You have certain rights linked to your personal data that we process for certain purpose. In order to fulfill your rights, we must of course always handle your personal data within the scope of your request.
If you want to exercise your rights at ICA Gruppen AB, please contact ICA, phone number +46 08-561 500 00 and ask to be connected to “HR support" for support.
If you want to use your rights as a customer of one of the other ICA companies - for contact details, see more at icagruppen.se/en/dataprotection.
If you want to use your rights as an employee or contractor, see further information on Worknet.
If you want to exercise your rights as a former employee or contractor, contact ICA, phone number + 46 08-561 500 00 and ask to be connected to "HR support" for support.
If you are not satisfied with the answer or do not receive a response, please contact the data protection officer (DPO) of ICA Gruppen AB and tell the DPO what you think is wrong, see contact details below for the data protection officer.
ICA Gruppen AB: dpo.icagruppen@ica.se
We have under certain circumstances the right to deny the exercise of some of your rights, for example we cannot accommodate a erasure request if the personal data is still necessary for the purposes for which it was collected or otherwise processed. Another example is if your request is clearly unfounded or unreasonable, for example if you repeatedly request the same thing.
If you do not receive a response to your request, you can submit a complaint to Swedish Data Protection Agency's, IMY, www.IMY.se.
You have the right to order a free register extract containing your personal data that ICA processes about you. Examples of this can be basic information about you such as name and contact details.
What happens after the order?
• Once you have ordered your register extract, it normally takes up to 30 days for us to compile your extract. When the compilation is complete, we will send your register extract via link on the condition that you identify yourself with Mobile bankID. Otherwise, we will send you the register extract via registered mail to your civil registration address.
If you think that information about you is incorrect or incomplete, you have the right to request that the information should be corrected or supplemented.
Under certain circumstances, you have the right to have your personal data erasured. The right to erasure applies in the following cases:
• If the data is no longer needed for the purpose for which it was collected.
• If the processing is based on your consent and you have withdrawn it.
• If you object to personal data processing that takes place on the basis of the personal data controller's legitimate interest and there are no legitimate reasons that outweigh your interest.
• If the personal data has been processed illegally by us.
• If erasure is required to comply with a legal obligation.
In the following cases, we cannot comply with your request for erasure if it is necessary for:
• To accommodate other important rights such as the right to freedom of expression and information.
• To fulfill a legal obligation.
• To perform a task of public interest or as part of the exercise of authority.
• To be able to establish, enforce or defend legal claims.
• Archival purposes of general interest or for scientific, historical or statistical purposes.
• Reasons relating to a generally important interest in the field of public health.
In some cases, we have made the assessment that our need to use your personal data is so strong that we have a so-called legitimate interest. If there are legitimate reasons for the current use that outweigh your privacy interest, we may continue to use your data, even though you have objected to the use. If we cannot demonstrate legitimate reasons, we will stop using your personal data.
In certain situations, you have the right to demand that the processing of your personal data should be restricted. An example is if you believe that information about you is incorrect and you have requested correction of your information. While the matter is being investigated, you can also request that the processing of the relevant personal data should be restricted.
Another situation is if you have objected to a certain treatment. While the data controller investigates whether their interest outweighs your interest that the personal data is not processed, you may also have the right to have the processing restricted.
However, we may use the information to manage and respond to legal requirements or to protect someone else's rights. We may also use them in specific situations if you agree.
In the case of a restriction, the data is marked so that it may only be processed for certain purposes. When a restriction ends, you will be informed.
In some cases, we may ask for your consent to process your personal data. You then have the right to change your mind at any time and withdraw the approval for further treatment. This means that we still have the right to use already collected data, since you have already given your consent.
The right to move personal data is called the right to data portability in the DPGR. If we base our processing of your personal data on your consent or a contract, you can request to receive the data in a commonly used and machine-readable format. In addition to requesting to obtain the data, you can also request that the personal data be transferred to another personal data controller, for example another company if you want to use their services instead. The data controller only needs to transfer the data to another company if it is technically feasible.
The right to object to direct marketing is absolute and there are no exceptions. If you object to direct marketing, your personal data may no longer be processed for such purposes, it must cease.
You can e.g. cancel a subscription mailing at any time by unsubscribing via a link in the mailing.
If a data controller uses algorithms to make decisions about you using your personal data, the data controller must:
• Tell you that the decision is automated.
• Give you the right to have the decision reviewed by a real person.
• Give you the opportunity to contest the decision.
You can read more about the GDPR and what rights you have on the Swedish Data Protection Agency's website, www.imy.se
ICA Gruppen uses cookies to make the website work. They are also used to improve your experience and follow up on how the website is used. More about cookies at ICA Gruppen.
ICA Gruppen uses cookies to make the website work. They are also used to improve your experience and follow up on how the website is used. More about cookies at ICA Gruppen.