Last Updated: March 15, 2023
1. WHAT PERSONAL DATA IS PROCESSED AND WHY?
1.1 Validio AB with registered office at Linnégatan 78, 115 23 Stockholm, Sweden (collectively referred to as “Validio”, “we”, “us” or “our”) is committed to protecting your personal data. This privacy notice describes how we process and use personal data we receive from you in connection with this website (the “Website”). It also sets out your privacy rights and how you can contact us if you have additional questions regarding our processing of your personal data.
1.2 We collect personal data such as name, email address and other information which you voluntarily provide, for example, when you choose to interact with Validio by signing up for updates such as newsletters, product information, webinars, trade shows, events etc. through email (which you can opt-out from via a link in each message sent through email). We automatically collect and process personal data your browser makes available whenever you visit our Website, including Internet Protocol (IP) address, browser language, geographical location data, date and time, and information about accessed pages. The purpose for collecting and processing such personal data is to make the Website available to you and to improve, develop, and enhance the usability of the Website. We may also use your IP address to help diagnose problems with our server and to analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences.
1.3 If you contact us through our “Contact Us” form or “Request Access” form on the Website, we also collect and process the information you enter (i.e. your name and e-mail address that you submit when you fill out the “Contact Us” form, as well as your company, its size, and your role and data quality situation when you fill out the “Request Access” form). Such data is processed in order for you to receive requested information from us in a way that is relevant to your situation. We also use personal data for direct marketing and advertising in accordance with applicable law and market practice.
1.4 We do not knowingly attempt to solicit or receive personal data from children.
2. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
2.1 We only process your personal data in accordance with our legal grounds for processing. The processing of your personal data for the purpose in Section 1.2 above is based on our legitimate interest in understanding the needs of our customers and potential customers, and to improve how we cater to their needs, by developing and improving our Website. Based on our balance of interest assessment, we have concluded that our legitimate interest in processing your personal data for the purpose of making the Website available to you and improving, developing, and enhancing the usability of the site, outweigh your potential interest in not having your personal data processed for these purposes.
2.2 The processing of your personal data for the purpose in Section 1.3 above is also based on our legitimate interest, since we want to support our mutual relationship and provide information to you, as also requested by you when contacting us through our “Contact Us” form or “Request Access” form. Based on our balance of interest assessment, we have concluded that our legitimate interest in processing your personal data for the purpose of providing you with information upon your request outweigh your potential interest in not having your personal data processed for this purpose.
2.3 In case your consent is required for any of the purposes in Sections 1.2 and 1.3, we will obtain such consent before we process your personal data for such purpose (if you withdraw the consent, that will not affect the lawfulness of processing based on consent before its withdrawal).
3.1 WHO HAS ACCESS TO YOUR PERSONAL DATA?
3.1 We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, unlawful access, and destruction or damage. We do not sell personal data to anyone. The number of persons with access to your personal data is limited. We may appoint designated suppliers to perform tasks on our behalf, such as providing IT services or helping with marketing and recruitment, administration of press releases, sales activities, data analysis or statistics. Only individuals associated with Validio and its designated suppliers that need to process your personal data in accordance with the purposes above will have access to your personal data.
3.2 Your personal data may be transferred to countries outside of EU/EEA such as the USA, which may have a lower level of protection than within the EU/EEA. We may need to transfer your personal data in order to work with some of our designated suppliers. A list of our third party sub processors can be found here.
3.3 When transferring personal data to countries outside the EU/EEA, we use standard contractual clauses approved by the European Commission to ensure a sufficient level of protection for your personal data. The standard contractual clauses can be found via the following link:
3.4 We may also disclose your personal data to third parties, for example the police or other public authorities, if it concerns criminal investigations or if we are otherwise required to disclose such data by law or public authority decision.
4. FOR HOW LONG IS YOUR PERSONAL DATA STORED?
We store the personal data as long as it is necessary to fulfill the purpose for which the personal data has been collected.
WHAT ARE YOUR RIGHTS?
4.1 Validio AB, Reg. No. 559192-3049, of Linnégatan 78, 115 23 Stockholm, Sweden, is the data controller of the personal data we collect through our Website (including its forms) and social media in respect of the different processing activities covered by this privacy notice. This means that we are responsible for your personal data being processed correctly and in accordance with applicable laws.
4.2 You are entitled to know what personal data we are processing regarding you, and you can request a copy of such data. You are entitled, at any time, to have incorrect personal data regarding you corrected, and in some cases you may request that we delete your personal data (if, for example, the personal data is no longer necessary in order to fulfill an agreement with you). If you have given your consent to processing of your personal data for an explicit purpose you may always withdraw your consent. If you want to withdraw your consent, you may contact us through the contact information provided in Section 4.3 below. You also have the right to object to certain processing of your personal data, and request that the processing of your personal data be limited. Please note that limitation or deletion of your personal data may result in us not being able to fulfill our obligations under an agreement with you. You are also entitled to extract your personal data in a machine-readable format and to transfer the personal data to another controller.
4.3 If you have questions regarding how we process your personal data or wish to exercise your rights in accordance with Section 4.2, you are most welcome to contact us at firstname.lastname@example.org.
4.4 If you have any objections to or complaints about the way we process your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten, www.imy.se), which is the applicable Supervisory Authority.
4.5 We may, in our discretion, make changes to this privacy notice from time to time, concerning the processing of your personal data, for example, by making new versions available on our Website or providing you with a prominent notice as appropriate under the circumstances. You are encouraged to therefore visit our Website to learn of any updates from time to time and ensure you read any such notice carefully.
5. EXTERNAL LINKS AND SOCIAL MEDIA
6. COOKIES AND TRACKING TECHNOLOGIES
This privacy notice was published on 12.2.2021, and last updated on 15.03.2023.