show you such marketing on Google (including YouTube), Brightbid, Facebook (including Instagram), LinkedIn, TikTok and/or Twitter. You see marketing based on information that these companies have about you beforehand (so called profiling*). This means that we share your personal data with these marketing services, so they have information about which types of visitors that are interested in us.	–  An encrypted version of your IP- address which we ourselves cannot connect to you as an individual –  E-mail address Thereafter you will see search results and ads based on: –  An analysis of how you use our app/website –  Information that the marketing services we use have about you since before, e.g. information about from which site you found us	Consent (GDPR art. 6.1 a) The personal data will be processed based on your consent. You can withdraw such consent at any time. Here you can make choices about the marketing you see from Google and here on Facebook under the heading ad settings you can choose which marketing you want to see on Facebook.
Storage period: We will continue to process your personal data for some months after your visit to our app/website. You can withdraw your consent at any time. Google (including YouTube), Brightbid, Facebook (including Instagram), LinkedIn, TikTok and/or Twitter will continue to process your personal data as independently responsible. Information on how long they store your personal data is found in their respective information texts.

* Profiling: We use so called profiling to be able to show you offers that are relevant to you and to provide you with customised marketing. We use profiling because without it, you would instead see offers and information which you are probably not interested in. You have the right to object to profiling as described below under the section explaining your rights.

Provide a working app/website and to remember your choices
Our purpose for processing	What personal data we process	Our legal basis for the processing
Provide a working app/website, including to track the use of the app/website in order to find errors. Remember your choices, e.g. whether you have consented.	–  IP address –  Information about how you use the app/website –  Information about your choices, e.g. your consent –  Internal identifiers	Legitimate interest (GDPR art. 6.1 f GDPR) Our legitimate interest to process your personal data to provide a working app/website and to remember your choices.
Storage period: We process your personal data for a limited time after each visit to our app/website and will thereafter only use the information anonymised in statistics.

If you register as a candidate

If you register as a candidate we get your personal data from you when you register on the app. We also get personal data about you from others, e.g. comments on a photo of you.

Enable your use of the app and to match with relevant companies
Our purpose for processing	What personal data we process	Our legal basis for the processing
Administer and validate the information you give us. Match your profile with the companies validated by us. Share the information from your profile with the companies that are seeking workers. Video calls/phone calls to so you can have conversations with potential projects and relevant companies. Rank you towards companies from your grades.	–  Contact information, e.g. name, e-mail address, telephone number –  Registration information, i.e. password –  Country location –  Information you have chosen to upload to your profile, e.g. photo, education and work experience skills –  Information about you that we get from others, e.g. comments on a photo of you, messages and contact information –  Information about how you use the app, e.g. who you connect and communicate with as well as video- and phone calls you make in the app –  Endorsements and grades from companies and other app-users	Performance of contract (GDPR art. 6.1 b) The processing is necessary for us to enable your use of the app. You need to provide the personal data to us since we otherwise would not be able to provide the app to you and match you with relevant companies.
Storage period: We continue to process your personal data as long as you have an account on our app and for one year after you have closed your account. You can choose to delete or freeze your account at any time. If you freeze your account, your personal data stop being visible on our app/website within 24 hours. Some of your personal data are stored longer to defend us in the event of a future discrimination claim in relation to your job application.

 

Use algorithms, AI and machine learning to better match you with a job
Our purpose for processing	What personal data we process	Our legal basis for the processing
Alongside with our recruiters and the companies that are seeking workers, we use algorithms, AI and machine learning to find the best match for your profile and preferences and to market you towards companies with relevant job offers where you are located. The technique is called profiling*.	–  Information from your profile –  GPS-location and other positioning data that you provide to us	Legitimate interest (GDPR art. 6.1 f GDPR) Our legitimate interest to process your personal data to better match you with a job.
Storage period: We continue to use this technique for as long as you have an account, unless you object previously.

* Profiling: We use so called profiling to be able to match your information to the company that will suit you best, i.e. to show your profile to companies that are relevant to you. The profiling provides ut with a possibility to better and more efficiently match your profile with companies seeking workers. You can at any time object to profiling as described below under the section explaining your rights.

Publish your profile on our app/website
Our purpose for processing	What personal data we process	Our legal basis for the processing
Publish your profile on our app/website.	–  Name –  Location, i.e. country and city –  Information about your performance, e.g. for how long you have been on the app, that you are verified and your average grade	Consent (GDPR art. 6.1 a) The personal data will be processed based on your consent. You can withdraw such consent at any time.
Storage period: We continue to publish information about you for as long as you have an account.

