Lite Lättare Liv AB’s processing of personal data
Lite Lättare Liv AB cares for your personal integrity and about the protection of any personal data processed by the us. All processing of personal data complies with current personal data legislation. Information about our processing of personal data may be found below.
Controller
Company: Lite Lättare Liv AB
Reg. No. 559409-9060
Postal address: Karlavägen 53, 114 49 Stockholm
E-mail: info@adhdcalendar.com
Website: www.adhdcalendar.com
Data Protection Officer (DPO)
The company’s DPO is available at: info@adhdcalendar.com
Categories of Data Subject
A person whose personal data is processed is referred to as Data subject.
The Company processes personal data regarding the following categories of Data subjects
- Persons who are customers (i.e. user of the Company’s app) or potential customers to the Company.
- Employees, future employees and persons seeking employment at the Company.
- Persons at suppliers or partners.
- Owners of the Company
The subject-matter/types (categories) of personal data being processed
- If Data subject is the Company’s customer: Phone number, age (above or below 18 year), name (optional), phone number of related persons (in case of sharing of app), calendar data and other personal data that the Data subject enters into the app calendar, check lists and other functions as well as user data from Appstore/Galaxy store.
- If Data subject is employed at the Company: Personal data related to the managing of employment such as information about salary, benefits, bank accounts, working hours, leave, absence, illness etc.
- Basic information: Phone number, name and address as well as other contact information, such as telephone number and e-mail address.
- If the Data Subject is an owner of the Company: social security number, name and address as well as other contact information, such as telephone number and e-mail address.
The nature of the processing
The company processes personal data as follows: Personal data is collected, structured, processed, stored and sorted out.
The purpose and legal ground
The Company processes personal data for the following purposes and with the following legal grounds:
- The Company shall be able to deliver it services (an app) ordered by the Customer (purpose). This applies to persons in category a) and personal data according to i) above. The processing is done in order for the Company to be able to fulfill contracts entered into as well as on consent from the Data subject (legal ground).
- The Company shall be able to fulfill its responsibilities towards employees (purpose). This applies to persons in category b), and personal data according to ii) and iii) above. The processing is done in order for the Company to be able to fulfill contracts entered into as well as to fulfill legal obligations (legal ground).
- The Company shall be able to develop its business (purpose). This applies to persons in category c) and personal data according to iii) above. The processing is based the Company’s its legitimate interest to develop its services (legal ground).
- The Company shall have information about its owners through managing the shareholders register (purpose). This applies to persons in category d), and personal data according to iv) above. The processing is done in order for the Company to fulfill legal obligations (legal ground).
Withdrawal of consent
If certain personal data is processed based on consent from the Data subject, the Data subject has the right to withdraw his or her consent at any time.
Sources
Personal data is collected from one or several of the following sources.
- Data subject herself
- App suppliers at which the Customer has downloaded its app (Apple App-store, Samsung Galaxy Store).
- The Swedish Companies Registration Office
- The Swedish Tax Agency/ the Swedish Population Register
Required information and missing information
As a starting point, the Data subject voluntarily provides personal data. For a Data subject who is a customer or employee of the Company, there may be agreed requirements to provide information, in some cases also legal requirements. If a Data subject who is or wishes to become a customer does not provide the requested information, it may result in the Data subject not receiving the Company’s services.
Receivers within the EU
Personal data may be transferred to the following receivers:
- Data processors contracted by the Company, such as IT-suppliers.
- Partners chosen by the Company, such as [XX]
Receivers may exist in EU.
Receivers outside the EU and international organizations
The company will not transfer personal data to companies outside of the EU/EEA or to an international organization.
If a Customer is using the services (app) outside EU data storage and data transmission may take place from servers or cell phone networks in the Country where the Customer is residing.
Automated decision making and profiling
Automated decision making and profiling (automatic processing and evaluation of personal data) by the Data subject will not occur.
Duration of personal data processing
Personal data is processed as long as the Customer is using the services of the Company. Deletion of the personal data of the Customer will be done 6 months after the Customer has ceased to use the services of the Company and terminated its subscription. The Customer may also delete all personal data in the app when the Customer cease to use the services of the Company.
Personal data related to employees will be stored for a period of 5 years after the termination of the employment. Personal data related to a person who has applied for employment at the Company is stored at the Company for a period of 3 years unless the person requests a shorter period.
Personal data that is contact information related to suppliers and partners are stored as long as the information is correct and relevant for the Company.
Personal data is always stored as long as required by the law. For instance, accounting material is stored as long at accounting law requires (at present 7 years).
Data subject’s right to information and Data subject’s rights
The Data subject has the right to receive information from the Company about what personal data the Company processes about the Data subject and the type of processing being per-formed. Requests are made to the Company, see address stated above.
The Data subject has the right to request rectification of personal data processed by Company concerning the Data subject. The Data subject also has the right to request erasure or re-striction of, or object to, the processing of personal data, to the extent permitted by applicable regulations (in particular the EU regulation on the processing of personal data). The same applies to the right to receive information in digital format (data portability).
Direct advertising
The Data subject may request that the Company apply a direct mail advertising block. The Data subject, then, does not receive information directly from the Company.
The right to file a complaint with a supervisory authority
The Data subject has the right to file a complaint concerning the processing of personal data by the Company to a supervisory authority.
In Sweden the supervisory authority is the Swedish Authority for Privacy Protection, Box 8114, 104 20, www.imy.se.
Information about the personal data being processed
Information about personal data which concerns the Data subject is, after request, provided in a separate document. Such information is provided electronically via e-mail, if the Data subject’s identity may be secured, or otherwise sent to the Data subject’s address registered in the Swedish Population Register, by ordinary mail.