Privacy Policy

Version: January 2025

Flinck Technologies AB (559239-6419) ("Flinck Technologies", "we", "our", "us") care about your privacy. We therefore want to inform you about how we process your personal data and what rights you have.

This privacy policy (hereinafter, "Privacy Policy") applies to people who contact us, receive marketing from us, visit our website (https://gridfinitygenerator.com/), are a customer of ours or represent one of our customers, are a supplier of ours or represent one of our suppliers. This Privacy Policy also applies to our potential customers and suppliers.

In summary, we process your personal data for the following purposes:

To communicate with you
To send direct marketing
To analyse your use of our website and improve the same
To administer our contract with you or the organisation you represent
To comply with legal obligations
To analyse the market

Below you will find more information on how and why we process your personal data. We describe what rights you have when we process your personal data, for example that you have the right to lodge a complaint with the competent supervisory authority and that you can object to marketing at any time. We also describe which legal basis we have for the processing and how long we store your personal data.

If you have any questions regarding how we process your personal data, please contact us using the contact information provided at the end of this Privacy Policy.

This Privacy Policy covers the following areas:

Who is responsible for the processing of your personal data?
Do you have to provide us with your personal data?
Who has access to your personal data and why?
Third country transfers
Your rights
Detailed description on how we process your personal data
General processing regardless of our relationship with you
When you receive marketing from us
When you visit our website (https://gridfinitygenerator.com/)
When you are or represent a customer or potential customer
Balance of interests
Changes to this Privacy Policy
Data security

Who is responsible for the processing of your personal data?

Flinck Technologies is a company incorporated under the laws of Sweden. Flinck Technologies is responsible (controller) for the processing of your personal data when we process your personal data for our own purposes. We will process your personal data in compliance with this Privacy Policy, the General Data Protection Regulation (EU 2016/679) and other applicable laws and regulations.

Do you have to provide us with your personal data?

We must process some of your personal data in order to enter into a contract with you and to execute your purchase of Flinck Technologies cloud-based computer-aided software (hereinafter, the "Service"). We are also required to process certain personal data in order to comply with legal or other requirements. Therefore, you must provide us with certain personal data if you wish to use our Service.

If you do not provide such personal data, you will not be able to purchase and use our Service. You can read more about which personal data you must provide in the tables below where the legal basis is stated to be "performance of contract" or "legal obligation".

If you use the Service through a third-party platform, you allow us to access, collect and use certain information from such third-party platforms (such as your Google account), as permitted by the terms of your agreement and your privacy settings with the third-party and in accordance with this Privacy Policy. You may choose not to allow the third-party platform to provide us with certain information about you.

Who has access to your personal data and why?

Your personal data are primarily processed by us. The following third parties will have access to some of your personal data as set out below.

To have a functioning IT system, to give you the best support possible, to optimise the performance of our code, to plan and perform our sales processes and to run our business efficiently, we share your personal data with our IT suppliers. When we share your personal data with our IT providers, it is only done so that they can fulfil their obligations to us in accordance with the agreement we have.
To administrate your payment, your personal data are processed by our payment service providers. If you choose to pay via invoice, the payment service provider may share your personal data with credit reporting agencies to assess your financial situation.
To give you and other potential customers targeted marketing, we share your personal information with relevant third parties such as Google.
If we have an agreement with you or the organization you represent, we may disclose your personal data to the third party who handles our accounting.
If you use our website, a third party analyses the use of the website and may therefore, if you give your consent, have access to your personal data.
If required by law, Flinck Technologies will disclose necessary personal data to authorities such as the police, the Swedish Tax Agency or other authorities.

Third country transfers

We always strive to process your personal data within the EU / EEA. However, in some situations, the personal data may be transferred to and processed in countries outside the EU / EEA by third parties. If your personal data are processed outside the EU / EEA, we ensure one of the following measures are adhered to:

The non-EU country's protections are deemed adequate by the EU.
We take the necessary measures to provide appropriate safeguards, such as including specific clauses in the contract with the non-European importer of the personal data.

Your rights

In accordance with data protection legislation, you are entitled to a variety of rights when we process your personal data. These are set out below.

