Privacy policy

Purpose and type of data and Legal basis for processing

• Sending newsletters, offers, and marketing communications. Type of data: Name, contact information, e.g., email address and phone number. The processing is based on your consent to receive communications and offers. The processing is necessary to satisfy our and your legitimate interest in managing your participation in competitions and/or events and to market our existing or new services.
• Management of customer registers for affiliated companies. Confirm your identity and verify your personal and contact details to administer affiliation agreements.
  Type of data: Name, personal identification number, email, phone number, username, password. The processing is necessary for us to fulfill our contractual obligations to the company or organization you represent.
• VG Akademin's obligation to fulfill legal obligations according to legal requirements, court judgments, or government decisions, e.g., the Accounting Act. Type of data: Name, personal identification number, email, phone number, username, password, information regarding payment of membership fees. Fulfillment of legal obligation. This collection of your personal data is required by law. If the data is not provided, Offertas' legal obligation cannot be fulfilled.
• Producing reports and statistics for follow-up and evaluation of our operations, as well as to improve our services and for business development to develop new products and features. Type of data: Name, gender, profile settings, purchase history and payment information, technical data regarding devices used, purchase and user data (e.g., clicks and visit history). The processing is necessary to satisfy our and our customers' legitimate interest in evaluating and improving Offertas' services and systems.
• Processing of your personal data to handle customer service cases. Type of data: Contact information, e.g., email, correspondence, account details, personal identification number. The processing is necessary to satisfy our and your legitimate interest in handling customer service cases. Furthermore, we have a contractual obligation to provide you with customer service according to the User Agreement.

• Processing of your personal data when applying for employment or an internship with us. Type of data: Identity information, e.g., name, contact information, e.g., email address, phone number, and postal address. The processing is based on your consent for us to communicate with you regarding the current recruitment matter.

More about your rights to rectification, erasure, etc.
You have the right to receive information free of charge once per calendar year about what personal data concerning you we process and how we process it. You also have the right to request rectification of personal data we process about you. You also have the right to be erased ("the right to be forgotten"). This means that you can request the erasure of your personal data in cases where the data is no longer necessary for the purpose for which it was collected. Please note, however, that there may be legal obligations for us that prevent immediate erasure, e.g., requirements in accounting and tax legislation.

If you wish to lodge a complaint with a supervisory authority or have any other questions about your rights regarding personal data processed by us, you should contact the Swedish Data Protection Authority / Integritetsskyddsmyndigheten. Their contact details can be found here: www.datainspektionen.se

How long do we store your personal data?
We only store your data for as long as it is necessary to fulfill our contractual obligations to you and as long as required by statutory storage periods. When we store your data for purposes other than our contractual obligations, e.g., to meet accounting requirements and other regulatory capital requirements, we only store your personal data for as long as is necessary and/or legally required for the respective purpose.

Where do we process your personal data?
We always strive for your personal data to be processed within the EU/EEA, and all our own IT systems are located within the EU/EEA. However, during systematic support and maintenance, we may be forced to transfer the information to a country outside the EU/EEA. Regardless of the country in which your personal data is processed, we take all reasonable legal, technical, and organizational measures to ensure that the level of protection is the same as within the EU/EEA.