Privacy policy
We care about the protection of personal data
About Storegate
Storegate AB, org.nr 556623-6179, Pirgatan 1, 374 35 Karlshamn, (“Storegate”, “we” or “us”) is the data controller for the processing of your personal data. One of Storegate’s core values is that we take our customers’ privacy very seriously and we have a strong focus on ensuring that Storegate’s solutions and routines among the staff are as secure as possible to protect our customers’ information. Thus, it is Storegate’s goal to comply with all applicable laws and regulations for personal data protection.
This privacy policy describes how and why we collect, use, store, disclose and protect your personal data. The privacy policy also explains what rights you have in relation to Storegate regarding the processing of your personal data. The privacy policy complies with all applicable laws and regulations that exist to protect the privacy of private individuals, including but not limited to Act (2018:218), with supplementary provision to the EU Data Protection Regulation and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Data Protection Regulation).
When you use Storegate’s services, Storegate collects your personal data and processes it in accordance with this privacy policy. Therefore, it is important that you read and understand the Privacy Policy before using Storegate’s services.
When you as a business, association or organization in the public sector use Storegate to store information about your customers, you must always sign a Data Processing Agreement with us and state the purpose of the processing.
What personal data is processed and for what purpose?
At Storegate, we distinguish between information related to your account and the information you store with us. In the case of personal data linked to the customer account, such as e-mail address, name, address, telephone number, etc. customer service and other support staff have access to these via administration interfaces.
With regard to information stored by the customer, only a few individuals, in rare cases and after requesting access authorization from the customer (read more about access authorization), have the right to enter the customer’s account. Storegate processes personal data provided by the customer in connection with the subscription or test of the service. The personal data is processed in order for Storegate to be able to fulfill agreements entered into for the provision of services, for the administration and invoicing of these and for Storegate to be able to fulfill its obligations under Swedish law. In addition to the personal data processing for the above purposes, Storegate may use the personal data for sending out information, newsletters and direct marketing. Regarding the latter two of these, however, it is assumed that you have consented to the processing.
The personal data that Storegate collects and processes may, depending on the context, include:
- name and contact details, including address, mobile number and email address
- social security number
- billing information, payment and credit card numbers, and other information you provide in connection with the purchase of our service
- username and password for our services
- other information relevant to customer surveys, advertisements or offers
- IP address and data provided in case of a support case.
Legal basis
The GDPR requires a legal basis for all personal data processing. The legal basis for each processing operation is set out below.
Consent: Direct marketing and newsletters.
Performance of contract: Provision, administration and invoicing of Storegate’s service.
Legal obligation: Invoice documents are stored in accordance with applicable accounting rules.
Storage
Storegate takes all reasonable steps to ensure that your personal data is processed and stored securely. Your personal data will never be stored for longer than is permitted by applicable law or to achieve the purposes set out above. Your personal data will be processed by us for the following periods of time.
Customer: As a customer of Storegate, your personal data is stored until you withdraw from the service. However, this does not apply if we need to save your personal data longer due to any of the points below.
Performance of contract: Personal data (name, social security number, address, telephone number, e-mail and payment information) provided in connection with the ordering of the service is stored for as long as necessary for Storegate to fulfill the agreement with you.
Legal obligation: Storegate retains invoice documentation for as long as required by applicable accounting rules.
Consent: Where we process your personal data on the basis of your consent, we will only retain your personal data for as long as we have your consent to do so, unless we need to retain it for any of the reasons set out above.
When Storegate no longer has grounds to process your personal data, for example if you terminate your account, or if you withdraw your consent, your personal data will be deleted within 60 days. This 60-day period starts, in the case of account terminations, from the day the account expires. During this 60-day period, we may still send you information, as you can reactivate your account during this period. If you do not want to receive information during this period, please contact support to be forgotten.
Disclosure of data to another party
The protection of your personal data is an important part of Storegate’s business and the information you save with us will never be disclosed to anyone else, unless you consent to this yourself or if it is done in accordance with the paragraph below. To further clarify this, Storegate will not, under any circumstances, sell, share or disclose information unless required by law or as a direct result of legal action.