Send you information, marketing, push notifications and newsletters
Our purpose for processing	What personal data we process	Our legal basis for the processing
Send you information, marketing, push notifications and newsletters about relevant companies and projects that you could be interested in as well as to announce new products and features, to share tips and to provide additional information.	–  E-mail address, –  Profile information, e.g. photo, education, work experience skills –  Location	Consent (GDPR art. 6.1 a) The personal data will be processed based on your consent. You can withdraw such consent at any time.
Improve and develop our newsletters by analysing how you open them and what you click on.	–  Information about how you open our newsletters and what you click on –  IP-address –  E-mail address	Consent (GDPR art. 6.1 a) The personal data will be processed based on your consent. You can withdraw such consent at any time.
Storage period: If you have given your consent, you will receive marketing, newsletters, push notifications and information as long as you have an account, unless you choose to withdraw your consent or object to receiving our e-mails beforehand in which case we keep track of this in our “unsubscribe-list” to avoid sending you any further marketing material.

If you have objected to receiving marketing from us

We will store information about you who have chosen to object to receiving marketing from us – see the below tables for information about this. We have received the personal data we store from you yourself.

If you have objected to receiving marketing from us
Our purpose for processing	What personal data we process	Our legal basis for the processing
If you have stated that you do not wish to receive marketing from us, we will store such information in an “unsubscribe-list” to make sure we do not send any marketing to you.	–  Name –  E-mail address –  Phone number	Legal obligation (GDPR art. 6.1 c) The processing is necessary to comply with legal obligations to which we are subject, i.e. marketing law which requires us to not send marketing material to individuals who have objected to receiving such marketing. We cannot make sure you will not receive marketing from us without processing your personal data for this purpose and you are therefore required to provide your personal data to us.
Storage period: You will be listed in our “unsubscribe-list” until further notice.

To communicate with you

When you contact us, e.g. through our social media accounts, we process your personal data as described in the tables below. We get your personal data from you when you contact us.

To communicate with you
Our purpose for processing	What personal data we process	Our legal basis for the processing
Communicate with you if you contact us, e.g. to answer any questions on our social media accounts. Answer your questions and give you the best possible service.	–  Information you provide to us (e.g. name and contact information) If you interact with us via our social media sites (e.g. our LinkedIn) we also process: –  Information from your profile on the social media in question (username and any picture you have chosen for your account) –  Other information regarding the matter for which you contact us	Legitimate interest (GDPR art. 6.1 f) The personal data will be processed based on our legitimate interest to communicate with you who have contacted us.
Storage period: We will delete your personal data regularly. Your comments and communication with us on social media can be deleted by you at any time. We will remove posts or comments which are in breach of the rules of the app or in conflict with legislation as soon as possible.

If you have a complaint or claim

If you make a complaint or claim regarding our app/website, we will process your personal data as described below. We will collect your personal data from you yourself or provide the information ourselves.

Note that the ongoing claim or right may mean that we cannot delete all your personal data after your request.

To handle any complaints or claims
Our purpose for processing	What personal data we process	Our legal basis for the processing
Handle any complaints or claims.	–  Name –  Contact details you have chosen to use, e.g. e-mail address and/or phone number –  Information from our communication with you in relation to the complaint/claim	Legal obligation (GDPR art. 6.1 c) The processing is necessary to comply with legal obligations to which we are subject. In these cases, you need to provide your personal data to us since we otherwise will not be able to comply with your consumer rights. Legitimate interest (GDPR art. 6.1 f) The personal data will be processed based on our legitimate interest to process your personal data to defend ourselves against a possible complaint or claim.
Storage period: We will store your personal data from the time the complaint or claim was initiated and for the duration of such complaint or claim.

Defend us in the event of future discrimination claims in relation to your job application process

To defend us in the event of a future discrimination claim in relation to your job application we process your personal data after the recruitment process ends. We get the personal data from you when you create an account.

Defend us in the event of future discrimination claims in relation to your job application process
Our purpose for processing	What personal data we process	Our legal basis for the processing
Store information from the recruitment process in order to defend us in the event of future discrimination claims in relation to your application.	–  Name –  Registration information, i.e. password –  E-mail address –  Telephone number –  Information in your profile, e.g. photo, education, work experience skills and endorsements	Legitimate interest (GDPR art. 6.1 f GDPR) Our legitimate interest to process your personal data to defend us in the event of future discrimination claims in relation to your job application process.
Storage period: We store your personal data for two years and two months from the end of the recruitment process. In the event of a dispute regarding discrimination we store your personal data until the dispute is handled.

What are your rights when we process your personal data? Detailed description

You have certain rights that you can exercise to affect how we process your personal data. You can read a more detailed description about what those rights are below.

If you want to know more about your rights or if you want to exercise any of your rights, please contact us and we will help you.

Right to lodge a complaint with a supervisory authority (Article 77 GDPR)

You have the right to lodge a complaint with a supervisory authority.

The supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, the IMY).

In detail: Your right to complain exists without prejudice to any other administrative or judicial remedy. You have the right to lodge a complaint with a supervisory authority, in particular, in the EU/EEA member state of your habitual residence, place of work or place where the alleged infringement of applicable data protection laws has allegedly occurred.

The supervisory authority has an obligation of informing you on the progress and the outcome of the complaint, including the possibility of a judicial remedy.

