Privacy Policy for Nordiskt Flygteknikcentrum AB

This privacy policy describes how Nordiskt Flygteknikcentrum AB (hereinafter NFTC) handles personal data and applies when someone uses NFTC’s services or otherwise comes into contact with us.

Responsibility for Personal Data

NFTC, with organization number 556148–1010, is the data controller responsible for the processing of personal data provided by data subjects and is responsible for ensuring that such processing is done lawfully.

How NFTC Collects Personal Data

NFTC collects personal data that data subjects provide to us when they use our services. This may include when you express interest in our programs, follow us on social media, etc.

NFTC may also obtain personal data from other sources than the data subject. This data may come from public sources for purposes such as credit reports and address updates.

Types of Data Processed

NFTC processes the personal data provided to us. This may include name, email address, phone number, postal address, birthdate, and/or other information you have provided or that is necessary for us to fulfill our commitments to you.

Purpose of Processing Personal Data

Personal data may be used for the following purposes:

• To fulfill our commitments to you.
• To provide good service and efficient, functional, and easy-to-use services.
• To manage and administer your inquiries and feedback submitted via NFTC’s website or phone.
• To carry out voluntary market research.
• To perform credit checks for credit purchases.
• To prevent abuse or improper use of our services.
• Recruitment

If you submit documents to NFTC to apply for a job or make an unsolicited application, you consent to us processing your personal data according to applicable laws. The data will be handled by the recruiting manager. You can always withdraw your application, at which point your personal data will be removed. Personal data is stored for up to 24 months (2 years) after the application.

NFTC’s Right to Process Personal Data

NFTC has the right to process personal data that is necessary to fulfill obligations to the data subject or if the data subject has given their consent to the processing. NFTC may also need to process personal data due to legal or regulatory requirements.

In some cases, we may need the data subject’s consent to process their personal data. When the data subject provides consent in these cases, they will always receive clear and detailed information about what they are consenting to.

Processing of Special Categories of Personal Data

We generally do not process personal data that reveals race or ethnic origin, political opinions, religious or philosophical beliefs, union membership, genetic data, biometric data that uniquely identifies a person, health data, or data about a person’s sex life or sexual orientation.

When communicating with us, we ask that you avoid providing information that may constitute special categories of personal data as outlined above. For example, when applying for a job at NFTC and attaching a CV.

Who Has Access to Personal Data

Personal data is used by NFTC and our data processors. We do not disclose personal data to other companies unless required by law, regulation, or government decision, or to protect our or third-party rights.

We do not forward, sell, or trade your personal data for marketing purposes to third parties outside of NFTC.

NFTC is subject to the principle of public access. This means that certain documents are public and may be disclosed upon request. Before disclosing, we perform a confidentiality review in accordance with the Public Access to Information and Secrecy Act.

Transfer to Third Countries

NFTC does not currently transfer personal data to countries outside the EU/EEA. If this becomes applicable, personal data will only be transferred to countries outside the EU/EEA if the country has an adequate level of protection according to the EU or European Commission, complies with Privacy Shield requirements, or if this is specifically stated when you provide your personal data to us.

How Long is Personal Data Stored?

NFTC retains personal data as long as necessary to fulfill our obligations and according to applicable laws regarding document retention. The data is then deleted or anonymized. NFTC continuously reviews data within operations.

Data Subject Rights

The data subject has the right to request information about what personal data we have stored about them at any time (free of charge once per year). The request must be in writing, signed by the individual, and include their name and personal identification number. This is necessary to ensure that the information is provided to the correct person. A valid ID must be presented when the information is disclosed.

If personal data is incomplete, inaccurate, or irrelevant, the data subject may request corrections. The data subject also has the right to have their personal data deleted. We cannot delete data that constitutes public documents or when there is a legal requirement for storage, such as accounting regulations, or when there are other legitimate reasons for retaining the data, for example, unpaid debts.

When personal data processing is based on consent, the data subject may withdraw their consent at any time, as long as it is consistent with applicable law.

Requests for register extracts, information, deletion, or correction of incorrect data should be sent to:

Data Protection Officer
Luleå Municipality
975 81 Luleå
Phone: 070-682 99 30
Email: dataskyddsombud@lulea.se

The data subject also has the right to file a complaint with the Swedish Data Protection Authority, which is the supervisory authority for the processing of personal data.

How the Data is Protected

NFTC values your privacy. We continuously work to take all necessary technical and organizational measures required to protect your personal data and ensure that the processing complies with applicable law.

Cookies

NFTC’s website uses small text files, known as cookies, to assist visitors in navigating the site. We use cookies to collect statistics about users’ visits and to improve the experience. This may include saving choices the visitor makes on our website. Cookies on NFTC’s website do not constitute personal data in the legal sense. If the visitor wishes to disable cookies, this can be done through the browser settings.

If NFTC uses cookies in the future that can be linked to a physical person and thus constitute personal data in the legal sense, we will obtain clear consent at the start of the website visit, before these cookies are activated.

Necessary Cookies:

To ensure the website functions properly, certain necessary cookies are stored, such as session cookies and the cookies indicating your choice of cookie settings.

Marketing Cookies:

Google/YouTube stores cookies for personalized advertising based on pages you have previously visited, and links devices logged into the same Google account.

Deklaration av enskilda cookies

• cookieconsent: Indicates consent to cookies for www.NFTC.se
• _ga: Google analytics, used to understand how the visitor navigates around the website. Learn more here
• _gid: Google analytics, used to understand how the visitor navigates around the website. Learn more here
• gat: Google analytics, used to understand how the visitor navigates around the website. Learn more here
• APISID, NID, SID, 1P_JAR: Used for personalized advertising on Google pages, based on recent searches and activities.
• HSID, SSID, APISID, SAPISID: Used by Google to collect information about the user for YouTube videos.
• SIDCC: Google security cookie to protect user data from unauthorized access.

Updates to this Privacy Policy

NFTC makes continuous changes to this policy. A new version becomes applicable when it is made available on this website.