However, in order for Storegate to be able to deliver its services, it may mean that customer data is shared with other parties. Storegate always takes the greatest care in these cases. The parties to which transfer takes place as a necessary part of Storegate’s ability to deliver its services assist Storegate with the following:
- Invoice and credit card processing
- Sending of information emails, e.g. newsletters
- Login in some cases
Sub-consultants:
- Swedbank Pay (Payex AB), Sweden, invoicing
- Brevo SAS, France, newsletter (optional)
- Microsoft Corp. US, login Entra ID, WOPI (optional)
- Finansiell ID Teknik AB, Sweden, login & signing (optional)
- Freja eID Group AB, Sweden, login & signing (optional)
Handling of other information
“Other information” means information that does not relate to individuals. We use such information on our websites. For example, the time web pages were visited, access times, browser version, operating system and other data not linked to a person. With this information, Storegate can see how the services are used but not what is stored. This could be, for example, the type of upload, which menus are used, what times the apps connect, etc. With this information, we can improve our services so that our customers have a better user experience.
Your rights
You have the right to request, once per calendar year and free of charge, information about what personal data we have registered about you and how it is used. If you want such information, you can contact us using the contact details below. Storegate wants to ensure that your personal data is accurate and up to date. Therefore, you can change your personal data at any time by emailing us at support@storegate.se.
You can request that we delete personal data concerning you at any time. Storegate will then delete the personal data in question if it is no longer necessary for the purposes for which it was collected or otherwise processed. Storegate will also do this when you withdraw your consent to the processing. Furthermore, you have the right to require Storegate to restrict its processing of personal data in certain cases and you have the right to object to certain processing of your personal data. In addition, you have the right to request that Storegate transfer your personal data to another data controller in electronic format.
As stated above, your personal data will not be processed for purposes related to e.g. direct marketing if you object to such processing. You have the right to withdraw your consent to the processing of personal data at any time. Such withdrawal may be limited to only part of the processing, for example that relating to direct marketing. Withdrawal of your consent does not affect the lawfulness of Storegate’s processing of personal data up to the time you withdrew your consent. You can file a complaint with the Data Inspectorate if you believe that Storegate’s processing of your personal data is not in accordance with applicable law.
Safety and security
We are committed to ensuring that your personal data is processed securely. To prevent unauthorized use or exposure of your personal data, we use appropriate and reasonable physical, technical and organizational security measures in relation to the amount and sensitivity of personal data, to ensure an appropriate level of security.
Cookies
In order to deliver our services with the highest possible quality, cookies and similar technologies are used on the Storegate website. Cookies are small text files that are stored on the visitor’s computer and can be used to track what the visitor does on the website. Cookies cannot identify you personally, but only the browser installed on your computer that you use when visiting the website in question. Different cookies are therefore present on different computers in case you use different computers to access our websites. Cookies are not carriers of viruses and cannot destroy other information stored on your computer. Storegate uses cookies to provide statistics on the use of the website or service. The statistics are only seen as numbers and are not linked to personal data.
Cookies are usually categorized based on their origin and whether or not they are stored in your browser. To begin with, cookies can either be sent to you by the website you are visiting (so-called first-party cookie) or by another organisation providing services to that website, such as an analytics and statistics company (so-called third-party cookie). Cookies can be further divided into session cookies and persistent cookies. A session cookie is sent to your computer for the proper functioning of the web pages during your visit and is not stored on your computer but is deleted and disappears when you close your browser. For example, the function of a session cookie is that it is activated when you return to a previously visited part of the website, thus facilitating your navigation on the website. A persistent cookie, on the other hand, is stored in your browser and thus allows a website to recognize your computer’s IP address even if you turn off your computer or log out between visits.
Storegate uses both session cookies and persistent cookies on the website. Both types of cookies are mainly needed for the functionality of our services, to help us improve our delivery of products and services, provide you with extra functionality or to help us target relevant and customized ads to you. Everyone can decide for themselves, directly in their browser, whether or not to accept cookies.
Changes to the privacy policy
Storegate reserves the right to make changes to this Privacy Policy at any time to the extent that the changes are necessary to address disruptions or to meet new legal or technical requirements. Any changes to this Privacy Policy will be communicated via the Service, on Storegate’s website or by email. If the changes concern personal data processing that we carry out on the basis of your consent, we will give you the opportunity to give your consent again.
Other
All material on www.storegate.com is copyrighted by Storegate AB unless otherwise noted. Other brands and products mentioned on www.storegate.com are probably copyrighted and trademarked by their respective owners.
Contact details
Storegate is the data controller and has the following contact details:
Storegate AB, Pirgatan 13, 374 35 Karlshamn, info@storegate.com
Storegate has elected a data protection officer who has the following contact details:
Martin Källström, Pirgatan 13, 374 35 Karlshamn, dpo@storegate.com
If you have any questions regarding our processing of your personal data, requests for rectification and/or erasure of personal data or regarding any other matter relating to your personal data, please contact Storegate or the Data Protection Officer by sending a letter or email to the addresses listed above.