Privacy Policy

1. Handling of personal data

CK Trafikskola AB with registration number 559233-1986 (hereinafter referred to as “CK Trafikskola”, “we” or “us”) is the data controller for the personal data about you that we process.

CK Trafikskola protects your personal data and your privacy. You should always feel safe when you provide us with your personal data. In this policy, we explain why we collect information about you and how we process it. You are welcome to contact us if you have any questions about how we handle your personal data. If you do not receive sufficient information or believe that we have failed in our handling, you can lodge a complaint with the Privacy Protection Authority.

We have taken the necessary security measures to protect your personal data from unauthorised access and unlawful processing and otherwise required to comply with applicable legislation and our internal policies and procedures. We have a data protection officer who checks that we comply with the rules and has a high level of data protection. CK Trafikskola employees also undergo regular training to be able to handle your personal data safely and in accordance with applicable regulations.

1.1 Contact details

Contact details for us and our Data Protection Officer can be found below. Contact us whenever you want, we will be happy to answer your questions.‍

Data Controller
CK Traffic School AB
Org no. 559233-1986
Postal address: Oxbacksgatan 8, 151 73 Södertälje‍

Data Protection Officer
CK Traffic School AB
Org no. 559233-1986
Att: Data Protection Officer
Postal address: Oxbacksgatan 8, 151 73 Södertälje
E-mail: info@cktrafikskola.se 

1.2 What is a personal data?

A personal data is any information that can be transmitted directly or indirectly to a living natural person. A large amount of data can be classified as personal data as long as they can be transmitted to a natural person. Examples of typical personal data include name, social security number, address information and telephone number. The categories of personal data that we process within our operations include the following:

• Basic identity data (name and social security number and copy of ID documents)
• Contact details (e.g. address, telephone number and email address)
• Data on financial situation (income and debt data or other assets)
• Information on employment and engagement (board assignments)

‍

We often process social security numbers and ID documents. This is because we must be able to verify your identity. We are subject to regulations that specify a long-standing obligation for us to ensure the identity of our customers.

‍

1.3 How do we access personal data?

1.3.1 Personal data processed on the basis of contractual obligations

Personal data that we hold about you has been disclosed in connection with the conclusion of a contract with us or collected in connection with the administration of the customer relationship and the use of our services. We also collect personal data about you from external parties, such as government agencies, information providers and credit reporting companies.

We may obtain a credit report about you from a credit reporting company. The credit information about you is essential for us to be able to administer the customer relationship. The basis for the processing is to fulfill the agreement. Credit information is regulated in the Credit Information Act. When we have received the information, you will be informed and you will receive a copy of the information. If you have specific questions about the content in the credit report, you should contact the credit reporting company directly.

1.3.2 Personal data processed due to CK Trafikskola gaining access

If you as a customer, for example, register at the traffic school, call, email the traffic school or make a request for a course on our website, it means that you send your personal data to us.

Your personal data is used by CK Trafikskola. These are issued only to the Risk Training Centre, the Swedish Transport Agency's Forensic Testing System and the Swedish Transport Agency. This is to be able to book pre-exams and report that you as a student are approved for the compulsory education required, such as Risk Education and Introductory Education.

1.3.3 Personal data processed for marketing purposes

Personal data processed for direct marketing purposes is collected from external parties, usually from information providers. The personal data is processed only for contacting you as a customer.

We never pass on, sell or exchange your personal data for marketing purposes to third parties outside CK Trafikskola AB.

1.3.4 Why do we process personal data about you?

CK Trafikskola has the right to process the personal data required for the fulfilment of our commitment to you as a customer, or that you have withdrawn your consent to us processing your data.

We may use your personal data for, among other things, the following purposes:

• We administer and implement an enrolment at the traffic school,
• We manage and administer bookings in the traffic school's own booking system,
• The Swedish Transport Administration's booking system and reports trainings such as Risk Training 1 and 2 and supervisor training to the Swedish Transport Agency,
• We provide WiFi service in our premises,
• To provide you with relevant information such as bookings,
• We send email and SMS notifications with, among other things, bookings of courses, driving lessons and exams.

