TERMS

Skoolie Privacy Policy

Privacy Policy

Skoolie AB, corporate registration number 559409-1018 (“Skoolie”, “we”, “us”)

Your privacy is important to us. This privacy policy (“the Policy”) describes how we process personal data in our operations.

The Policy is divided into three parts depending on your relationship with us.

Part 1 applies to you if you visit skoolie.se, contact us, or are a business contact at a municipality, independent school, contracting authority or partner. In these cases, Skoolie AB is the data controller.

Part 2 applies to you if you use the Skoolie service via app.skoolie.se as a Participant, for example a pupil, study and career counsellor or other staff at a municipality or independent school that is a Main Customer of ours. In these cases, Skoolie AB is the data processor and the Main Customer is the data controller.

Part 3 contains general information about security, sharing of data, your rights and how to contact us.

PART 1: Website visitors and business contacts

1. Data controller and scope

1.1 Skoolie AB is the data controller for the processing of personal data described in this part. Part 1 applies to you if you visit skoolie.se without being logged in to the Skoolie service, if you contact us via contact form, email or telephone, or if we have business contact with you in your capacity as a representative of a municipality, independent school, contracting authority or partner.

2. Categories of personal data we collect

2.1 Website visits: technical data such as IP address, device and browser information, and data collected via cookies. See our separate cookie notice for complete information.

2.2 Contact and enquiries: name, contact details (e.g. email address and telephone number), organisation and professional role, and the content of your enquiry or our other communication with you.

2.3 Business relationships: name, title, employer, contact details and history of our communication with you, for example in our CRM system.

2.4 Accounting and invoicing: name, contact details and payment details linked to the Main Customer's invoicing.

3. Purposes and legal basis

To provide and secure the website. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
To respond to enquiries and handle matters, including responses to procurements. Legal basis: legitimate interest (Article 6(1)(f) GDPR), or contractual obligation (Article 6(1)(b) GDPR) if the enquiry forms part of entering into or performing an agreement with the organisation you represent.
To administer and develop business relationships. Legal basis: legitimate interest (Article 6(1)(f) GDPR). Our legitimate interest is to be able to maintain a professional relationship and inform you about our business.
To comply with legal obligations, for example under the Swedish Accounting Act. Legal basis: legal obligation (Article 6(1)(c) GDPR).
Marketing, for example newsletters or follow-up after an event. Legal basis: legitimate interest (Article 6(1)(f) GDPR), or consent (Article 6(1)(a) GDPR) where required under the Swedish Marketing Act.

You have the right to object at any time to processing based on a legitimate interest; see section 10 below.

4. How long we retain your data

4.1 Data relating to an enquiry or a support matter is retained for twenty-four (24) months after the most recent contact.

4.2 Data about business contacts is retained for as long as the relationship is current, and thereafter for twenty-four (24) months after the most recent contact, unless you object to the processing or request erasure before then.

4.3 Data appearing in our accounting records is retained for seven (7) years in order to comply with tax and accounting regulations.

4.4 Data collected with your consent is retained until you withdraw it.

4.5 Cookie data is retained in accordance with the retention periods stated in our cookie notice.

PART 2: Your use of the Skoolie service (app.skoolie.se)

5. Our role as data processor

5.1 When a municipality or independent school (“the Main Customer”) provides the Skoolie service to you as a Participant, for example a pupil, study and career counsellor or other staff, the Main Customer determines which personal data is processed in the service and for which purposes. The Main Customer is the data controller and Skoolie AB is the data processor.

5.2 Skoolie AB only processes personal data in accordance with documented instructions from the Main Customer, in accordance with the data processing agreement (DPA) entered into between Skoolie AB and the Main Customer. Under the DPA, Skoolie AB shall, among other things:

Process personal data only on documented instructions from the Main Customer, unless otherwise required under Union or national law.
Only disclose personal data to third parties if the Main Customer has given its permission or if required by law.
Ensure that employees with access to the personal data are subject to confidentiality obligations.
Implement appropriate technical and organisational measures in accordance with Article 32 GDPR.
Not engage sub-processors without prior authorisation from the Main Customer.
Assist the Main Customer so that it can respond to requests to exercise data subjects' rights.
Notify the Main Customer without undue delay in the event of a personal data breach.
Delete or return personal data to the Main Customer when the assignment ends, at the Main Customer's choice.

6. Your rights as a Participant

6.1 Since the Main Customer is the data controller for the processing of your personal data in the Skoolie service, you should contact the data protection officer or equivalent responsible function at your school or in your municipality if you wish to exercise your rights under the GDPR, for example the right to access, rectification, erasure, restriction, or to object to the processing.

6.2 Skoolie AB assists the Main Customer with appropriate technical and organisational measures so that the Main Customer can fulfil such requests.

