Our Privacy Policy

Science Park Jönköping AB (hereinafter “Science Park” or “we”/ “us”).

Purpose

We care about your privacy. You should feel at ease when you entrust us with your personal data. This is why we have produced this policy. It is based on current data protection legislation and clarifies how we work to safeguard your rights and privacy.

The purpose of this policy is to inform you about how we process your personal data, what we use this data for, who is allowed to use your data and under what conditions, and how you can exercise your rights. Our starting point is not to process more personal data than is necessary for the purpose. We always strive to use the least privacy-sensitive data.

How we process your personal data

  • When you register with our subscription service for newsletters, we process personal data about you.

    What personal data is processed when you subscribe to our newsletter?

    Your name, e-mail address, and information about the newsletters you have read, and which links you have clicked on.

    Why do we process your personal data and why do we have the right to process it?

    Your personal data is processed to manage your newsletter subscription. When we process your personal data to manage your subscription, we do so in order to fulfil our agreement with you (i.e., to keep the promise we made when you became a subscriber). We therefore need your data in order to send you the newsletter.

    In addition, data is processed regarding the newsletters you have read and the links in the newsletters that you have clicked on to enable us to follow up on and improve our content. When we process your data to improve our newsletter, this is done on the basis of a legitimate interest. This means that we have assessed that we have an interest in being able to improve our services and that this outweighs your interest in not having your data processed for this purpose.

    Who is the personal data collected from?

    We receive the personal data directly from you in connection with your subscribing to our newsletter and in connection with your reading the newsletter.

    Who is the personal data shared with?

    Your personal data is also processed by service providers who perform services on our behalf. When the service providers process personal data on our behalf, they act as data processors for us, and we are responsible for the processing of your personal data. They must not use your personal data for their own purposes and are contractually and legally obliged to protect your data.

    How long is your personal data stored for?

    Your data is stored only for as long as you are a subscriber. You can unsubscribe from the newsletter at any time using the links in the e-mail or by contacting hello@sciencepark.se. If you choose to unsubscribe, all your personal data in relation to the newsletter service will be deleted.

  • When you sign up for an event or activity with us (“Event”) and when you take part in an Event with us as a visitor, we process personal data about you and, on some occasions, take photos or videos during the Event.

    What personal data is processed when you sign up for and take part in an Event?

    Your name, phone number, e-mail address, gender, workplace, professional role, school, domicile, data regarding your confirmation of participation in the Event, and data on any food restrictions, as well as images, videos, and audio recordings of you at the Event, statements from any interviews you give, and other data that you provide to us.

    Why do we process your personal data and why do we have the right to process it?

    Your personal data is processed so that we can manage our Events and communicate with participants in preparation for Events. When we process your personal data to manage the Event and communicate with you, we do so in order to fulfil our agreement with you (i.e., to keep the promise we made when you signed up for the Event). We therefore need your data in order to manage our Events and to contact you before the Event.

    Your personal data is processed so that we can document our Events and promote them to the public, for live streaming, and for subsequent publication on our website, in our newsletter, and on our social media channels. When we process your data to provide information about and to market our Events, this is done on the basis of a legitimate interest. This means that we have assessed that we have an interest in being able to evaluate and promote our Events and that this outweighs your interest in not having your data processed for this purpose.

    Furthermore, we process data about any food restrictions you may have in order to adapt the food we serve you at the Event. When we process data about your food restrictions, this is done on the basis of your explicit consent.

    We also process your personal data because we want to collect statistics, measure and evaluate the Event, and communicate with you after the Event has taken place to find out what you thought about it. When we process your data for the purpose of collecting statistics and communicating with you after the Event, it is done based on a legitimate interest.

    Who is the personal data collected from?

    We obtain personal data directly from you in connection with your registration for and participation in our Events and your participation in the evaluation of our Events.

    Who is the personal data shared with?

    Your personal data may be shared with suppliers and partners that take care of Event administration. When the service providers process personal data on our behalf, they act as data processors for us, and we are responsible for the processing of your personal data. They must not use your personal data for their own purposes and are contractually and legally obliged to protect your data.

    Your personal data in the form of images, videos, and audio recordings may be shared on our website, in our newsletter, and on our social media channels (such as Facebook, Instagram, Twitter, LinkedIn, YouTube, and Vimeo).

