Novus privacy policy and processing of personal data
Processing of personal data received via the Novus website
The personal data we collect via our website is data that you provide to us yourself, for example through our quote request form, contact form or when you sign up for our newsletter. Your personal data is stored in our CRM system, Lime. We use your personal data to contact you about a quote or another question you have asked us, or to send you our newsletter. We do not share your personal data with any other parties. You always have the right to request that Novus delete, in whole or in part, your personal data and/or background data that we have stored in our database. You also have the right to amend, or within 30 days and in electronic format access, the data we have stored about you.
Processing of personal data received via the Novus newsletter
When you sign up for the Novus newsletter, you need to provide your email address and consent to us processing it. This means that your email address will be stored by Novus and used to send you the newsletter. Novus is the data controller for this data. We never pass your email address on to third parties. You can withdraw your consent and unsubscribe from the newsletter at any time by emailing Novus at info@novus.se.
Processing of personal data received via the Novus Sweden Panel
What is the purpose of the Novus Sweden Panel?
The purpose of the Novus Sweden Panel is to give as representative a picture as possible of what people living in Sweden think about various issues. As a panel member, you can, for example, share your views on current issues in society. This enables us to provide our clients with fast, accurate and reliable insight.
Legal basis for the processing of personal data
The legal basis for the processing of personal data within the Novus Sweden Panel is consent. You can withdraw your consent at any time by emailing info@novus.se or calling us on +46 8 128 196 00.
Responsibility for personal data
Novus is the data controller for the personal data processed within the Novus Sweden Panel.
What information is stored?
When a Novus survey has been completed and closed, the link between the respondent and the data collected is removed. The only information Novus stores about you is your email address, along with your answers to the questions you responded to either when you registered or in the most recent update survey in which we asked you to update this information. This information is used only to invite you to relevant surveys and to be able to report results at an aggregated level for future surveys. The information is stored only for as long as you are a member of the Novus Sweden Panel.
Anonymity
Novus guarantees that no one will be able to see that you in particular took part in a survey or what you in particular answered. Taking part in our surveys is voluntary, and your answers are of course treated confidentially. Protecting your privacy is as important to us as it is to you. Novus will never disclose your email address or any other information about you to third parties.
Right to erasure or rectification of personal data and to a copy of your data
You also always have the right to request that Novus delete, in whole or in part, your personal data and/or background data that we have stored in our database. You also have the right to amend, or within 30 days and in electronic format access, the data we have stored about you.
Processing of personal data received via our other surveys
Novus also conducts surveys that do not involve the Novus Sweden Panel. In these cases, we use simple random samples from the SPAR database or other registers of public information. These often contain the name, gender, age and contact details of everyone registered as resident in Sweden. Business samples are often purchased from Bisnode. Contact details available on company websites and similar sources are sometimes also used. In all these cases, Novus is the data controller for the personal data collected.
Legal basis for the processing of personal data
The legal basis for the processing of personal data carried out in these surveys is legitimate interest.
We also conduct surveys with our clients’ customers or members. Where we receive personal data from our clients, the client is the data controller for the personal data and Novus is the data processor. We always enter into data processing agreements with our clients, which govern the respective responsibilities and obligations of the data controller and the data processor.
The information and personal data in the samples we receive from our clients are used only within the scope of the survey to which the sample relates.
Security
When Novus conducts surveys, we store personal data and collected response data in encrypted databases where personal data and response data are pseudonymised. Pseudonymisation means that personal data and collected response data are stored in different databases, in different formats and in different locations.
Novus has established the necessary security procedures for the processing of personal data in accordance with the requirements of the GDPR and the Swedish Authority for Privacy Protection (IMY). All personal data is stored within the EU, and access to your personal data is limited to a small number of people responsible for sample management and the processing of all collected data. Novus also has a Service Level Agreement with our system provider, Walr, which governs physical and technical security, availability and backup.
Novus also follows the rules applied by the international industry organisation ESOMAR regarding the handling of client data and confidentiality. Novus is a full member of ESOMAR.
Complaints
If you believe that Novus has not fulfilled its obligations under the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY). Contact details can be found at: www.imy.se