Privacy Notice

The person or business that processes your personal data has an obligation to comply with GDPR. We at Assessio International AB are thus responsible for the processing of your personal data.

As a data controller, we want to inform you about:

• How your personal data is processed.
• Why Assessio International AB needs your personal data.
• What lawful basis Assessio International AB is using for the processing of your data.
• How long the personal data will be stored before it is deleted/anonymized.

We collect your personal data (demographic data, test results, and cryptographically hashed email) to be able to ensure the quality and validity of our tests. We collect your personal data with consent as our legal basis. We will delete your personal data after 10 years. To learn more about the details regarding our processing of your demographic data, read more in our Helpcenter here.

If you are specifically invited to a predictive validation project, we collect your personal data (test results and performance rating) to be able to ensure the quality and validity of our tests. We collect your personal data for the purpose of predictive validity with consent as our legal basis. We will delete your personal data after 10 years. To learn more about the details regarding our processing of your personal data, read more in our Helpcenter here.

We collect feedback to improve our platform and better understand user experience. We collect your rating, feedback message, and user and contextual information to help interpret the feedback. The legal basis for the processing of your personal data is legitimate interest. Your data will be retained for two years after submission and then automatically deleted.

We collect anonymised data within the Assessio Platform related to usage and interations with our AI features. Inputs and outputs may be evaluated to ensure that our AI usage and features remain effective, including validity, quality, reliability, and free from bias. This is aligned with our commitment to excellence in AI usage and our compliancy obligations around AI management.

Your data is only accessed by staff and on the basis of a need-to-know . We have signed agreements with our data processors who process your personal data according to our instructions. We may disclose your personal data to law enforcement authorities in case of suspicion of a crime.

We do not transfer your data outside of the EU/EEA and have no plans to do so. If we do, we will always do so in compliance with the requirements of the GDPR.

As a data subject, you have the following rights:

• Right of access – You can request to be notified whether we process personal data relating to you and, if so, receive a copy of these – a so-called register extract – along with certain details
• Right to rectification – If you believe that the personal data relating to you is incorrect or incomplete, you can request to have the data corrected or supplemented.

In some cases, you may have your personal data deleted, it depends on the purpose of the processing. Keep in mind that this right is not absolute.

Contact us at support@assessio.se to exercise your rights. If you have questions and comments regarding our handling of personal data, you can contact the Data Protection Officer on dataskydd@assessio.se.

If you are not satisfied with how Assessio International AB handles your personal data, you can also contact the Swedish Privacy Protection Authority, which is the supervisory authority of GDPR.