Privacy Statement - FAQ

Does Scania share my personal data with third parties?

To provide the best products and services we utilize our global organization and a global network of trusted partners. This means that we - from time to time - share your personal data (all or selected parts as mentioned in the different data subject categories) within the TRATON Group, which Scania is part of, as well as with trusted business partners that help us. Typical examples include:

when you use the Scania Web shop we share personal data with our partners that handle the Web shop
we process your personal data in global IT-systems that are developed, delivered or hosted by our external IT-partners
we may use third parties to help us organize events that you participate in, to provide you with hotel, transports etc.
when you call our Emergency Assistance we may share your personal data with third parties for example the towing companies
when our customer (either you or your employer) decides to engage a third party service provider and thus grants access to such a provider, Scania will share personal data related to the driver, vehicle, engine, trailer, superstructure or other products
when you are entering into a contract with Scania for the provision of a financial/insurance product or service, we may share information with trusted parties for credit worthiness purposes
when we are doing research and development, we may share personal data with universities, research facilities or other trusted partners.
if you choose to accept third party cookies, your personal data may be shared with these third parties (please see our Cookie Policy for further information on Cookies).
when Scania processes personal data in global HR processes, your personal data is transferred to the Scania unit to which you send your job application or are employed
when you participate in internal knowledge sharing with other employees within the Scania Group your personal data will be shared with these
when participating in trainings, your personal data will be shared with training coordination providers
when fulfilling our obligations as an employer, we will share your personal data with banks and insurance companies
when fulfilling our obligations under collective agreements and legislation, we will share your personal data with trade unions and work councils.’

In cases where we need to share your personal data with our business partners, we ensure that they treat your personal data with the same respect and integrity as we do. We also share your personal data with public authorities if required by law or a legitimate legal request is received from law enforcement or another authority/institution.

If your personal data is transferred out of the European Union (“EU”) to a “third country” country (country outside the EU / EEA), this is done using appropriate transfer mechanisms including the relevant prior assessments and appropriate safeguards, see further just below.

Where does Scania process my personal data?

Scania is a global company with operations in over 100 countries. This means that we sometimes choose to process your personal data (all or selected parts) inside as well as outside of the European Union. When doing so we always comply with existing laws and regulations as well as court decisions to ensure that your personal data is handled in a secure way. If your personal data is transferred out of the European Union this is done using appropriate transfer mechanisms including the relevant prior assessments and appropriate safeguards. Most commonly Standard Contractual Clauses (SCC) issued by the European Commission, are relied upon. You have the right to receive a copy of the relevant concluded SCC if your personal data is part of a transfer, secured by SCC. Reach out to us here or talk to your Scania contact.

In this context ‘processing’ means any operation or set of operations on personal data such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

How does Scania protect my personal data?

We are committed to protecting your personal data. We take all appropriate and reasonable legal, technical and organizational security measures to adequately protect the personal data that we process. Our security measures are continuously improved in line with the development of available security products and services.

How long does Scania keep my personal data?

Specific processing activities have their own individual retention periods applicable to them as per the legal basis and/or purpose of processing. We, therefore, minimise or delete your personal data as soon as it is no longer needed to:

fulfil our contractual obligations towards you
fulfil the purpose for which the personal data was collected
fulfil our legal obligations

Does Scania use automated decision making and profiling?

Automated decision making is used in Recruiting. Basic criteria, such as educational degree, language skills and/or specific professional experience, are defined for the individual job position. The qualifications of the job applicant are compared to the criteria. If a candidate does not fulfil the basic requirements for the specific job position that they have applied for the applicant will be disqualified for the particular job position. The job applicant is welcome to apply for other positions.

Profiling is used when selecting employees for internal individual development programs. The profiling is made based on formal qualifications, personality tests and logic ability tests. If admitted, the profile is used for designing an individual development program for each participating employee.

What are my rights?

