Privacy Policy

This Privacy Policy sets out important information about your rights in relation to our processing of your personal data, and the basis upon which any personal data we collect from you, or that you provide to us, will be processed in connection with your use of Coor ID.

Controller

Coor Service Management Group AB, Reg No 556739-7665, (“Coor”) collects and uses personal data, which is data that can be connected to our users. In this context, we are responsible for handling data in a secure and user-friendly manner, in line with both legal obligations and the expectations of our users.

Coor is the data controller for the processing of personal data described in this document.

What does Coor use my data for?

Coor collects and uses personal data to offer users our best services. In general, we use the data to:

• enable you to login with a central user account to digital services within the Coor Group
• investigate and prevent abuse of our services, including attempts to bypass our security measures
• to be able to maintain, develop, test and improve our digital channels and the technical platforms where they are delivered
• being able to communicate with you and assist you when you have contacted us, such as when you have submitted a service request to us or ordered food or drinks

Registration and use of the Coor ID

To create a Coor ID, you must register with an e-mail address. Your personal data is collected by Coor via the Coor ID Universal Login application.

In the majority of cases Coor have so called Single Sign On (SSO) setup in place so you can log in using your work e-mail account. Essentially, you enter your work e-mail. Coor recognize that the domain you're supplying is federated and hence you're redirected to your company login site to authenticate yourself. Once authenticated you're sent back to the Coor app and can start to use it.

For SSO to work the Coor application requires permission from the tenants AD to "Sign in a read user profile" and "Maintain access to data you have given it access to".

For some setups, where an SSO is not in place, you need to sign up and verify your registration for the Coor ID. Coor use the so-called double opt-in procedure where an e-mail is sent to the given e-mail address with a request for confirmation. Processing takes place for the purpose of performance of the contract (provision of the Coor ID service).

How long does Coor store my personal information?

We will store your personal data as long as your Coor ID exists. If you have not logged into a service with the Coor ID for a period of 5 years, we will delete this Coor ID together with your personal data to the extent we are not obligated to store the data for other reasons.

Where is my personal information stored?

Our Coor ID Universal Login application and other Coor apps are all hosted on servers within the EU.

Use of data processors

We use external service providers to execute specific tasks. Some of these service providers will have access to personal data. An example would be services to deliver data storage capacity. We consider these service providers to be data processors. This means that Coor is responsible for their processing of the personal data.

The service providers that are data processors can only process the personal data to deliver their services to us. They have no right to use the data for anything other than the purposes which they have agreed upon with Coor. This means that they cannot use the information for their own purposes. Our primary concern when evaluating the use of data processors is whether the data is processed in a safe and secure manner. We enter into written data processing agreements with our suppliers in accordance with applicable legal requirements.

Which rights do I have - and how do I go about getting access to exercise my rights?

Your personal information is your own. You have the right to access your information. You also have the right to have data about you corrected or deleted under the legal regulatory framework. You can request that the processing be limited if you - for example - believe that the processing is illegal. You have the right to receive some forms of data in a digital format or to have it transferred to other entities if you wish, known as the “right to data portability”. Your rights are explained in further detail below, as well as how you can exercise those rights. If you do not know whether Coor processes your personal data, you can ask for confirmation of any data processing by contacting Coor as described below.

Below is information on which rights you have, and how to use them:

• Your right to access your data: You have the right to see the data we process about you. To request access, contact us by sending an email to digital.support@coor.com.
• Your right to correct erroneous data: You have the right to correct data about you that is incorrect. Contact us by sending an email to digital.support@coor.com.
• Your right to have your data deleted (“right to be forgotten”): Generally, you have the right to have personal data about you deleted. Please note that erasure may result in us not being able to fulfil our commitments. To request data deletion, you should contact us by sending an email to digital.support@coor.com.
• Your right to object and to limit processing: In certain situations, we have the right to process personal data to fulfill our legitimate interests, provided that your rights and our obligations have been evaluated and balanced against those legitimate interests. In such cases, you have the right to object to our processing of your data. Generally, we will then stop this processing of personal data. In other, specific situations, you have the right to request that the processing of your personal data is stopped or limited. Please note that restriction or erasure may result in us not being able to fulfil our commitments. If you want to object to or limit processing, please contact us by sending an email to digital.support@coor.com with your request.
• Your right to access a copy of your data in digital format (right to data portability): In some cases, you have the right to receive data you have given us in digital format, as well as the right to have your data transferred in digital format to another entity, so long as it is technically possible. To make use of your right to data portability, you should send us an email to digital.support@coor.com.

You should know that there are a few exceptions to the rights described here. These exceptions follow the legislations we operate under.

Complaints, feedback, or other queries

If you are dissatisfied with the way in which we process personal data, have suggestions as to how we can improve, or have other feedback, you can contact us by sending an email to digital.support@coor.com.