You have the right to request confirmation whether or not your personal data is processed by NCC, and if that is the case, get access to your personal data and additional information such as the purposes of the processing.
Rights of the data subject
You have different rights according to GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council).
If you have any questions or concerns regarding the processing of your personal data or if you wish to exercise any of your rights, please contact us by sending an email to GDPR@NCC.se or use the contact information provided on the web page.
We will respond to you without undue delay and no later than 30 days after we received the request.
Right of access
Right to rectification
You have the right to obtain the rectification of inaccurate personal data concerning yourself. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed.
Right to erasure ("right to be forgotten")
You have the right to obtain erasure of your personal data. NCC as the controller have the obligation to erase personal data without undue delay when one of the following conditions apply:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- You withdraw your consent on which the processing is based and where there is no other legal ground for the processing.
- You object to the processing and there are no overriding legitimate grounds for the processing.
- the personal data have been unlawfully processed.
- the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which NCC as controller is subject.
Right to object
You have the right to object to processing of your personal data that is based on NCC’s legitimate interest. If your objection is accepted, we will stop processing your personal data. If we want the processing to proceed, we will state our reasons in our response to you. If you object to processing for direct marketing purposes, we will always stop that processing.
Right to restriction of processing
You have the right to ask for a temporarily restriction of the processing of your personal data under certain circumstances such as when the processing is unlawful, during rectification or when you don’t want your data erased.
Right to data portability
The right to data portability entitles you to receive a copy of your personal data; and/or have your personal data transmitted from NCC to another controller.
You have the right to receive your personal data, in a structured, commonly used and machine-readable format. The right to data portability only applies when NCC is the controller for this information and the lawful basis for processing is consent or for the performance of a contract.
Right to not be subject to automated decision-making including profiling
The right of not being subject to a decision solely based on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Conditions for consent
You have the right to ask for information about given consent and to withdraw the consent.