Privacy policy and information about how personal data is handled by DRT Solutions

When we handle personal data for our clients, we take on the role of personal data assistants and therefore follow the directives that we receive from the client (who in such cases is the party responsible for that data). Outlined below is a simplified description of what applies when a company in the Samres Group has the role of personal data assistant. We primarily refer to our clients’ websites for information about how personal data should be handled. In the event of conflicts between what is stated below and what appears on clients’ websites regarding the handling of personal data, the information on the clients’ websites takes priority.

When we handle personal data as part of own business practices, we are the party responsible for that data.

Information about recorded conversations

• Calls may be recorded for education, quality and/or investigative purposes.
• The legal basis for handling personal information in companies that are part of the Samres Group who are responsible for personal information is that such information be handled in accordance with the agreements we have with our employees and the balancing of interests of all stakeholders who contact us.
• Our clients decide the legal basis for handling personal data in situations where they are the party responsible for handling that data.
• Access to recorded conversations is available to competent employees in the Samres Group only in accordance with their role (for the employee, that would likely include their manager, trainers, coaches and the employee themselves) and competent employees of the respective client only in accordance with their role.
• Those who have competence in the Samres Group in accordance with the Samres Group’s policies
• The extent to which clients have access to recorded conversations is regulated partly by rules applicable to parties responsible for personal data and the Samres Group’s own policies.
• Authorities may have the right to request recorded calls in connection with criminal investigations. This is done partly in accordance with instructions from the client and partly in accordance with the Samres Group's policy
• Personal data in this context are the telephone number, the recorded conversation, and any personal information stated during the conversation.
• Conversations and/or calls are searchable by incoming telephone number, date, time, any outgoing telephone number, and the Samres Group employee who handled the call.
• All data storage and back-up is done in Sweden.
• All conversations are deleted automatically after a maximum of eight weeks or in accordance with instructions from the client.
• Calls are answered in various locations where the Samres Group operates, including our offices in Moldova and Senegal.
• The Samres Group handles personal data in these countries with the support of personal data rules designed according to standard data protection clauses (in accordance with the EU Commission’s decision 15^th February 2010, 2010/87/EU).
• Those registered where a company in the Samres Group acts as a personal data assistant are the employees of the Samres Group and other relevant stakeholders who contact a company in the Samres Group.
• If you require an alternative way to contact the Samres Group without your conversation being recorded, there is information available on the Samres Group website.
• The Samres Group refers to our clients about questions concerning access to, correction of, and deletion of personal data when it concerns personal data handling on behalf of the client. This also applies to questions about the way in which data is processed, objections to data processing and handling, and the right to data portability.
• You have the right to contact the Data Inspectorate if you have concerns or complaints about how your data is handled.
• There is not currently an automated decision-making tool which uses data received during this process.

Information about personal data handling in booking systems and similar

• Our clients are always the responsible party for personal data and the handling of that data, and a company in the Samres Group has the role of personal data assistant. For complete disclosure of all the information held about and concerning you, you should therefore contact the client of the Samres Group according to the information below.
• The main purpose of handling and processing personal information in such cases is to book, plan and perform transportation and other services as required on behalf of the client.
• Our clients are responsible for the legal basis of processing and handling of personal data.
• The client has decided how, to who, and how a company in the Samres Group is permitted to share personal data.
• Handling and processing of personal data may be done throughout the entire Samres Group, including in our offices in Moldova and Senegal. The Samres Group handles personal data in these countries with the support of personal data rules designed according to standard data protection clauses (in accordance with the EU Commission’s decision 15^th February 2010, 2010/87/EU).
• The Samres Group refers to our clients about questions concerning access to, correction of, and deletion of personal data when it concerns personal data handling on behalf of the client. This also applies to questions about the way in which data is processed, objections to data processing and handling, and the right to data portability.
• You have the right to contact the Data Inspectorate if you have any concerns or complaints about how your data is or has been handled.

Information about personal data handling when a company in the Samres Group is the party responsible for managing that data

• The main purpose for handling and processing such information is to run our businesses by administering personnel and business contacts.
• The legal grounds for handling data is our responsibility.
• The Samres Group has encrypted and dedicated data communication facilities in the Group and throughout all systems. All employees have individual usernames and passwords, as well as a defined level of authority. All employees are trained in both systems and data security and have signed a confidentiality agreement. Logging is done and backups are available according to industry standards.
• The Samres Group has decided how, to who, and how data should be shared with others not employed by the Group. These personal data assistant act in accordance with signed agreements.
• The personal data that is processed or otherwise handled by us are names, addresses, email addresses, personal numbers, and other information associated with the individual and their working duties or business relationships.
• All companies in the Samres Group have signed mutual personal data assistant agreements.
• Handling and processing of personal data can be done throughout the entire Samres Group, including in our offices in Moldova and Senegal. The Samres Group handles personal data in these countries with the support of personal data responsibilities designed according to standard data protection clauses (in accordance with the EU Commission’s decision 15^th February 2010, 2010/87/EU).
• Those registered for the framework of our business practices where a company in the Samres Group is a party responsible for personal data are:

  • Earlier applications are saved until the hiring process is completed and for no more than one year after.

  • Some data may be saved so that we may provide a certificate of employment

  • Data that the employee produced in the context of the services they provided

  • Employees within the Group

  • Business contacts

  • Relatives of employees

  • Persons who are seeking or who have sought employment

  • Former employees

  • Recipients of newsletters and other information – the basis for this processing and handling is permission.

• The Samres Group refers to our data protection officer for questions relating to the Group’s personal data handling when a company in the Samres Group is the party responsible for personal data
• The data protection officer for Samres AB, Samres Holding AB and DRT Solutions AB: dpo@drtsolutions.eu.
• You have the right to contact the Data Inspectorate if you have concerns or complaints about how your data is handled.

Information about apps provided by DRT Solutions

DripDriver

• The Drip Driver app collects location data in order to display the vehicle's position. Collection of location data also occurs when the app is used in the background.
• Drip Driver does not collect location data when the app is turned off.
• Collected location data is saved for a maximum of 12 months for statistical and invoicing purposes.

Questions regarding the Drip Driver app can be sent to info@drtsolutions.eu.

More information about the Drip Driver app can be found at https://www.drtsolutions.eu/produkter-och-tjanster/drip-driver/