PRIVACY POLICY
EFFEKTIFY PLATFORM AB
PRIVACY AND COOKIE POLICY
1. Who we are
The privacy of our customers is very important to us. But let's start from the beginning, who are we? Effektify Platform AB, org. no. 559419-1776 ("Effektify", "we", "our" or "us"), is classified as a data controller for the processing of personal data provided to Effektify for the establishment of Effektify's services (the "Service"). Effektify is classified as a data processor for personal data submitted to the Service by a legal entity (the "User Entity").
Effektify's contact details can be found below:
Effektify Platform AB
559419-1776
Nässjögatan 12 B
302 47 Halmstad
E-mail: compliance@effektify.com
2. To whom we provide this information
The information in this document is applicable to you, in part, in light of your engagement with us. For example, the information is applicable to
- Visitors to www.effektify.com ("the Website")
- Users of the service (to understand which personal data we are responsible for).
- Contact persons of the user entities (as described in section 3.2 below) using the service.
- People seeking contact by sending an email to us at compliance@effektify.com
3. These are your rights
Under the GDPR, you have the right to have control over your personal data and to receive information about the processing directly from the party processing this data. Would you like to get more information or contact us to exercise any of your rights? Please contact us at compliance@effektify.com. We may ask you to verify yourself to ensure that the request to exercise any of the rights below has been made by the right person. We would like to hear from you.
3. 1. Right to have your personal data erased
You have the right to request the erasure of your personal data. In some situations, we are not able to erase your personal data. The reason for this is that the personal data is still necessary to process for a purpose for which the data has been collected, that our interest in processing the data outweighs your interest in having the data erased, or that we have a legal obligation to process the data.
3. 2. Right to information
You have the right to be informed about how we process your personal data. We fulfill this right by providing you with the information in this privacy policy and by answering your questions. If you are a user of the Service for a user entity, the controller of your personal data is the user entity that has accepted the terms and conditions of the Service (the "Agreement"). You have the right to receive information about the controller's transfer of your personal data to us, directly from the controller.
3. 3. Right of access to your personal data
You have the right to receive information about whether Effektify processes your personal data and to receive a register extract (copy of your personal data being processed). By obtaining an extract from the register, you understand what personal data we process about you.
3. 4. Right to data portability
You have the right to receive and use your personal data elsewhere, for example on another platform similar to the Service, and we are obliged to facilitate such transfer of your personal data. This is subject to the condition that we process your personal data on the basis of the data subject's consent or for the performance of a contract with you and it only applies to personal data that you yourself have provided to us.
3. 5. Right of rectification
You have the right to request the rectification of inaccurate information about you. This also means that you have the right to add any missing personal data that is relevant to the purpose of the processing of the personal data. If data is rectified at your request, we shall also inform those to whom we have provided data that the data has been rectified. However, this does not apply if it would prove impossible or would involve excessive effort. You also have the right to request information about to whom your personal data has been disclosed.
3. 6. Right to restriction of processing
In some cases, you have the right to request that the processing of your personal data be restricted. "Restricted" means that the data is marked so that it can only be processed for certain limited purposes in the future.
The right to restriction applies, inter alia, when you consider the data to be inaccurate and have requested rectification. In such cases, you can also request that the processing of your personal data be restricted while the accuracy of the data is investigated. You will be informed when the restriction ceases to apply.
3. 7. Right of objection
If you object to the processing in such cases, we may continue to process your data only if it can be demonstrated that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is for the establishment, exercise or defense of legal claims.
You always have the right to object to the use of your personal data for direct marketing purposes. Such objections can be made at any time. If an objection to direct marketing is made, your personal data may no longer be processed for such purposes.
3. 8. Right to withdraw your consent
3. 9. Right to lodge a complaint
If you have a complaint about our processing of your personal data, you have the right to lodge such a complaint with the Integrity Protection Authority. The Authority studies all complaints and assesses whether to pursue the matter further, and then informs the complainant.
You can reach the Authority at www.imy.se or the Swedish Authority for Privacy Protection, Box 8114, 104 20 Stockholm.
4. personal data processed broken down by category of person and indicating the purpose, legal basis and timing of the processing.
