Legal

Privacy Policy

1. Purpose

Personal data is processed only in accordance with this policy and applicable laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"). The purpose of this policy is to assure our users and visitors to this website (tagd.ai) that we respect your privacy and only process personal data in accordance with applicable laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"). We process your personal data to be able to provide our services to you in an efficient and secure manner.

2. Data Controller and Data Processor

When you as a customer use Tagd's services, you are the data controller for the data and Tagd is considered the data processor. This means that the data controller must inform the data subjects about the processing of personal data through Tagd's services. Tagd will follow the data controller's instructions and process the data in accordance with a data processing contract between the parties.

Tagd is the data controller when data about visitors to its website is processed.

3. Personal Data

3.1. Processed Personal Data

We process the following categories of your personal data:

  • Contact information: your name, phone number, email address, and employer;
  • Usage data: cookie information, behaviour on the website or in our services and platform, and information you provide by filling in our online forms (e.g. information about your role as an employee or employer);
  • User data: your name, phone number, email address, title, organisation;
  • Device data: IP number, internet connection, operating system, time zone, screen resolution, language settings, browser settings, and equipment used;
  • Technical data: technical information generated through your use of our website and services, such as response times, location, dates and times of use, and any errors or crashes;
  • Communication data: information contained in your communication with us, for example the information you provide to us in a support message or otherwise when you contact us.

3.2. Purpose of Data Processing

We process your personal data for the following purposes:

  • to analyse the use of our website and platform;
  • to administer and deliver our services to you as a customer;
  • to market our services;
  • to improve and customise our services for our users;
  • to fulfil legal obligations;
  • to analyse risks to our IT environment or operations;
  • to communicate with you when you contact us for any reason;
  • to establish and defend legal claims; and
  • for administration in connection with acquisitions, restructuring, etc.

3.2.1 To analyse the use of our website and platform

We process your personal data to carry out market and user analyses, for example by analysing statistics based on information collected through our website and platform. The results of our analyses are used to improve existing services and ensure an optimal user experience for our customers and end users.

DataLegal BasisStorage Period
Usage data, Device data, Technical dataProcessing is necessary for our legitimate interest in providing, improving, and developing our website and services.Personal data is stored for the entire contract period and 12 months thereafter. After this period, your data is aggregated in a way that makes identification impossible, and no personal data remains. For more information about our cookie storage periods, see Tagd's Cookie Policy.

3.2.2 To perform our services for customers

We process personal data to manage our relationship with our customers, including information about contact persons, sending information in electronic format (not marketing), storing any contracts, and processing payments.

DataLegal BasisStorage Period
Contact information, Transaction data, User data, Technical data, Device dataProcessing is necessary to fulfil the contract with our customers and to receive payment for our services.Personal data related to transactions will be stored for 7 years in accordance with the Swedish Bookkeeping Act. Personal data relating to communication, preferred contacts, and other actions required to administer our relationship with and provide our services to our customers are stored for the entire contract period and 12 months thereafter.

3.2.3 Marketing Information

The purpose of our marketing activities is to send direct marketing to you and to contact you with information about our services.

DataLegal BasisStorage Period
Contact information, Usage data, Device data, Technical data, Communication dataProcessing is necessary for our legitimate interest in being able to market our services.Your personal data is stored for 12 months from the date the personal data was collected or from the date you last contacted us, whichever is later. You can easily opt out of direct marketing by contacting us, as described below.

3.2.4 To improve and customise our services for our users

We analyse end-user patterns to improve the content we provide.

DataLegal BasisStorage Period
User data, Usage data, Device data, Technical dataProcessing is necessary for our legitimate interest in providing and developing our website and services.Your personal data is stored for the entire contract period and 12 months thereafter.

3.2.5 Legal Obligations

We process your personal data to verify your individual identity when you contact us, for example to exercise your rights as a data subject.

We also process your personal data when it is necessary to fulfil our legal obligations under applicable law, e.g. legislation on bookkeeping, auditing, and tax.

DataLegal BasisStorage Period
Contact information, User data, Transaction dataWe need to process your personal data to fulfil our legal obligations under applicable legislation.According to the Swedish Bookkeeping Act, transaction data is stored for 7 years. Data about your identity as a data subject is stored for the duration of the matter.

3.2.6 Contact Information

We process your personal data when you contact us through various means (e.g. phone, email, social media, or letter). We process your data to store and respond to your communication, for example general enquiries or when you contact us for support.

DataLegal BasisStorage Period
Contact information, User data, Usage data, Device data, Technical data, Communication dataProcessing is necessary for our legitimate interest in managing and responding to your communication.Your personal data and communication is stored and processed for as long as necessary based on the matter and content of your communication and for a period of 12 months thereafter.