‍

The purpose of the processing of personal data (the legal basis) is the performance of contracts, the fulfilment of legal obligations and vested interests. Our vested interests are to be able to raise and prevent breach of contract, avoid credit losses and to establish, enforce and respond to legal claims.

1.3.5 Have you been contacted by us by phone or email? Then you should read it.

We process personal data about you in order to be able to prepare about our services (marketing purposes). The personal data is collected so that we can contact you as a customer or the legal entity that you represent.

Processing for marketing purposes is based on a balance of interests where CK Trafikskola's vested interest is to market its existing or new services.

You can always contact us and inform us that you do not want us to process your data for marketing purposes. We will then immediately start using your data for this purpose and delete the data if there is no legal basis for processing.

For those customers who have refused to be contacted for marketing purposes, a very limited amount of personal data is stored only for the purpose of making it possible to exclude them from future marketing actions.

1.3.6 Your rights as a data subject

Access to your personal data - register extract

You have the right to obtain confirmation on whether we process personal data concerning you. If we process data about you, you also have the right to have access to what personal data we process and information about the purposes for the processing — a register extract. You can send your request for a register extract to info@cktrafikskola.se or to the following postal address:

‍

CK Traffic School AB
Att: data protection
Oxbacksgatan 8, 151 73 Södertälje

‍

Once we have received your request, we will contact you to verify your identity. We can only disclose the personal data that we can control about you.

The register extract will then be sent to an email address you have provided or to your registered address.

Rectification of incorrect information we hold about you

If you believe that we have incorrect information about you, you have the right to request that we rectify the incorrect data. You also have the right to complete personal data that you consider to be incomplete with regard to our purpose of personal data processing.

1.3.6 Deletion of personal data

We never process your personal data for a longer period of time than what is necessary and permissible. You have the right to request that we delete your personal data and we are obliged to delete the data without any reason in the following situations:

• If the personal data are no longer necessary for the purposes for which we collect and process them,
• If the processing of personal data is based only on your consent and you withdraw the consent,
• If you object to a personal data processing that we have based on a balance of interests and we do not have compelling justified reasons that outweigh your interest in the processing,
• If the personal data has been processed in an unlawful manner,
• When personal data must be deleted in order for us to fulfill a legal obligation to which we are subject,
• If the personal data has been processed for direct marketing purposes and you object to the processing.

‍

We would like to inform you that we may refuse your request for erasure if we have an obligation to store the data in accordance with mandatory legislation (legal obligation). The obligation to save personal data arises, among other things, from bookkeeping and money laundering legislation.

We would also like to inform you that we may deny your request if the processing is necessary for us to establish, prevent or respond to legal claims.

Restrict the processing of data

You have the right to request that the processing of your personal data be restricted. If the processing is restricted, it means that we — in order to store your personal data — can only process the data if you have withdrawn your consent or to establish, apply or respond to legal reasons or to protect the rights of another person. The right to use restriction applies in the following situations:

‍

• If you dispute that the personal data we hold about you is correct, you can request that we restrict the processing of personal data for a period that allows us to verify whether the data is correct,
• If the processing is unlawful and you object to the erasure of the data and instead request a restriction of the use of personal data,
• If we no longer retain the personal data for the purposes for which we have processed the data, but you retain it in order to be able to establish, apply or respond to legitimate reasons,
• If you have objected to a treatment that we have based on our qualified interest after interest weighing, you can request that the treatment be restricted for the time required to check that our prepared reasons are heavier than your prepared reasons.

‍

Invasion

You have the right to object to the processing of personal data that we base on a balance of interests. In order for us to continue the processing of personal data, we must show compelling justified reasons for the processing that outweigh your interests, rights or freedoms. If we cannot demonstrate this, we may only process the personal data for the purpose of establishing, exercising or responding to lawful reasons.

