Processing of personal data within Humana

dataskyddsombud@humana.se

The Data Protection Regulation lays down six basic requirements for all processing of personal data

Humana shall ensure that personal data shall:

1. processed in a lawful, correct and transparent manner in relation to the data subject (legality, correctness and transparency). The requirement that the processing of personal data must be legal means, among other things, that there must be a legal basis for the processing.
2. used only for specific, explicit and justified purposes and not further processed in a manner incompatible with those purposes (purpose limitation).
3. be adequate, relevant and not too extensive in relation to the purposes for which they are processed (data minimization).
4. be accurate and up to date. The person who processes personal data must take all reasonable measures to ensure that incorrect personal data is deleted or corrected without delay (accuracy).
5. not stored, ie stored in a form that allows identification of the data subject, for a longer period than is necessary for the purposes for which the personal data is processed (storage minimization).
6. be protected against, inter alia, unauthorized or unauthorized treatment and against loss, destruction or damage by accident by taking appropriate technical and organizational measures (integrity and confidentiality).

If personal data is processed for purposes other than those for which it was collected, see paragraph 2 above, Humana shall always consider whether the new or changed processing is compatible with the original processing. Humana shall take into account the factors set out in Article 6 (1) of the Data Protection Regulation. 4.

Humana is responsible for the personal data processed by Humana in accordance with this personal data policy.

Humana will only collect and process personal data in accordance with this personal data policy as well as the Data Protection Regulation (EU 2016/679) and national legislation that complements the Data Protection Regulation.

Humana shall support at least one of the following legal bases for all processing of personal data:

1. Legal obligation
   Processing is required to fulfill a legal obligation based on law or constitution that is incumbent on the person responsible for personal data
   
   
2. Agreement
   The data subject has an agreement or must enter into an agreement with the person responsible for personal data
   
   
3. Balancing of interests
   The data controller may process personal data without the data subject's consent if the data controller's interests outweigh those of the data subject and if the processing is necessary for the purpose in question.
   
   
4. Consent
   The data subject has given his consent to the processing of personal data for one or more specific purposes

Humana collects and processes personal data that a data subject provides to us or that we collect and includes the following categories of data subjects:

Clients / assistance customers / patients
Persons who, on behalf of clients, have contributions in social care and / or health and medical care within Humana's activities. This includes ongoing, completed and potential assignments.

Pupils
The people who are enrolled in one of Humana's independent schools. This includes ongoing, completed and potential assignments.

Authority contacts
Clients and contact persons at an authority with which Humana has an assignment. This includes ongoing, completed and potential assignments.

Business contacts
Customers, employees, contact persons, supplier or partner of a company or organization with which Humana has a business relationship. This includes ongoing, completed and potential business contacts.

People who contact Humana
Those who choose to contact Humana in connection with inquiries about Humana, register for newsletters, register an interest in becoming a family home and in connection with this provide their personal information for exampel e-mail, telephone, etc.

Job seekers
Those who submit application documents to an advertised position or submit spontaneous applications.

Humana collects and processes personal data based on the following purposes and legal bases:

• To prepare and complete an assignment
• To conduct care and nursing
• To document our efforts and treatment
• For invoicing and administration

Legal basis: In order for Humana to be able to fulfill a legal obligation (eg: Social Services Act, Act on Support and Services for Certain Disabled Persons, Health Care Act)

• To prepare and complete an assignment
• To conduct teaching
• To issue grades
• To conduct school health care

Legal basis: In order for Humana to be able to fulfill a General interest (the Education Act) and to keep a school health record (Legal obligation)

Authority contacts

• To prepare and complete assignments
• For invoicing and administration
• To send information and marketing about Humana's services

Legal basis: Humans' legitimate interest, Balancing of interests

Business contacts (sole proprietorship)

• To prepare and complete agreements
• For invoicing and administration
• To send information and marketing about Humana's services

Legal basis: For Humana to be able to fulfill Agreements

Business contacts (legal entity)

• To prepare and complete agreements
• For invoicing and administration
• To send information and marketing about Humana's services

Legal basis: Humans' legitimate interest, Balancing of interests

People who contact Humana

• To answer inquiries by mail, e-mail, telephone, form, etc. and provide the assistance requested
• To send information and marketing about Humana's services

Legal basis: Humans' legitimate interest, Balancing of interests

People who sign up for newsletters

• To send information and newsletters that you have signed up for

Legal basis: For Humana to be able to send newsletters, Consent

Job seekers

• To prepare and complete the hiring process
• To comply with the rules on the provision of information on merits under the Discrimination Act.

Legal basis: Human and third parties' legitimate interest, Balancing of interests and complying with the rules according to the Discrimination Act, Legal obligation

The information you provide in your application is registered on behalf of Humana AB in Humana's recruitment system.

We process the following personal data
Name, year of birth, gender, e-mail address, telephone number, address, answers to selection questions in the application form, CV, personal letter, other attachments (Grades), test results from work psychological tests.

