EFFEKTIFY PLATFORM AB
INTEGRITETS- & COOKIEPOLICY
1. Who we are
Our customers’ integrity is of great importance to us. But let’s start from the beginning, who are we? Effektify Platform AB, reg. no 559419-1776 (”Effektify”, “we”, “our” or “us”), is classified as a data controller for the processing of personal data provided to Effektify for the establishment of Effektify’s services (the “Service”). Effektify is classified as a data processor of personal data which is submitted to the Service by a legal entity (the “User Entity”).
Effektify’s contact information is stated below:
Effektify Platform AB
559419-1776
Nässjögatan 12 B
302 47 Halmstad
E-mail: compliance@effektify.com
2. To whom we present this information
The information in this document is applicable for you, in certain parts, seen in the light of your engagement with us. The information is applicable for e.g.:
- Visitors of www.effektify.com (the “Website”)
- Users of the Service (in order to understand which personal data we are data controllers of)
- Contact persons at the User Entities (as described in clause 3.2 below) using the Service
- Persons seeking contact by emailing us at compliance@effektify.com
3. These are your rights
In accordance with GDPR you have a right to have a control over your personal data and receive information about the processing directly from the party processing such data. Do you wish to receive more information or get in contact with us in order to practice any of your rights? Please contact us at compliance@effektify.com. We may ask you to verify yourself in order to make sure that the request to practice any of the below rights has been made by right person. We would love to hear from you.
3. 1. Right to have your personal data deleted
You have a right to request that your personal data shall be deleted. In certain situations we do not have a possibility to delete your personal data. The reason for this is that the personal data is still necessary to process for a purpose which the data has been collected for, our interest to process the data is outweighing your interest to get the data deleted, or because we have a legal obligation to process the data.
3. 2. Right to be informed
You have a right to be informed on how we process your personal data. We are meeting this right by providing you with the information in this Privacy Policy and by answering your questions. If you are a user of the Service for a User Entity, the controller of your personal data is the User Entity which has accepted the Terms and Conditions for the Service (the “Agreement”). You have a right to receive information about the controller’s transfer of your personal data to us, directly from the controller.
3. 3. Right to access your personal data
Du har rätt att få information om huruvida Effektify behandlar dina personuppgifter och att få ett registerutdrag (kopia av dina personuppgifter som behandlas). Genom att få ett utdrag ur registret förstår du vilka personuppgifter vi behandlar om dig.
3. 4. Right to data portability
You have a right to be given, and to use, your personal data elsewhere, for example on another platform similar to the Service, and we are obliged to facilitate such transfer of your personal data. This is provided that we process your personal data based on the data subject’s consent or to perform a contract with you and it applies only to such personal data that you have provided us yourself.
3. 5. Right to rectification
You have a right to request that inaccurate information about you is being rectified. This also means that you have a right to add such personal data that is missing and that is relevant taking into account the purpose of the personal data processing. If data is rectified at your request, we shall also inform those to whom we have provided data that data has been rectified. This does not however apply if it should prove to be impossible or would involve excessive effort. You also have a right to request to be given information about to whom your personal data has been provided.
3. 6. Right to limitation of processing
In certain cases, you have a right to demand that the processing of your personal data is limited. By “limited” is meant that the data is flagged so that it in future may only be processed for certain limited purposes.
Rätten till begränsning gäller bland annat när du anser att uppgifterna är felaktiga och har begärt rättelse. Du kan i sådana fall också begära att behandlingen av dina personuppgifter begränsas medan uppgifternas riktighet utreds. När begränsningen upphör att gälla kommer du att informeras om detta.
3. 7. Right to object
You have in certain cases a right to object to your personal data being processed. The right to object applies when personal data is processed in order to carry out a task in the public interest, as part of the exercise of official authority or after a weighing of interests has been made.
