PRIVACY POLICY Background This information describes how companies within the DAY International AB Group (”DAY-INT, we/us”) collects and processes your personal data during and after working relationship with us, and outlines your rights in relation to the processing in accordance with the General Data Protection Regulation (GDPR) The information is addressed to anyone who is: – An employee; or – Freelance worker; or – Contractor including crews, talent or travel teams. And to anyone who: – Visits our website; or – Registers to subscribe to communication from us such as, but not limited to, newsletters; or – Registers a client login; or – Gets in contact with us as client, supplier, business partner or in its work or assignment with any of our clients, suppliers or business partners; or – Communicates with us for instance, but not limited to e-mail What is personal data? Personal data means any information that relates to an identified or identifiable natural person, e.g. name, address, telephone number, e-mail address, personal ID, photograph and IP address. Who is the controller of your personal data? Day International AB, reg. no. 556606-1627, is the controller of the processing of personal data that takes place when you visit our website, communicate with us, register a profile on our website or otherwise contacts us to subscribe for information from us, such as newsletters. In other cases, it is the legal entity (company) within DAY-INT with which you communicate that is the controller of personal data, for the processing that takes place e.g. in connection with your contacts with DAY-INT in your work, via e-mail or in other ways. What are our data protection principles? We comply with data protection law. This law states that the personal information we hold about you must be: – Used lawfully, fairly and in a transparent way. – Collected for purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes. – Relevant to the purposes outlined in this policy – Accurate and kept up to date – Only kept as long as necessary – Kept securely How we collect your personal data The following types of personal information may be collected, stored, and used: – Information about your computer including your IP address, geographical location, browser type and version, and operating system. – Information about your visits to and use of this website including the referral source, length of visit, page views, and website navigation paths. – Information that you enter when you register a client login on our website, such as your name and e-mail address. – Information that you enter in order to set up subscription to our newsletters. – Information that is generated while using our website, including when, how often, and under what circumstances you use it. – Any other personal information you send to us when you are working or communicating with us which includes, but are not limited to: o Personal contact details such as name, title, addresses, telephone numbers, and personal email addresses. o Date of birth o Gender o Marital status o National Insurance number or Social Security Number o Passport details o Bank account details and payment records o Salary, annual leave, pension and additional benefits o Copy of driving licence/Passport/Identity documents. o Recruitment information (including copies of right to work documentation, references and other information included in a CV or cover letter or as part of the application process). o Emergency contact information o Employment records (including job titles, work history, working hours, training records and professional memberships). o Compensation history o Disciplinary and grievance information. o Information about your use of our information and communications systems. o Photographs. How we use personal data Personal data submitted to us will be used for the purposes specified in this policy. We may use your personal information for the following purposes: – Administering our website and business. – To perform a contract which we have entered into with you – Sending you our e-mail newsletter if you signed up for it (you can unsubscribe at any time). – Sending you marketing communications relating to our business or the businesses of third parties which we think may be of interest to you. – Sending you on-marketing commercial communications. – Sending you business information (such as statements, invoices, and payment reminders to you). – Providing third parties with statistical information about our users. – Dealing with inquiries and complaints made by you relating to our website or business. – Keeping our website secure and prevent fraud. We will not, without your expressed consent, supply your personal information to any third party for their or any other third party’s direct marketing. Our legal bases for using personal data We base the processing of personal data for the purposes described in this policy on the following legal bases. – The processing of personal data when you visit our website is based on legitimate interest i.e. the processing is necessary for our legitimate interest in providing a secure and user-friendly website with a content relevant to the visitor. – The processing of personal data relating to clients, suppliers and business contacts is necessary in order for us to fulfil the contracts upon which our assignment is based, and the processing is also necessary for our legitimate interest in being able to perform assignments or other cooperation, client administration, and ultimately to be able to offer our services. – The processing of personal data when you register to subscribe for information from us, register a client login, and communicates with us is based on legitimate interest i.e. the processing is necessary for our legitimate interest in sending you the information, provide the client login and being able to answer you. Disclosing personal information We may disclose your personal information to any of our employees, officers, insurers, professional advisers, agents, suppliers, or subcontractors as reasonably necessary for the purposes set out in this policy. We may disclose your personal information to any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) as reasonably necessary for the purposes set out in this policy. We may disclose your personal information: – To so-called processors (external suppliers which process personal data on our behalf) e.g. suppliers of IT systems, system management and support, or IT infrastructure providers. – To the extent that we are required to do so by law. – In connection with any ongoing or prospective legal proceedings. – In order to establish, exercise, or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk). – To the purchaser (or prospective purchaser) of any business or asset that we are (or are contemplating) selling. – To any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information. Except as provided in this policy, we will not provide your personal information to third parties. International data transfers We may transfer your personal data to a third country, i.e. a country outside of the EU/EEA. This may take place, for example, through the storage of personal data on servers located in a third country, or where we retain an IT supplier to provide support and maintenance of IT systems from a third country. Information that we collect may be stored, processed in, and transferred between any of the countries in which we operate in order to enable us to use the information in accordance with this policy, i.e. may be transferred to the United Kingdom and the United States of America. In the event we transfer personal data to a third country, we will enter into agreements and take other measures to protect your personal data in accordance with applicable legal requirements. Retaining personal information Personal data that shall not be kept for longer than is necessary for the purpose of the processing. We practice storage minimization but how long we store the personal data depends on the purpose of the specific processing. We will retain documents (including electronic documents) containing personal data to the extent that we are required to do so by law; if we believe that the documents may be relevant to any ongoing or prospective legal proceedings; and in order to establish, exercise, or defend our legal rights (including providing information to others for the purposes of fraud prevention and reducing credit risk). Your rights You may instruct us to provide you with any personal information we hold about you. We may withhold personal information that you request to the extent permitted by law. You also have the right to request correction of incorrect personal data. Please let us know if the personal information that we hold about you needs to be corrected or updated. You may instruct us at any time not to process your personal information for marketing purposes. In practice, you will usually either expressly agree in advance to our use of your personal information for marketing purposes, or we will provide you with an opportunity to opt out of the use of your personal information for marketing purposes. If you wish to exercise your rights, please contact us on the details set out on https://day.se/contact/. Third party websites Our website includes hyperlinks to, and details of, third party websites. We have no control over, and are not responsible for, the privacy policies and practices of third parties. Cookies Our website uses cookies. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server. Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed. Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies. We use only session cookies / only persistent cookies / both session and persistent cookies on our website. Most browsers allow you to refuse to accept cookies by using your browser’s settings. Blocking all cookies will have a negative impact upon the usability of many websites. If you block cookies, you will not be able to use all the features on our website. Amendments We may update this policy from time to time by publishing a new version on our website. You should check this page occasionally to ensure you understand NEWSLETTER PRIVACY POLICY Copyright 2020 DAY AB By using this website, you agree to the use of cookies as described in our Privacy Policy. OK