Right to access

It is your right to receive confirmation on whether we process your personal data. If we process your personal data, you also have the right to receive information about our processing your personal data and to receive a copy of such personal data.

Right to rectification

All reasonable steps are taken to ensure that your personal data are correct and up-to-date. However, if your personal data are incorrect or incomplete, you have a right to have the personal data corrected and completed.

Right to erasure ("right to be forgotten") and restriction of processing

Under certain conditions, you have the right to request erasure ("right to be forgotten") of your personal data. You can request deletion of the stored personal data, insofar as this personal data are no longer necessary for the purpose for which they were collected or otherwise processed. You may also request erasure when we process your personal data based on a balance of interests and we find, following your objection, that we do not have an overriding interest in continuing to process it. Furthermore, if the processing is based on your consent, you may also request erasure if you withdraw your consent.

You also have the right to request that we restrict our processing of your personal data, e.g. if you dispute the accuracy of the personal data or if the processing is unlawful and you oppose erasure of the personal data and instead wish that we limit our processing.

However, certain legal obligations or our legitimate interest in establishing, asserting or defending legal claims can prevent us from immediately deleting parts of your personal data.

Right to withdraw your consent and to object to processing

You have the right to withdraw all or part of the consent that you have provided to us for our processing of your personal data.

You always have the right to object to your personal data being processed for marketing and profiling purposes, such as newsletters.

You also have the right to object to our processing of your personal data when such processing is based on a balance of interest. In some cases, however, we may continue to process your personal data even if you have objected to the processing. This can be the case if we can present legitimate reasons for the processing that outweigh your interests or if your personal data are being processed for the purpose of establishing, asserting or defending legal claims.

Right to data portability

In certain instances, you have the right to obtain your personal data in a structured, commonly used and machine-readable format from us. In some cases, you also have the right to have your personal data transferred to another controller, when it is technically possible ("data portability").

The right to data portability applies to personal data that you have provided to us in a structured, commonly used and machine-readable format if the processing is based on your consent or an agreement and the processing is automated.

Right to lodge a complaint

If you are dissatisfied with the way we process your personal data, you always have the right to lodge a complaint with the competent supervisory authority. Such a complaint can be filed with the authority in the EU/EEA member state where you live or work, or where the alleged infringement of applicable data protection legislation has occurred.

The competent supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten). You will find the authority's contact information at the end of this Privacy Policy.

Detailed description on how we process your personal data

We process personal data that we have received from you or that we have collected ourselves. Your personal data are processed as we describe in the tables below.

Here you can read more in detail why we process your personal data, which categories of personal data we process and what the legal basis is for the processing of your personal data. You can also read about how long we store your personal data.

General processing regardless of our relationship with you

Purpose: To communicate with you

Processing performed: Answer and manage your communications, such as questions you ask us about our services or in connection with customer service and support

Personal data we process: Identity and contact information, ticket data, requestor/contact data, social data, application integration data, knowledge base data, forum data, report data, call recording, chat messages, and additional data that we require in order to assist you in the best way possible

Legal basis: Balance of interest - The processing is justified by our legitimate interest to be able to communicate with you, for example in order to answer and handle questions from you or to fulfil our obligations as result of our agreement with the organization that you represent.

Retention time: We store your personal data for one year from the end of our communication. However, the personal data can be stored for a longer time for other purposes.

Purpose: For customer management purposes

Processing performed: Collect and analyse data in order to plan and complete our sales processes

Personal data we process: Contact data, account data, deal data, file data, application integration data, sales activity (appointment, task, call log, notes, custom sales activities) data, events data, report data, Website visitor data (browser, OS, location), website visitor activity data (clicks, scrolls), events data and report data, Contacts data, Emails related events data, E-mail messages, Call recording, Call data, contact data, agent data, Conversations, social data, application integration data, knowledge base data, report data, agent/user data.

Legal basis: Balance of interest - The processing is justified by our legitimate interest to be able to collect and analyse data in order or plan and complete our sales processes.

Retention time: The personal data are stored for one year from ended customer relationship based on a balance of interests. If there is no contractual relationship, data are retained for a maximum of three months if no contractual relationship arises. However, if you are a representative, we will stop storing your personal data if we become aware that you no longer represent the organisation.