6.3 If you would like to know more about exactly which categories of personal data are processed in the Skoolie service and for what purpose, we refer you to your school's or municipality's own information to you, and to the data processing agreement governing the processing.

PART 3: Common information

7. Data security and integrity

7.1 The security, integrity and confidentiality of personal data are of crucial importance to us. We have implemented appropriate technical, administrative and physical security measures to protect personal data against unauthorised access, use, alteration and disclosure, and we regularly review our procedures.

8. Sharing of personal data

8.1 Data under Part 1 may be shared with service providers involved in, for example, the provision of our IT systems, customer service, security, business analytics, accounting and invoicing systems or systems for managing customer and business relationships (CRM), as well as in order to comply with statutory obligations or in the event of a business transfer.

8.2 Data under Part 2 is shared only in accordance with the data processing agreement entered into with the Main Customer, including with the sub-processors approved by the Main Customer.

9. Transfer of personal data outside the EU/EEA

9.1 We strive to process personal data within the EU/EEA. For data under Part 1, processing may nevertheless take place in a country outside the EU/EEA where our suppliers, or their subcontractors, are located. In such cases, we use appropriate safeguards, for example the European Commission's standard contractual clauses under Article 46(2)(c) GDPR, or transfer data only to countries that the European Commission has deemed to have an adequate level of protection under Article 45 GDPR.

9.2 Transfers of personal data under Part 2 are governed by the data processing agreement entered into with the Main Customer.

10. Your rights

10.1 If you are covered by Part 1, you have the following rights under the GDPR:

Right of access: to receive information about, and access to, the personal data we process about you.
Right to rectification: to request the correction of inaccurate or incomplete data.
Right to erasure: to request that we erase your personal data, subject to the limitations that follow from applicable law, for example accounting rules.
Right to restriction: to request that we restrict the processing of your personal data.
Right to object: to object to processing based on a legitimate interest.
Right to data portability: to receive a copy of the data you have provided to us in an electronically readable format.
Right to complain: to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or the relevant supervisory authority for your specific case.

10.2 If the processing is based on your consent, you may withdraw it at any time by contacting us at the address below, or via the link in each newsletter.

10.3 If you are a Participant under Part 2, see section 6 above for how to exercise your rights.

11. Links to external websites

11.1 Skoolie.se may contain links to websites operated by other parties. Skoolie AB is not the data controller for processing that takes place on such websites.

12. Changes to this policy

12.1 This Policy may be revised. In the event of significant changes, we will inform those affected in an appropriate manner. The latest version is always published on skoolie.se.

13. Contact

Skoolie AB, corporate registration number 559409-1018

rasmus.haggkvist@skoolie.se

Sandelsgatan 26, 115 34 Stockholm

Cookie Notice

1. INTRODUCTION

This website and all subdomains of this website (collectively referred to as "the Website") are owned by Skoolie AB, registered in Sweden with corporate registration number 559409–1018.

Any references to "we", "our" or "us" refer to Skoolie AB. References to "you" or "your" refer to the visitor of the website.

Terms used in the Policy but not defined therein shall have the same meaning as in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

We have created this cookie notice to provide you with information about:

The types of cookies used on the Website.
The parties involved in downloading or storing cookies.
The purposes for which cookies are used.
The duration of the cookies used.
The possibility of sharing the information collected by cookies with third parties.
Methods for managing the storage of cookies.

Our aim is to increase your understanding of how cookies work and to enable you to make informed decisions about their use.

If the cookies used entail the collection of personal data belonging to you, you also have the right to information about the processing of the personal data under the EU General Data Protection Regulation ("GDPR"). More information about our processing of personal data can be found in our privacy policy.

2. GENERAL INFORMATION ABOUT COOKIES

A cookie is a small text file that a website saves on the visitor's device, for example a mobile phone, computer or tablet. Cookies enable visitors to access various functions on a website.

Cookies can be used to collect information about website visitors and to perform, for example, the following actions:

Access information stored on the visitor's device.
Store information on the visitor's device.
Track a visitor's browsing activity across websites that use the same cookie.
Save information about a visitor's interactions and activities on a website.
Save information during and between visits to the website.
Enable direct marketing to the visitor based on their interests.

The use of cookies may involve the transfer of information from us to the visitor of the Website and/or from the visitor directly to us, to a third party acting on our behalf, or to another party in accordance with their privacy policy.

There are different types of cookies, which can be categorised into the following main groups:

Session cookies:

These cookies are stored temporarily in the device's memory and have no expiry date. They are only active during the visitor's browser session and are deleted when the browser is closed. They are typically used to maintain session information and enable certain website functions.

Persistent cookies:

Unlike session cookies, persistent cookies are saved on the device for a longer period and have an expiry date. Even after the browser has been closed, these cookies can remain stored in the device's memory. However, they are deleted automatically after the expiry date. They are typically used to remember user settings for future visits.

