Privacy Policy
Last Updated: 2024-11-06
At The Climate Action Agency Sweden AB (“we,” “us,” or “our”), we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our Platform, the Climate Action Platform, accessible at https://platform.climateaction.agency/ (the “Platform”).
1. Data Controller Information
The data controller responsible for your personal data is:
The Climate Action Agency Sweden AB
c/o Norrsken, Birger Jarlsgatan 57 C, Stockholm, Sweden
Email: legal@climateaction.agency
2. Personal Data We Collect
We may collect and process the following categories of personal data:
- Identification Data: Name and email address.
- Technical Data: IP address and cookies.
3. Purposes and Legal Basis for Processing
We process your personal data for the following purposes:
- Account Creation and Management: To create and manage your user account.
- Service Delivery: To provide access to our Platform and its features.
- Customer Support: To respond to your inquiries and provide assistance.
- Marketing Communications: To send you updates, newsletters, and promotional materials (only with your consent).
- Analytics: To analyze usage patterns and improve our Platform.
Legal Basis: The processing of your personal data is necessary for the performance of a contract to which you are a party (Article 6(1)(b) GDPR).
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience on our Platform. These include:
- Functional Cookies: Necessary for the operation of the Platform.
- Analytics Cookies: Provided by third parties like Supabase and HubSpot to analyze user behavior.
You can manage your cookie preferences through your browser settings.
5. Data Sharing
We may share your personal data with the following third-party service providers:
- Supabase: For database and authentication services.
- HubSpot: For customer relationship management and marketing communications.
- Vercel: For hosting services (which may process IP addresses in log files).
All third-party service providers are contractually obligated to protect your data and comply with GDPR requirements.
6. Data Retention
We retain your personal data for as long as your account is active and as necessary to fulfill the purposes outlined in this Privacy Policy. After account deletion, we will retain your data for an additional 30 days before it is permanently deleted.
7. Data Subject Rights
Under the GDPR, you have the following rights:
- Right of Access: Obtain confirmation about whether we process your personal data and access to such data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data under certain conditions.
- Right to Restrict Processing: Request limitation of data processing under specific circumstances.
- Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
- Right to Object: Object to the processing of your personal data for direct marketing purposes.
To exercise your rights, please contact us at legal@climateaction.agency.
8. International Data Transfers
Your personal data is stored and processed within the European Economic Area (EEA). We do not transfer your personal data outside the EEA.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
10. Children’s Privacy
Our Platform is intended for individuals who are at least 18 years old. We do not knowingly collect personal data from minors under 16 years of age.
11. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will notify you via email of significant changes. Your continued use of the Platform after such modifications will constitute your acknowledgment of the modified Policy.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us:
- Email: legal@climateaction.agency
- Address: c/o Norrsken, Birger Jarlsgatan 57 C, Stockholm, Sweden
14. Supervisory Authority
If you believe that our processing of your personal data violates GDPR, you have the right to file a complaint with the supervisory authority:
Datainspektionen (Swedish Data Protection Authority)
Website: https://www.datainspektionen.se
By using the Climate Action Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein.