When you receive marketing from us

Purpose: To send marketing to you

Processing performed:

Direct marketing with offers and information
Create a correct unsubscribe list, in case you have unsubscribed from our marketing

Personal data we process:

Identity and contact information
For customised communication, we also process:

Browsing history
Order history

Legal basis:

Balance of interest - The processing is justified by our legitimate interest in sending relevant advertising to you who are or represent a potential customer or customer to us. You are always entitled to object to the marketing.
Consent - If you have consented to receiving marketing from us, we will send marketing based on your consent. You can withdraw your consent at any time.

Retention time: The personal data are stored for one year from the end of the customer relationship based on a balance of interests. If there is no contractual relationship, data is retained for a maximum of three months if no contractual relationship arises. However, if you are a representative, we will stop storing your personal data if we become aware that you no longer represent the organisation.

If you have given your consent, we will send marketing until you unsubscribe from our sending, withdraw your consent or otherwise object to the marketing. We always stop sending marketing if you unsubscribe from our sending or otherwise object to the marketing.

If you unsubscribe, we will keep your personal data on our "unsubscribe list" for the time being in accordance with marketing law rules so as not to accidentally send marketing to you again.

Purpose: To provide customised marketing in digital channels

Processing performed: Provide customised marketing in digital channels, social media and third-party websites including sharing personal data with relevant third parties such as Google

Personal data we process:

Identity and contact information
IP-address

Legal basis: Balance of interest - The processing is justified by our legitimate interest in being able to share your personal information with third parties who can customize our marketing to potential customers based on information about you who are or represents our existing customer. Your personal information is processed for this purpose only if you have not objected to marketing.

Retention time: The personal data is stored for one year from the end of the customer relationship. However, if you are a representative, we will stop storing your personal information if we become aware that you no longer represent the organisation. We always stop the processing if you object to it.

When you visit our website

Purpose: To analyse your use of and improve our site

Processing performed: Analyse how you use our website to personalise content and ads, provide social media features, and analyse our website traffic. To do this we use the analytic service from Google Analytics

Personal data we process:

Browser type/version
Operating system used
Referrer URL (the previous site visited)
Hostname of the accessing computer (IP address)
Time of day when the server enquiry is made

Legal basis: Consent - The personal data will be processed based on your consent. You can withdraw your consent at any time. You can also prevent Google Analytics from using your personal data by downloading and installing their browser add-on.

Retention time: Personal data is collected by placing cookies on your computer and the length of processing of the personal data varies depending on the type of cookie. Some cookies are deleted immediately after your visit to the site while some cookies are stored for a maximum of six (6) months after the end of the web session. See more in our cookie policy.

Google may continue to store your personal data for their own purposes, in which case Google will inform you separately about such storing.

Purpose: To provide a customer account on our website upon request

Processing performed:

Create, administer and manage your account
Communicate with you regarding your account
Take security measures, e.g. guarantee no unauthorised logins
Give you the benefits of having a customer account, which includes giving you the opportunity to e.g. use pre-filled information when making a purchase, to see past purchases, to follow ongoing purchases and to easily manage your newsletter subscription.

Personal data we process:

Identity and contact information
Password
Name of legal entity (if any) and your title or role in such legal entity (if any)

To give you the benefits of having a customer account, we also process:

The information that you filled in the last time you made a purchase, this includes that we store information about your name, your email address, your phone number and your postal address
Order history
Information about whether you subscribe to newsletters or not

Legal basis: Performance of contract - The processing is necessary for us to be able to create and administer a customer account upon request and for you to be able to get the benefits that come from having an account, i.e. be able to provide a smoother buying experience that comes from having a customer account.

Retention time: The personal data is stored for one year from the last time you were logged in. You can delete your account at any time, and your personal data will then be stored for this purpose for three months after its deletion.