Third-party cookies:

These cookies are placed by parties other than the website's owner or operator. These cookies serve various purposes, including analytics, advertising or social media integration. Third-party cookies can be either session cookies or persistent cookies, depending on the specific functionality and duration required by the third party.

On this Website, we may use session cookies, persistent cookies and third-party cookies to improve your browsing experience and provide specific functions.

3. CATEGORIES OF COOKIES USED BY THIS WEBSITE

This Website uses cookies that fall into the following categories. These descriptions are intended to help you make informed decisions about your use of the Website.

3.1 Necessary cookies

Cookies placed in the category "Necessary cookies" are necessary for the Website to function properly. They are necessary in order to provide the online services you have requested. In short, these cookies are essential for you to be able to fully experience the functions of the Website. They enable us to maintain user sessions, prevent security threats and ensure basic functions and security features that are important to you as a visitor to the Website.

The use of necessary cookies does not require your prior consent, and you therefore cannot opt out of their use. This means that cookies placed in this category will always be used.

3.2 Non-necessary cookies

In order for us to use cookies categorised as non-necessary, we need to obtain your active consent. You are hereby informed that you have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing carried out prior to the withdrawal. You can disable or manage non-necessary cookies as described in section 5 below. Please note that non-necessary cookies are not essential for the basic functions of the Website but are used for additional purposes.

The Website uses the following categories of non-necessary cookies:

Functional cookies

Functional cookies are used to enable specific functions on the Website. If you choose not to accept the use of functional cookies, certain functions on the Website may not work as intended.

4. HOW THIS WEBSITE USES COOKIES

Below you will find a list of the cookies used on this Website, including their respective categories, storage period on your device, a brief description of their purpose and information on whether the data is shared with other parties.

COOKIE	CATEGORY	STORAGE PERIOD	DESCRIPTION
token	Functional	7 days	Stored to keep an authenticated user logged in
sk_policy_approved	Functional	Current session	Stored to hide the pop-up for accepting cookies
sk_analytics_accepted	Functional	13 months	Stored to remember whether the user has accepted analytical cookies.
_clck	Analytical	12 months	Used by Microsoft Clarity to retain the user ID and settings across multiple visits.
_clsk	Analytical	1 day	Used by Microsoft Clarity to link page views together into a single session.

5. HOW YOU CAN MANAGE THE STORAGE OF COOKIES

You have the option of managing the storage of cookies on your device through various methods. This includes the option of disabling or enabling cookies in whole or in part. However, it is important to note that such actions may have consequences. Disabling cookies, either in whole or in part, may result in certain functions on the Website not working as intended.

Below are examples of how you can manage the storage of cookies on your device:

5.1 Settings via the cookie solution on this Website

You have the option of managing the use of cookies from this Website through the installed cookie solution. By using the cookie settings provided by this solution, you can actively consent to the use of different categories of cookies or choose to refuse the use of non-necessary cookies.

Please note that necessary cookies, as mentioned in section 3 above, are always used and do not require your prior consent.

It is important to note that you can change or withdraw your active consent to the use of non-necessary cookies at any time. This means that you have the flexibility to adjust your preferences regarding the use of cookies based on your needs and preferences.

5.2 Browser settings

If you prefer not to use non-necessary cookies, you can change the settings in most browsers to block their use. In addition, you have the option of configuring the settings so that you are prompted to actively accept each new cookie sent to your device when you visit a website.

Browser settings may also offer the option of blocking third-party cookies or designating frequently visited websites as “trusted websites”, ensuring that cookies from these trusted sources are always accepted.

In addition, browser settings often provide the option of deleting specific cookies that have been stored on your device or clearing all previously stored cookies. These functions are usually available via menu options such as “Help”, “Tools” or “Edit” in the browser.

If you need help configuring the settings in your browser, please contact the browser's publisher or consult the browser's help pages for detailed instructions.

Remember to adjust the settings in each browser you use on different devices and in different locations to ensure that your settings are applied consistently.

6. FURTHER INFORMATION

For further information about cookies and the Swedish Electronic Communications Act, you can visit the website of the Swedish Post and Telecom Authority at www.pts.se. If you would like to know more about the GDPR and the processing of personal data, you can consult the website of the Swedish Authority for Privacy Protection (IMY) at www.imy.se. For general information about cookies and their functions, you can explore websites such as www.allaboutcookies.org. These resources can provide more in-depth knowledge and guidance on the topics of cookies, data protection and related regulations.

7. OUR COMPANY AND CONTACT DETAILS

If you have any questions or concerns about how this Website uses cookies, you are welcome to contact us using the following contact details:

Company name: Skoolie AB

Corporate registration number: 559409–1018

Email: rasmus.haggkvist@skoolie.se

Postal address: Sandelsgatan 26, 115 34 Stockholm