    How long is your personal data stored for?

    Personal data regarding your participation is stored for as long as is necessary for our accounting, tax documentation, and project reporting. In addition, images, videos, and audio recordings are saved to the extent necessary to maintain relevant content in our communication channels. Any data regarding food restrictions will be deleted after the Event.

  • We process personal data about performers both before and after they participate in our Events.

    What personal data is processed when you participate in our Events as a performer?

    Your name, phone number, e-mail address, and data on any food restrictions, as well as images, videos, and audio recordings of you at the Event, statements from interviews you give, and other data that you provide to us.

    Why do we process your personal data and why do we have the right to process it?

    Your personal data is processed in order for us to fullfil our agreement with you.

    Your personal data is also processed so that we can inform the public about performers participating in our Events, to market our Events, for live streaming, and for subsequent publication on our website, in our newsletter, and on our social media channels.

    As a performer, you agree to our using your name and picture in our marketing, etc. When we process your data to market our Events and provide information about them, this is done on the basis of a legitimate interest. In light of your agreeing to our use of your picture and name in our marketing, we have also assessed that we have an interest in being able to market our Events and inform the public about them, and that this outweighs your interest in not having your data processed for this purpose.

    Furthermore, we process data about any food restrictions you may have in order to adapt the food we serve you at the Event. When we process data about your food restrictions, this is done on the basis of your explicit consent.

    Who is the personal data collected from?

    We receive the personal data directly from you in connection with your agreeing to perform at our Events and in connection with your participation in Events.

    Who is the personal data shared with?

    Your personal data may be shared on our website, in our newsletter, and on our social media channels (such as Facebook, Instagram, Twitter, LinkedIn, YouTube, and Vimeo).

    Your personal data may also be shared with service providers and partners that take care of Event administration. When the service providers process personal data on our behalf, they act as data processors for us, and we are responsible for the processing of your personal data. They must not use your personal data for their own purposes and are contractually and legally obliged to protect your data.

    How long is your personal data stored for?

    Personal data regarding your participation is stored for as long as our agreement applies and for as long as is necessary for our accounting, tax documentation, and project reporting. In addition, images, videos, and audio recordings are saved to the extent necessary to maintain relevant content in our communication channels. Any data regarding food restrictions will be deleted after the Event.

  • We process personal data about you in connection with your participation in business/idea development.

    What personal data is processed when you are involved in business development?

    Your name, phone number, e-mail address, address, date of birth, gender, school, images, and other data that you provide to us.

    Why do we process your personal data and why do we have the right to process it?

    Your personal data is processed in order for us to fullfil our agreement with you.

    In addition, we process your personal data so that we can collect statistics in order to measure and evaluate various initiatives. When we process your data for statistical purposes, this is done on the basis of a legitimate interest. This means that we have assessed that we have an interest in being able to measure and evaluate our services and that this outweighs your interest in not having your data processed for this purpose.

    Who is the personal data collected from?

    We obtain your personal data directly from you in connection with your involvement in business development and from public registers.

    Who is the personal data shared with?

    Science Park never sells your personal data to third parties for direct marketing purposes. As far as possible, data is anonymized to parties outside Science Park and is shared in the form of aggregated statistics.

    Your personal data may be shared with partners (such as municipalities and businesses in Jönköping County, as well as public financiers) and, as far as your contact details are concerned, with third parties involved in the same business/idea development project.

    How long is your personal data stored for?

    Your data is stored until the project or assignment is complete and once any period for auditing, follow-ups, and reporting to partners and financiers has ended.

  • We process personal data about you when you take part in student entrepreneurship projects, either as a student or as a company representative.

    What personal data is processed when you are involved in business development?

    Your name, phone number, e-mail address, domicile, company name, school, images, and other data that you provide to us.

    Why do we process your personal data and why do we have the right to process it?

    Your personal data is processed in order for us to fullfil our agreement with you.

    In addition, we process your personal data so that we can collect statistics in order to measure and evaluate various initiatives. When we process your data for statistical purposes, this is done on the basis of a legitimate interest. This means that we have assessed that we have an interest in being able to measure and evaluate our services and that this outweighs your interest in not having your data processed for this purpose.

    Who is the personal data collected from?