If you object to the processing in such cases, we may continue to process your data only if it can be demonstrated that there are compelling legitimate reasons for the data needing to be processed that override your interests, rights and freedoms or if the processing is carried out for the establishment, exercise or defence of legal claims.
Du har alltid rätt att invända mot att dina personuppgifter används för direktmarknadsföring. Sådana invändningar kan göras när som helst. Om en invändning mot direktmarknadsföring görs får dina personuppgifter inte längre behandlas för sådana ändamål.
3. 8. Right to withdraw your consent
Our processing of your personal data collected by cookies is mostly based on a consent from you. You can always withdraw your consent by choosing the action in the menu for cookies on the Website or adjust cookie settings in your web browser. Read more about the cookies we use in Section 7 below.
If you have provided a consent to an User Entity, please contact the User Entity to withdraw such consent.
3. 9. Right to file complaints
If you have a complaint about our processing of your personal data, you have a right to file such complaint to the Swedish Authority for Privacy Protection. Swedish Authority for Privacy Protection studies all complaints and assesses whether to proceed with the matter and then informs the person who made the complaint.
You can reach the authority on www.imy.se or Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm.
4. Personal data being processed divided by category of individuals and with statement of purpose, lawful basis and time of processing
4. 1. When you visit the Website
| Personal data | What we use the data for (purpose) | From where we collected the data | Lawful basis | Time of processing | |
|---|---|---|---|---|---|
| Behavioural patterns of your use of the Website | IP-adress | To get to know the visitors’ behavioural patterns when they are using the Website in order to improve the user experience and provide advertisement efficiency | Optional first-party cookies: Google Analytics Google AdSense Meta TikTok | Consent | Your consent to our use of cookies is valid for 6 months whereupon you are asked to give us a new consent. We are deleting the history every 6 months if we have not received a new consent from you. You have always a right to withdraw your consent and also to shut down all cookies by stating so in the settings of your web browser. Read more in Section 7. |
| IP-adress | To get insights on anonymous users on the Website | Optional third-party cookies: Google Analytics Meta TikTok | Consent | Your consent to our use of cookies is valid for six 6 months whereupon you are asked to give us a new consent. We are deleting the history every 6 months if we have not received a new consent from you. You have always a right to withdraw your consent and also to shut down all cookies by stating so in the settings of your web browser. Read more in Section 7. |
4. 2. When you represent a (current or potential) User Entity of the Service
| Personal data | What we use the data for (purpose) | From where we collected the data | Lawful basis | Time of processing |
|---|---|---|---|---|
| E-mail adress Name Username Mobile phone number Business role Name of the (current, previous or potential) User Entity | To identify the representative for a (current or potential) Entity User of the Service and maintain the contractual relationship | From the representative him-/herself | Contractual necessity | As long as we have an ongoing Agreement with the User Entity you represent. After the termination of the Agreement the personal data shall be processed as long as it required in order for us to meet the requirements in e.g. the Accounting Act or if we need the data in order to determine a legal claim, make a legal claim or defend ourselves against a legal claim. |
| E-mail Name Business role | To send marketing material after the Agreement is terminated | From the representative him-/herself | Our interest to market our Service | We will save your personal data for 365 days for this purpose and contact you with marketing material within this period of time. You have a possibility to stop receiving our marketing material by click on such choice button in every of our marketing sending. |
4. 3. Users of the Service who are private individuals
| Personal data | What we use the data for (purpose) | From where we collected the data | Lawful basis | Time of processing |
|---|---|---|---|---|
| Email adress Name Username Mobile phone number Domain (if applicable) | To identify the user of the Service and maintain the contractual relationship | From the user | Contractual necessity | As long as we have an ongoing Agreement with the User Entity you represent. After the termination of the Agreement the personal data shall be processed as long as it required in order for us to meet the requirements in e.g. the Accounting Act or if we need the data in order to determine a legal claim, make a legal claim or defend ourselves against a legal claim. |
