Home › Privacy Policy

Privacy Policy

Dirac.com Privacy Policy

Last updated: November 30, 2022

In this Privacy Policy, we describe how we collect and process personal data which relates to representatives of business contacts (such as customers, suppliers and partners), including potential business contacts (“Representatives”), customers, job applicants, visitors of our website, and shareholders or representatives of shareholders.

For the purposes of applicable personal data protection legislation, Dirac Research AB, reg. no 556612-5067 (“Dirac”) is the controller of your personal data and determines how and why your personal data will be processed. Should you have any questions regarding Dirac’s processing of personal data, please do not hesitate to contact us at privacy@dirac.com.

Sources of personal data

With respect to Representatives, your personal data is usually collected from the company that you represent, but also, in certain cases, directly from you, e.g. by email, our social media, or in connection with events or meetings.

With respect to customers, your personal data is usually collected directly from you, e.g. when you acquire licenses to and use Dirac’s products and services, by email, through our social media, or in connection with events or meetings.

With respect to job applicants, your personal data may be provided to Dirac directly from you or from the staffing agency, or recruitment company through which you apply for work.

With respect to visitors of our website, your personal data is collected directly from you. With respect to shareholders your personal data is usually collected directly from you or from the shareholder that you represent.

In addition to the above, Dirac may also receive personal data from companies within the group of companies to which Dirac belongs or from partners of Dirac. The Company may also use external information services to supplement existing personal data.

The categories of personal data that Dirac processes

We do not process more information than we need to fulfill our stated purposes. In respect of the categories of personal data subjects stated below, we process the following categories of personal data.

Representatives (business to business)

Basic information such as your name, workplace and title.
Contact details such as address, e-mail address and telephone number.
Payment information.
Information that you provide in connection with meetings or events, such as requirements in respect of availability of premises or allergies.
E-mail correspondence and confirmation when you open or forward an e-mail from Dirac.

End users (consumers)

Contact details such as name, address, e-mail address and telephone number, if provided by you to Dirac.
Payment information such as payment method, amount, order number and date of purchase, if applicable.
Hardware ID and audio recordings/measurements.
IP address.
Information that you provide in connection with support matters.

Job applicants

Personal information and contact information, such as name, address, telephone number, email address, title, position, and current employer.
Information provided in cover letter, resume, and any other documents that you submit to Dirac.
Where applicable, your picture.
Other information that you provide to Dirac in connection with the recruitment process.

Visitors of our website

Technical personal data, such as IP address, MAC address, URL, unique device ID, network and device performance, browser, language and identification settings, geographic location, operating system, and information from cookies or similar mechanisms.

Shareholders

Personal information and contact information, such as personal identification number, name, address, telephone number, email address, and position.
Holdings of shares or other financial instruments.
Where applicable, information regarding proxies.
Where applicable, information regarding trustees, pledges and pledgees, and other notes in the share register.
Other information that has been provided by you or by the shareholder that you represent.

Why we process your personal data

The purposes for our processing, the legal bases for our processing and information on how long we store your personal data is set out below.

Representatives (business to business)

We process your personal data to manage our business relationship with the company that you represent. The processing is based on Dirac’s legitimate interest in maintaining and managing its business relationships.

We process your contact information to market our products and services through, for example, newsletters, publications and events. The legal basis for our marketing activities is Dirac’s legitimate interest in marketing its products and services. If and to the extent that processing in connection with events includes personal data concerning allergies, disabilities or similar personal data (health data), such processing is carried out on the basis of the Representative’s consent.

We process your personal data to ensure payment under the contract between Dirac and the company that you represent and to be able to fulfil legal requirements, e.g. accounting requirements. The legal bases for the processing is Dirac’s legitimate interest in receiving payment for its provision of products and services, or making payments for its receipt of products and services, as applicable (legitimate interest), and that the processing is necessary for compliance with Dirac’s legal obligations.

For information on how long Dirac stores your personal data, please contact Dirac. Contact information is provided under the section “How to contact us” below.

End users (consumers)

We process your personal data for the performance of the contract between you and Dirac and to provide our products and services to you. The legal bases for the processing is the performance of the contract between you and Dirac and that the processing is necessary for Dirac’s legitimate interest in providing its products and services, including to improve the quality of its products and services (legitimate interest).The personal data is stored as long as there is a contractual relationship between you and Dirac or as long as Dirac provides its products or services to you or as long as the personal data is needed for quality and development purposes.

We process your personal data to market our services, for example through newsletters, publications and events. The legal basis for processing is Dirac’s legitimate interest in marketing its products and services. The personal data is stored as long as we have a business relationship with you (for existing customers) or as long as Dirac believes that you may be interested in Dirac’s products and services (for potential customers) or until you opt out.

We process your personal data to ensure that Dirac’s products and services are used in accordance with their respective terms. The legal basis for the processing is Dirac’s legitimate interest in managing its licenses and protecting its assets. The personal data is stored as long as you hold a license to use any of Dirac’s products and services.

We process your personal data to be able to fulfil legal requirements, e.g. accounting requirements. The legal basis is that the processing is necessary for compliance with Dirac’s legal obligations. The personal data is stored as long as it is required by applicable legislation.

We may process your personal data for the establishment, exercise or defence of legal claims. The legal basis is Dirac’s legitimate interest in establishing, exercising or defending any legal claims. Information that is relevant for any legal claim is kept for up to ten years in accordance with the Swedish Act on Limitation (Sw. preskriptionslagen).