    We obtain your personal data directly from you when you sign up for and participate in student entrepreneurship projects and from public registers.

    Who is the personal data shared with?

    In order to mediate contact between the students and companies involved in student entrepreneurship projects, we share your data with the companies and students who have registered an interest in taking part in such projects.

    Science Park never sells your personal data to third parties for direct marketing purposes. As far as possible, data is anonymised to parties outside Science Park and is shared in the form of aggregated statistics.

    Your personal data may be shared with partners (such as municipalities and businesses in Jönköping County, as well as public financiers) and, as far as your contact details are concerned, with third parties involved in the same student entrepreneurship development project.

    How long is your personal data stored for?

    Your data is stored until the project or assignment is complete and once any period for auditing, follow-ups, and reporting to partners and financiers has ended.

  • We process personal data about you in connection with your application to work for us.

    What personal data is processed when you apply to work for us?

    Your name, phone number, e-mail address, address, images, and other data that you provide in your application documents and during the recruitment process.

    Why do we process your personal data and why do we have the right to process it?

    Your personal data is processed so that we can manage your application and evaluate and assess whether you are a suitable candidate as well as to evaluate and follow up on the recruitment process, manage and respond to legal claims. When we process your data it is done on the basis of a legitimate interest. This means that we have assessed that we have an interest in being able to process and evaluate the application that you submit and that this outweighs your interest in not having your data processed for the specified purposes.

    Who is the personal data collected from?

    We obtain personal data directly from you when you submit your application to us and during the recruitment process, for example, from recruitment companies, reference persons, external individuals, and generally accessible information sources.

    Who is the personal data shared with?

    Your personal data is also shared with service providers who perform services on our behalf. When the service providers process personal data on our behalf, they act as data processors for us, and we are responsible for the processing of your personal data. They must not use your personal data for their own purposes and are contractually and legally obliged to protect your data.

    How long is your personal data stored for?

    Your data is stored until the period for any court action has passed.

  • We process the personal data of the contact people for our partners and suppliers.

    What personal data do we process when you are the contact person for one of our partners or suppliers?

    Your name, phone number, e-mail address, address, images, and other data that you provide to us.

    Why do we process your personal data and why do we have the right to process it?

    Your personal data is processed in order for us to fulfil our agreement with our partners and suppliers.

    Who is the personal data collected from?

    We obtain personal data from our partners and suppliers and, where applicable, directly from you.

    Who is the personal data shared with?

    Your personal data may be shared with other partners and suppliers.

    How long is your personal data stored for?

    Personal data is stored for as long as our agreement is in place with our partner or supplier and for as long as is necessary for our accounting, tax documentation, and project reporting.

  • We process personal data about contact people or employees of tenants at Science Park Jönköping.

    What personal data do we process when you are the contact person for or an employee of one of our tenants?

    Your name, company name, role in the company, phone number, e-mail address, images, and other data that you provide to us.

    Why do we process your personal data and why do we have the right to process it?

    Your personal data is processed in order for us to fulfil our agreements with tenants, to communicate with contact people and employees concerning property issues, and to fulfil our agreements with employees regarding access control card management.

    Who is the personal data collected from?

    We obtain personal data from our tenants and, where applicable, directly from you.

    Who is the personal data shared with?

    Your personal data is shared with the landlord, Jönköping kommuns Fastighetsutveckling AB and with our service providers, for example, the current provider of the digital service for meeting room booking.

    When service providers process personal data on our behalf, they are data processors for us, and we are responsible for the handling of your personal data. They may not use your personal data for their own purposes, and they are legally and contractually obligated to protect your information.

    How long is your personal data stored for?

    Your personal data is stored for as long as our agreement is in place with our tenant and you, and for as long as is necessary for our accounting and tax documentation.

  • When you have expressed interest in becoming a member of one of our networks and when you are a member of the network, we process personal data about you.

    What personal data is processed when you have expressed interest in becoming a member of one of our networks and when you are a member of the network?

    Your name, phone number, e-mail address, gender, company name or name of school, domicile and other information that you provide to us.

    Why do we process your personal data and why do we have the right to process your personal data?

    Your personal data is processed in order for us to administer the network and for us to fulfill our agreement with you.

