Privacy Policy

INTEGRITY POLICY

1. INTRODUCTION

Doodel is responsible for personal data for the processing of Personal Data (see definition under section 2) through our digital channels, such as this website and mobile application Doodel.se

This Privacy Policy is for you as a user to feel confident that the person responsible for personal data handles your data in accordance with applicable privacy legislation.

Remember that by using the digital channels and / or any of the products, offers, functions, tools, services or resources that we provide (hereinafter the “Services”) you agree that we process Personal Data about you, where the processing is necessary for us be able to provide the Services to you. You do not have to provide any Personal Information to visit the digital channels, but if you do not provide the necessary information or express consent in the cases where this is required, you may not be able to access the Services or visit all parts of the digital channels.

If you do not have an answer to any question, you are welcome to contact us. Information on how to contact us can be found under the heading “Contact information” below.

2. PERSONAL DATA PROCESSED

Personal data refers to all kinds of information that can be directly or indirectly attributed to a natural person who is alive. The Services may process personal data relating to first and last name, telephone number, address, postal code, e-mail address and personal identity number or coordination number.

Doodel app uses Stripe payments, which requires information about your phone number and apps installed on your device in order to ensure secure and successful payment.

3. SENSITIVE PERSONAL DATA IS NOT PROCESSED

Sensitive personal information is information that reveals ethnic origin, political opinions, religious beliefs or trade union membership, and personal information related to health or sexual life. Information about health can be, for example, sick leave, pregnancy and doctor visits.

We do not process sensitive Personal Data within the framework of the Services.

4. WHAT DO WE USE PERSONAL DATA FOR?

The purposes and purposes of the processing of Personal Data are that we as providers of the Services should be able to offer you the Services, information about these and market our Services to you. Direct marketing is a legitimate interest and our treatment is based on so-called balancing of interests. This means that we consider that our interests in having your personal data processed outweigh your right to privacy protection.

Without your permission, we will not disclose your Personal Data to anyone in any other way than what follows from this Personal Data Policy, unless there is an obligation for us to do so in accordance with law.

5. INFORMATION TO OTHERS

In addition to what is stated in this Personal Data Policy, we will not share the
Personal Data you provide to us with any third party, unless the disclosure of your Personal Data is required by law or in connection with an ongoing legal, administrative or collection procedure where you and we are parties.

We will not pass on your Personal Information to third parties for commercial use.

However, we may use subcontractors for services in connection with our digital channels or the Services. These providers may handle Personal Data and may need some access to Personal Data collected via the digital channels or Services, such as cloud service providers with whom Personal Data may be stored. We will always limit such providers’ access to the Personal Data required for us to be able to offer you access to our digital channels or the Services. We will also require these providers to (i) protect your Personal Data in accordance with this Personal Data Policy and (ii) not use or disclose your Personal Data for any purpose other than to provide us with agreed products or services

6. TRANSFERS TO THIRD COUNTRIES

We only transfer personal data to third countries (i.e a country outside the EU / EEA) if the country has a so-called adequate level of protection in accordance with applicable privacy legislation or if this has been specifically stated in connection with you submitting your Personal Data to us.

7. APPROVAL

When you use the digital channels or the Services, you agree that we use and process your Personal Data in accordance with what is described in this policy. If you do not accept what is stated in this Personal Data Policy, please do not use the digital channels or the Services.

8. CHANGES IN THE INTEGRITY POLICY

Should we need to change the Privacy Policy, we will announce it on our website doodel.se and inform about the content of the new terms you accept.

9. DELETING DATA

Your Personal Data will not be retained for longer than is necessary with regard to the purposes of the processing and we will otherwise delete Personal Data in a manner that follows from applicable legislation.

10. RIGHT TO REQUEST INFORMATION

You have the right to request information free of charge about which (if any) Personal Data we process about you (a so-called register extract) and also have any incorrect information corrected. If you want to know if we process Personal Data about you, you can send us a written and signed request (see contact information below).

When submitting your request, you need to specify specifically what information you are interested in (unless you are interested in all), e.g. contract documents or the like. This way we can give you the information that is relevant to you. In the event that you send a request several times for an extract from the register, we may charge a fee or, in certain statutory cases, refuse to comply with your request.

