Information we collect
In relation to your use of Stravito's Services, Stravito collects personal data such as your name and e-mail address, IP address and behavior data when you use our Services, but may also process title and company name and other personal data that you submit to us.
How we use your data and our legal basis
When you register as a user of Stravito’s SaaS services, we will process personal data such as name and e-mail to be able to fulfill our contract with you.
On the legal basis of legitimate interest and for the purpose of improving the Services, we process personal data that you provide to us or generate in connection with accessing and using our Services and in your interactions with us.
On the legal basis of legitimate interest we do also use your name and e-mail address in order to communicate with you regarding the Services, e.g. in order to inform you of updates and other changes to the Services or perform surveys regarding your usage of the Services.
Additionally, based on your consent, we may process your e-mail address to send direct marketing information to you relating to us, and our Services. You have the right to at any time oppose to our processing of your personal data for direct marketing purposes and de-register from future communications from us, please see contact details below.
How long your data is retained
How long we keep information we collect about you depends on the type of information and how we collect and store it. After a reasonable period of time, we will either delete or anonymize your information. We only retain personal data that you provide to us where we have an ongoing legitimate business need to do so. When your personal data is no longer necessary for these purposes, we will securely delete the data.
Disclosure to third parties and transfer outside of the EU/EEA
Only the people who need to process personal data for the purposes mentioned above have access to your personal data. We further may need to allow our suppliers access to your personal data when they perform services on our behalf as data processors, mainly to provide support and maintenance of IT systems, storage services and marketing. We will only share your personal data outside Stravito when necessary to achieve the purpose.
The transfers above may entail transfer of your personal data outside the EU/EEA. Any transfer of data outside the EU/EEA is made in line with data protection laws. Our international transfers of personal data (including transfers to our group companies and suppliers outside the EU/EEA) are based on the EU Commission’s standard contractual clauses unless the company resides in a country considered by the EU Commission to ensure an adequate level of protection.
Right to access: You are entitled to access your personal data and receive certain information about the processing. That information is provided in this policy.
Right to rectification: You are entitled to obtain rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
Right to erasure: Under certain circumstances, you are entitled to have the personal data erased. This is the so-called “right to be forgotten”.
Right to restriction of processing: Under certain circumstances you are entitled to restrict the processing of the personal data that Stravito carries out.
Right to data portability: You are, under certain circumstances entitled to receive the personal data (or have the personal data directly transmitted to another data controller) in a structured, commonly used, and machine-readable format from Stravito.
Right to object: You are entitled to object to certain processing activities conducted by Stravito on the personal data, such as all Stravito’s processing of the personal data based on Stravito’s legitimate interest.
Finally, you also have the right to lodge a complaint with the supervisory authority, which in Sweden (the seat of Stravito) is Integritetsskyddsmyndigheten.
How will we notify you of changes to this notice?
For changes to this policy, we will post a notice on the website informing you of the updates.
Your obligation in relation to data uploaded by you
It is possible for you to upload information to the SaaS service. You are responsible for any personal data uploaded by you to the SaaS service and for complying with applicable laws and regulations, including those related to processing of personal data. This means e.g. that you have an obligation to provide the data subjects with information relating to your processing of the personal data and that you can only process personal data if you have a legitimate purpose and a legal basis for the processing. If you upload any personal data to the SaaS service as data controller you shall inform us of such upload. We will in such case be data processor for the processing of such personal data and reserve the right to require that a data processing agreement is entered into.
Questions and contact information
If you have any questions or concerns about our processing of personal data, please contact us using the following contact details:
Stravito AB, Vasagatan 28 111 20, Stockholm, Sweden