A.R.C Real Estate Partner
Privacy Policy
A.R.C Fastighetspartner AB, with corporate registration number 559268–0739 and address Annavägen 5,
352 46 (“we,” “us,” “A.R.C”), is the data controller and is responsible for the personal data processed about you.
For us at A.R.C., our customers’ trust is of the utmost importance. This trust forms the foundation of our business. You should always feel secure when you entrust us with your personal data. To inform you about how we process personal data, we have established this Privacy Policy. The Privacy Policy is based on applicable law and clarifies how we work to protect your rights and safeguard your privacy. If you have any questions regarding the use of your personal data in accordance with this information, please contact us at info@arcfast.se.
A.R.C collects information about you through the information you provide to us when you visit our website, apply for a job with us, enter into an agreement with us, use our services, or otherwise communicate with us—for example, when you fill out our contact form, submit a service request/place an order on our website or via a phone call with us, as well as through information collected from third parties. A.R.C collects information about you as an individual from third parties through the credit check we conduct prior to entering into a contract. Third parties may vary from time to time.
We are constantly working to improve our operations, so this Privacy Policy may be updated from time to time. We may update this Privacy Policy in response to changes in legal, technical, or business developments. You can see when it was last updated by checking the date at the bottom of this Privacy Policy.
The purpose of this Privacy Policy is to inform you about how we process your personal data, what we use it for, who has access to it and under what conditions, and how you can exercise your rights. We strive to be transparent about how we use your personal data.
This Privacy Policy is structured as follows:
1. Personal data processed when you visit our website
2. Personal data processed when you apply for a job with us
3. Personal data processed when you are a contact person in our business dealings with the company you work for
4. Personal data processed when you enter into an agreement with us to use our services
5. Personal data we process after you have entered into an agreement with us
6. Personal data processed for direct marketing purposes
7. Personal data processed due to a legal obligation or to safeguard
legal claims
8. Who we share your personal data with
9. Transfers outside the EU/EEA
10. How we protect your personal data
11. Your rights
The supervisory authority for the processing of personal data is the Swedish Data Protection Authority (IMY). If
you wish to file a complaint with the Swedish Data Protection Authority regarding our processing of
your personal data, you have the right to do so. Please visit www.imy.se for more information on
how to proceed.
1. Personal data processed when you visit our website
| Personal data processed | Purpose | Legal basis | Retention period |
| We process your IP address. When you enter a website address into your browser, a request is generated and sent over the internet. The request passes through our routers on its way to our website. | We need to process your IP address so that you can access our website. We store a text file (a cookie) in your browser to collect information about your use of our website during your visit. | We have a legitimate interest in ensuring that you and others who are interested in our services can visit our website to access our services. | Your IP address is processed only during your visit to our website and is therefore not stored. Other cookies are stored until their expiration date or until you delete them from your browser. By deleting cookies or disabling this feature in your browser, you can ensure that A.R.C. no longer processes this information. |
| Personal data processed | Purpose | Legal basis | Retention period |
| A.R.C uses Google’s analytics tool, GA4. The tool places its own cookies in order to function. | A.R.C uses Google’s analytics tool GA4 to track what you, as a visitor, do (click on) when you visit our website. This information is used solely to evaluate how the website is used. | The processing is based on your consent. | Cookies placed by Google are stored for thirteen (13) months. |
2. Personal data processed when you apply for a job with us
| Personal data processed | Purpose | Legal basis | Retention period |
| Name, Social Security number, address, email address, phone number, and other information provided by the applicant when applying for a job. | We need this information to stay in touch with you and to evaluate your application for the position you have applied for. We use your personal data to manage and process your job application, review your resume, cover letter, references, grades, and certificates, as well as to communicate with you and for record-keeping purposes. | We have a legitimate interest in processing your personal data as necessary to evaluate your qualifications, personal qualities, and personal background, and to facilitate the selection process in connection with recruitment and hiring decisions. | We will process this personal information until the position is filled. |
| Personal data processed | Purpose | Legal basis | Retention period |
| Name, Social Security number, address, email address, phone number, and other information provided by the applicant when applying for a job. | We need to process this information for future recruitment purposes and to enable us to contact you promptly if a vacancy arises for which you are a suitable and promising candidate. | We have a legitimate interest in retaining your application for a period of time after the position has been filled, in case a vacancy or a need for a similar position arises for which you are a suitable and promising candidate. | We will retain this personal information for a period of one (1) year from the date the position is filled. |
