- Background
- Definitions
- Why Do We Process Your Personal Data?
- What Personal Data Is Processed and on What Legal Basis?
- Social Media
- How Long Is Your Personal Data Stored?
- Your Rights
- Consent to the Processing of Personal Data
- To Whom Do We Transfer Your Personal Data?
- How Do We Protect Your Personal Data?
- Supervision and Compliance
- Third-Party Terms
- Changes to the Privacy Policy
- How to Contact Us
- Background
We care about your privacy. This policy (“Privacy Policy”) is designed to inform you about how Navet Analytics Aktiebolag (“Navet Analytics”, “we”, “us”) processes your personal data in a lawful, purposeful, and secure manner.
The Privacy Policy describes when, how, and why we collect, use, disclose, and store personal data, as well as what rights you have under the provisions of the EU General Data Protection Regulation (GDPR) (EU) 2016/679, including related implementing regulations and supplementary data protection legislation (“Data Protection Rules”).
This Privacy Policy applies (i) when Navet Analytics provides its services to you or the company you work for or represent, (ii) in communications regarding events or newsletters, (iii) in marketing activities, (iv) in all other contact with Navet Analytics in connection with visits to our website www.navetanalytics.se (“Website”) or via social media platforms, (v) when you apply for a job with us, and (vi) in inquiries or other contact with us via email or phone.
Navet Analytics Aktiebolag, corporate ID number 556167-0604, Redaregatan 48, 252 36 Helsingborg, is the data controller for the processing of your personal data carried out in accordance with this Privacy Policy.
- Definitions
In this Privacy Policy, the term “personal data” refers to information that can be linked to an identified or identifiable natural person, such as name, address, personal identification number, email address, phone number, and IP address (“Personal Data”).
In this Privacy Policy, we describe how we process your Personal Data. The term “processing” refers to actions such as registering, storing, transmitting, and otherwise using your Personal Data as described in this Privacy Policy (“Processing”).
- Why Do We Process Your Personal Data?
Navet Analytics processes Personal Data concerning our customers, customers’ customers, suppliers, prospective customers, and partners. We only collect your Personal Data for the purposes stated below. The overall purpose of the Processing is to manage existing, past, and new business relationships. This means that Personal Data is processed in the following cases:
(i) To provide services and otherwise fulfill the agreement entered into with you personally, your employer, or the party you represent;
(ii) To enable general customer care, support, and customer service, e.g., when you contact us via email, phone, or the Website;
(iii) To provide information about events, send newsletters, and conduct marketing via mail, email, phone, or social media platforms regarding our services;
(iv) To process a job application; and
(v) To comply with applicable legislation.
We only process the Personal Data necessary for the purposes described in this Privacy Policy. The specific Personal Data we collect about you depends, among other things, on which of our services we provide to you or the company you work for or represent.
In addition to the Personal Data you provide to us or that we collect when providing our services, we may also collect Personal Data from third parties. These third parties vary over time but may include providers of address information from public records to ensure we have correct address details, and credit rating agencies or banks from which we obtain creditworthiness data or information for anti-money laundering checks.
When you are asked to provide Personal Data to us, e.g., when purchasing a service, you may choose not to do so. However, if you choose not to provide information necessary to access a particular service, it may result in us being unable to provide that service.
- What Personal Data Is Processed and on What Legal Basis?
The following Personal Data is processed by us for the purposes outlined in section 3 above:
(i) First and last name
(ii) Billing and delivery address
(iii) Phone number
(iv) Email address
(v) Personal identification number (for sole proprietorships)
(vi) IP address
(vii) Payment details
(viii) Correspondence with you
(ix) Details of any purchases, such as the service you purchased and any complaints regarding the service
The processing of Personal Data is necessary for Navet Analytics to provide sales and delivery of services and thereby fulfill the agreement with you (applies if you operate a sole proprietorship). In cases where you act as a representative or contact person for a company that is a customer of Navet Analytics, we process your Personal Data based on our legitimate business interest. In making this assessment, we have conducted a balancing of interests, considering, among other things, that the processing does not involve any sensitive Personal Data and that we have a clear business interest in being able to provide our services to the company you work for or represent in an efficient manner.
Personal Data may also be used for subsequent upselling by providing you with offers, invitations to events, or other marketing such as mailings and newsletters that we believe may be of interest to you or the company you work for or represent. This processing is based on our legitimate business interest in offering you, as a current or former customer, beneficial offers. In making this assessment, we have considered that the processing does not involve any sensitive Personal Data and that we have a clear business interest in marketing our services to you effectively.
We may also process your Personal Data after receiving your consent, for example, to send you marketing communications. We always document whether you have given your consent for us to process your Personal Data.
Some of the Personal Data collected by Navet Analytics is processed to fulfill legal obligations under applicable laws, court rulings, or government decisions. Such requirements may include obligations under the Swedish Accounting Act (1999:1078) or the Anti-Money Laundering Act (2017:630).
- Social Media
Navet Analytics uses Facebook, LinkedIn, and Instagram as channels to connect with customers and to market and inform about our services. In this context, Navet Analytics is the data controller for publications and information containing Personal Data that are posted on these social platforms by you as a user, such as comments, images, and video clips. Navet Analytics asks users to report inappropriate content to us so that we can ensure such content is removed. Navet Analytics may also, when deemed necessary, remove content from social platforms.
- How Long Is Your Personal Data Stored?
Your Personal Data is stored only as long as necessary to fulfill the purposes for which it was collected, in accordance with this Privacy Policy. We process your Personal Data for as long as we have a business relationship with you, your employer, or the company you represent.
If you have consented to the continued processing of your contact details for marketing purposes after the business relationship has ended, Navet Analytics will process the Personal Data for that specific purpose until you withdraw your consent. You can do this by (i) contacting us and objecting in writing, or (ii) following the link provided in our communications.
