Privacy Notice

This privacy notice explains Alfa’s practices with regard to the European Union’s General Data Protection Regulation (GDPR) and describes how Alfa collects, use and protects your personal data and your rights in relation to the processing.

General information

Alfa Mobility (Alfa) is the Data Controller when you as an individual buy our services and entrust us with your personal data to process while delivering those services. 

Alfa is the Data Processor when your employer hires Alfa to deliver agreed services. In those cases, your employer acts as the Data Controller and shall inform you more about the processing activities that take place during delivered services and risks related to such processing. As Data Processor Alfa processes your personal data only according to the instructions received from your employer.
 
The information below is only regarding Alfa’s processing of your personal data as a Data Controller.

Categories of Personal Data

The personal data includes information such as contact details (name, email, telephone number, address), personal ID-number (passport copy), employment information (job title, employment contract, qualifications), bank account information, and other details about you and your family (spouse, dependents, etc.) that are required to deliver the services. Regulatory and legislative requirements extend or limit the amount of information that Alfa may need to process.
 
We may also process direct and/or indirect special categories of personal data (such as health status, sexual orientation and ethnic background) if it is required to comply with applicable law in the country of your destination. Please see below for more information regarding this processing.

Categories of Data Subjects

You as customer, your family members and other contact persons provided by you.

The purpose of the processing

To provide move, relocation and immigration services ordered by you and to fulfil our contractual obligations towards you.

The legal basis for processing

The legal basis for collecting and processing your personal data are: To fulfil our contractual obligations towards you.

Use, retention, and disposal

We limit the use of personal data to the sole purpose of executing your assignment. We retain personal data for the maximum of 3 years to fulfil the above stated purposes. Some of the data (such as contact details, origin and destination addresses, etc.) will be stored for 7 years which is required by local law or regulations and thereafter appropriately dispose of such information. If any sensitive data is processed during the assignment, it will be retained only until the completion of the service.   

Security for privacy

We protect personal data against unauthorized access (both physical and logical) aligned with our internal information security policy and procedures. Our Privacy and Information Security Management System is certified against ISO/IEC 27001 by an accredited independent certification body. We shall take appropriate security measures against unauthorised access to, or alteration, disclosure or destruction of personal data and against its accidental loss or destruction. Personal data will only be accessible to authorised and trained staff.

To make sure you share your personal information in a secure way we encourage you to consider using the available technological solutions (platforms and systems) that Alfa provides you with. If you encounter difficulties in being able to do that let your assignment coordinator at Alfa know about it.

Transfers to outside of the EU/EEA

In cases where we help you relocate to countries outside of the EU/EEA when we need to cooperate and share your personal information with our suppliers in those specific countries, it is done in accordance with this policy and with applicable law. Within our moving service and specifically for move coordination, Alfa may from time to time engage a partner based in South Africa, which means that your personal data, in some cases, may be accessed from South Africa. Alfa uses Standard Contractual Clauses (SCC) issued by the EU Commission for ensuring a secure transfer of your personal information to any recipient outside of the EU/EEA.

Your rights as Data Subject

In accordance with the GDPR, you can exercise your rights and request Alfa to assist you with any of the following actions:

• Right of access: you can request information on which personal data relating to you has been stored, how the data was collected, other parties it has been disclosed with and for what purpose.
• Right to rectification: you can reasonably access and update your personal data. Please let us know of any changes to your personal data.
• “Right to be forgotten”: you can request your data to be deleted if the processing of such data has no legal basis, or if the legal basis has ceased to apply. The same applies if the purpose behind the data processing has lapsed or ceased to be applicable for other reasons.
• Right to object: you can object to your data being processed, and this must be taken into account if the protection of your interests takes precedence over the interest of the data controller owing to a particular personal situation. This does not apply if a legal provision requires the data to be processed.
• Right to data portability: you can request your personal data, which you have provided to Alfa, in a structured, commonly used and machine-readable format to be transmitted without hindrance to another controller.

You are welcome to send your questions, concerns, or requests to the following email address: dpoteam@alfamoving.com.
 
Please be aware that when you exercise the rights of limiting of processing or right to complete/partial erasure of your personal data during the process of the service delivery, this may affect our ability to support you with immigration, relocation and move services. As a part of handling your request, we will initiate correspondence with you to ensure that all parties are aware of how the planned or ongoing services may be affected due to the request. This does not in any way take away from your right to make such requests.

Monitoring and enforcement

We monitor compliance with our privacy policies and procedures and have procedures to address privacy related complaints and disputes. All Alfa staff is aware that a breach of the rules and procedures identified in this policy may lead to disciplinary action being taken against them. If you believe that your personal data is not handled in accordance with the applicable law or our Privacy Notice, you may submit a complaint to dpoteam@alfamoving.com.

You may also submit a complaint directly to the data protection authority where Alfa has offices in Sweden, Denmark, Norway and Finland.