    In addition, we process your personal data so that we can collect statistics in order to measure and evaluate various initiatives. When we process your data for statistical purposes, this is done on the basis of a legitimate interest. This means that we have assessed that we have an interest in being able to measure and evaluate our services and that this outweighs your interest in not having your data processed for this purpose.

    Who is the personal data collected from?

    We obtain your personal data directly from you when you register your interest in our network and when you are a member of the network.

    Who is the personal data shared with?

    We do not share your personal data with anyone outside of Science Park, except for your contact information, which may be shared with other members of the same network.

    How long is your personal data stored?

    Your personal data is stored as long as necessary for our accounting, tax documentation and otherwise as long as you participate in the network.

  • We may also process your personal data in the following situations.

    Communication between employees and external parties

    We process personal data when applicable in connection with communication, such as by e-mail and between employees and external parties.

    Answering questions

    If you contact us, such as by e-mail or phone, we process the personal data you provide us with in order to answer your question.

    Managing and meeting legal requirements

    We process your personal data if this is necessary in order to manage and meet a legal requirement, such as in connection with a dispute or legal process. For this purpose, we may share certain information with other recipients.

    Fulfilling legal obligations

    We will process your personal data if necessary, for fulfilling our legal obligations, such as in order to fulfil accounting or data protection requirements. For this purpose, we may share certain information with other recipients.

Where do we process your personal data?

We always endeavour to store personal data within the EU. In some cases, your personal data is shared with recipients outside the EU/EEA, such as to service providers hired by us.

To protect personal data, we ensure that we adhere to applicable rules and recommendations and ensure that prescribed security measures are in place with all service providers processing your personal data outside the EU/EEA.

Is your personal data processed securely?

Your personal data is processed securely and in accordance with applicable data protection rules. Procedures are in place to protect your privacy and your personal data. For example, we process only the personal data that we really need and are careful to delete personal data that is no longer needed. The systems used to process personal data are updated on an ongoing basis to ensure sufficient security, such as by way of anti-virus software and firewalls.

We have an IT security policy to ensure the secure processing of your personal data.

General information about the purging of personal data

The basic principles for the purging of personal data are to never process or store data for any longer than is necessary. When it is no longer needed for the purpose for which it was originally collected, it must be deleted or anonymised. We have a purging procedure in place for the various types of personal data we process. IT systems are adapted to ensure that it is technically feasible to purge personal data.

We review and evaluate on an ongoing basis how personal data that is processed should be purged or anonymised in order to process as little data as possible and no more than we absolutely need.

Incident management

We have developed a procedure to manage personal data incidents.

Training

Our employees receive relevant information and training on the processing of personal data in accordance with a separate annual training plan.

Your rights

Science Park Jönköping AB, corporate identity number 556595-6272 at the address Gjuterigatan 9, SE-553 18 Jönköping, Sweden is the data controller for the processing of your personal data. This means that we are responsible for your personal data being processed correctly and in accordance with applicable personal data legislation.

You have certain rights under current data protection legislation in relation to the personal data we have collected about you.

You have the right to:

  • Request access to and a copy of the personal data we hold on you.
  • Request rectification of personal data that you believe is incorrect or incomplete.
  • Withdraw your consent to our processing of your personal data based on your consent.
  • Request erasure in some circumstances, but not in cases where, for example, the law requires us to retain such data.
  • Unsubscribe from marketing and mailings, such as by clicking on an unsubscribe link in a mailing.
  • Request that the processing of your personal data be restricted in certain circumstances.
  • Object to processing which is based on our or another party’s legitimate interests for reasons related to your specific situation.
  • Transfer your data (data portability) under certain circumstances by requesting a copy of the personal data we hold on you in a structured format (data portability) that you can transfer to another recipient.

If you wish to exercise your rights, please contact us at hello@sciencepark.se.

Changes to this policy

We may update this privacy policy from time to time. For example, we can collect additional information or use information for purposes other than those specified in the text. The latest version of the privacy policy is always published on this page.

Questions?

Should you have questions about this policy or our processing of your personal data, or should you wish to invoke any of your related rights, please feel free to contact us at hello@sciencepark.se. Should you not be happy with the answers you receive, you have the right to lodge a complaint with the supervisory authority (the Swedish Authority for Privacy Protection).

Version 2023:1 (published 28 April 2023)