4. 1. When you visit the website
You have the right to request the erasure of your personal data. In some situations, we are not able to erase your personal data. The reason for this is that the personal data is still necessary to process for a purpose for which the data has been collected, that our interest in processing the data outweighs your interest in having the data erased, or that we have a legal obligation to process the data.
| Personal data | What we use the data for (purpose) | Where we collected the data from | Legal basis | Time for processing | |
|---|---|---|---|---|---|
| Behavioral patterns of your use of the website | IP address | To learn about the behavioral patterns of visitors when using the website in order to improve the user experience and provide effective advertising. | Optional first-party cookies: Google Analytics Google AdSense Meta TikTok |
Consent | Your consent to our use of cookies is valid for 6 months, after which you will be asked to give us new consent. We delete the history every 6 months if we have not received a new consent from you. You always have the right to withdraw your consent and also to disable all cookies by indicating this in your browser settings. Read more in Section 7. |
| IP address | To obtain information on anonymous users of the website. | Optional third party cookies: Google Analytics Meta TikTok |
Consent | Your consent to our use of cookies is valid for six months, after which you will be asked to give us new consent. We delete the history every six months if we have not received a new consent from you. You always have the right to withdraw your consent and also to disable all cookies by indicating this in your browser settings. Read more in Section 7. |
4. 2. When you represent a (current or potential) User entity of the Service
| Personal data | What we use the data for (purpose) | Where we collected the data from | Legal basis | Time for processing |
|---|---|---|---|---|
| E-mail address Name Username Mobile phone number Business role Name of the user entity (current, former or potential) |
To identify the representative of a (current or potential) Device User of the Service and maintain the contractual relationship. | From the representative himself | Contractual necessity | As long as we have an ongoing Agreement with the User Entity you represent. After the termination of the Agreement, the personal data shall be processed for as long as it is necessary for us to comply with the requirements of e.g. the Accounting Act or if we need the data to establish a legal claim, enforce a legal claim or defend ourselves against a legal claim. |
| E-mail Name Business role |
To send marketing material after the contract has been terminated. | From the representative himself | Our interest in promoting our service | We keep your personal data for 365 days for this purpose and contact you with marketing material during this period. You have the option to stop receiving our marketing material by clicking on such an option button in all our marketing communications. |
4. 3. Users of the Service who are private individuals
| Personal data | What we use the data for (purpose) | Where we collected the data from | Legal basis | Time for processing |
|---|---|---|---|---|
| Email address Name Username Mobile phone number Domain (if applicable) |
to identify the user of the service and maintain the contractual relationship | From the user | Contractual necessity | As long as we have an ongoing Agreement with the User Entity you represent. After the termination of the Agreement, the personal data shall be processed for as long as it is necessary for us to comply with the requirements of e.g. the Accounting Act or if we need the data to establish a legal claim, enforce a legal claim or defend ourselves against a legal claim. |
| E-pos Name |
To send marketing material after the contract has been terminated. | From the representative himself | Our interest in promoting our service | We keep your personal data for 365 days for this purpose and contact you with marketing material during this period. You have the option to stop receiving our marketing material by clicking on such an option button in all our marketing communications. |
4. 4. People seeking contact by email and chat
| Personal data | What we use the data for (purpose) | Where we collected the data from | Legal basis | Time for processing |
|---|---|---|---|---|
| Name E-mail address Professional role Name of (current, former or potential) user entity |
To identify a data subject and to find all his/her personal data, if he/she requests to exercise any of the rights listed in Section 3. | From the person making a request to use any of the rights set out in Section 3 | Compliance with a legal obligation (taking into account clause 64 of the GDPR) | Personal data is deleted on the same day that we identify the data subject and their personal data. The identification shall take place within 5 working days. |
| Name (if you provide such information) E-mail address |
To manage contact with people who contact us by e-mail | From the person contacting us by emailOur interest in promoting our service | Our interest in responding to the person contacting us by email and managing their case (if submitted). | Personal data is deleted on the day we have ensured that the person's case is closed. |
5. Who we share your personal data with
In specific cases, it is necessary for us to share some of your personal data with entities that help us run our business.
We do not sell, or otherwise disclose, any personal data to third parties. This does not include transfers to trusted third parties, such as group companies, a subcontractor, business partner or a subcontractor who helps us run our business and who are contractually obliged to maintain high confidentiality and process personal data in accordance with the GDPR.
Below is a description of the categories of recipients of personal data that we process.
| Personal data | Recipients | Purpose of the transfer of personal data | Legal basis | If the recipient is a processor or independent verifier or joint verifier. | Country of the recipient | Legal transfer mechanism | |
|---|---|---|---|---|---|---|---|
| Name E-mail address Role in the company Company affiliation |
Amazon Web Services | Hosting our service and business environment | Our interest in maintaining and developing our business | Processors | US/EU | Standard contractual clauses in accordance with Article 28 of the GDPR. | The contractual clauses included can be found here. |
| E-mail address Name Role in the company |
Rollbar Inc. | Error logging and tracing service | Our interest in maintaining and developing our business | Processors | US | Standard contractual clauses in accordance with Article 28 of the GDPR. | The contractual clauses included can be found here. |
| E-mail address Name Role in the company Any other information sent to us by e-mail |
Google Workspace | Provider of email solutions | Our interest in maintaining and developing our business | Processors | US | Standard contractual clauses in accordance with Article 28 of the GDPR. | The contractual clauses included can be found here and here. |
| Name E-mail address Role in the company Company affiliation |
GleSYS | Provider of storage and tracking services | Our interest in maintaining and developing our business | Processors | Sweden |
6. Where we process your personal data and what safeguards have been put in place
The personal data that we process as a data controller is stored within the EU/EEA and the USA. The measures taken to ensure a secure and lawful transfer of personal data to the US are described in section 5 above.
