Elevateyourself AB only disclose your personal data to third parties that manage our IT systems and our data storage, our marketing, our distribution and our financial transactions. Such third parties then handle the personal data as our data processors and may only process personal data in accordance with the purposes and instructions that Elevateyourself AB issues for the processing. The processor and anyone acting on behalf of the processor may furthermore never see more data than is necessary to carry out the service covered by the agreement with Elevateyourself AB. Where personal data is to be processed by a data processor, a so-called data processor agreement is drawn up.

Your personal data can be submitted to a government agency if the law requires, as well as to an official representative in any dispute.

Your personal data can be submitted to a third parties i fall in case of reorganization, merger or transfer of Elevateyourselfs business.

The data we process is based on adequate IT security and we make equivalent demands on the suppliers we engage. You will not be subject to any decision made by us based solely on the automated processing of your personal data.

We always strive to process your personal data within the EU/EEA. However, in certain situations the personal data may be transferred to, and processed in, countries outside the EU/EEA, e.g. if we share your personal data with a personal data processor that is established or stores information in a country outside the EU/EEA.

For personal data we process in a country outside the EU/EEA, we rely on appropriate mechanisms for international data transfers. For example, for information we collect we rely on decisions from the European Commission by which they recognise that certain countries and territories outside of the European Economic Area ensure an adequate level of protection for personal data.

In other circumstances, we rely on standard contractual clauses approved by the European Commission (and the equivalent standard contractual clauses for the UK, where appropriate) or on derogations provided for under applicable law to transfer information to a third country.

In principle Elevateyourself doesn´t process so called sensitive personal data in the services offered. If sensitive personal data is sent to Elevateyourself, data is processed for the matter to be dealt with. However, the data is handled only by the document being entered in the relevant matter. The data is not registered separately and the data in the received document is not made searchable. The lawful basis for such processing of sensitive personal data is weighing of interests.

You are always entitled to know what personal data Elevateyourself processes and be given the opportunity to have them corrected. You may also require that the processing of your personal data be restricted unless it is a prerequisite for Elevateyourself to remain compliant in its agreement with you or to provide a service to you. Some of your data may also need to be saved to comply with statutory obligations.

If you require a registry excerpt, or object to the personal data we process about you, object to how we process your personal data, object to personal data processing we conduct on the legal basis of the weighing of interests or want to utilise your entitlement to potential data portability or if you simply need help with something else concerning your personal data, please get in touch using the contact routes listed under the heading: “Contact details for your privacy issues” and we will assist you. Our aim is to always to make you feel safe and fairly treated when it comes to your privacy.

If you wish to file a complaint with a supervisory authority or have any other concerns about your rights regarding the personal data stored by us, please contact Swedish Authority for Privacy Protection. Contact details can be found here: https://www.imy.se/.

Collection of personal data can be both active and passive. Active collection takes place when you, as a user, submit your data to us in connection with for example creation of a user account. Passive collection takes place, for example, by collecting information about your use of media in the services and through technical tools such as cookies.

Purpose of processing your personal data

The purpose of processing your personal data is to enable digital registration, to provide access to digital services, to administer accounts and to develop and improve our services based on various technical conditions.

What personal data do we process?

To make an account available for the “HeyEy” service, we process your name, email address and password, as well as a unique member ID.

To be able to offer a proper service, we also process your location information, your date of birth, your gender, and the club- and/or company name (or similar) you enter. (Information about gender and club/company and similar is optional information).

In the context of the HeyEy service, Elevateyourself also processes the voluntary information that you share within the service. This may include images or videos (including metadata) that you upload to the service, as well as the messages you may write within the service or the information you provide for the challenges you may create within the service.

In the context of the HeyEy service, Elevateyourself also process activity information that you manually enter as well as activity information from your devices, apps and services that you connect to the Heyey service. Activity information processed is name of activity, type of activity, start date and time of activity, end date and time of activity, ongoing time and location information during the activity, distance of activity, Elevation conditions (elevation, ascent, decrease) for the activity, as well as calculations for time, elevation and distance such as pace per km, elevation per km and elevation per time interval and more.

Apart from that, Elevateyourself processes information about the use of the service, as well as technical information such as IP address, special device identifiers (UID), which browser, operating system and version of the app are used.

In the context of the HeyEy service, Elevateyourself may also process payment receipts as well as information about payment solutions and payment history.

The above processing of your personal data is necessary for us to be able to fulfil our commitments towards you within the context of the HeyEy service.

Legal grounds

We process (unless otherwise expressly stated) the personal data included above under the legal basis of fulfilment of contract.

Retention period

We store your personal data during the time your account is active. The account is considered active from the day you create it until the day you make a request for deletion.

If you need a register extract or need to delete your account, you find information on how to proceed under the profile settings in your account.

Upon a deletion request, we permanently and irreversible delete or anonymize your personal data from our systems, including backup copies.

Once your account has been deleted or your personal data has been anonymized, your personal information, settings, activities, and challenges, be permanently deleted and cannot be restored to your account.

Backups and system logs are deleted after another three months.

Exceptions to the deletion of personal data refers to the data we need to save by law, such as the Accounting Act. When we no longer have a legal requirement to save such personal data, it will be deleted or anonymized.

If you have other questions, get in touch using the contact routes listed under the heading: “Contact details for your privacy issues” and we will assist you.

Purpose of processing your personal data

The purpose of processing your personal data is to enable and provide support.

What personal data do we process?

We process your email address and information generated in the specific support case being handled.

Legal grounds

We process the personal data included above under the legal basis of fulfilment of contract if it concerns support matters in connection with an active agreement or an active subscription.

For other support matters we process the personal data included above under the legal basis of weighing of interests.

Retention period

We store your personal data during the time your Support matter is up to date based on an assessment of the need for possible feedback up to one year after the case is closed. After that, all personal data will be deleted or anonymized.

Backups and system logs are deleted after another three months.

Exceptions to the deletion of personal data also refers to the data we need to save by law, such as the Accounting Act. When we no longer have a legal requirement to save such personal data, it will be deleted or anonymized.

If you require earlier deletion of your personal data (or have other questions), please get in touch using the contact routes listed under the heading: “Contact details for your privacy issues” and we will remove any personal data that is not required to meet any of our joint commitments (or assist you in other questions).

Purpose of processing your personal data

The purpose of processing your personal data is to give you the opportunity to voluntarily participate in market surveys and the like to help us improve our service and our content.

What personal data do we process?

We process your email address.

Legal grounds

We process the personal data included above under the legal basis of weighing of interests.

Retention period

We store your personal data during the time the market survey (including any evaluation) is in progress, however, for a maximum of one year after the market survey has been carried out. After that, all personal data will be deleted or anonymized.

Backups and system logs are deleted after another three months.

If you require earlier deletion of your personal data (or have other questions), please get in touch using the contact routes listed under the heading: “Contact details for your privacy issues” and we will remove any personal data that is not required to meet any of our joint commitments (or assist you in other questions).

Purpose of processing your personal data

The purpose of personal data processing is to provide you with information about content and events in the Heyey service as well as provide you with information about, and market, relevant activities.

What personal data do we process?

We process your unique member- or customer-ID and you email address.

Legal grounds

We process the personal data included above under the legal basis of weighing of interests.

Retention period

We store your personal data as long as you wish to receive digital newsletter, marketing or other information by e-mail. You can unsubscribe from newsletters at any time by clicking the link at the bottom of our mailing. This will bring an end to the processing of your personal data in our system for this purpose.

Backups and system logs are deleted after another three months.

Purpose of processing your personal data

The purpose of personal data processing is to facilitate contacts with our suppliers.

What personal data do we process?

We process the name of the company’s contacts, work address and work telephone number.

In cases where the supplier is a sole proprietor, private address details may also be processed and we may need to process the company’s corporate identity number (your social security number) in order to be sure to correctly identify your company.

Legal grounds

We process (unless otherwise expressly stated) the personal data included above under the legal basis of fulfilment of contract.

Retention period

We store your personal data during the time we have a business relationship with the supplier. If we have not had any financial transactions with the supplier for whom you are a contact for less than two years, any personal data we have processed will be deleted or anonymized.

During the time the business relationship is inactive, we process your personal data under the legal basis of weighing of interests.

Backups and system logs are deleted after another three months.

Exceptions to the deletion of personal data refers to the data we need to save by law, such as the Accounting Act. When we no longer have a legal requirement to save such personal data, it will be deleted or anonymized.

If you require earlier deletion of your personal data (or have other questions), please get in touch using the contact routes listed under the heading: “Contact details for your privacy issues” and we will remove any personal data that is not required to meet any of our joint commitments (or assist you in other questions).

Purpose of processing your personal data

The purpose of personal data processing is to simplify access to the job application you submit, and to contact you over the course of the recruitment process and in future recruitment processes.

What personal data do we process?

We process your name, e-mail address, telephone number, CV, your personal letter, and other information that you provide.

Legal grounds

We process the personal data included above under the legal basis of weighing of interests.

Retention period

We store your personal data for a maximum of two years and if no collaboration has been initiated, all your personal data and your CV will be deleted once that time has expired.

Backups and system logs are deleted after another three months.

If you require earlier deletion of your personal data (or have other questions), please get in touch using the contact routes listed under the heading: “Contact details for your privacy issues” and we will remove any personal data that is not required to meet any of our joint commitments (or assist you in other questions).

Purpose of processing your personal data

The purpose of personal data processing is to receive and enable e-mail conversations with the attached documents in our business activities.

Legal grounds

We process the personal data in incoming e-mails under the legal basis of weighing of interests.