Right to be informed

You have the right to be informed about the personal data we process about you. In addition, you have the right to be informed about the specifics about the processing, including why your personal data will be processed, how long your personal data will be retained, recipients or categories of recipients of the personal data, the legitimate interest pursued by us (if applicable) and any “third country” (country outside the EU / EEA) transfers taking place.

We provide this information in this Privacy Statement, but as mentioned above, more specific information about how your personal data is processed can in certain cases be found in more detailed privacy notices, including contract appendices, and service descriptions. You will in these cases find the information when accessing the application/system/service. If you have any questions or concerns you are always welcome to contact us here or talk to your Scania contact.

Right of access

You have the right to obtain confirmation from us as to whether we process your personal data. When this is the case, you have the right to receive a copy showing the personal data we process regarding you and in addition the certain information, including the purposes of the processing, the recipient of categories, the envisaged retention time and the existence of automated decision making (including profiling). Once we have confirmed your identity, the extract will be handed over to you in a secure way, and in an intelligible and easily accessible form.

Right to rectification

You have the right to update your information to ensure that we always have the correct information.

Right to erasure

You may, without undue delay, have your personal data deleted if any of the following conditions apply:

If the personal data is no longer needed for the purposes for which it was collected or otherwise processed.
If you have objected to its use and there are no overriding legitimate grounds for us to process it.
If the processing is based solely on your consent and you withdraw your consent.
If deletion is required to fulfil a legal obligation or if the personal data has been processed unlawfully.

There may be situations where the above shall not apply, stipulated by the GDPR, e.g. if we must process the personal data to comply with EU law or applicable Member State law, or for the establishment, exercise or defence of a legal claim.

Right to object

You are always entitled to object to processing of your personal data for direct marketing. This is an absolute right, which means that if you object or unsubscribe, we will no longer process your personal data for direct marketing.

You also have the right to object to any processing that we base on legitimate interest or task carried out in the public interest, including profiling based on these grounds. The processing will then stop unless we demonstrate compelling legitimate grounds for the processing, which override the interests, rights and freedoms of the individual; or show that our processing is for the establishment, exercise or defence of legal claims.

Right to restriction

You are entitled to request a restriction of processing of your personal data in the following situations:

When you believe your personal data is incorrect and you have therefore requested a correction. You may then request that processing of your personal data be limited while we validate if your personal data is incorrect.
When the personal data processing is unlawful, and you oppose to your personal data being deleted and instead request that the use of these personal data be restricted.
When you need your personal data to be able to determine, enforce or defend legal claims, even if we no longer need your personal data for the purpose of our processing.
Pending the verification whether our legitimate grounds override the rights and freedoms of the individual when you have objected to processing, and the processing is based on the legal grounds legitimate interest or task carried out in the public interest.

Rights regarding automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing,

including profiling, which may produce legal effects or similar which significantly affects you. You have the right to object to such processing taking place.

This does however not apply if the decision is necessary for us to entering into, or perform, a contract with you, or if the decision is authorised by Union or Member State law to which we are subject, or if the decision is based on your explicit consent.

You further have the right to

be informed about the existence of automated decision making, including profiling
receive meaningful information about the logic involved, the significance and envisaged consequences of the processing, and
obtain human intervention, to express your point of view and to contest the decision.

Right to data portability

You are entitled to obtain the personal data you have provided to us in order to process it elsewhere. This right applies in cases where our processing of your personal data is based on the legal ground that you have given your consent to the personal data processing or if you have entered into a contract with us and the processing is carried out by automated means.

Notification of violation (complaint)

If you believe your personal data is being processed in violation of current regulations, please report it to us as soon as possible. You also have the right to file a complaint with the Data Protection Authority.

How do I contact Scania if I have questions?

You are always welcome to contact our Group Data Protection Officer or talk with your local Scania contact.

Online: https://www.scania.com/group/en/home/admin/misc/privacy-statement/contact-privacy.html

Telephone: +46 8 553 810 00

Postal Address: Scania CV AB, ATT: Data Protection Office, ZCD, S-151 87 Södertälje, Sweden.