4. Sharing of Personal Data?

When customers use Tagd's product, a data processing contract is signed. The customer is in this case the data controller and Tagd is the data processor. As part of the delivery under the contract, the data processor will use sub-processors, and the data controller gives its general consent to this. The data processor has an obligation to ensure that sub-processors undertake obligations similar to those arising from this data processing contract.

The sub-processors used by Tagd can be found on the following page: https://tagd.ai/sub-processors/

We may also in certain cases be obliged to share your personal data with public authorities or other third parties in connection with audits, legal proceedings, or similar reasons.

5. Where is the Data Processed

Tagd processes your personal data only within the EU/EEA or in geographical areas that have been assessed by the EU as having rules equivalent to EU GDPR.

6. Your Rights

You may contact us at any time to exercise your rights. Please see our contact information below. All information, communication, and actions we perform are free of charge for you.

You have the right to request:

a) Access to your personal data. This means that you have the right to request information about our use of your personal data. You also have the right to request a copy of the personal data processed by us free of charge. We may, however, provide you with the information in a commonly used electronic format. The copy of your personal data will be sent to your registered address.

b) Rectification of your personal data. We will, at your request or on our own initiative, correct, anonymise, delete, or supplement personal data that you or we discover is incorrect, incomplete, or misleading. You also have the right to supplement personal data with additional data if relevant information is missing.

c) Erasure of your personal data. You have the right to request that we delete your personal data if we no longer have an acceptable reason to process the data. Such acceptable reasons for processing the data are if the processing is necessary:

(i) for us to be able to fulfil a legal obligation;

(ii) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes;

(iii) to establish, exercise, or defend legal claims.

That said, erasure shall be carried out by us if none of the above applies and if:

(i) the personal data is no longer necessary for the purposes for which it was collected;

(ii) we use your personal data with your consent, and you withdraw your consent;

(iii) you object to the processing of your personal data based on our legitimate interest, and there are no overriding legitimate grounds for the processing;

(iv) the personal data has not been processed lawfully; or

(v) we are obliged to delete the personal data due to a legal obligation.

However, there may be requirements under applicable law or other compelling reasons that prevent us from immediately deleting your personal data. In such cases, we will stop using your personal data for reasons other than to fulfil the applicable law or relevant compelling reason.

d) Right to restrict processing. This means that we temporarily restrict the processing of your personal data and that we must inform you before the restriction of processing is lifted. You have the right to request restriction of processing when:

(i) you have requested rectification of your personal data under section b) above, during the time we verify the accuracy of the data;

(ii) the processing is unlawful and you do not want the personal data to be deleted;

(iii) Tagd, in its capacity as data controller, no longer needs the personal data for the purposes for which it was collected, but you require us to retain the information to establish, exercise, or defend a legal claim.

At Tagd, we will take all reasonable and possible measures to inform the recipients of your personal data of any rectifications, deletions, or restrictions carried out by us in accordance with this section. At your request, we will also inform you of which third parties we have shared your personal data with.

Your right to object to processing

You have the right to object to the processing of your personal data when such processing is based on a legitimate interest as the legal basis. If you object to such processing, we will only continue with the processing if we have a compelling legitimate reason for the processing that outweighs your interests, rights, or freedoms, or if continued processing is necessary to establish, exercise, or defend a legal claim.

You always have the right to object to the processing of personal data when such processing is carried out for direct marketing purposes. If you object to such processing, we will no longer process the personal data for such purposes.

Your right to withdraw your consent

If we need your consent to process your personal data, you always have the right to withdraw such consent at any time by contacting us. You can find our contact details at the end of this privacy policy.

Your right to data portability

Under the GDPR, you have the right to data portability, which means that you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to directly transfer this data from us to another data controller when technically feasible. Your right to data portability applies when we process your personal data based on consent or the performance of a contract and when the processing is carried out by automated means. The right to data portability means in practice that you, for example, have the right to receive and transfer the personal data you provided to us when you created a user account on our website.

Your right to file a complaint with the supervisory authority

You have the right to file a complaint regarding our processing of your personal data with the supervisory authority. The competent supervisory authority in Sweden is the Swedish Authority for Privacy Protection (IMY).

7. We Protect Your Personal Data

We want you to feel secure when providing your personal data to us. Therefore, Tagd has implemented appropriate security measures to protect your personal data against unauthorised access, alteration, and deletion. In the event of a security incident that may significantly affect you or your personal data, e.g. when there is a risk of fraud or identity theft, we will contact you and inform you of what you can do to reduce the risk.

8. Cookies

Tagd uses cookies. Tagd collects data through cookies to analyse user statistics on our website, improve our services, and provide our services. In our cookie policy, we provide you with more detailed information about how we use cookies.

9. Contact Information