Privacy Statement for Glow
1. The framework for our processing of personal data
We process your personal data within the framework of applicable data protection laws and this privacy statement. Personal data is collected when necessary for our execution of the tasks and services we are required to perform in accordance with laws and/or agreements, or when you otherwise provide us with your personal data.
2. Purposes of processing, legal basis and retention
In this section, 2.1-2.5, we explain the purpose for processing your personal data, which personal data we process, and what the legal basis for the processing is.
2.1. In order to fulfill the customer agreement and provide our services
As the representative of a customer, we will process your personal data with the purpose of fulfilling the customer agreement and providing our services.
Personal data that is processed: Name, e-mail address and phone number
Lawful basis: Legitimate interest in providing our customers with the ordered services
Retention period. We will save your information for this purpose until the agreement is terminated and for the period after required to handle complaints and warranty matters.
2.2. In order to set up a user account
In order to give you access to the system, you need to be set up as a user in the system.
Personal data we process: Name, e-mail and phone number
Legal basis: Lawful basis for such processing is our legitimate interest of ensuring correct and secure access to the system
Retention period. Your personal data will be retained for as long as is necessary in order to fulfill our agreement with you.
2.3. User logs information
We log information about our customers and their users when they use our Services in order to troubleshoot, track operation stability and information security and other purposes for quality assurance.
Logs can also be used to investigate and prevent fraudulent activities, unauthorized access to the Services, and other illegal activities.
Personal data we process: Name, e-mail, logs and phone number
Legal basis: Lawful basis for such processing is our legitimate interest of ensuring both satisfactory operating stability and information security.
Retention period. No copies or back-up of personal data will be stored any longer than necessary in order to fulfill our agreement with you.
2.4. In order to enable contact with you
We will process your personal data to enable communication with you. Examples for when we need to contact you are if there are any disturbances in the system that may be caused by you as a user. This can for example include a too high load in the system connected to a file import.
Personal data that is processed: Name, e-mail address and phone number
Lawful basis: Lawful basis for such processing is our legitimate interest of ensuring smooth and satisfactory operating stability.
Retention period. Your personal data will be retained for as long as is necessary in order to maintain communication with you for its purpose.
2.5. Provide customer service and support
To help you with support questions we may need some information about you.
Personal data we process: Name, e-mail address, logs, case information
Legal basis: Legitimate interest in providing needed support for your registered case.
Retention period. Your personal data will be retained for as long as is necessary in order to maintain communication with you for its purpose.
3. Recipients of personal data
Authorities. If there is a statutory requirement to disclose data to public authorities, the relevant personal data will be disclosed in accordance with the requirements stipulated by the authorities.
Data processors. We employ third parties who process personal data on our behalf (“data processor”). Before we give such data processors access to your personal data, we always enter into agreements (i.e., data processing agreements) that describe, among other things, what the data processor will do for us.
4. Transfer to third countries
We, or our suppliers, may process, store and transfer your personal data to countries outside the EU/EEA. When we transfer your personal data to a third country, we ensure that the data is processed with the same level of security as within the EU/EEA. As an addition to the technical, organizational and contractual measures we take, a transfer to a third country will only be made when one of these conditions apply:
• there is an adequacy decision from the EU-commission;
• we have put in place security measures, such as standard contractual clauses that have been approved by the EU-commission; or
• an exemption applies in certain situations and in occasional cases
5. Your rights
You may have the following rights in relation to our processing of your personal data:
• You have the right to access information regarding the processing of your personal data.
• You have the right to request that inaccurate data be rectified.
• You have the right to request erasure of your data if the data is no longer needed for the purposes for which it was collected.
• You may have the right to demand that the processing of your data be limited.
• You may have the right to object to the processing of your personal data.
• If the processing is based on your consent, you have the right to withdraw that consent at any point. The withdrawal of your consent does not impact the lawfulness of the processing that took place before you withdrew your consent.
• You may have the right to request a transfer of your personal data to another entity.
If we are unable to comply with your request due to an exception or limitation, we will explain this in writing. If we need more time, we will inform you of the reason and extension period in writing.
Please contact us if you wish to use any of these rights info@glowtechnology.com
6. Questions or complaints
If you have questions about our processing of personal data or believe that we do not meet our obligations to you regarding how we process your personal data, we encourage you to contact us (see contact information below). You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (https://www.imy.se/en/), but we encourage you to contact us first.
7. Controller and contact information
Controller: Glow Technology AB, 559275-0326, is responsible for processing your personal data.
Contact information: info@glowtechnology.com