Right to withdraw consent (Article 7.3 GDPR)

You have the right to withdraw your consent at any time by contacting us.

In detail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right of access (Article 15 GDPR)

You have the right to obtain confirmation as to whether we are processing personal data concerning you or not. You can make a request by contacting us. If we process your personal data, you also have a right to obtain a copy of the personal data processed by us, as well as information about our processing of your personal data.

In detail. The information we provide includes the following:

• the purposes of the processing,
• the categories of personal data concerned,
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations,
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period,
• the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing,
• the right to lodge a complaint with a supervisory authority,
• if the personal data are not collected from you, we provide you with available information about the source of the personal data;
• the existence of automated decision-making, including profiling, referred to in Articles 22.1 and 22.4 GDPR and, in those cases, meaningful information about the logic involved, as well as the significance and the predicted consequences of such processing; and
• where your personal data are transferred to a third country or to an international organization, you have the right to information regarding the appropriate safeguards, pursuant to Article 46 GDPR, put in place for the transfer.

For any further copies of the personal data undergoing processing requested by you, we may charge a reasonable fee based on administrative costs. If you have made the request by electronic means the information will be provided to you in a commonly used electronic form, unless otherwise requested by you.

Your right to obtain a copy referred to above shall not adversely affect the rights and freedoms of others.

Right to object (Article 21 GDPR)

You have the right to object to our processing of your personal data at any time.

In detail: Your right to object applies as follows:

• You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Article 6.1 f GDPR, including profiling based on the provision. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
• Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
• Where you object to processing for direct marketing purposes, you have an unconditional right to have the processing of your personal data for such purposes ceased.
• In the context of the use of information society services, and regardless of Directive 2002/58/EC (ePrivacy Directive, or ePD), you may exercise your right to object by automated means using technical specifications.

Right to erasure (“the right to be forgotten”) (Article 17 GDPR)

You have the right to ask us to erase your personal data.

In detail: We are obligated to erase your personal data without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• you withdraw your consent on which the processing is based, and there is no other legal ground for the processing;
• you object to the processing pursuant to Article 21.1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21.2 GDPR;
• the personal data have been unlawfully processed; or
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law that applies to us.

Where we have made the personal data public and are obliged in accordance with the rights stated above to erase the personal data, we shall, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

We will notify any erasure of personal data carried out in accordance with your rights stated above to each recipient to whom the personal data have been provided to, unless this proves impossible or involves disproportionate effort. If you want information about those recipients, you are more than welcome to contact us.

Please note that our obligation to erase and inform according to above shall not apply to the extent processing is necessary according to the following reasons:

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation which requires processing by Union or Member State law which applies to us; or
• for the establishment, exercise or defence of legal claims.

Right to rectification of processing (Article 16 GDPR)

You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you. 

In detail: Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

We will communicate any rectification of personal data to each recipient to whom the personal data have been provided to, unless this proves impossible or involves disproportionate effort. If you want information about those recipients, you are more than welcome to contact us.

Right to restriction of processing (Article 18 GDPR)

You have the right to obtain from us restriction of the processing of your personal data.

In detail: Your right applies if:

• the accuracy of the personal data is contested by you, during a period enabling us to verify the accuracy of the personal data,
• you have objected to processing pursuant to Article 21.1 GDPR pending the verification whether our legitimate grounds override yours,
• the processing is unlawful, and you oppose the erasure of the personal data and instead request the restriction of their use, or
• you need the personal data for the establishment, exercise or defence of legal claims even though we no longer need the personal data for the purposes of the processing.

Where the processing has been restricted according to above, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

We will notify each recipient to whom the personal data has been provided about any restriction of processing according to above, if this do not occur to be impossible or entails a disproportionate effort. If you want more information about these recipients, you are welcome to contact us.

Right to data portability (Article 20 GDPR)

You have the right to receive your personal data (that you have provided to us) from us in a structured, commonly used and machine-readable format and, where technically feasible, have your personal data transferred to another data controller (“data portability”).

In detail: The right applies if:

• the processing is based on the lawful basis consent or on a contract, and
• the processing is carried out by automated means.

The exercise of the right to data portability shall be without prejudice to the right to erasure, i.e. Article 17. 

Your right to data portability shall not adversely affect the rights and freedoms of others.

Balancing of interests assessments when processing personal data based on the lawful basis “legitimate interests”

As we state above, for some purposes, we process your personal data based on our “legitimate interest”. By carrying out a balancing of interests assessment concerning our processing of your personal data, we have concluded that our legitimate interest for the processing outweighs your interests or rights which require the protection of your personal data.

If you want more information in relation to our balancing of interests assessments, please do not hesitate to contact us. Our contact information can be found at the beginning of this privacy policy.

Questions, comments or concerns?

We love feedback! If you have questions, comments or concerns about this policy or our use of your personal data, please contact us.

This privacy policy was adopted by us on 06-04-2023