Privacy Policy

Last updated: June 2026

Handelsdagarna ("we", "our", "us") is committed to protecting the personal data of all individuals who use the Handelsdagarna Portal at portal.handelsdagarna.se. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have under EU and Swedish data protection law (GDPR).

This policy applies to data collected through the Portal. For information about cookies specifically, see our Cookie Policy.

Who we are

Handelsdagarna is a student-run career fair organised by the Handelsdagarna Project Group within the Stockholm School of Economics Student Association (SASSE).

We are the data controller for personal data collected through the Portal.

What data we collect

We collect different categories of data depending on how you interact with the Portal.

Project Group applicants

• Name, student number, contact details (email, phone)
• Program and year of study
• Citizenship status and gender (used only for aggregated SASSE recruitment statistics, with your consent)
• Your written answers to application questions
• Choice of first and second project teams

Host applicants

• Name, student number, contact details
• Program and year of study
• Citizenship status and gender (used only for aggregated SASSE recruitment statistics, with your consent)
• Your written answers to application questions
• Team assignment (after acceptance)

Interview Session applicants

• Name, student number, contact details
• Program and year of study
• Citizenship status and gender (used only for aggregated SASSE recruitment statistics, with your consent)
• CV, cover letter, and/or grade transcript files (only when requested by the company you apply to)
• Which companies you have applied to
• Application status and interview schedule

Companies

• Company name and contact information
• Logo and company description
• Interview session preferences and HD package selections

Project Group interviewers

• Name and email
• Team and availability

Why we process your data and our legal basis

Who has access to your data

Within Handelsdagarna, access to applicant and company data is limited to Project Group members who need it to fulfill their roles.

For Interview Session applications, your application materials — including any CV, cover letter, and transcript — are shared with the specific company you applied to so they can make selection decisions.

We use the following third-party service providers (data processors) to operate the Portal:

• Supabase Inc. — database, authentication, and file storage. Some data may be processed in the United States; Supabase relies on Standard Contractual Clauses for international transfers.
• Resend Inc. — email delivery. Email content and recipient addresses are processed in the United States under Standard Contractual Clauses.
• Lovable — application hosting. Servers may be located in the EU or United States.

We do not sell your data, share it with advertisers, or use it for marketing unrelated to Handelsdagarna.

How long we keep your data

We keep your data only as long as necessary:

• Application data (PG, host, interview session): retained until the end of the relevant Handelsdagarna cycle, then deleted within 6 months unless required for SASSE recordkeeping.
• Uploaded documents (CV, cover letter, transcript): deleted within 3 months after the fair takes place.
• Company data: retained across cycles to facilitate returning companies, until the company requests deletion.
• Aggregated SASSE statistics: if you consented, anonymous summary statistics may be retained indefinitely.
• Deletion log: records of erasure requests are retained for 3 years for compliance purposes.

You can request earlier deletion at any time — see "Your rights" below.

International transfers

Some of our service providers process data outside the European Economic Area (EEA). Where this occurs, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data receives equivalent protection.

Your rights under GDPR

You have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can request that we correct inaccurate data.
• Right to erasure ("right to be forgotten") — you can request that we delete your data.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interest.
• Right to withdraw consent — for processing based on consent, you can withdraw it at any time without affecting the lawfulness of past processing.
• Right to lodge a complaint — you can complain to the Swedish data protection authority (Integritetsskyddsmyndigheten, IMY) at imy.se.

To exercise any of these rights, contact hd.president@sasse.se. We will respond within 30 days.

Security

We use industry-standard technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted storage at our service providers, and access controls limiting who can view your data. No system is perfectly secure, but we take reasonable steps to prevent unauthorized access.

Changes to this policy

We may update this Privacy Policy from time to time. Significant changes will be reflected in the "Last updated" date at the top of this page.

Contact

For any questions about this policy or to exercise your rights: