exercite

Privacy Policy

Exercite AB
2021-01-04

This Privacy Policy explains how your personal data is handled when using the content distribution platform (the “Service”) provided by Exercite AB.

Introduction

The Service is provided by Exercite AB with address at Banjovägen 6, 961 46 Boden, Sweden, reg. no. 559105-9141 (“Exercite AB,” “we,” or “us”). Capitalized terms that are not defined in this Privacy Policy have the meaning given to them in the Service’s Terms of Service.

Exercite AB is the Data Controller in respect to the personal information collected from you when you start using the Service (e.g. your email address). This means that it is our responsibility to ensure that all processing of your personal information is conducted in a secure manner and in compliance with applicable laws and regulations.

Personal integrity is important at Exercite AB - we strive for a high level of data protection. In this policy, we explain how we collect and use personal information. We also describe your rights and how you can enforce them.

You are always welcome to contact us if you have questions about how we process your personal data.

What is Personal Data and What is the Processing of Personal Data?

Personal data is an umbrella term for all data about an individual that can be directly or indirectly linked to that person. It is not just about names and social security numbers but also about, for example, photos, films and e-mail addresses.

Processing of personal data is everything that happens with the personal data in the IT systems, regardless of whether it is mobile devices or computers. These include collection, registration, structuring, storage, processing and transfer. In some cases, manual registers may also be included.

Information We Collect About You

To be able to provide you with our service, we collect:

  • Your email address
  • Your username
  • The material that you publish via the service
  • Optional profile picture
  • Optional text fields in your profile
  • Internet Protocol (IP) address, type of device, type of network request and operating system used to access the service

We process your personal data in order to fulfill our service and for the purpose of communicating with you.

How We Share Your Information with Third-Parties

Data Processors

In some situations, it is necessary for us to use external parties to be able to provide our service. These parties act as our Data Processors. Examples of these are the cloud platform where your data resides, and the email provider we use to contact you. We control that these Data Processors guarantee a high-level of security and confidentiality of personal data that are being shared with them by entering into a Data Processing Agreement with them.

Parties who are Independently Responsible for Personal Data

Your personal data can also be shared with certain other actors who are independently responsible for personal data, when we are obliged to disclose such data due to legal or government decisions. Examples of such actors are authorities such as the Swedish Supervisory Authority (Datainspektionen). When your personal data is shared with an actor who is independently responsible for personal data, the Privacy Policy and personal data management of that specific actor apply.

How We Store Your Information

The personal data we collect about you will be processed both within and outside the European Economic Area ("EEA"). For network performance, data may be temporarily cached in a location outside the direct control of Exercite AB on Content Delivery Network servers in the cloud, closest to the end-user requesting the data.

What is our Retention Period?

We never retain your personal information for longer than is necessary to fulfill our obligations to you, and satisfying any legal, accounting, or reporting requirements. Following termination or deactivation of your account, we will delete your data immediately, including back-ups of your data.

What Happens in Case of a Breach?

In the event that your personal information is compromised as a result of a breach of security, we will notify you in accordance with the notification procedures required by the GDPR.

What are Your Rights?

As an individual using our service, you have a number of rights under the GDPR:

  • Right to be informed: You have the right to know what type of data we collect about you, why we are collecting it, and how we use it. This information is provided to you via this Privacy Policy.

  • Right of access: You have the right to receive an extract that shows what personal information we have registered about you. This is called a Subject Access Request.

  • Right to rectification: You have the right to have your data updated if it’s incorrect. You can request the correction of incorrect information via email, or update your information yourself in our customer console.

  • Right to erasure/to be forgotten: You have the right to be forgotten at any time, meaning that we will delete your data if that is what you want. Please note that we can only delete data other legislation does not take precedence over your right to be forgotten.

  • Right to restrict processing: You have the right to restrict processing of specific categories of personal data. Please note that we have enforced data minimization by default, meaning that we collect the minimum necessary amount of personal data about you to be able to provide our Service to you.

  • Right to data portability: You have the right to ask us to transfer your personal data from our IT environment to another IT environment of your choice, in a safe and secure way.

  • Right to object: You have the right to withdraw consent to the processing of your data at any time.

  • Rights in relation to automated decision making and profiling: You have the right to object to the use of personal data for direct marketing or automated decision making and profiling (such as Artificial Intelligence).

    • NOTE: Exercite AB will not use automated decision-making when handling your personal data.

If you have questions about how to exercise your rights, please contact us.

Changes to our Privacy Policy

We may make changes to our privacy policy. The latest version of the privacy policy is always available on the website, https://www.exerciteapp.com/privacy, and we will notify you ahead of time in case of changes to this policy.

If you have questions about how we process personal data, please contact Exercite AB, which is responsible for your personal data at hello@exerciteapp.com.