Job applicants

We process personal data to be able to evaluate job applicants and ensure that the job applicant has the necessary qualifications. The legal basis for the processing is that the processing is necessary for Dirac’s legitimate interest in recruiting qualified employees (legitimate interest).

We also process personal data for the establishment, exercise or defence of legal claims in relation to recruitment. The legal basis is Dirac’s legitimate interest in establishing, exercising or defending any legal claims related to recruitment. Your personal data will not be stored for longer than 25 months after the employment of a person to the position that you applied for.

Visitors of our website

We process personal data to be able to ensure the operation of Dirac’s website and its application, and to be able to develop Dirac’s website and to better adapt it based on how it is used. The legal basis for the processing is that the processing is necessary for Dirac’s legitimate interest in improving, streamlining, simplifying and developing its website and to increase the number of recurring visitors (legitimate interest). We also process personal data to prevent unauthorized access and misuse of Dirac’s website and services. The legal basis is Dirac’s legitimate interest in controlling access to and the function of Dirac’s digital services. The personal data is stored as long as is necessary based on your use of our website and digital services.

Shareholders

We process personal data to be able to fulfil Dirac’s obligations according to Dirac’s articles of association, to be able to fulfil legal requirements, e.g. pursuant to the Swedish Companies Act, and to be able to distribute shareholder-related information. The legal basis for the processing is that the processing is necessary for Dirac’s performance of the contract (the articles of association) with its shareholders, for compliance with Dirac’s legal obligations, and in order for Dirac to be able to inform shareholders in a timely and correct manner about information relevant to Dirac (legitimate interest). In respect of representatives of shareholders, the processing is necessary for Dirac’s legitimate interest in fulfilling its contractual obligations towards its shareholders (legitimate interest).

With whom we share your personal data

We do not sell your personal data to any third party for marketing purposes. However, we may share your personal data with the third parties set out below.

We may share your personal data with our suppliers when they perform services on our behalf, e.g. in connection with the maintenance and support of our IT systems.
We may disclose your personal data to authorities when necessary for compliance with Dirac’s legal obligations.
We may share your personal data with auditors and professional advisors.
We may need to transfer your personal data to other companies within Dirac’s group as some functions are performed jointly or centrally within the group.
According to law, the Company’s share register is public and held available at Dirac for anyone who wishes to take part of it. The information contained in the share register is therefore disclosed upon request.
Minutes and voting list from general meetings of shareholders may be disclosed to shareholders as well as to the Swedish Companies Registration Office, auditors and others to whom Dirac has a legal obligation to disclose the minutes or otherwise considers it appropriate to disclose the minutes.

As regards personal data that is processed on social media, such as Facebook, Weibo, LinkedIn, and Twitter, we refer to the respective service provider’s Privacy Policy for information on how they process personal data.

Transfer of personal data to third countries

Dirac strives to process your personal data within the EU/EEA. However, Dirac may transfer your personal data to the following countries outside the EU/EEA: USA, China, Taiwan, Japan, Korea, and India.

When personal data is transferred to countries outside the EU/EEA, Dirac has ensured that the transfer is legal, either on the basis that the Commission has decided that the third country in question ensures an adequate level of protection or, in the absence of an adequacy decision, on the basis of appropriate safeguards, such as binding corporate rules or standard contractual clauses.

For more information on the legal basis for a specific transfer, please contact Dirac. Contact information is provided under the section “How to contact us” below.

How we protect your personal data

We use a range of technical and organizational measures to protect your personal data from unauthorized access, use, loss, change or deletion in accordance with applicable personal data protection legislation. Such measures include, but are not limited to, physical controls, encryption, eligibility restrictions, policies, etc.

Your rights

In accordance with applicable personal data protection legislation, you have the following rights.

Right of access. You have the right to access your personal data and to obtain a copy of the personal data concerning you that is processed by Dirac.
Right to rectification. If the personal data concerning you that is processed by Dirac is inaccurate, incomplete, or outdated, you have the right to obtain rectification of such personal data.
Right to erasure. You have the right to request the erasure of personal data concerning you. Unless Dirac has a legal basis to continue the processing of the personal data concerning you, such personal data will be erased.
Right to object. In certain circumstances you have the right to object against Dirac’s processing of your personal data.
Right to restriction of processing. In certain circumstances you have the right to obtain restriction of the processing of your personal data. Where processing has been restricted, Dirac may only under particular circumstances carry out other processing activities than storage in respect of the personal data.
Right to personal data portability. Where your personal data is processed on the basis of your consent or on a contract with you, you have the right to receive the personal data concerning you in a machine-readable format and request that those personal data are transmitted to another controller.
Right to lodge complaints with a supervisory authority. You have the right to lodge a complaint regarding our processing of your personal data with the Swedish Authority for Privacy Protection, Box 8114, 104 20 Stockholm, Sweden. You can also contact the Data Protection Authority in the member state of your habitual residence or place of work.

Cookies

Dirac’s website uses cookies. Here you can read more about Cookies on www.dirac.com.

Changes to this Privacy Policy

Dirac reserves the right to make changes to this Privacy Policy from time to time. In the event of changes to this Privacy Policy, Dirac will publish the amended Privacy Policy on its website and may also notify Representatives, customers and shareholders in an appropriate manner.

How to contact us

Please do not hesitate to contact us should you have any questions about this Privacy Policy or the processing of your personal data or if you would like to exercise any of your rights under applicable personal data protection legislation.

You can contact us by post at Dirac Research AB, Dragarbrunnsgatan 73, 753 20 Uppsala, Sweden, or by email at privacy@dirac.com.