How long is the personal data stored?
When you have applied for an advertised recruitment process, all personal data will be deleted from Humana AB`s database in the recruitment system within 24 months of your last applied for position. In the case of spontaneous applications, all personal data is deleted after 6 months.

What should the data be used for?
Humana AB uses the information to handle your job application. Your application will be handled via a candidate profile that collects information you have submitted in connection with your job application.

Selection questions
Based on your answers in the selection questions in the application form, you may be rejected if you do not meet the requirements required by the requirements specification. Skall requirements are stated in the job advertisement.

Work psychology tests
Our recruitment process uses one or more work psychological tests. Your answers to the tests are compared with a predetermined work psychological profile for the job. The work psychological profile is based on competencies and other parameters taken from the requirements profile. Results from work psychological tests form the basis for deciding whether or not to proceed with the process.

Processing of personal data for future contact and offer of service
We save your personal information in order to be able to contact you if similar services are advertised in the area where you applied for a service. The personal information is stored in a candidate bank and can be used to match candidates for future recruitments.

Who can take part in the information?
Your personal information will be available to HR, recruiting people within the organization and in some cases communicated with our customers.
If you have a protected identity, please contact the contact person listed in the ad. You should also be careful about what information you share in your application. Therefore, only provide information that is relevant to the current position.

Personal data that is processed on the basis of assignments (including potential) within social services is disclosed to clients in accordance with legal requirements and agreements.

Personal data in other categories is only disclosed to other recipients when it follows from legal requirements, other statutes or government decisions.

Personal data is processed by personal data assistants who provide services in IT (operations, services, support, storage) and with whom Humana has signed personal assistant agreements.

Humana processes personal data within the EU and the EEA. In cases where Humana may process personal data in third countries, the necessary measures will be taken to ensure that the processing takes place in accordance with the requirements of the Data Protection Regulation.

Your personal data is only stored for as long as it is required to fulfill the purposes of the processing, or as long as we have to save them by law (legal obligation). Then your data is securely deleted so that it can no longer be recreated.

The following are examples of how long personal data is kept:

Clients / assistance customers
Personal records for 2 years from the last note date after the client / customer has been printed.

Patients
Patient records for 10 years from the last note date after the patient has been discharged.

Pupils
Grades and grade documents for 10 years after the student has finished school.

Authority contacts
As long as there is an assignment or agreement and thereafter as long as it is needed for follow-up, evaluation and legal claims.

Business contacts
As long as there is an active business relationship or agreement and thereafter as long as it is needed for follow-up, evaluation and legal claims.

Stakeholders
1 year from the time the person who contacted Humana received the help requested.

Job seekers
If the recruitment process ends and you are not offered the position, we will thin out your information or ask for your consent to continue to retain your personal information for future recruitment processes. Information is saved for 2 years after the position was filled in accordance with the requirements of the Discrimination Act if you were taken out for a job interview or offered the position.

Right to access data
You have the right to access the personal data that we process about you and receive information about the processing of your personal data by requesting a so-called register extract from us in writing. The register extract must be signed by you so that we can process your request.

With reference to the Data Protection Ordinance, we cannot disclose personal data if it may adversely affect the rights and freedoms of others.

Request for access to personal data that is processed (register extract)

Right to rectification
You have the right, without undue delay, to receive incorrect and / or incomplete personal data that we process if you have corrected it.
Request for correction of personal data

Right to be deleted
You have the right to have your personal data deleted if:

• personal data are no longer necessary for the purposes for which they are processed
• you revoke the consent on which the processing is based and there is no other legal basis for the processing.

We are not obliged to delete the personal data in your request if the processing is necessary to e.g. fulfill a legal obligation or if there is a contractual relationship where we must be able to assert or defend legal claims.

Request for deletion of personal data

Right to restriction
You have the right to demand that the processing of your personal data be restricted under certain conditions, e.g. if you dispute the accuracy of the personal data, you can request that the processing of relevant personal data be restricted during the time we check whether the personal data is correct.

Right to data portability
You have the right to transfer personal data that you have provided to us to another data controller if the processing is based on the legal basis agreement or consent and if it is technically possible. The right only applies to the personal information that you have provided yourself.

Right to object and lodge complaints
You have the right, at any time, to object to our processing of your personal data based on e.g. a legitimate interest (after a balance of interests), including profiling based on a legitimate interest, (direct marketing). If you object to such processing, we may no longer process your personal data for the relevant purpose unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or that the processing takes place to establish, exercise or defend a legal claim.
Your objection is examined by us in the individual case. In some cases we can not delete data, or restrict the processing of these, this e.g. due to the need to save the data for the contractual relationship or to comply with applicable law.

Right to object to direct marketing
When personal data is processed for direct marketing, you have the right to object to the processing of personal data concerning you at any time. If you oppose the processing of personal data for direct market purposes, we will cease that processing.

Right to file a complaint
If you believe that our processing of your personal data that we perform is contrary to applicable data protection legislation or that your rights are not respected by us, you can contact us (see contact information below) or contact the Data Inspectorate (datainspektionen@datainspektionen.se) which is the supervisory authority.