§1. GENERAL

This privacy policy applies to the app ‘Invajt’ (the App). The App is owned and operated by Invajt Development AB (the Company), organization number 559155-6815, with address Torsgatan 6 A, 753 15 Uppsala, Sweden. This policy may be updated. Before any major changes take effect, the user (the User) will be notified as follows: the User will receive a notification in the App.

§2. PERSONAL DATA PROCESSED

We process the following personal data about the User if the User creates an account with us:

• Name and contact information, such as first, middle, and last name as well as profile picture (manually provided by the User)
• Email address (manually provided by the User)
• Phone number (manually provided by the User)

§3. WHEN THE COMPANY PROCESSES PERSONAL DATA

The Company may process the User’s personal data for the following purposes (exhaustive list):

• To administer your account, make the App available and provide it, integrate the App with third-party services, and to enhance your experience with the App, and generally make the App available in accordance with the terms of service.
• To send notifications and messages to you via email or otherwise, including marketing and information from us and our affiliates regarding products and services.
• To inform you about updates to the App, the Privacy Policy, or the Agreement.
• To improve and develop the App or new services and products, and to analyze your usage of the App.
• To ensure the technical functionality of the App and to prevent use of the App in violation of the Agreement.
• To fulfill the Agreement, including protecting our rights, property, and safety, and, if necessary, also the rights, property, and safety of third parties.

§4. LEGAL BASIS FOR PROCESSING PERSONAL DATA

The Company uses the following legal basis for processing the User’s personal data:

§5. HOW PERSONAL DATA IS SHARED

We do not sell the User’s personal data to any third party, but the Company shares it with those who can assist the Company in its operations or in fulfilling the purposes for which the Company processes the User’s personal data. This includes, for example, the Company’s partners (e.g., the provider managing the built-in support platform).

§6. WHERE PERSONAL DATA IS SHARED

We will share and transfer your personal data to third parties (e.g., IT service providers) to provide the App to you in accordance with the terms of service.

As a general rule, the Company processes your personal data only within the EU and EEA. If personal data is processed outside the EU and EEA, we ensure that your data is protected in an equivalent manner as if it were processed within the EU/EEA through standard contractual clauses we have signed with these parties or other appropriate safeguards. A copy of the standard contractual clauses can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

§7. HOW LONG PERSONAL DATA IS RETAINED

The Company retains the User’s personal data as long as it is necessary for the purpose for which it is processed. This is usually as long as the User has a connection with the Company (e.g., by being a customer or receiving the Company’s newsletter), but some data is retained as required by external regulations (such as tax and accounting laws requiring the Company to keep the data for 7 years).

§8. THE USER'S RIGHTS AS A DATA SUBJECT

The User naturally has rights concerning their personal data, which the Company respects and is happy to help the User exercise. The Company lists them below. If the User wishes to exercise any of them, please contact [email protected].

• Right of access – The User has the right to know what personal data the Company processes about them and why, and to receive a copy.
• Right to rectification – If the User believes that the Company is processing incorrect personal data, such as name or contact details, the User may request correction.
• Right to restriction of processing – The User can request that the Company restrict processing of their personal data, for example if the Company has incorrect information and the User does not want processing to continue until it is corrected.
• Right to be forgotten – The User can request that the Company delete their personal data from the App.
• Right to data portability – The User has the right to receive their personal data in a machine-readable format to forward it to another party.
• Right to object – For processing based on legitimate interest, the User has the right to object. The Company will then balance the User’s privacy interest against its own legitimate interest and, if the User’s interest prevails, stop the processing.
• Right to withdraw consent – If processing is based on consent, the User has the right to withdraw consent and the Company will stop such processing.
• Right not to be subject to profiling – The User has the right to request not to be subject to profiling (e.g., if the Company draws conclusions about the User from Google Analytics, such as their location, how they found the website, or which browser they use).

§9. CONTACT

If the User has any questions about how the Company processes their personal data, they are always welcome to contact the Company via email at [email protected]. Finally, if the User believes that the Company fails to handle their personal data or rights properly, they can contact the Swedish Authority for Privacy Protection (IMY) at [email protected]