Privacy Policy
Privacy and Personal Data Policy, Virtual Days AB (559312-2053)
§ 1. Background
This Privacy Policy (“the Policy”) sets out rules and guidelines for how personal data is processed by Virtual Days AB on the websites virtualcareerdays.se and event.virtualdays.com. The Policy describes how personal data is collected, used, shared, and what rights users have under applicable data protection legislation. The Policy applies to all participants who use Virtual Career Days and related services.
§ 2. Purpose
The purpose of this policy is to provide users with clear information about how their personal data is processed in connection with participation in digital career events, visits to digital booths, and contact with employers via the platform.
§ 3. Definition of personal data
Personal data refers to any information that can directly or indirectly be linked to an identifiable natural person. This includes, for example, name, email address, phone number, CV, and information about how a user participates in an event.
§ 4. Consent
a) Obtaining consent
For personal data to be processed, valid consent is required. Consent must be voluntary, informed, and explicit.
Consent is obtained when the user registers for our events and accepts our terms and this policy, as well as when the user actively participates in digital booths, presentations, and other activities on the platform.
b) Withdrawal of consent
The user may withdraw their consent at any time by contacting us at vcd@virtualdays.com.
c) Right to have personal data erased
When consent is withdrawn, the user may also request that their personal data be erased by contacting us at vcd@virtualdays.com.
§ 5. Processing of personal data
a) Personal data processed
The following personal data may be processed:
Name, email address, and phone number.
Profile information and CV uploaded by the user.
Information about which booths, presentations, and employers the user visits.
Technical information via cookies.
b) Purpose of processing personal data
Personal data is processed in order to:
Provide digital career events.
Enable contact between users and employers.
Enable recruitment, matching, and follow-up.
Administer user accounts and communicate with users.
c) Sharing of personal data with employers
When a user participates in an event and visits a booth, attends a presentation, chats, or otherwise interacts with an employer, the user’s personal data is shared with the relevant employer.
The data shared may include name, email address, CV, profile information, and information about the user’s participation.
The purpose of this sharing is to enable the employer to follow up on the visit, communicate with the user, and manage recruitment.
The legal basis for this processing is the user’s consent.
d) Independent data controller
When personal data is shared with an employer, the employer becomes an independent data controller for their continued processing of the data, for example recruitment, follow-up, and future contact. The employer’s own privacy policy then applies to the continued processing.
e) How to stop or limit contact
After your data has been shared with an employer, the employer is responsible for their continued processing. To stop or limit future contact, you should primarily contact the relevant employer directly. If you need help identifying which employer is processing your data, you may contact Virtual Days AB at vcd@virtualdays.com.
f) Sharing with suppliers
We may share personal data with suppliers who provide technical services such as operations, email distribution, and support. These suppliers act as data processors and are covered by data processing agreements in accordance with GDPR.
g) Retention period
Personal data is stored only for as long as necessary to provide the service, carry out events, and fulfill legal obligations.
§ 6. Security and encryption
The website uses SSL encryption and other technical and organizational security measures to protect personal data against unauthorized access, loss, or misuse. In the event of a personal data breach, affected users and the Swedish Authority for Privacy Protection will be informed.
§ 7. Users’ rights
a) Right of access
The user has the right to obtain confirmation as to whether personal data is being processed and to access such data. Requests should be sent to vcd@virtualdays.com.
b) Right to rectification
The user has the right to have incorrect or incomplete data corrected.
c) Right to restriction of processing
In certain cases, the user may request that the processing of personal data be restricted.
d) Data portability
In certain cases, the user has the right to receive their personal data in a structured format.
e) Right to object
The user has the right to object to certain processing of personal data.
f) Right to erasure
The user has the right to have their personal data erased when it is no longer needed, when consent is withdrawn, or when processing has been carried out unlawfully.
g) Automated decision-making
The user has the right not to be subject to automated decision-making that produces legal effects or similarly significant consequences.
h) Identification
Requests for access to records or erasure must be made from the email address associated with the account.
i) Complaints
The data subject has the right to lodge a complaint with us and with the Swedish Authority for Privacy Protection if they believe that the processing of personal data violates GDPR.
§ 8. Changes to the policy
This policy may be amended. The most recent version is always published on our websites.
Contact
Virtual Days AB (559312-2053)
Email: vcd@virtualdays.com
Response time normally within 48 hours.
Last updated: 2026-01-12
