Privacy Policy

Your privacy is important to us at CombinedX. The purpose of the information in this policy is to make you aware of and feel safe with how we handle your personal data.

When you apply for a job

In order for us to be able to deal with your application, determine whether you are a suitable candidate, and contact you if we have any questions or to arrange for an interview, we need to process your personal data. Which data we process depends on what you submit to us, but as a rule, it relates to your name, address, e-mail address, telephone number, civic registration number as well as information relating to your qualifications and other content in your CV and/or cover letter. The processing of your data is carried out on the basis of our legitimate interest in being able to deal with your application.

If you wish to withdraw your application, you can do so by contacting us via the channel you used to submit your application, or via the contact method specified at the bottom of this policy. If you do so, we will delete all your personal data and close your recruitment application, unless we have an
obligation to save all or some of the data by law or there is another
legitimate reason to save your personal data.

If you are not successful in your application for a position of employment, your application documents are saved for two years in order to comply with the requirements of the Discrimination Act. However, if we choose not to proceed with your application because we do not need to hire at the moment, your documents will be saved for one year unless you request that they be deleted before then. Even if you are hired, details of your qualifications will be saved for two years, while other necessary information such as name, civic registration number, and contact details will be saved throughout the term of your employment and sometime thereafter.

The personal data we collect via your e-mail communications and through our document management may be stored with our hosting provider. Otherwise, your personal data is not disclosed to anyone outside CombinedX before your employment.

When you communicate with us on social media

We are active on social media. If, as a private person, you choose to publish content, such as a post or comment, on any of our public pages, you agree to our processing of the personal data that you publish. We do this to be able to market ourselves and communicate with the people who contact us
to ask questions or conduct a dialogue. In addition to your personal data being stored in the service you published them, we also process the data by reading, possibly responding, and with time, deleting the data. You can withdraw your consent at any time by deleting what you published yourself. Once every six months, we go back and delete all content from the last six months.

Remember that by publishing content on one of our public pages, you also submit the information you publish to the provider of the social service. CombinedX has no control over what these providers do with your data, but it is fully regulated by their own terms and conditions for each service.

We sometimes promote our posts on social media as well. When we do, we usually target people of working age who have indicated that they live in the area of one of the locations where we have offices. It may also be so that we target people with certain interests that they have indicated on their profile. We do not have access to any data about specific individuals, but all actual processing of personal data is carried out by the social service provider.

When you send us an e-mail

Incoming e-mails usually contain personal data. If you send an e-mail to any of us, we will process your personal data by reading, storing, and managing your message and by passing it on, where applicable, to the correct recipient/s at CombinedX. The personal data processed by us for this
purpose is the same as the data you provide in your message. Common examples of personal data received by us in this way include your name, e-mail address, telephone number, and position.

The legal basis for this processing is our legitimate interest in the e-mail being handled and answered. As long as your message has not changed to be part of a case with a different legal basis, you have a right to object to further processing. We will then delete all messages containing your personal data unless we have an obligation to save one or more of them by law or there is any other legitimate reason to save your messages. The same applies after the communication/case has been closed. For example, if the case relates to an existing customer relationship, we may save it for the duration of the customer relationship (even then with the support of a legitimate interest) and sometime thereafter (to be able to exercise our rights by law).

Think twice before mentioning another person in an e-mail to us. Such personal data is also processed on the basis of our legitimate interest, but it may be difficult or even impossible for us to inform the individual that their personal data is being processed in this case. Be considerate of your fellow human beings and only name people other than yourself if you think it is necessary.

When you visit our website

We collect statistics about those who visit In these statistics, we process information about the IP address, the name of the owner of the IP address, the keywords you have typed along with information about the device and browser. We process this data on the basis of our legitimate interest in following visitors' use of our website to improve and develop it. If you wish to object to this processing, you can contact us as indicated in the "Contact" section.

We use various tools to collect and structure statistics on our website. The providers of these services may have access to certain data collected in this way.

Information about cookies can be found in our cookie policy.

Your rights

You have the right according to the Data Protection Regulation to:

  • request an extract of your personal data and information about how it is processed by us

  • request correction of or addition to your personal data

  • request a temporary restriction on our processing of your personal data, e.g. while a correction is being made

  • request that we delete your personal data (please note, however, that if we still have a legitimate reason to save the data under, for example, law or agreement, your request may be rejected)

  • lodge a complaint with the Swedish Authority for Privacy Protection if you believe that our processing is illegal or not carried out correctly.

You always have the right to object to processing carried out on the basis of a legitimate interest, with regard to your special reasons. We will then reassess your specific situation to determine whether it is still justified to process your personal data for the stated purpose. However, if the processing has been carried out for direct marketing purposes, we will stop performing it immediately if you do object.

In the case of processing carried out on the basis of consent, you can always withdraw your consent at any time, and the personal data shall cease to be processed. However, processing carried out before the withdrawal of consent is still considered legal.

Automated processing (e.g. in an IT system) carried out on the basis of consent or agreements where the personal data collected directly from you is subject to the right to data portability, which means that you have a right to request your personal data in a format that is structured, widely used and machine-readable.


The data controller for all of the above processing operations is
CombinedX AB, 556923- 1219, Tynäsgatan 10, 652 16 Karlstad.

If you have questions about our processing of your personal data, please contact


Do you want to know more?

Contact us