| Personal data processed | Purpose | Legal basis | Retention period |
| Name, Social Security number, address, email address, phone number, and other information provided by the applicant when applying for a job. | We need to process this information in order to defend against any claims that may arise in connection with a recruitment process, to prove that there was no discrimination in the hiring process. | The processing is based on a legal obligation. The statute of limitations for bringing a lawsuit is two (2) years, in accordance with the Anti-Discrimination Act. | We will retain this personal information for a period of two (2) years from the date the position is filled. |
| Personal data processed | Purpose | Legal basis | Retention period |
| Name, Social Security number, address, email address, phone number, and other information provided by the applicant when submitting an unsolicited application to us. | We need to process this information for future recruitment purposes and to enable us to contact you at an early stage if necessary. | Both you and we have a legitimate interest in retaining your application for a period of time after it is received, in case a vacancy or a need for a suitable position arises. | We will process this personal information for a period of one (1) year after receiving your unsolicited application. |
3. Personal data processed when you serve as a contact person in our business dealings with the company you work for
| Personal data processed | Purpose | Legal basis | Retention period |
| Name, title, and employer; address, email address, and phone number. | We need to process this information in order to enter into a contractual relationship with you. We may use your personal data if you are the contact person for the company we are doing business with. | We have a legitimate interest in being able to enter into agreements with the company that employs you. | We will retain this personal data for a period of three (3) years from the date the service ends, or for as long as required by the nature of the service. |
4. Personal data processed when you enter into an agreement with us to use our services
| Personal data processed | Purpose | Legal basis | Retention period |
| Name, address, email address, phone number, and services purchased. | We need to process this information in order to provide the service and perform the work you have requested. We may use your personal data to provide our services to you, to communicate with you, and to store our communications. | Entering into an agreement. | We will retain this personal data for a period of three (3) years from the date the service ends, or for as long as required by the nature of the service. |
5. Personal data we process after you have entered into an agreement with us
| Personal data processed | Purpose | Legal basis | Retention period |
| Name, billing address, and/or email address, as well as the services purchased. | We need to process this information for accounting and billing purposes, to collect payments, and to report our financial data. | The processing is based on a legal obligation. Data is stored in accordance with accounting regulations. | We will retain this personal data for a period of seven (7) years from the date it was recorded in accordance with the Accounting Act. |
| Personal data processed | Purpose | Legal basis | Retention period |
| Name and Social Security number (if you are a private individual), as well as the property designation or apartment number. | To apply for the ROT tax credit or the RUT tax credit with the Swedish Tax Agency at your request. | The processing is based on a legal obligation. Data is stored in accordance with accounting regulations. | We will retain this personal data for a period of seven (7) years from the date of the application, in accordance with the Accounting Act. |
6. Personal data processed for direct marketing purposes
| Personal data processed | Purpose | Legal basis | Retention period |
| Name, email address. | We need to process this information for direct marketing purposes. We may use your personal data to provide you with up-to-date information about our services by sending out newsletters. | We have a legitimate interest in being able to market and sell our services, communicate offers tailored to specific target groups, and maintain good customer relations. | We will process this personal data for a period of one (1) year from the date the service ends, or for as long as required by the nature of the service. |
7. Personal data processed due to a legal obligation or to assert legal claims
| Personal data processed | Purpose | Legal basis | Retention period |
| Personal data that has been processed as a result of your entering into an agreement with us. | We need to process this information to comply with our legal obligations under the law, the Constitution, government regulations, and guidelines. | The processing is based on a legal obligation. In order to comply with applicable legal requirements, we need to process this data. These legal requirements may, for example, relate to tax law or accounting obligations. | We will process this personal data for as long as required by law. |
| Personal data processed | Purpose | Legal basis | Retention period |
| Personal data that has been processed as a result of your interaction with our services. | In the event of a dispute, we may use your personal data to investigate, respond to, or resolve legal claims or disputes related to your use of our service or our contractual relationship in general. | We have a legitimate interest in protecting our rights. | We will process this personal data for as long as necessary until the legal claim has been resolved and the decision or judgment has become final. |
8. Who we share your personal information with
We only share your personal data when it is necessary for our business operations.
