Privacy policy

Processing of personal data

The Privacy Policy covers our processing of personal data collected in relation to your interactions with us, if you are a job applicant, visitor of the Website, newsletter subscriber, or a representative of our business partners.

How we collect your personal data

The personal data we process relating to you is collected directly from you or from third party data sources. If you would like to know more about from which third parties we collect your personal data, you are welcome to contact us.

How we process your personal data

We only process your personal data to the extent permitted in accordance with Applicable Data Protection Laws. This means that we will have a legal basis for the purposes of our processing of your personal data, which in our context generally means one of the below legal bases. If you are acting on behalf of someone else, e.g., in the capacity of a representative of a company, our processing is carried out with reference to our legitimate interest balanced against your interests or fundamental rights or freedoms, where our legitimate interest is to conclude and perform the contract with the company you represent.

Performance of a contract: the processing is necessary in order for us to provide you with our services or otherwise perform a contract between us or the company you represent, or to take steps at your request prior to entering into a contract.

Performance of legal obligations: the processing is necessary to fulfil our legal obligations according to law or other statutes that we are subject to, or if we are subject to orders or decisions by courts or authorities, which require us to process your personal data.

Legitimate interests: the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, if they are not overridden by your interests or fundamental rights or freedoms.

Consent: the processing is carried out with your prior consent, where we are responsible for clearly informing you of what processing you consent to and your right to withdraw your consent in relation to our continued processing.

Below, we explain more about the categories of personal data we process, for what purposes we process them and what legal bases we rely on when processing your personal data, including for how long we store your personal data.

Why do we process personal data?

Volati has the following purposes and legal grounds for our processing of personal data:

1. To acquire and manage companies. The personal data processed in this context is primarily personal data that we obtain in the context of an acquisition and the administration of companies such as name, national identification number (Sw. personnummer), title/role, contact information, billing information and other business-related information that we obtain from our partners. The processing is necessary for Volati’s legitimate interest to acquire and manage companies. Volati retains your personal data for as long as they are relevant for the acquisition and management of companies and for up to two years thereafter.
2. To manage and administer our relationships with partners, suppliers and other stakeholders who contact us. The personal data processed in this context is primarily i) contact information such as name, address, telephone number, e-mail address, title and role, company name and ii) other information that you may share with us when you communicate with us, for example when you fill in our contact form on the Website. This processing is necessary for our legitimate interest to administer our relationships with partners, suppliers and other stakeholders, to process your request, provide you with the requested services or to provide the requested information in the contact form. Please note that you should not share more personal data with us than what is necessary for your matter or request. Volati retains personal data regarding relationships with partners, suppliers and other stakeholders as long as Volati deems it necessary for the respective relationship. When personal data are no longer necessary for the purposes of administering such relationships, personal data will be deleted unless further retention is required pursuant to law or is otherwise in line with this Privacy Policy.
3. To promote our business and to contact potential suppliers, partners and other stakeholders. The personal data that may be processed in this context is primarily contact information such as name, address, telephone number, e-mail address, title and role, company name. This processing is necessary for our legitimate interest to promote our business. Volati retains your personal data for as long as they are relevant for our marketing purposes and for up to two years thereafter.
4. To send our newsletter. The personal data that may be processed in this context is primarily e-mail address. This processing is based on your consent that you provide when you subscribe to our newsletter. Volati retains your personal data for as long as you are registered as a subscriber to our newsletter. You may withdraw your consent at any time.
5. To recruit personnel. Our processing of personal data in the context of recruitment processes is set out in a separate policy available here: Data & Privacy - Volati.
6. To comply with our obligations pursuant to applicable laws. The personal data processed in this context is primarily i) contact information such as name, address, telephone number, e-mail address, title and role, company name and ii) any other information that may contain personal data, such as accounting information, if such information is necessary for our compliance with applicable laws that we are subject to, such as the Bookkeeping Act (Sw. Bokföringslag (1999:1078)). This processing is necessary for us to fulfil legal obligations incumbent on Volati.
7. To enter into or fulfil contracts. The personal data that may be processed in this context is primarily contact information such as name, address, telephone number, e-mail address, title and role, company name. This processing is necessary for us to enter into or fulfil contracts. Volati retains your personal data until the contract expires and for up to ten years thereafter.

Transfers of personal data

We may share your personal data with our service providers, partners and other companies within our group in order to fulfil the aforementioned purposes of processing and conduct our business. In some cases, third parties may require access to some, or all of your personal data processed by Volati. In such cases, we will undertake steps to ensure that your personal data is processed in accordance with the requirements of the Applicable Data Protection Laws.

The disclosure of personal data that you provide to us by filling out contact forms, e-mail or by verbal contact will only be transferred to third parties to the extent required to comply with the agreement.

We strive to process your personal data within the EU or EEA. However, we will transfer your personal data to service providers who, either themselves or by their sub-contractors, are located or have business activities in a country outside the EU or EEA. In such cases, we are responsible for ensuring that the transfer is made in accordance with Applicable Data Protection Laws, e.g. by ensuring that the country in which the recipient is located ensures an adequate level of data protection according to the European Commission, or by ensuring appropriate safeguards based on the use of standard contractual clauses that the European Commission has adopted and other appropriate measures to safeguard your rights and freedoms.

You may access a list of the countries that the European Commission has decided to provide an adequate level of data protection here.

You may access the European Commission’s standard contractual clauses here.