| E-mail Name | To send marketing material after the Agreement is terminated | From the representative him-/herself | Our interest to market our Service | We will save your personal data for 365 days for this purpose and contact you with marketing material within this period of time. You have a possibility to stop receiving our marketing material by click on such choice button in every of our marketing sending. |
4. 4. Persons seeking contact by email and chat
| Personal data | What we use the data for (purpose) | From where we collected the data | Lawful basis | Time of processing |
|---|---|---|---|---|
| Name E-mail adress Business role Name of the (current, previous or potential) User Entity | To identify a registered person and find all of the person’s personal data, if the person makes a request to use any of the rights stated in Section 3 | From the person making a request to use any of the rights stated in Section 3 | Fulfilment of legal obligation (consideration clause 64 GDPR) | Personal data is deleted the same day we identify the registered person and such person’s personal data. The identification shall be made within 5 business days. |
| Name (if you submit such data) E-mail adress | To manage the contact with person reaching out to us per e-mail | From the person reaching out to us per e-mail | Our interest to reply the person reaching out to us per e-mail and manage the person’s case (if submitted) | Personal data is deleted the day we have ensured us that the person’s case is closed. |
5. Whom we share your personal data with
In specific cases it is necessary for us to share some of your personal data with entities which are helping us to operate our business.
We do not sell, or otherwise make public, any of the personal data to third parties. This do not include transfers to trusted third parties, such as e.g. group companies, a subcontractor, business partner or a subprocessor who is helping us to operate our business and is obliged through agreement to keep high confidentiality and to process the personal data in accordance to GDPR.
Below is a statement on the categories of receivers of personal data we process.
| Personal data | Reciever | Purpose of the transfer the personal data | Lawful basis | Whether the receiver is a processor or independent controller alt. joint controller | Country of the receiver | Lawful transfer mechanism | |
|---|---|---|---|---|---|---|---|
| Name E-mail adress Business role Company affiliation | Amazon Web services | Hosting of our Service and business environment | Our interest to maintain and develop our business | Provcessor | US/EU | Standard Contractual Clauses in accordance with article 28 GDPR. | The contractual clauses that are entered into can be found here. |
| E-mail adress Name Business role | Rollbar Inc. | Error logging and tracking service | Our interest to maintain and develop our business | Processor | US | Standard Contractual Clauses in accordance with article 28 GDPR. | The contractual clauses that are entered into can be found here. |
| E-mail adress Name Business role All other data submitted to us by e-mail | Google Workspace | Provider of e-mail solution | Our interest to maintain and develop our business | Processor | US | Standard Contractual Clauses in accordance with article 28 GDPR. | The contractual clauses that are entered into can be found here and here. |
| Name E-mail adress Business role Company affiliation | GleSYS | Provider of storing and tracking service | Our interest to maintain and develop our business | Processor | Sweden |
6. Where we process your personal data and protective measures in place
The personal data we process as controllers is stored within EU/EES and US. The taken measures for ensuring a safe and legal transfer of personal data to US is described in Section 5 above.
All processing of personal data occurs with respect of the personal integrity and in accordance with provisions of GDPR and other relevant legislation. To achieve a complete integrity protection, we have made sure that personal data is protected by modern and effective technique.
Only authorised employees/consultants have access to our infrastructure. All the key authentication information is protected by two-factor authentication. Effektify has further resolved on internal routines and policies regarding the officers’ access to personal data and continuous review (every quarter) of the processing of personal data to minimize the data no longer serving its purpose or lawful basis.
7. About cookies
A cookie is a small text file which the website you visit ask your permission to place on your device. Cookies are used at a majority of websites to give the users access to various functions. The text file is used e.g. to make user experience more effective and to enable to save certain of your choices/preferences made on the website. There are several types of cookies:
Permanent cookies – saved in the visitor’s device during a certain time or until you delete them manually.
Session cookies – saved temporarily in the device’s memory during the period the visitor is using the website.