When you are or represent a customer or potential customer

Purpose: To administer the purchase of our Service

Processing performed:

Negotiate, enter into, administer and manage agreements (including the delivery of the Service) with you or the organisation you represent
Receive payment
Gather and analyse information about purchases
Send a delivery confirmation

Personal data we process:

Identity and contact information
Order and payment method information (if you are an individual trader)
Information from our communication with you
Billing address
Name of invoice reference
Credit card information

Legal basis:

If you are an individual trader:
Performance of contract - The processing is necessary for us to fulfil our agreement with you. If the personal data are not provided, you will not be able to make a purchase with us.
If you are a representative:
Balance of interest - The processing is justified by our legitimate interest in being able to enter into and execute agreements with the organisation you represent.

Retention time: We store your personal data for one year after your last login to the Service, or if you terminate your account it will be stored for three (3) months after termination. However, if you are a representative, we will stop storing your personal data if we become aware that you no longer represent the organisation.

Purpose: To monitor and optimise our Service

Processing performed: Diagnose, fix, and optimise the performance of our code

Personal data we process: Device identification data and traffic data (e.g. IP addresses, MAC addresses, web logs, browser agents)

Legal basis: Balance of interest - The processing is justified by our legitimate interest in continuously monitoring and optimising our Service.

Purpose: To handle claims

Processing performed: Handle or initiate potential claims such as, for example, the withdrawal of purchases, complaint cases and warranty claims

Personal data we process:

Identity and contact information
Information from our communication with you in relation to the claim
Relevant information about you in connection with the claim

Legal basis:

Performance of contract - The processing is necessary for us to fulfil our rights and obligations as a result of our agreement with you.
Legal obligation - The processing is necessary to comply with the Swedish commercial legislation.
Balance of interest - We have a legitimate interest in fulfilling our rights and obligations as a result of our agreement with the organisation you represent. We also have a legitimate interest in being able to initiate and defend ourselves against potential legal claims.

Retention time: The data are stored from the initiation of the claim and for as long as the process regarding the claim is ongoing. If necessary, data may be processed for as long as required by the applicable statutes of limitations. However, if you are a representative, we will stop storing your personal data if we become aware that you no longer represent the organisation.

Purpose: To comply with legal obligations

Processing performed: To comply with legal obligations such as the Swedish Accounting Act

Personal data we process:

Identity and contact information
Payment information (if you are an individual trader)

Legal basis: Legal obligation - The processing is necessary in order for us to comply with legal obligations such as the Swedish Accounting Act.

Retention time: The data are stored for seven to eight years in accordance with the Swedish Accounting Act. However, if you are a representative, we will stop storing your personal data if we become aware that you no longer represent the organisation.

Purpose: To analyse the market

Processing performed:

To carry out market surveys, such as customer satisfaction, views of our offering and potential for development
Create reports based on answers and conclusions from surveys

Personal data we process: Identity and contact information

Legal basis: Balance of interest - The processing is justified by our legitimate interest in being able to contact you with a request to evaluate our products and / or services in order to improve them.

Retention time: We store your personal data for six months after a survey. Data may then be anonymized to be kept in aggregate form for a longer period of time.

Balance of interests

As stated above, for some purposes, we process your personal data with reference to a balance of interests as the legal basis for the processing. The balance of interest means that we have carried out a balance of interests test where we have determined that our legitimate interest for the processing outweighs your interests which require the protection of your personal data. We have stated what our legitimate interests are in the tables above.

Changes to this Privacy Policy

The development of the Service could entail an adjustment of this Privacy Policy. An updated version of this Privacy Policy is always available at https://gridfinitygenerator.com/privacy.

Data security

Flinck Technologies take adequate technical and organisational safety measures in order to protect Your data from misuse, partial or complete loss, destruction or against unauthorised access of third parties.

Contact Information

Please contact us if you have any questions regarding how your personal data are processed.

Contact information for Flinck Technologies AB

Flinck Technologies AB
Styrmansgatan 4A
602 26 Norrköping
Sweden
Email address: support@flinck.io

Contact information for the Swedish Authority for Privacy Protection

If you are dissatisfied with the way we process your personal data and you want to contact the Swedish Authority for Privacy Protection, you can use the contact information below.

Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm
Sweden
Phone number: +46 8 657 61 00
Email address: imy@imy.se
Website: www.imy.se