At Stockflow, we are committed to protecting your personal data and ensuring transparency in how it is collected, processed, and stored. This Privacy Policy explains our practices in accordance with the EU General Data Protection Regulation (GDPR).

To help you understand this Privacy Policy, here are some key definitions:

• Personal Data: Any information relating to an identified or identifiable individual. This includes, for example, names, email addresses, and government-issued identification numbers.

• Data Subject: The individual to whom the personal data relates. In the context of this Privacy Policy, the data subject is typically an applicant.

• Controller: The organization (in this case, Stockflow) that determines the purposes and means of processing personal data.

• Processor: An organization or individual that processes personal data on behalf of the controller, such as service providers or payroll offices.

• Processing: Any action performed on personal data, such as collection, storage, use, or sharing.

• Special category data: Personal data referring of inferring the subjects race, ethnicity, political opinions, religious or philosophical beliefs, trade union membership, health, genetic or biometric data, and sexual orientation.

1. Controller and Contact Details

• Controller: Stockflow ApS

• Contact Email: Info@stockflow.com

• Contact Address: Fuglebækvej 2A, Kastrup, 2770, Denmark
  

If you have questions regarding this Privacy Policy or the processing of your personal data, please contact us via the details provided above.

2. Why We Process Your Personal Data and the Legal Basis for Processing

We process personal data to support our recruitment process, employment management and the security of our stores. The specific legal basis for processing your personal data depends on the purpose. We rely on one or more of the following legal bases:

• Processing is necessary for the performance of a contract or steps taken to enter into a contract (GDPR Article 6(1)(b)):

  • We process your data to assess your application, communicate with you during the recruitment process, or manage your employment, including processing salaries and fulfilling role-related obligations.

• Processing is necessary to comply with a legal obligation (Article 6(1)(c)):

  • We process personal data to meet legal requirements, such as tax reporting, social security contributions, and maintaining mandatory employment records.

• Processing is necessary to pursue our legitimate interests (Article 6(1)(f)) :

  • We also process personal data to improve our recruitment process, to prevent and detect criminal activity and protect our customers, employees, and property.

3. Categories of Personal Data

We may collect the following types of personal data:

• Name, email address, phone number, and home address.

• Government-issued ID (if required).

• Employment history, education details, and other information in your CV or application.

• Bank account details for salary payment.

• Tax identification numbers and other data required for compliance with tax and social security laws.

• Video survailance of our stores

We only collect personal data necessary to fulfill these purposes. If you provide unnecessary personal data, we will securely delete it.

4. Data Sharing

We only share personal data with other organizations when we have a lawful basis to do so. When sharing data, we implement contractual arrangements and security mechanisms to protect personal data and comply with our data protection, confidentiality, and security standards.

Your personal data may be shared with:

• Internal Teams: Recruitment teams and hiring managers involved in evaluating your application.

• Third Parties:

  • Azets, our salary office, to process salaries and manage tax-related obligations.

  • Regulatory and tax authorities as required by law.

Your data will not be transferred to countries outside the EU or to international organizations.

5. Retention Period

We retain your personal data for:

• Video Survailance footage: Retained for 3 days, or longer if legal action is required

• Recruitment Data: 12 months from the conclusion of the recruitment process, unless legal obligations require longer retention.

• Employment Data: For the duration of your employment and as required by legal or tax obligations thereafter.

6. Your Rights as a Data Subject

Under the GDPR, you have the following rights regarding your personal data:

1. Access: Request access to your personal data.

2. Rectification: Correct inaccuracies or incomplete information.

3. Erasure: Request deletion of your data, subject to legal requirements.

4. Restriction: Limit processing under certain circumstances.

5. Portability: Request a copy of your data in a structured, machine-readable format or transfer it to another organization.

6. Objection: Object to processing based on legitimate interests or profiling.

7. Withdraw Consent: Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, please contact us at [privacy@stockflow.com].

7. Complaints

If you are dissatisfied with how we process your data, you have the right to lodge a complaint with the supervisory authority for your territory.

For Denmark, the relevant authority is:

Datatilsynet / The Danish Data Protection Agency
Carl Jacobsens Vej 35, 2500 Valby, Denmark
+45 33 19 32 00
Email: dt@datatilsynet.dk

For Sweden, the relevant authority is:

Integritetsskyddsmyndigheten (IMY) / Swedish Authority for Privacy Protection (IMY)
Box 8114, 104 20 Stockholm, Sweden
+46 08-657 61 00
Email: imy@imy.se

8. Automated Decision-Making and Profiling

We do not use automated decision-making, including profiling, during the recruitment process.

9. Changes in Purpose of Processing

If we intend to process your personal data for purposes other than those listed here, we will inform you and provide any additional relevant information before such processing occurs.