Privacy Policy

  1. WHAT IS THIS POLICY?

    We process personal data as part of our business and this policy explains how such processing is conducted. The service NexusTable is provided by NexusTable AB (”NexusTable” or “us”/”we”), We wish to safeguard the privacy of all the parties we establish contact with and all of our customer. All processing of personal data is done in accordance with this policy and in line with the requirements of the General Data Protection Regulation (“GDPR”). In case you have any questions regarding our processing of personal data, feel free to contact us at contact@nexustable.com.

  2. WHO IS THE CONTROLLER OF PERSONAL DATA?

    The controller of personal data is NexusTable AB, a company incorporated under the laws of Sweden having reg. no. 559100-5490 and the address Swedenborgsgatan 25, 118 27 Stockholm, Sweden.

  3. WHAT KIND OF PROCESSING IS CONDUCTED AND FOR HOW LONG?

    Our processing of personal data can be summarised to pertain to the following situations.

    To enable access to and maintain NexusTable:
    We collect data to maintain the security of and access to our service NexusTable. For instance, we use usernames and passwords to enable access including several digital identifiers to provide you with a smooth user experience. Furthermore, content uploaded by user, payment information, and logged data is kept in order to register the options used in the service. The data is kept for as long as the user is registered or subscribed to our service.

    To conduct marketing and solicit customers:
    We collect data when we communicate with prospective customers. The data is used in order for us to market our services, analyse our marketing performance and otherwise establish business relationships with our customers. The concerned personal data relates to the following categories: Names, position held at a certain company, contact details, and similar information that is submitted to us. Contact details concerning our business partners and suppliers are processed for as long as the relationship with us persists. Prospective customer data is as a rule deleted after one year.

    To administer our business:
    We collect data when we communicate with our customers and provide support to them. Furthermore, we collect data for the administration of invoices, for our bookkeeping, and to comply with other applicable legal requirements. The data is used in order for us to conduct our business and to comply with our legal obligations. The concerned personal data relates to the following categories: Names, position at a certain company, contact details, invoice information, and similar information that is submitted to us. The personal data is stored for as long as necessary and bookkeeping will be kept for seven years pursuant to Swedish law.

  4. WHAT KIND OF LEGAL BASIS DO WE RELY ON?

    According to the GDPR, we must rely our processing of personal data on at least one predetermined legal basis.

    To enable access to and maintain NexusTable:
    The processing falls within our legitimate interests to provide our services.

    To conduct marketing and solicit customers:
    The processing falls within on our legitimate interests to market and evaluate our services.

    To administer our business:
    The processing falls within our on our legitimate interests to maintain proper administration of our company and our legal obligation to comply with applicable law.

  5. DO WE SHARE YOUR PERSONAL DATA?

    We do not sell any personal data to third parties. Some data may however be stored by our IT-suppliers who provide us with platforms for email, backup systems, and similar. Our hired external processors of personal data have entered into data processing agreements to ensure that the processing of your personal data is done in a correct and secure manner. We may additionally be obliged to share certain information with public authorities, for instance the Swedish Tax Agency. Furthermore, in order to conduct marketing and analyse our marketing performance (as described above), we use analytics implemented at our website provided by below third parties. You can read more about their processing personal data by clicking the links hereunder.

    Facebook:
    Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, IRELAND Read more about Facebook’s processing of personal data here: https://www.facebook.com/policy.php

    Google:
    Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, IRELAND Read more about Google’s processing of personal data here: https://policies.google.com/privacy

    LinkedIn:
    LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, IRELAND Read more about LinkedIns’s processing of personal data here: https://www.linkedin.com/legal/privacy-policy

  6. WHERE IS THE PROCESSING CONDUCTED?

    All processing of personal data is mainly conducted within the European Economic Area. Nonetheless, if any data leaves the European Economic Area, we will secure the processing by using specific data protection agreements and/or data processing agreements with any appointed external processors of personal data. These will primarily relate to decisions from the European Commission concerning adequate levels of protection for processing outside the European Economic Area.

    DO WE USE AUTOMATED DECISION-MAKING?

    We do not implement automated decision-making including profiling.

    WHAT ABOUT MY RIGHTS?

    Pursuant to the GDPR, you may as a registered person exercise the below rights. A request to exercise any of the rights below may preferably be submitted in writing and sent to us by email: contact@nexustable.com. We reserve to right to take reasonable precautions in order to verify the identity of the person making the request.

    Right to access:
    As a registered person, you have the right to request access to your stored personal data free of charge.

    Right to rectification:
    If any data relating to you is incorrect or incomplete, you have the right request that your data is either rectified or supplemented.

    Right to data portability:
    You have the right to demand that your personal data is disclosed in a format readable by machine or that it shall be moved to another controller of personal data.

    Right to restrict processing:
    You may require that the processing of your personal data is limited.

    Right to object:
    You may object to your personal data being processed by us.

    Right to erasure:
    You have the right to request that your personal is erased.

  7. WHERE CAN I COMPLAIN?

    If you wish to file a complaint regarding our processing of personal data, the contact details of the Swedish data protection authority follow below:

    Datainspektionen
    Website: www.datainspektionen.se
    Email: datainspektionen@datainspektionen.se
    Telephone: (+46)8 657 61 00
    Postal Address: Box 8114, 104 20 Stockholm, Sweden
  8. CAN THIS POLICY CHANGE?

    As our services and applicable legal recommendations may change, this policy may be revised. We reserve the right to update and change this privacy policy without any prior notification other than keeping an updated version of the policy available at our website. Nevertheless, in case of any substantial changes, our customers will be notified prior to the new policy entering into force.

VERSION ENACTED ON 2020-12-05