First-party cookies – are set up by our Website and are used mostly to enable functionality on the Website and to make the Website more effective.
Third-party cookies – are set up by a third party, e.g. a contractor to us.
Necessary cookies – cookies we have a right to use without asking for your permission. These cookies are only making your stay on our Website more effective and enabling you to use the Website’s all functions.
Optional cookies – cookies we need to ask your permission to use. These cookies can both be cookies that are improving functionalities on the Website and cookies enabling our marketing.
Some of our cookies are collecting personal data and GDPR is applicable for this processing. See more about the personal data collected by cookies in Section 3 above.
Below we are stating all the cookies that are used by the Website and the functions of the cookies.
7. 1. Compiling of cookies
The Website uses the cookies specified in the below list. In accordance with the law on electronic communication (2022:482), we are allowed to store cookies on your device if such cookies are necessary for the use of the Website. Your consent is needed for all other purposes and the consent is collected when you visit the Website.
You can change or withdraw your consent to the cookie commitment on the Website or by adjusting the setting in your web browser. We will not transfer the information collected by cookies to a third party other than our contractors helping us with the Website.
Necessary cookies
These cookies are necessary for the Website to work properly and are not possible to shut down. You can adjust your web browser to block these cookies or warn you about them, but this may result in a partly failure of the Website. No personal information is stored in these cookies.
| Cookienyckel | Användningsområde | Domän | Typ | Lagring |
|---|---|---|---|---|
| JSESSIONID | Used to maintain an anonymous user session by the server | .nr-data.net | Third-party cookies (Google Ads) | Session |
| __cf_bm_ | This cookie is used to distinguish between humans and bots | .vimeo.com | Third-party cookie | 30 minutes |
| player | Used to remember user’s player mode preferences | .vimeo.com | Third-party cookies | 365 days |
| _GRECAPTCHA | Used to provide a risk analysis | .google.com | Third-party cookies (Google Ads) | 6 months |
Optional cookies
These cookies are enabling us to understand how a visitor interacts with the Website by collecting and reporting information to us.
| Cookie key | Area of use | Domän | Typ | Lagring |
|---|---|---|---|---|
| _ga | Used to distinguish users | .effektify.com | First-part cookie Google Analytics | 1 year 1 month |
| _ga_9DSQNN9WRQ | Used to persist session state | .effektify.com | First-part cookie Google Analytics | 1 year 1 month |
| _gcl_au | Used for advertisement efficiency | .effektify.com | First-part cookie (Google AdSense) | 3 months |
| _fbp | Used for delivery of advertisement products | .effektify.com | First-part cookie (Meta) | 3 months |
| vuid | Used to provide video player | .vimeo.com | Third-party cookie (Vimeo) | 1 year 1 month |
| nitroCachedPage | Used to provide load balancing functionality | .effektify.com | First-party cookie (Nitropack) | Session |
7. 2. How to shut down cookies
You can manage our usage of cookies on the Website or by adjusting the setting of your web browser.
Website – We are asking for your consent for our usage of cookies every 30th day. This means that if we do not receive a new consent from you every 30th day, we will not use the cookies that need your approval. You can at any time withdraw your consent. You can withdraw your consent by clicking on decline on the Website.
Web browser – Web browsers are giving opportunity to shut down all or categories of cookies applied to the websites you have visited in the web browser or to delete cookies when you close the web browser. You can also adjust the settings ad receive a request every time the website is trying to place a cookie on your device and you can also delete all placed cookies. Every type of web browser has its own settings for the managing of cookies, see the help pages of the web browser you use for more information.
8. Automated decision-making, including profiling
The personal data we process as controllers is not subject to automated decision-making or profiling.
9. Updates of this Privacy and Cookie Policy
We will update this document when we find it necessary, e.g. when we add new processing. When this document is changed the date of the last update will be stated in the upper left corner of the document.