Last changed: 2018-12-26
1. Introduction
This Privacy Policy describes how GoClimate Sweden AB (reg. no. 559130-6583) handles your personal data.
Your personal integrity and data is important to us. This policy will hopefully help you understand what kind of personal data we collect and how it is used when you are using our service, as well as your rights. We ask that you read this Privacy Policy carefully since it applies to all use of our services, regardless of who you are and our relationship with you.
If we make updates to this Privacy Policy, we will inform you in an appropriate manner. The date of the most recent update of this Privacy Policy is given at the top of the policy. If you have questions about this Policy, please contact us at [email protected].
2. Personal data
Here you can read about which personal data we process and why, how it is collected, the processing activities involved, with whom we share the data and the time period during which we store your data.
2.1 The personal data we process
The categories of personal data we process are the following:
(a) Name, country of residence, email address and other contact details you may provide us with
(b) User account details, user settings, personal preferences, newsletter settings and any content that you may have saved on our website
2.2 How we collect personal data
We receive your personal data when you register or update an account or in any other way provide us with your personal data.
2.3 Why we process your personal data, legal ground for our processing and storage period
2.3.1 To provide our services
We process your personal data to provide you with our services. Our processing for the purpose of providing our services - is necessary to fulfil our legitimate interest todo so.
2.3.2 To send you newsletters and monthly updates of your subscription
We also process your personal data to send you newsletters and monthly updates of your subscription. You may opt-out from further messages at any time by using the unsubscription link provided in every message.
2.3.3 To comply with legal obligations
We may also process your personal data in order to comply with legal obligations set out in law or as decided by a court or other authorities. These requirements may be related to bookkeeping and anti-money laundering legislation. Our processing for this purpose is that it is necessary for us to comply with legal obligations applicable to us.
2.4 How we share your personal data
These are the types of third parties with whom we share your personal data:
(a) Service providers: We use third party service providers to manage some aspects of our business operations. We share personal data with such third parties with regard to IT infrastructure, operating and hosting services, email communications and other IT services. When we use such service providers we will enter into a data processing agreement with the service provider.
(b) We may also share your personal data to the authorities, such as the police our tax authorities when we are required to so by law.
2.5 For how long do we store your personal data?
We will only store your personal data for as long as it is necessary for the purposes they were collected and to fulfill our legal duties to store data otherwise. We store your personal data as long as you have a user account or as long you subscribe to our newsletters.
3. Security measures
We have taken security measures to ensure that the personal data we keep is secure. Access to areas where personal data is stored is limited to our employees and service providers who require it in the course of their duties and who are informed of the importance of maintaining the security and confidentiality of the personal data we keep.
3.1 Where do we process your personal data?
We strive to process your personal data within the EU and EEA. However, we may transfer your personal data to our service providers who may be located in or have business activities in a country outside the EU/EEA. In the event of such transfer, it will be made in accordance with applicable data protection law for example by ensuring that the country in which the recipient is located ensures an adequate level of data protection according to the European Commission or by use of standard contractual clauses that the European Commission has issued ensuring suitable measures to safeguard your rights and freedoms.
4. Your rights
4.1 Introduction
In this section, we describe your rights under applicable data protection law. You are welcome to email us at [email protected] to exercise your rights or if you have any questions or comments regarding our processing of your personal data or this Privacy Policy. We will respond within a reasonable period of time upon verification of your identity.
4.2 Right of access and rectification
You have the right to information regarding which of your personal data we process and to access and rectify such data. To learn more about the information we store about you, contact us at [email protected].
4.3 Right to erasure
You may request that we erase your personal data without undue delay in the following circumstances:
(a) the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) you withdraw your consent on which the processing is based (if applicable) and there is no other legal ground for the processing;
(c) you object to our processing of personal data and we do not have any overriding legitimate grounds for the processing;
(d) the processed personal data is unlawfully processed; or
(e) the processed personal data has to be erased for compliance with legal obligations.
We may deny your request if we are prevented from erasing your personal data by requirements set out in applicable laws and regulations or if they are needed for the establishment, exercise or defence of legal claims.
4.4 Right to object
You have the general right to object to our processing of your personal data when it is based on our legitimate interest. If you object and we believe that we may still process your personal data, we must demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
4.5 Right to data portability
If your personal data has been provided by you and our processing of your personal data is based on your consent, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format in order to transmit these to another service provider where it would be technically feasible and can be carried out by automated means.
4.6 Right to withdraw consent
When our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Please note that the lawfulness of processing based on consent before its withdrawal is not affected.
4.7 Right to file a complaint
You may at any time lodge a complaint with the supervisory authority if you believe that our processing is performed in breach of applicable data protection law. Please note that you are also always welcome to contact us in such event.