You have always had the right to object to the processing of personal data that takes place for direct marketing. The right to object to the processing of personal data includes objection to the analysis of personal data for direct marketing (profiling).

Data portability

You have the right to receive personal data that you yourself have submitted to us in a structured format and you have the right to transfer the data to another controller if the personal data is processed after consent from you or in order to fulfill a contract concluded with us. The right to have the data transferred to another controller applies where it is technically possible.

Complaints to the Privacy Protection Authority

If you believe that we have failed in our handling, you can lodge a complaint with the Privacy Protection Authority. Here you will find a link to the authority's website:‍

https://www.imy.se 

Storage and deletion of personal data

We never store personal data longer than what is required and/or necessary to be able to fulfill the purposes of the processing. How long we store the personal data depends on the background of the personal data processing.

Personal data processed on the basis of contractual obligations

If the processing of personal data is based on the fact that you or a company to which you represent has entered into an agreement with us, the data will be processed during the period of an ongoing contractual relationship with us. During the contract period, it is checked that the data is current and the data that is no longer stored is deleted.

When the contract is terminated, only the data that we need to store is stored in order to comply with legal obligations (accounting legislation), or to be able to establish, exercise or respond to legal reasons (balance of interests). The storage obligation is for us according to the Bookkeeping Act for 7 years.

Data sent to outsiders

We hire external companies for services that are essential to being able to offer our services and fulfill contracts and may then send out your data to outside companies that we employ. This may concern, for example, services that we use for electronic identification and signing, payment and banking solutions and IT solutions. Suppliers who process data for our purposes are so-called personal data processors and may only process the data according to our instructions. We take measures to ensure that the data processors process the data safely and in accordance with the applicable regulations. We may also disclose your personal data to authorities in order to comply with mandatory legislation.

Transfer of personal data within the Group

Personal data may be disclosed to companies that are part of the same group as CK Trafikskola. The transfer of personal data within the Group always complies with CK Trafikskola's privacy and privacy policy and applicable legislation. The IT systems that we use for storage and processing have been checked to meet the requirements of safe storage space. All technical measures required to protect stored personal data against unauthorised access and transfer have been taken. The personal data processed within our operations are stored on servers within the EU.

Job Seekers and Interests

If you submit a job application or a letter of interest, your application will be processed by the responsible person with us. If your request does not match any available service with us, you will be notified and your personal data will be deleted. If your profile matches a vacancy, you will be contacted and your personal data may then be processed until the recruitment process is completed. The purpose of personal data processing is to recruit staff.

‍Security

2. Management of cookies

In connection with a visit to our website, so-called cookies are stored. As a user, you can decide whether you want to accept cookies or refuse cookies to be saved during your visits. Depending on which browser you use, there are different settings that you can make in your browser regarding cookies. The following text describes our management of cookies.

When do we use cookies?

When you visit our website, we use cookies to, for example, customize the visit so that you do not have to see the same pop-up event several times during a visit or to store other settings. If you do not accept the use of cookies, you can click “Reject” or change the settings in your browser.

Cookies that relate to our website that you visit are called first party cookies. We also manage so-called third-party cookies from, for example, Google Analytics and Facebook in order to display more relevant ads or traffic in terms of, for example, the number of visitors.

Your consent

We use cookies to ensure that we give you the best experience on our website. By continuing to use the site or by clicking “Accept” you agree that we use cookies.

You have the right to decide whether you want to accept or reject cookies. By not clicking “Reject”, cookies will not be stored on your computer or device. If you do not accept cookies, it may result in some information on the website not being available or not working as intended.

If you delete cookies in your browser, this will only apply to the browser you are using. You will have to follow the same process for all the different web browsers you use.

Please note that not accepting cookies is not a way to avoid advertising on websites. The same amount of advertising will appear as before and in some cases the advertising may become less relevant to you as a user.

3. Information provision and updates

This policy was updated and published on 1 January 2025. The latest version of our policy on the handling of personal data and cookies is always published on our website. If necessary, we may update our privacy policy. If the updates are of great importance for the processing of your personal data, you will be notified.