Privacy Notice

Data controller

SEIRI Systems AB is the data controller for the processing of personal data described in this Privacy Notice where we determine the purposes and means of the processing.

Personal data we process

The personal data we process depends on how you use SEIRI and the information that you or your organization provide to us.

Account information

• Name
• Email address
• Google ID when Google is used for sign-in

Information provided by the user

We also process information that users enter, upload or otherwise process in SEIRI. This may include information in forms, report structures, report content and other data that the user chooses to process in the service.

Contact information

If you contact us through the website or by other means, we may process your name, company, email address, message and other information you provide in connection with the contact.

Why we process personal data

We process personal data in order to:

• create and administer a workspace,
• provide access to SEIRI,
• identify and authenticate users when signing in,
• provide the features and workflows used by the user in SEIRI,
• administer customer relationships and licences,
• respond to questions, support requests and demo requests,
• secure, maintain and improve the functionality and security of the service,
• comply with legal obligations applicable to SEIRI Systems AB.

Legal basis for processing

The legal basis we rely on depends on the context and the type of processing.

Personal data processed in SEIRI on behalf of customers

When a customer uses SEIRI to process personal data for which the customer is responsible, the customer may be the data controller and SEIRI Systems AB may process the data as a data processor.

In such situations, the processing is normally governed by agreements between SEIRI Systems AB and the customer, including a data processing agreement where applicable.

How long we retain personal data

Account information and customer data are retained for as long as the customer's licence is active and for up to 12 months after the licence has ended. This is done to enable reactivation of the service and restoration of the customer's previous data. The data is then deleted or anonymized unless it must be retained for a longer period in order to comply with legal obligations.

• Account information is normally retained for as long as the account and the relevant customer relationship remain active and for any additional period required for administration, security or legal obligations.
• Contact requests are retained for as long as necessary to handle and follow up the request.
• Data processed by the customer in SEIRI is handled in accordance with the applicable customer relationship, relevant agreements and agreed instructions.

Security

SEIRI Systems AB uses appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, destruction and other unlawful processing.

For security reasons, we do not publish detailed information about internal systems, database architecture, authentication mechanisms or other security-sensitive technical implementations in this Privacy Notice.

Your rights

Depending on the circumstances and the processing involved, data protection law may give you the right to:

• request access to your personal data,
• request correction of inaccurate data,
• request deletion of data,
• request restriction of processing,
• object to certain processing,
• receive certain data in a structured, machine-readable format where the right to data portability applies,
• withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe that your personal data is being processed in breach of data protection law.

Contact regarding personal data

If you have questions about this Privacy Notice or wish to exercise any of your rights, you can contact us:

SEIRI Systems AB
Bäverns Gränd 18 a Lgh 1403
753 19 Uppsala
Sweden