How we handle your details

iSociety AB in Stockholm is responsible for processing your personal data. Send questions to info@isociety.se.

What you give us yourself when you apply and in My profile.

• Name, email address, phone number and county of residence
• A link to your LinkedIn profile, if you provide one
• Roles, sectors, competencies, languages and leadership level
• Availability, type of engagement, workload and target fee
• Company name and organisation number, if you provide them
• Your CV and the text we read from it, so that we can search it

If you sign in with Google or LinkedIn we receive your name and email address from them. We use no profile picture.

iSociety's staff also keep internal notes and details about our relationship with you, for example when we last spoke and which tags we have set. You can ask to receive them.

Your CV does not need a personal identity number or a photo. Please remove them before you upload it.

We process the details to assess your application, stay in touch with you and be able to propose you for assignments that suit your experience. We use them for that and nothing else.

The basis is legitimate interests under Article 6(1)(f) of the General Data Protection Regulation. Our interest is to keep a society of senior advisors and to be able to propose them for assignments. You have the right to object to the processing.

Only iSociety's staff see your details, after signing in with two-factor authentication. The society is not a public list. Clients, other consultants and search engines have no access to your profile.

We use suppliers who process details on our behalf, under data processing agreements.

• Supabase for the database, sign-in and storage of CVs. The database is located within the EU.
• Our email provider for messages to you, for example sign-in codes.
• GitHub for encrypted backups. The copies can be read only with a key that iSociety keeps separately.
• Our hosting provider, which runs the website.

Some suppliers are, or are owned by, companies outside the EU and EEA. Details are transferred there only under the mechanisms the General Data Protection Regulation allows, for example the European Commission's standard contractual clauses.

We keep the details for as long as they are needed and then delete them. You can delete your profile at any time under Leave the society in My profile.

• An application that has not been submitted is deleted after 30 days. We remind you after 3 days.
• If your application is closed, your details are deleted after 30 days.
• If you have not been active for 23 months we ask whether you want to stay. If you sign in, your profile remains, otherwise it is deleted after 24 months.
• The log of who has opened a CV is kept for 12 months.
• When a profile is deleted we keep an encrypted note that the deletion took place, for 36 months. It holds no email address in plain text.

You have the right to

• receive the details we hold about you. Download them in My profile, or write to us if you also want our internal notes
• correct details. Change them yourself in My profile
• have your details deleted, under Leave the society in My profile
• restrict the processing, object to it and have your details transferred in a machine-readable format

Write to info@isociety.se if you want to use your rights. You can also complain to the Swedish Authority for Privacy Protection, IMY, at imy.se.

The website uses only the cookies needed for you to stay signed in. We use no tracking or statistics that require consent, so no cookie banner is shown. If you choose to sign in with Google, Google's sign-in button is loaded from Google.

Agreements, invoices and other records from actual assignments are handled in other systems, where accounting law decides how long they are kept. Deleting your profile with us does not affect them.

Write to info@isociety.se if you wonder how we handle your details.