Fingerprint Card AB's notice for the use of personal information

The Fingerprints vision is a secure and seamless universe, where you are the key to everything. That’s a big responsibility, and one we at Fingerprint Cards AB (Fingerprints) take seriously.

1. How we respect your privacy

Our approach at Fingerprints is to be as open and transparent as possible about how we collect and use your information.

First, we let you know exactly what information we collect and why. You can read all about that in the next section.

Second, we let you know what we do with your information. Who do we share it with? What do they do with it? You can read about that in section 3.

Third, we protect your information and let you know how long we keep it. Read about that in sections 4 and 5.

Finally, we let you know your choices when it comes to your personal information, including who to contact if you have questions or requests. Read about that in sections 6 and 7.

Fingerprints or the company within Fingerprints Group that you or your employee has interacted with, is the data controller.

We may have a privacy policy or statement specific to particular local laws, products or services in which case such policy or statement shall supersede or supplement this privacy policy.

2. What information we collect and why

We want to make your Fingerprints experience great! To do that, we collect several types of information about you as a visitor to our website, or a contact at one of our customers (or potential customers), suppliers (or potential suppliers) or other business partners, or in any other cases where we specifically state that this policy will apply.

Any customers (or potential customers), suppliers (or potential suppliers) or other business partners is responsible to provide this information to relevant employees or consultant that interacts with Fingerprints on behalf of that party.

The personal data we collect about you includes the following.

3. Who we share your information with

We do not sell or trade your personal data to third parties, but we share it with others who can help us achieve the Fingerprints vision. That can be other companies within Fingerprints group or service providers. We’re all committed to keep your information safe and secure.

We may share personal information with others, including the following:

• Within Fingerprints: Fingerprints is one brand, but many group companies. Each plays a special role to achieve the Fingerprints vision. We may share your information with other group companies.  
• To Service providers: We may also share your information with authorised Fingerprints service providers under conditions of confidentiality and security as required by applicable law. Usually these are suppliers of the supply, support and maintenance of IT and cloud services, suppliers of market and customer satisfaction surveys, etc.

4. How we keep your personal information safe

We protect your information from all kinds of threats: destruction, loss, alteration, unauthorized disclosure or access. We do this in a variety of ways depending on where we store and use it.

Read more

Here are some things we do to keep your personal information safe:

Security

• Encryption of data;
• The use of:
  • firewalls and secure servers;
  • passwords;
  • hashing techniques;
  • logging of systems;
  • access badges in buildings;
  • a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.
• Security training and awareness of personnel (including trainings on phishing and social engineering);
• The ability to ensure:
  • the ongoing confidentiality, integrity, availability and resilience of our organization and systems that process your data
  • that availability and access to Personal Data can be restored in a timely manner in the event of a physical or technical incident

• Pseudonymisation / anonymization of data where possible.

5. International transfers

Fingerprints is a part of a global group of companies, and we have service providers and business partners in many parts of the world. In some cases, we might have to transfer your information to one of these companies located outside the European Economic Area (EEA) or People’s Republic of China (PRC) (Third Countries).

When transfer outside EEA, we mainly rely on so-called adequacy decisions. This means that the EU believes a Third Country’s own laws or agreements provide adequate protection for your personal data. If a country doesn’t have an adequacy decision or it is otherwise necessary, we will sign applicable Standard Contract Clauses (SCC) with the recipient, in order to be compliant with GDPR and/or Personal Information Protection Law (PIPL) in the PRC. Besides this, we will ensure that our arrangements are governed by relevant legal mechanisms and safeguards, designed to ensure that your personal information is protected.

Also, we will meet the legal requirements relevant to make the Third Country transfer compliant with applicable legislations, such as Third Country Impact Assessments, or collecting necessary consent for transfer out of PRC.

6. Why and how long we keep your personal data

Fingerprints keep and process your personal data only as long as it is necessary for the purposes for which the personal data was collected or to fulfill any legal obligations, and as stated below.

Personal data processed for contractual and business relation purposes, for example Suppliers, Business Partners or Customers to Fingerprints, will be processed as long as we may have any contractual rights and legal obligations towards you as the contact person or your employer, and as long as necessary in order to comply with any legal obligations in each of the countries where we conduct operations.

7. Your privacy rights

You have many rights regarding your personal information (subject to applicable local laws). Read more about them below. If you would like to exercise them or learn more, feel free to contact us! You can find contact details at the end of this statement. Please note that some of the rights may not be applicable to your situation.

Read more

Right of access

• You have the right to know what personal information we process and why. That’s why we inform you in advance about our processing activities via this statement. If you have any questions, or would you like to learn more about what information we process from you, you are always welcome to contact us and we will provide you with further information.

Right to rectification

• If you believe we store incorrect information about you, such as your name or contact details, you can ask us to correct this. 

Right to erasure / right to be forgotten

• Under some conditions, you have the right to tell us to permanently erase your personal information from our records. Or, if you previously have given your consent, you can just decide to withdraw it.

Right to restrict the processing activities

• You have the right to restrict our processing activities in certain situations. This means we will continue to store your information, but we’ll temporarily stop any other processing. Why would you want to do this? For example, if you’ve asked us to fix incorrect information, you may want us to stop processing until the information is correct.

Right to data portability

• In certain situations, you have the right to ask us to send your personal information in digital form to you, so that you can forward it to someone else.

Right to object

• You have the right to object to the processing of your information, even when we have a legitimate legal reason to process it. You can do this when we process your information on the basis of our legitimate interest, and you believe that your personal interest outweighs ours.

Right to withdraw consent

• If we process your personal information based on your consent, you have the right to withdraw your consent anytime.

Right to lodge a complaint with a supervisory authority

• If you aren’t satisfied with the way we treat your personal information, you have the right to lodge a complaint about us to your national supervisory authority. Contact information, and how you can proceed with this in the EU can be found at Integritetsskyddmyndigheten (IMY).

You have the right to receive information regarding your personal data processed by Fingerprints, and to request for rectification, limitation or deletion of these, by contacting the Data Protection Officer at Fingerprints, DPO@fingerprints.com. Further information and advice about your rights and lodging complaints about our processing of your personal information can be obtained from the data protection regulator in your country.

8. Cookies

• Our cookies are used for to recognize you when you visit our site.
• We also use cookies to understand and improve user experience while using our site when you access Fingerprints from other websites or devices such as your work computer or your mobile device.

Different kinds of browsers allow you to reject in different ways. Note that a rejection of all cookies may affect the functionality of the website since no information can be collected from your device.

9. Who to contact?

If you have questions about our privacy statement or practices, please feel free to get in touch. You can contact us at:

Fingerprint Cards AB
Att: DPO
Kungsgatan 20
SE-411 19 Göteborg, Sweden 
DPO@fingerprints.com