The register extract will be sent to you within 30 days of us receiving the request. If the extract is extensive so that we need more time or if for some reason we are unable to carry out your request, we will notify you.

11. RIGHT OF CORRECTION

In order to fulfill our obligations to always have correct and relevant Personal Data, we work systematically with our registers and update Personal Data there as necessary. If you notice that the information we have about you is incorrect or if we lack important information, you have the right to have your information corrected. We normally correct simple information without consideration, but in other cases we may need to consider your request. We will not approve your request if it is impossible or requires a lot of work. If you request it, we will also inform you to whom or to whom the correction has been made.

In the event that your Personal Information changes at your request, we will inform any suppliers and partners to whom we have provided the information about the out-of-date information.

12. THE RIGHT TO BE FORGOTTEN

You have the right to request that we delete your Personal Information if:

• they are no longer needed for the purposes for which they have been collected and for which we process them;

• we process Personal Data with the support of your consent and you revoke this;

• we process Personal Data for direct marketing and you object that the Personal Data continues to be processed for this purpose;

• we process personal data on the basis of a balance of interests and there are no justifiable reasons that outweigh your interest;

• we do not process Personal Data in accordance with applicable rules;

• Personal data must be deleted in order to fulfill a legal obligation.

However, we have the right not to delete your Personal Information if we need to keep it in order to fulfill a legal obligation.

When we receive your request, we will make an assessment of whether there are reasons to delete your Personal Data. You will then be notified of our assessment. In the event that we delete your information at your request, we will inform any suppliers and partners to whom we have provided the information that the information has been deleted. However, we do not do this if it is impossible or requires a great deal of work.

13. RIGHT OF OBJECTION

You have the right to object to our processing of your Personal Data as we do with the support of so-called balancing of interests according to law. In that case, you need to specify in writing which treatment you object to. In the event of such an objection, we may only continue to process if we can show that there are compelling justifiable reasons why the personal data must be processed that outweigh your interests.

However, if your Personal Data is processed for direct marketing, you always have the right to object to the processing at any time.

14. RIGHT TO RESTRICTION OF TREATMENT

You have the right in these cases to request that the processing of your Personal Data be limited:

• Once you have disputed the accuracy of the Personal Data, during the time it gives us the opportunity to check whether the Personal Data is correct;

• When the processing is illegal and you object to the Personal Data being deleted and instead request a restriction on their use;

• When we no longer need the Personal Data for the purposes of the processing but you need them to be able to establish, assert or defend legal claims;

• Once you have objected to treatment in accordance with paragraph 13 pending the verification of whether our legitimate reasons outweigh your legitimate reasons.

Restriction means that the Personal Data will be marked so that in the future it may only be processed for certain limited purposes.

15. THE RIGHT OF DATA PORTABILITY

If you have provided your Personal Information to us, you have in some cases the right to receive and take with you your Personal Information to e.g. move them to another company. In order for you to exercise your right to data portability, your request must relate to such Personal Data that you have provided to us and that we process with the support of your consent or to fulfill an agreement we have with you. The right to data portability does not apply when our processing of your personal data is based on a balance of interests or a legal obligation. The right to data portability does not apply when the data portability is technically difficult to implement.

16. THE RIGHT OF COMPLAINT

In the event that you have complaints or objections regarding our handling of your Personal Data, we ask you to contact us in the first instance so that we can help you in the best way. However, you always have a right to direct the complaint to the supervisory authority for privacy issues, the Privacy Protection Authority.

17. SECURITY

We take all appropriate technical and organizational security measures required to protect Personal Data against, among other things. improper access, alteration or destruction.

18. COSTS

In the event that our processing of your Personal Data otherwise entails an additional cost for us, we reserve the right to charge for our processing of your Personal Data as well.

19. CONTACT DETAILS

If you wish to make a request in accordance with your rights above, such request must be made in writing and sent to us by e-mail at: [email protected]

Because it is important that we do not disclose your Personal Information to anyone else, a request must be made in writing, signed by you, scanned in and emailed to us. Upon request, you must also send a copy of a valid ID document (passport or driving license) signed by you.

If you have any questions about this policy or our personal data processing, you can contact us at: [email protected]