To enable Navet Analytics to fulfill legal obligations under applicable laws or to protect our legal interests, we may retain Personal Data for a longer period. However, Personal Data is never stored longer than necessary or legally required for each specific purpose.
- Your Rights
You have the right to receive information about how we process your Personal Data. Below is a summary of the rights you may exercise by contacting us. Our contact details can be found at the end of this Privacy Policy.
Right of Access
You have the right to request, free of charge, information about the processing of your Personal Data. You also have the right to receive a copy of the Personal Data we process about you. This request must be submitted in writing and specify the information you wish to access. We will respond to your request without undue delay. If we are unable to fulfill your request, we will provide a justification. The copy of your Personal Data will be sent to your registered address unless otherwise agreed in writing. To verify your identity, we may request additional information from you.
Right to Rectification
Navet Analytics, as the data controller, is responsible for ensuring that the Personal Data we process is accurate. If you inform us that the Personal Data you have provided or that we process is no longer correct, we will promptly correct, block, or delete such data.
Right to Erasure
You have the right to request that Navet Analytics erase your Personal Data without undue delay. Personal Data must be erased in the following cases:
(i) If the data is no longer necessary for the purpose for which it was collected
(ii) If you withdraw your consent and the processing is based solely on consent
(iii) If the data is processed for direct marketing and you object to such processing
(iv) If you object to processing based on a balancing of interests and your interests outweigh ours
(v) If the data has not been processed in accordance with the Data Protection Rules
(vi) If erasure is required to comply with a legal obligation
There may be legal obligations that prevent us from immediately deleting all your Personal Data, such as requirements under accounting laws. In such cases, we will ensure that the data is only used to fulfill those legal obligations and not for any other purpose.
Right to Restriction
You have the right to request that Navet Analytics temporarily restrict the processing of your Personal Data. This may be requested in the following cases:
(i) If you believe the data we have is incorrect and have requested rectification
(ii) If the processing is not compliant with the Data Protection Rules but you do not want the data erased
(iii) If we no longer need the data for the purposes of processing but you need it to establish, exercise, or defend a legal claim
If you have objected to the processing, the use of your data may be restricted during the investigation. During restriction, Navet Analytics will only store your data and will seek your consent for any further processing.
Right to Data Portability
If we process your Personal Data based on your consent or to fulfill a contract with you, you have the right to receive all Personal Data we hold about you that is processed automatically, in a machine-readable format (e.g., Excel or CSV). If technically feasible, you may also request that we transfer your data to another data controller.
Right to Object
You have the right to object to our processing of your Personal Data if it is based on a balancing of interests. Navet Analytics will ask you to specify which processing you object to. We will only continue processing if we have compelling legitimate grounds that override your interests.
- Consent to the Processing of Personal Data
If you have requested to receive newsletters or similar marketing, we process your contact details based on your consent. You decide whether to give consent and when to withdraw it. To withdraw your consent, contact us using the details below or follow the link in the communication.
- To Whom Do We Transfer Your Personal Data?
To provide certain services, we engage selected third parties. This means we share some of the Personal Data we collect with them, such as Navet Analytics group companies and other partners who provide services to Navet Analytics. We implement technical and organizational measures to ensure your data is handled securely. These third parties will only process your data in accordance with this Privacy Policy and for the purposes stated herein. Navet Analytics remains responsible for ensuring that these third parties process your data lawfully and correctly.
Navet Analytics may transfer your Personal Data to countries outside the EU/EEA if any of our suppliers or partners are located there. If such transfers occur, we will take steps to ensure your data remains protected and that the transfer is legally compliant.
We may disclose your Personal Data if required by law or if we reasonably believe it is necessary to protect our rights or comply with a court order or legal process. We will take all reasonable steps to ensure your data remains protected.
- How Do We Protect Your Personal Data?
To safeguard your privacy and detect, prevent, and mitigate risks such as hacking attempts, Navet Analytics implements a range of technical and organizational information security measures. We also take steps to protect your Personal Data from unauthorized access, misuse, disclosure, alteration, and destruction. Access to your Personal Data is restricted to personnel who need it to perform their duties, and they process the data confidentially in accordance with Navet Analytics’ applicable policies and procedures.
- Supervision and Compliance
If you are dissatisfied with how your Personal Data has been processed or believe it has been handled in violation of the Data Protection Rules, you may first contact: ulrik.szokolay@navetanalytics.se.
You also have the right to file a complaint with the supervisory authority, currently the Swedish Authority for Privacy Protection (IMY). More information is available at www.datainspektionen.se.
Navet Analytics reviews this Privacy Policy annually.
- Third-Party Terms
Navet Analytics’ services may, in some cases, be subject to third-party terms. Navet Analytics is not responsible for how such third parties use your Personal Data, as they are solely responsible for their own processing. Therefore, it is important that you review and consider the terms applicable to those third parties. The same applies to any links on our Website that lead to other websites.
- Changes to the Privacy Policy
Navet Analytics reserves the right to amend this Privacy Policy when deemed necessary to comply with the Data Protection Rules or other applicable laws. Such changes may be prompted by legislative updates, statements from supervisory authorities, or other bodies issuing opinions related to the Data Protection Rules. Additionally, this Privacy Policy will be updated as needed due to changes in our business operations.
If Navet Analytics makes significant changes to this Privacy Policy or to how we process your Personal Data, you will be informed before the changes take effect.
- How to Contact Us
If you have questions regarding this Privacy Policy or the processing of your Personal Data, or if you wish to make a request in accordance with the Privacy Policy, you are welcome to contact us:
Navet Analytics Aktiebolag
Redaregatan 48, 252 36 Helsingborg
Email: ulrik.szokolay@navetanalytics.se