Once we have read the e-mail, a new assessment is made as to the legal basis we have for any continued personal data processing. The legal basis is specifically stated for that particular process.

What personal data do we process and retention period

As a sender of e-mails, we only process personal data of the typical type (name, address, telephone number and e-mail address) directly in the body text. We store this type of personal data for no longer than two years after the termination of the contact. After that, we will delete the e-mail or your personal data will anonymized.

As a sender of e-mails, extra notable personal data (such as social security number, bank account number, financial information, and other information that is close to your private life) is only sent as attached files. As a sender of e-mails, we always encrypt attachments that contain privacy-sensitive personal data.

E-mail communications that contain extra notable personal data will be processed until we have transferred the personal data to a more structured format based on a communicated purpose that is supported on a legal basis. We then delete the attached file, the entire e-mail or your personal data will be anonymized with minimal delay. Continued personal data processing, whether structured or unstructured, is subject to current data protection rules.

We principally only process sensitive personal data in exceptional cases as a sender of e-mails. E-mail communications that contain sensitive data, we only process in the shortest possible time. If a communicated purpose has been conveyed, it is supported by a legal basis, and we will transfer the personal data to a more structured format. We then delete the attached file, the entire e-mail or your personal data will be anonymized without delay. Continued personal data processing, whether structured or unstructured, is subject to current data protection rules.

As part of an ongoing e-mail conversation, we will never forward personal data considered extra notable or sensitive outside of our organisation or to any third parties without first agreeing with you.

If you would like to delete your personal data earlier than that mentioned above, you can contact the recipient or sender of the e-mail from our organisation and that person will assist you.

Profiling involves the automatic processing of personal data to assess certain personal characteristics of you as a customer, for example to analyze or predict your interests or your personal preferences.

We may use profiling to adapt the content of certain services to the category to which you belong (if such information has been provided by you) and to ensure that marketing and information sent to you is relevant and interesting to you and your choice of service. Profiling is done based on the information you have provided to us, as well as based on information we have collected about your use of our services.

We may also use profiling in our communications and marketing via social media and online advertising on websites other than www.elevateyourself.se or related webs.

If you want to object to the profiling carried out, please get in touch using the contact routes listed under the heading: “Contact details for your privacy issues”.

Legal grounds

We process the personal data in incoming e-mails under the legal basis of weighing of interests.

Once we have read the e-mail, a new assessment is made as to the legal basis we have for any continued personal data processing. The legal basis is specifically stated for that particular process.

What personal data do we process and retention period

As a sender of e-mails, we only process personal data of the typical type (name, address, telephone number and e-mail address) directly in the body text. We store this type of personal data for no longer than two years after the termination of the contact. After that, we will delete the e-mail or your personal data will anonymized.

As a sender of e-mails, extra notable personal data (such as social security number, bank account number, financial information, and other information that is close to your private life) is only sent as attached files. As a sender of e-mails, we always encrypt attachments that contain privacy-sensitive personal data.

E-mail communications that contain extra notable personal data will be processed until we have transferred the personal data to a more structured format based on a communicated purpose that is supported on a legal basis. We then delete the attached file, the entire e-mail or your personal data will be anonymized with minimal delay. Continued personal data processing, whether structured or unstructured, is subject to current data protection rules.

We principally only process sensitive personal data in exceptional cases as a sender of e-mails. E-mail communications that contain sensitive data, we only process in the shortest possible time. If a communicated purpose has been conveyed, it is supported by a legal basis, and we will transfer the personal data to a more structured format. We then delete the attached file, the entire e-mail or your personal data will be anonymized without delay. Continued personal data processing, whether structured or unstructured, is subject to current data protection rules.

As part of an ongoing e-mail conversation, we will never forward personal data considered extra notable or sensitive outside of our organisation or to any third parties without first agreeing with you.

If you would like to delete your personal data earlier than that mentioned above, you can contact the recipient or sender of the e-mail from our organisation and that person will assist you.

A cookie is a text file, sent from a server to your browser and stored on your computer, mobile phone or tablet when you visit a website.

Cookies are used, for example, to display customized web pages for visitors or to collect visitor statistics.

If your browser is configured to accept cookies, the information is saved on your device until the specified expiration dates for the specific cookie.

Strictly necessary cookies

Strictly necessary cookies are necessary to provide our website. The function of the cookies is to measure the number of unique visitors or provide certain functions, for example, automatic login.

Functional cookies

Functional cookies make it possible to adjust the website and our services according to the settings and choices you have made, for example, to remember your username or country.

You can make settings in your web browser that automatically reject the storage of cookies or that inform you every time a website wants to store a cookie. You can also delete all cookies that have been previously saved. The settings available depend on the web browser you are using; please refer to the browser's help pages for more information. Please note that if you choose to block cookies entirely, it may result in certain parts of the website or our services will not work properly.