Legal - Privacy Policy

At Aidoni, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at aidoni.se (the "Website") or use our services (the "Services").

This Privacy Policy complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable data protection laws. By using our Website or Services, you consent to the data practices described in this policy.

1. Data Controller

The data controller responsible for your personal data is Aidoni, located at Kvarnbergsgatan 2 IOFFICE, 411 05 Göteborg, Sweden. If you have any questions about this Privacy Policy or our data practices, please contact us at sales@aidoni.se.

2. Information We Collect

We may collect and process the following categories of personal data:

2.1. Personal Data You Provide to Us:

• Contact information: name, email address, phone number, company name, and job title that you voluntarily provide when you contact us, request a quote, use our contact form, or apply for a job position

• Communication data: information you provide when you communicate with us, including messages, inquiries, and feedback

• Application data: information you provide when applying for a job, including CV, cover letter, and other application materials

2.2. Automatically Collected Data:

• Usage data: IP address, browser type and version, device information, operating system, pages visited, time and date of visits, time spent on pages, and other diagnostic data

• Cookies and tracking technologies: information collected through cookies, web beacons, and similar technologies (see Section 7 for more details)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

• Consent: when you have given clear consent for us to process your personal data for specific purposes (e.g., marketing communications)

• Contractual necessity: when processing is necessary for the performance of a contract or to take steps at your request before entering into a contract

• Legitimate interests: when processing is necessary for our legitimate business interests, such as improving our services, website analytics, and fraud prevention, provided these interests do not override your fundamental rights and freedoms

• Legal obligation: when processing is necessary for compliance with a legal obligation to which we are subject

4. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our Services and Website

• To respond to your inquiries, provide customer support, and communicate with you about our Services

• To process job applications and manage recruitment processes

• To send you marketing communications (only with your explicit consent, which you can withdraw at any time)

• To analyze usage patterns, monitor and analyze trends, and improve user experience

• To detect, prevent, and address technical issues, fraud, and security threats

• To comply with legal obligations and enforce our legal rights

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data to third parties. We may share your personal data only in the following circumstances:

• Service providers: We may share data with trusted third-party service providers who perform services on our behalf, such as hosting, analytics, email delivery, and customer support. These providers are contractually obligated to protect your data and use it only for the purposes we specify.

• Legal requirements: We may disclose your data if required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of our users or others

• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity

• With your consent: We may share your data with third parties when you have given explicit consent for such sharing

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission

• Adequacy decisions by the European Commission

• Other appropriate safeguards as required by applicable data protection laws

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Website and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. Types of cookies we use:

• Essential cookies: Required for the Website to function properly (e.g., authentication, security)

• Analytics cookies: Help us understand how visitors interact with our Website (e.g., Google Analytics)

• Marketing cookies: Used to track visitors across websites for marketing purposes (only with your consent)

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Website. You can manage your cookie preferences through our cookie consent banner.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest

• Regular security assessments and updates

• Access controls and authentication mechanisms

• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are:

• Contact and inquiry data: Retained for 3 years after the last contact, unless you request deletion

• Job application data: Retained for 2 years after the application process ends, unless you request earlier deletion

• Marketing consent data: Retained until you withdraw consent

• Analytics data: Retained in anonymized form for up to 26 months

10. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access: You have the right to request access to and receive a copy of your personal data

• Right to rectification: You have the right to request correction of inaccurate or incomplete personal data

• Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data under certain circumstances

• Right to restrict processing: You have the right to request restriction of processing of your personal data

• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller

• Right to object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes

• Right to withdraw consent: Where processing is based on consent, you have the right to withdraw your consent at any time

To exercise any of these rights, please contact us at sales@aidoni.se. We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten, IMY).

11. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, and in any event within 72 hours of becoming aware of the breach, where feasible.

13. Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Supervisory Authority

If you have concerns about how we process your personal data, you have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten, IMY):

Integritetsskyddsmyndigheten (IMY)

Website: imy.se

Email: imy@imy.se

Phone: +46 8-657 61 00

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: sales@aidoni.se

Address: Kvarnbergsgatan 2 IOFFICE, 411 05 Göteborg, Sweden