Employee Privacy Policy

1. About this Privacy Policy

Favro is committed to safeguarding the privacy of the personal information that we gather concerning our prospective, current and former employees and retirees (“​you​” or “​employees​”).

This privacy policy applies to personal information collected and used by Favro for management, human resources and payroll purposes. Please take the time to read this policy to understand how we process and use your personal information.

Favro respects its employees’ privacy, and we will use your personal information solely for legitimate business purposes and in accordance with applicable law.

This policy explains:

• What personal information we collect about you
• Why we collect and how we use that information
• The legal basis for our collection and use of your personal information
• When we disclose your personal information
• How your personal information is protected
• How long we keep the information
• How you can access and update your personal information

We have tried to keep this policy as simple as possible, but if you have any questions around the company’s processing of your personal information, please contact Squad Manager.

2. What information do we collect?

The types of personal information that we may collect from or about you include:

• Recruiting records
• Payroll information (including but not limited to social insurance number, bank account number, pay cheque deposit information or similar)
• Contact information (such as name, home address, telephone, personal email address, date of birth, employee identification number and marital status, and any other information necessary for Favro's business purposes, which is voluntarily disclosed in the course of an employee's application for and employment with Favro)
• Attendance and performance records
• Disciplinary and grievance records
• Emergency contact information
• Records regarding your use of digital products and services (including your use of email, the internet, social media and user generated content), including such data that we collect through use of “​cookie​” technology
• Information you choose to share (e.g., via Slack or other sharing tools and services)
• Public records
• Psychometric data and health records you consent to sharing

3. Why do we collect information​ about you and how will we use it?

‍The personal information collected is used and disclosed for our business purposes, including establishing, managing or terminating your employment relationship with Favro. Such purposes include:

• determining eligibility for initial employment, including the verification of references and qualifications;
• administering salaries and benefits, vacation, sick leave etc.;
• processing employee work-related claims (e.g. worker compensation, insurance claims, etc.)
• establishing training and/or development requirements;
• conducting performance reviews and determining performance requirements;
• assessing qualifications for a particular job or task;
• publishing your name and picture on the company’s website;
• gathering evidence for disciplinary action, or termination;
• establishing a contact point in the event of an emergency (such as next of kin);
• complying with applicable labour or employment statutes;
• compiling directories;
• ensuring the security of company-held information; and
• such other purposes as are reasonably required by Favro.

4. What is the legal basis for our use of your personal information?

The majority of your personal information is collected, used and disclosed in order to ensure the correct performance of your employment agreement with Favro. Some of your personal information is also used to comply with binding legal obligations in relation to your employment. A limited amount of your personal data may be used to fulfill the legitimate interests of Favro, where such legitimate interests take precedence over your rights and freedoms as an individual.

5. When do we ​disclose​ your personal information?

We may share your information:

• with our employees, suppliers, consultants and other parties who require such information to assist us with establishing, managing or terminating our employment relationship with you;
• with Favro subsidiaries and affiliated entities that provide services or conduct data processing on our behalf, or for data centralization and/or logistics purposes;
• with suppliers, consultants, marketing partners, and other service providers who need access to such information to carry out work on our behalf;
• in response to a request for information by a competent authority if we believe disclosure is in accordance with, or is otherwise required by, any applicable law, regulation, ordinance, license, operating agreement, or legal process. In such a case, we will endeavour to not disclose more personal information than is required under the circumstances;
• with law enforcement officials, government authorities, or other third parties if we believe your actions are inconsistent with our agreements or policies, or to protect the rights, property, or safety of Favro or others;
• during emergency situations or where necessary to protect the safety of a person or group of persons;
• in connection with, or during negotiations of, any merger, sale of company assets, consolidation or restructuring, financing, or acquisition of all or a portion of our business by or into another company;
• if we otherwise notify you and you consent to the sharing;
• in an aggregated and/or anonymized form which cannot reasonably be used to identify you.
• When we share personal information with other parties, as described above, we typically require that they only use or disclose such personal information in a manner consistent with the use and disclosure provisions of this policy.
• We may share personal information with parties both in and outside of your home jurisdiction, and as result, we may transfer the information described in this policy to, and process and store it in, countries outside the European Union (“​EU​”) or European Economic Area (“​EEA​”), some of which may have less protective data protection laws than your country. Where this is the case, we will take appropriate measures to protect your personal information in accordance with this policy, primarily by using so called standard data protection clauses adopted by the European Commission.

6. How is your personal information protected?

Favro endeavours to maintain physical, technical and procedural safeguards that are appropriate to the sensitivity of the personal information in question. These safeguards are designed to protect your personal information from loss and unauthorized access, copying, use, modification or disclosure. Such measures include, but are not limited to, encryption of stored data, 2-factor authentication, firewalls.

7. How long is your personal information retained?

Except as otherwise permitted or required by applicable law or regulatory requirements, Favro endeavours to retain your personal information only for as long as we believe is necessary to fulfil the purposes for which the personal information was collected (including, for the purpose of meeting any legal, accounting or other reporting requirements or obligations). We may, instead of destroying or erasing your personal information, make it anonymous such that it cannot be associated with or tracked back to you.

8. Changes to the policy

We may from time to time change this policy to reflect changes in legal or regulatory obligations or in the manner in which we deal with your personal information. We will communicate any revised version of this policy. Any changes to this policy will be effective from the time they are communicated, provided that any change that relates to why we collect, use or disclose your personal information will not apply to you where your consent is required, until we have obtained your consent to such change.

9. Your privacy rights

You have the right to access your Personal Information processed by Favro and may request a copy. If you have any questions regarding the Privacy Policy or the information we process, or any complaints regarding the way we are handling your data, please contact us at privacy@favro.com or write to us at Favro AB, Drottninggatan 2, SE-753 10 Uppsala, Sweden. We will provide you with information about the Personal Information we control and process about you free of charge once per calendar year (provided that you have asked for the information in a written request signed by you or that you have otherwise given proof of identity).

We will on our own initiative, or upon the request of you, rectify, delete, or complete any Personal Information in the register which we find is incorrect, unnecessary, inadequate, or outdated. You have the right to have incorrect details revised under certain circumstances. Please send such requests to privacy@favro.com specifying what you would like to modify.

We will respond and/or implement your preferences within 30 days of receiving your request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. We shall inform you of any such extension within one month of receipt of the request, together with the reasons for the delay. In order to provide any Personal Information to you, we will verify your identity and authenticate your access right before doing so.

You can also object to certain Personal Information about you being processed and request that processing of your Personal Information be limited. You also have the right to receive your Personal Information in a machine-readable format and have the data transferred to another party responsible for data processing.

Favro is committed to handle any request, complaint or concern that you may have about our use of your personal information in a fair and transparent way. If, however, you believe that we have not been able to assist with your complaint or concern, you may have the right to file a complaint with the data protection authority in your country (if one exists in your country) or supervisory authority.

If you are located in the UK, please note that Favro has appointed a UK representative in accordance with the UK GDPR. You may contact our UK representative Rickert Services Ltd UK via e-mail art-27-rep-favro@rickert-services.uk.

Our site and services may contain links to and from the websites of third parties such as our partner network. If you follow the link to any of these websites, please note that these websites may have their own privacy policies and we do not accept any responsibility or liability for the websites or these policies.