Privacy Policy and GDPR

1.   Information about Limetta's processing of personal data as data processor on behalf of a customer who is data controller

Limetta develops, among other things, digital services and systems for companies and organisations. In connection with this we may collect, process and provide personal data on behalf of you as a customer. As a supplier to you we are then the data processor and you as the customer are the data controller. The specific agreements and provisions that apply to the GDPR, the processing of personal data and rights/obligations concerning data processors are provided by your contact person at Limetta or by contacting us. Read more about this at Limetta.se

2.   Information about Limetta's processing of personal data as data controller for direct marketing and similar activities

Limetta may process a range of personal data in connection with direct marketing and similar activities in the role of data controller. As data controllers we are obliged to inform about our processing of personal data.

Limetta's aim is to safeguard the protection of personal privacy and to take all technical and organisational measures required to protect personal data and ensure that processing is carried out in accordance with applicable data protection legislation and internal guidelines, policies and procedures for handling personal data. This means that only those persons who need access to the data to perform their duties have access to it. A more detailed description of Limetta's security rules and security measures is available at Limetta.se

2.1 Which personal data are processed

The data that may be processed are name, address, telephone number and email addresses at the workplace as well as any information about department affiliation and job title.

You may provide information about yourself in several different ways, such as when you fill in forms on the website, download documents and information or when you contact us in various ways. The personal data you may provide are personal and contact information such as name, company, email address, telephone number and company address.

When you use the website and our services, we may collect the following information about you:

• Information about documents and information that you have downloaded. Behavioural information about how you use the website such as use of our services, page response times, download errors, how you reached and left the service and which pages you visited
• Device information such as IP address at network level, language settings, browser settings, time zone, operating system, platform and screen resolution

2.2 Purpose and legal basis for processing personal data

For various types of marketing purposes and information provision we have an interest in marketing products and services. We also have interests in being able to analyse and conduct surveys to improve our products and services as well as improve your experience on the website. We also process your information so that you receive as relevant offers and invitations as possible. We also need to be able to assist when you contact us and that processing is necessary for our and your interest in being able to handle matters. We also have an interest in processing your personal data so that we can provide and administer services such as when you are an authorised user and log in and gain access to our services

The legal basis for this processing is a legitimate interests assessment to satisfy our legitimate interest in informing about and offering various marketing activities to a selected target group for a certain period and to a limited extent. The data subject has the right to object to this processing at any time

2.3 Personal data processing based on legitimate interest

2.4 Personal data processing based on consent

If the data subject has otherwise provided an active consent, the consent constitutes the legal basis for processing of representatives of potential and former customers. If data subjects have voluntarily provided their personal data for a particular purpose and have been informed about the processing in connection with this, the data subject is considered to have consented to the processing. The data subject has the right to object to this processing at any time and thereby withdraw their consent

2.5 Retention period for personal data

We store information about you as long as it is necessary with regard to the purposes of the processing and as long as required by statutory retention periods. We may also retain the information to protect our legal interests, for example if a legal process is ongoing

For marketing purposes, for you as a natural person, we delete your personal data 12 months after you cease to be a customer or user unless there are legal requirements or other reasons to retain it for a longer period

3.   Where do the data come from

Name and contact details of data subjects are collected partly from external address sources and partly from the data subject themselves

4.   Transfer and recipients of personal data

To fulfil the purposes above your personal data will be processed by us, and may also be disclosed to, and processed by, our service providers, for example IT providers or marketing partners such as newsletter systems. We may also disclose your personal data to other companies within the group as well as specially selected partners, for example disclosing information about your search behaviour on the website. We take relevant technical and organisational measures to ensure that information about you is handled securely and with an adequate level of security when transferred or shared with third parties

Furthermore, your personal data may be disclosed if required by law, regulation or decision by an authority

We will not sell your personal data to third parties

5.   Your rights

The majority of the personal data that Limetta processes for its own purposes are linked to legal entities such as customers, suppliers and potential customers who are interested in our services. We also market to and send email (direct advertising and information) to these. When you end your employment or change position with your employer the processing usually ceases and the personal data are deleted in connection with routine disposal

As a representative of the company or organisation you work for (legal entity) you are subject to somewhat different rights than those described below in this section under natural person

As a natural person, with personal data processed by us, you have several rights

5.1 Right to access and rectification

You always have the right to obtain access to your personal data. If you wish information about which personal data we process about you you can always request this in the form of an extract from the register. If you notice incorrect, misleading or incomplete information about yourself you can request rectification

5.2 Right to restriction or erasure

In certain cases you have the right to request the erasure of your personal data (“the right to be forgotten”), for example if your personal data has been processed unlawfully. However, you cannot have your data erased if there are legal obligations or rights for us to retain the data

Additional examples of when we may be entitled to refuse your request are to comply with obligations arising from accounting and tax legislation. It may also be the case that the processing is necessary for us to establish, exercise or defend legal claims or to document information, for example in an employment process. If we are prevented from complying with a request for erasure we will instead, at your request, block the personal data from being used for purposes other than the purpose that prevents the requested erasure

In some cases you have the right to require that the processing of your data be restricted. For example, if you dispute that the personal data we process are accurate you may request restricted processing while we verify whether the personal data are accurate. Another example is if we no longer need the personal data for the purposes for which they were collected, but you need them to establish, exercise or defend legal claims, you may request restricted processing of the data with us. This means that you may request that we do not delete your data

5.3 Right to object to processing

In certain cases you also have the right to object to the processing of your data. If such a circumstance exists we may only continue to process the data if it can be demonstrated that there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the individual, or if the processing is for the establishment, exercise or defence of legal claims

5.4 Right to object to direct marketing

If you do not want us to process your personal data for direct marketing you can notify us of this. In each newsletter you are informed of the option to unsubscribe from further newsletters

If you have voluntarily provided data to us you in some cases have the right to receive and use your data elsewhere (“the right to data portability”). In such cases we have an obligation to facilitate such a transfer of the data. A prerequisite is that we process the personal data based on consent or to fulfil a contract with you

6.   Cookies

We also use cookies (and other similar technologies) to collect information about you or the device you use. More information about our use of cookies can be found at Limetta.se

7.   Contact us

If there is any information you are missing or if you have any other questions you are always welcome to get in touch and we will do our best to answer your questions. Please contact us by email or telephone