For information regarding the safeguards applied in connection with transfers of personal data outside the EU/EEA, please contact us.

At times, we may be legally required to disclose personal data, in situations where we, for example, are involved in legal proceedings, where we are obliged to comply with legal obligations, legal requests by a public authority, or to comply with a court order. Such situations may also include instances where we prevent and investigate fraud or other illegal activity to protect our business, you and other partners, suppliers or stakeholders, including, where necessary, for the purposes of an investigation.

Volati may disclose your personal data to group companies and other related parties, as well as to potential owners, part owners and their advisors in connection with a sale of shares and/or assets in the company, a stock exchange listing and in the case of other corporate restructurings. Your personal data will be disclosed only to the extent it is necessary and only if Volati has a legal basis to disclose the information. The disclosure will be based on Volati’s legitimate interest to be able to divest and restructure its business, which is considered to prevail over your interest of protection of your personal data. A disclosure to external parties will only be made to parties that have entered into a non-disclosure agreement or that are subject to a statutory obligation of confidentiality.

The Website may contain references to third parties. Please note that Volati is not responsible for the personal data processing that occurs when you visit third party websites or contact third parties. In order to obtain information on how your personal data is processed by third parties, please read their privacy policies.

How long is personal data stored?

Please see the information on retention described above under "Why do we process personal data?".

We do not process your personal data for longer than is necessary for the purposes for which the personal data was collected.

Personal data processed for the purpose of complying with applicable laws or for the purposes of complying with our legal obligations will be retained in accordance with the legal obligations that Volati is subject to, such as obligations pursuant to the Bookkeeping Act (Sw. Bokföringslag (1999:1078)).

We may use personal data to handle any complaints or to defend and/or establish legal claims. We will generally process such personal data for ten (10) years from creation or for the time necessary to fulfil the purpose in the relevant case. This processing of your personal data is based on our legitimate interest of establishing and/or defending legal claims.

Your rights

Pursuant to Applicable Data Protection Laws, you have the right to request information on the personal data we process relating to you. You also have a right to receive a copy of the personal data we process about you free of charge.

Moreover, pursuant to Applicable Data Protection Laws, you may request correction of incorrect personal data, and in some cases, erasure of your personal data or restriction of the processing of your personal data. You are also entitled to object to processing based on Volati’s legitimate interest and you have an absolute right to object to Volati’s processing of personal data for the purposes of direct marketing. In the event of such objection, Volati will immediately cease the processing. As regards the processing of personal data based on a contractual relationship between us, you are entitled to request the data transferred to another controller (data portability).

Where personal data processing is based on your consent, you have the right to withdraw your consent at any time. A withdrawal of consent does not affect the lawfulness of the processing that took place prior to such withdrawal.

If you wish to exercise your rights, you may contact us via the contact details provided above.

Complaints with the supervisory authority

In Sweden, the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten) is the authority responsible for supervising the application of current Applicable Data Protection Laws. If you believe that we process your personal data in a wrongful manner, we encourage you to contact us so that we can review your concerns. However, you may lodge a complaint with the Swedish Authority for Privacy Protection at any time.

Cookies

The Website uses cookies, i.e. small text files which the website you visit requests to store on your device. Cookies store certain information, such as your language settings or other types of settings. Volati uses cookies to facilitate your surfing, improve your user experience and for our commercial interests of receiving information regarding those who visit the Website.

Strictly necessary cookies: Certain features of the Website cannot function without strictly necessary cookies. Your consent is not necessary for strictly necessary cookies.

Performance cookies: Performance cookies are used to see how visitors use the website, e.g. analytics cookies.

Targeting cookies: Targeting cookies are used to identify visitors between different websites, e.g. content partners, banner networks. Those cookies may be used by companies to build a profile of visitor interests or show relevant ads on other websites.

Functionality cookies: Functionality cookies are used to remember visitor information on the website, e.g. language, time zone, enhanced content.

You give consent to cookies by clicking "ACCEPT ALL" on our cookie banner. The personal data processing that takes place when you click "ACCEPT ALL" is based on your consent, except when we use strictly necessary cookies, since their use does not require consent. You have the right to withdraw your consent at any time.

Manage Cookie settings

If you choose not to accept all cookies, or only certain cookies, some features of the Website may not function as well. We do not place any non-necessary cookies before you have actively given your consent.

You can read more about which cookies are used and manage the use of cookies by clicking on the settings in our cookie banner.

You can also disable the ability for us to store cookies on your device via your browser settings and stop your browser from storing cookies. Please note, however, that the Website may not function as well without cookies and some features may stop working entirely. You can also clear cookies from your hard drive. However, this means that settings you have made on the Website will no longer be available. If you have a newer browser, it often supports private browsing (incognito). This means that all cookies are cleared every time you close your browser. Please note that this may cause some features of the Website to not function as well.

The Swedish Post and Telecom Authority (Sw. Post- och telestyrelsen) is the supervisory authority on the matter of cookies. You can find more information regarding cookies on their website: www.pts.se/en. 

Security

We ensure that appropriate technical and organizational measures are undertaken to protect your personal data against unauthorized access or destruction, illegal treatment or accidental loss or damage.

We use a secure server where your personal data is processed and limit the access to personal data within the organization. Authorization for access to personal data is given only to individuals within the organization as well as to our processors for the sole purpose of carrying out their duties.

Changes to this Privacy Policy

We reserve the right to change this Privacy Policy as necessary, for example to comply with changes in Applicable Data Protection Laws.