All processing of personal data is done with respect for privacy and in accordance with the provisions of the GDPR and other relevant legislation. To achieve full privacy protection, we have ensured that personal data is protected by modern and efficient technologies.
Only authorized employees/consultants have access to our infrastructure. All important authentication information is protected by two-factor authentication. Effektify has further decided on internal procedures and policies regarding officials' access to personal data and continuous review (every quarter) of the processing of personal data to minimize the data that no longer serves its purpose or legal basis.
7. About cookies
A cookie is a small text file that the website you visit asks for permission to place on your device. Cookies are used on most websites to give users access to various functions. The text file is used, among other things, to make the user experience more efficient and to save some of your choices/preferences made on the website. There are several types of cookies:
Permanent cookies - stored in the visitor's device for a certain period of time or until you manually delete them.
Session cookies - stored temporarily in the device's memory for the duration of the visitor's use of the Website.
First-party cookies - set by our Website and used primarily to enable functionality on the Website and to make the Website more efficient.
Third-party cookies - set by a third party, such as a contractor of ours.
Necessary cookies - cookies that we are entitled to use without asking your permission. These cookies just make your stay on our website more efficient and enable you to use all the features of the website.
Optional cookies - cookies that we have to ask your permission to use. These cookies can be both cookies that improve the functionality of the website and cookies that enable our marketing.
Some of our cookies collect personal data and the GDPR applies to this processing. See more about the personal data collected by cookies in section 3 above.
Below we describe all the cookies used by the Website and their functions.
7. 1. Collection of cookies
The Website uses the cookies listed below. In accordance with the Electronic Communications Act (2022:482), we have the right to store cookies on your device if such cookies are necessary for you to use the Website. Your consent is required for all other purposes and is collected when you visit the Website.
You can change or withdraw your consent to cookies on the website or by adjusting your browser settings. We will not transfer the information collected by cookies to a third party other than our contractors who help us with the website.
Necessary cookies
These cookies are necessary for the proper functioning of the Website and cannot be turned off. You can adjust your browser to block these cookies or warn you about them, but this may cause the Website to partially malfunction. No personal information is stored in these cookies.
| Cookie key | Field of application | DomainLegal basis | Type | Storage |
|---|---|---|---|---|
| JSESSIONID | Used to maintain an anonymous user session on the server. | .nr-data.net | Third party cookie (Google Ads) | Session |
| __cf_bm_ | This cookie is used to distinguish between humans and robots. | .vimeo.com | Third party cookie | 30 minutes |
| Players | Used to remember the user's player mode settings. | .vimeo.com | Third party cookie | 365 days |
| _GRECAPTCHA | Used to provide a risk analysis | .google.com | Third party cookie (Google Ads) | 6 months |
Optional cookies
These cookies allow us to understand how a visitor interacts with the website by collecting and reporting information to us.
| Cookie key | Field of application | DomainLegal basis | Type | Storage |
|---|---|---|---|---|
| _ga | Used to distinguish users | .effektify.com | Google Analytics first-party cookie |
1 year 1 month |
| _ga_9DSQNN9WRQ | Used to preserve session status | .effektify.com | Google Analytics first-party cookie |
1 year 1 month |
| gcl_au | Used for effective advertising | .effektify.com | First-party cookie (Google AdSense) | 1 year 1 month |
| _fbp | Used for the delivery of promotional products | .effektify.com | First party cookie (Meta) | 3 months |
| vuid | Used to provide video players | .vimeo.com | Third-party cookie (Vimeo) | 1 year 1 month |
| nitroCachedPage | Used to provide load balancing functionality | .effektify.com | First-party cookie (Nitropack) | Session |
7. 2. How to disable cookies
You can manage our use of cookies on the website or by adjusting your browser settings.
Website - We ask for your consent to our use of cookies every 30 days. This means that if we do not receive a new consent from you every 30 days, we will not use the cookies that need your consent. You can withdraw your consent at any time. You can withdraw your consent by clicking on the deny button on the website.
Browser - Browser provides the option to disable all or categories of cookies applied to the websites you have visited in the browser or to delete cookies when you close the browser. You can also adjust the settings so that you receive a request every time the website tries to place a cookie on your device and you can also delete all placed cookies. Each type of browser has its own settings for managing cookies, see the help pages of the browser you are using for more information.
8. Automated decision-making, including profiling
The personal data that we process as data controllers is not subject to automated decision-making or profiling.
9. Updates to this privacy and cookie policy
We will update this document when we find it necessary, for example when we add new treatments. When this document changes, the date of the last update will be indicated in the upper left corner of the document.