IT service providers – We use IT service providers that are necessary for us to deliver our service.
Accounting service providers – We use external providers of accounting and bookkeeping services. These providers are necessary for us to issue invoices and maintain our financial records.
Government agencies and the judicial system – We may share your personal data when we, in good faith, believe it is necessary to comply with legal obligations or to respond to legal claims. We may also share your personal data when we, in good faith, suspect that it is necessary in the interests of national security, law enforcement, or intelligence activities, or to prevent death or personal injury, provided that these interests are not outweighed by your rights and freedoms regarding the protection of your personal data.
We may also disclose personal data to third parties when specifically agreed upon between us and you, when it is necessary within the scope of a specific assignment to safeguard your or our rights, or if it is necessary for us to fulfill a legal obligation or comply with a decision by a public authority or a court.
We may also share your personal data with our clients’ customers (“end customers”) in cases where we must share the data to fulfill the agreement we have with our client. We believe that both we and you, as the end customer, have a legitimate interest in our ability to share the data to fulfill the agreement entered into between our client and the end customer.
9. Transfers outside the EU/EEA
Currently, we process your personal data exclusively within the EU/EEA. Should an exceptional situation arise in which we need to process your personal data outside the EU/EEA, we will implement appropriate security measures in accordance with the General Data Protection Regulation (GDPR).
10. How we protect your personal information
Your security is important to us. That is why we have implemented appropriate technical, organizational, and administrative security measures to protect your personal data from loss, misuse, disclosure, alteration, destruction, unauthorized access, and other unauthorized processing. We regularly analyze and evaluate these measures to ensure that the protection of your data is as secure as possible. A.R.C.’s employees, contractors, and suppliers are required to comply with A.R.C.’s rules, Privacy Policy, and other internal regulations that further govern the processing of personal data.
11. Your rights
You are not required to provide us with personal data, but in cases where the processing is based on the performance of a contract, we must have your data in order to fulfill our obligations. If you do not provide your personal data, there is a risk that we will not be able to fulfill our contractual obligations.
We may ask for your consent to process certain personal data. You are not obligated to provide such consent if you do not want your personal data to be processed for the specified purposes. You may withdraw your consent at any time by contacting us. If you withdraw your consent, the withdrawal is effective from the time of withdrawal and does not affect processing we have carried out prior to the withdrawal.
When we process personal data about you, you, as the data subject, have several rights. You have the right to contact us at any time regarding these matters, and if you wish to exercise any of the rights described below, the easiest way to reach us is at info@arcfast.se.
Right to information – You have the right to receive information about how we process your personal data.
Right of access – You have the right to contact us and request to know what personal data we process about you and to request a copy of this data (the right to request a data subject report).
Right to rectification – You have the right to have incorrect, incomplete, or outdated data corrected and to have it supplemented with correct information. As a general rule, you also have the right to receive information about where we obtained the inaccurate data.
Right to erasure – Under certain conditions, you have the right to have your data erased (the right to be forgotten).
Right to restriction of processing – Under certain conditions, you have the right to request that the processing of your personal data be restricted.
Right to object – Under certain conditions, you have the right to object to the processing of your personal data carried out for the purpose of performing a task in the public interest, as part of the exercise of official authority, or following a balancing of interests. You therefore have the right to object to the processing of your personal data for direct marketing purposes.
Right to data portability – Under certain circumstances, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer the personal data you have provided to A.R.C. to another organization or data controller.
Right to Withdraw Consent – If our processing of your personal data is based on your consent, you always have the right to withdraw your consent at any time for the continued processing of the personal data that A.R.C. processes on that legal basis.
Right to file a complaint – You have the right to file a complaint with the Swedish Data Protection Authority if you believe we are processing your personal data incorrectly. You can read more about this on the Swedish Data Protection Authority’s website https://www.imy.se/.
This Privacy Policy was last updated on August 20, 2024.