EasyFreelance AB is the controller for the processing described here, unless stated otherwise. We process personal data in order to provide our service, administer assignments and employment, pay wages, invoice clients, meet legal obligations and provide support.
1. What data we process
We may process identity and contact details, for example name, personal identity number, address, telephone number and email address; account and login details; details of occupation, skills and assignments; client and invoicing details; bank and payment details; pay, tax and employment details; identity documents where such a check is required; communication with customer service; technical data about how the service is used; and details of expenses, insurance matters or the working environment where these are needed for a relevant purpose. Where necessary and permitted by law, we may also process special categories of personal data, for example health data in connection with sick leave, rehabilitation or insurance matters. Such data is processed only where there is specific support under the GDPR and Swedish law.
2. Where the data comes from
Most data we receive directly from you when you register an account, register an assignment, submit documentation or contact us. We may also receive data from clients and partners you carry out assignments for, banks and payment services, public authorities, insurers and other parties where this is necessary for the service or to meet a legal obligation.
3. Why we process data, and the legal basis
Contract and pre-contractual steps. We process data in order to create and administer your account, assess and register assignments, administer employment relationships, invoice clients, handle wages and payments, provide support and otherwise deliver the service you request.
Legal obligation. We process data where this is required under tax, accounting, employment, working environment or other applicable legislation, and where we must disclose data to competent authorities. Legitimate interest. We may process data for purposes such as information and IT security, prevention of fraud and misuse, internal control, development and analysis of the service, documentation of customer service and marketing of our own relevant services. Before such processing takes place we assess that our interest does not weigh less than your rights and freedoms.
Consent. Where processing is based on consent we inform you of this separately. You may withdraw your consent at any time. A withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn. Legal claims and special rules. Where special categories of personal data are processed, this is done only where the conditions in Article 9 of the GDPR and applicable Swedish law are met.
4. Profiling and marketing
If we use personal data for individually adapted marketing or profiling, we inform you of this and use the legal basis applicable to the processing. Where the processing is based on consent, the consent may be withdrawn at any time.
You always have the right to object to the processing of personal data for direct marketing. When you object, we cease such processing for the marketing purpose.
5. Cookies and website data
EasyFreelance uses cookies and similar technology on our websites. Necessary cookies are used so that the website and the service work. Other cookies, for example for statistics or marketing, are used in accordance with the choices you make in our cookie handling and the rules applying to electronic communication and data protection.
More detailed information about which cookies and suppliers are used is to be found in EasyFreelance's cookie information.
6. How long we keep data
We do not keep personal data longer than is necessary for the purpose for which it was collected. The retention period therefore varies between different types of data.
Accounting records are kept for the period required under the Swedish Accounting Act. Under the current rules this means, as a main rule, up to and including the seventh year after the end of the calendar year in which the financial year ended. Data needed for employment, wages, tax, insurance, legal claims or regulatory requirements may need to be kept longer where there is a legal obligation or a legitimate need.
Accounts that have never been used for an assignment may be deleted after a period of inactivity under EasyFreelance's data retention procedures in force from time to time. Support cases are erased when the data is no longer needed for support, documentation, legal claims or other legitimate purposes.
7. Who we share data with
We may disclose personal data to clients where this is needed to administer or carry out the assignment; to banks and payment service providers for payments; to insurers and other suppliers needed for the service; to public authorities where we are obliged or entitled to disclose the data; and to IT, operations, analytics, communications and support suppliers that process data on our behalf.
Where a supplier processes personal data on EasyFreelance's behalf, we enter into a data processing agreement where the GDPR requires it. In other situations a recipient may be an independent controller for its own processing.
8. Transfers outside the EU/EEA
Some of our suppliers, or their sub-processors, may process personal data outside the EU/EEA. Such a transfer takes place only where there is a permitted transfer mechanism under the GDPR.
This may for example be a European Commission adequacy decision, or the European Commission's 2021 standard contractual clauses together with the supplementary safeguards needed in the individual case. For recipients in the United States, an adequacy decision may be used where the recipient is covered by the EU-U.S. Data Privacy Framework.
You may contact us if you would like more information about the safeguards used for a particular transfer.
9. Security
EasyFreelance uses appropriate technical and organisational security measures based on the nature and risk of the processing. These may include access control, authorisation management, encryption where appropriate, logging, backup, internal procedures, supplier checks, incident handling and training. Access to personal data is limited to people who need the data for their work.
10. Your rights
Where the conditions in the GDPR are met, you may request access to your personal data, rectification of inaccurate data, erasure, restriction of processing and data portability. You may also object to processing based on legitimate interest, and may always object to direct marketing.
Where processing is based on consent, you may withdraw your consent at any time.
Some rights are not absolute. We may for example need to retain data that we are required by law to keep, or that is needed to establish, exercise or defend legal claims.
We answer a request without undue delay and normally within one month. If a request is complex, or if we have received a large number of requests, the time limit may in some cases be extended under the GDPR.
11. Contact and complaints
If you wish to exercise a right or have questions about our processing of personal data, you may contact EasyFreelance through our customer service and state that the matter concerns data protection. We may need to verify your identity before disclosing or changing personal data.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) if you consider that our processing of personal data breaches the data protection rules.
12. Changes
We may update this information when our processing, our services or the applicable rules change. In the event of material changes we will inform you in an appropriate way before the new information starts to apply.
Do you have questions about how we process your personal data, or do you wish to exercise your rights? Send an email to [email protected] or call customer support.