Privacy policy

How we process personal data

This is Interdo AB’s information page about the processing of personal data. We want to make the following clear to all our customers:

1. We want to clarify who is responsible for protecting your rights and privacy.
2. We explain how we use the personal data you share with us so that we can provide IdRelay’s campaign service and give you the best possible experience of it, our website and your contact with us.
3. This document aims to help you understand what data we collect and what we do — and do not do — with it.

Interdo AB, company registration number 556606-2336, Brogatan 41A, 302 95 Halmstad, owns and develops the web-based campaign service IdRelay, referred to below as the “Service”. Interdo AB acts as a data processor for the processing of your personal data in the Service and is responsible for the organisational and technical security measures described on IdRelay’s website under “What you need to consider”. The data controller for the processing of your data in the Service is the “Customer”: the business, public authority or association that has entered into an agreement to use the Service. A person who uses the Service with their own sign-in credentials is referred to below as the “User”. Within the Service, the “System Administrator” represents the Customer and is responsible for creating users and other system administrators, assigning permissions and instructing IdRelay on data processing, including personal data, in the Service.

Interdo AB is the data controller for the personal data you share with us when:

• you order the Service
• you receive sign-in credentials and become a user of the Service
• you use IdRelay’s campaign service
• you have a question and/or contact us
• you visit our website and accept cookies

What personal data do we process about you?

When you order the Service, we collect your contact and company details. All users have contact details, sign-in credentials and online identifiers registered with us so that they can use the Service. If you have a question or contact us about another matter, the amount and type of personal data may vary depending on the communication channel used. The categories are usually contact details, online identifiers, company details and the enquiry itself as unstructured material containing the personal data you have chosen to share with us. A detailed list of the personal data in each category, when it is processed and the legal basis for processing is provided in Appendix 1. Information about cookies and how we handle them is available on our Cookies on idrelay.com page.

Why do we process your personal data?

Interdo AB collects this personal data about you as a user and customer to provide the Service, fulfil our contractual obligations to you and give you the best possible experience of both the Service and our website. The data is needed to identify you, administer your account and for statistical purposes. Data collected when you order is needed to process the order, invoice you and send you sign-in credentials. Users’ personal data is needed to give you access to and enable you to use the Service, create a processing history for you as a customer, identify you and know which users and customers use the Service. When you contact us through any of our communication channels, your information is used to handle your enquiry and contact you. Retaining the enquiry also helps us improve our service when questions recur. On the website, you choose whether to consent to optional cookies. You can change your choice through Cookie settings in the footer.

Who do we share personal data with?

When certain applications or features are used, we may share personal data with IdRelay’s subcontractors in Sweden or the EU/EEA. We do NOT share personal data with subcontractors outside the EU/EEA. Suppliers have corresponding obligations for personal data processing to those agreed between you as the customer and us, as set out in the data processing agreement. We use subcontractors when you contact us. These subprocessors and their processing locations are listed in Appendix 2. If you choose to activate an integration for an account in the Service, we will share the personal data required by that integration at your request.

How long do we retain your personal data?

Interdo AB retains personal data about you as a customer for as long as there is a customer relationship or as necessary to fulfil the purposes described in this policy. When the agreement ends, Interdo AB will delete or anonymise your data within a reasonable period after termination, unless Swedish or European law, a court or an authority requires otherwise. Your data may be retained following a balancing of interests where there are security or financial reasons. How long we store your data as a user varies according to the purpose for which it was collected. The system administrator deletes data in the Service; where there is no technical function for deletion, your system administrator needs to contact us. Data collected when you contact us is stored for as long as you are a customer so that we can fulfil our obligations. After the customer relationship ends, we may retain it following a balancing of interests as evidence in case problems arise. Storage is then limited to one system with controlled access permissions.

What rights do you have?

As a customer of Interdo AB, you have several rights you should be aware of. You have the right to request access to your personal data and information about how it is processed. This is generally free of charge. Read more about the right of access at IMY. In certain cases, you also have the right to data portability. You have the right to have inaccurate, incomplete or misleading personal data corrected and to restrict processing until it is corrected. You have the right to be forgotten, but data cannot be erased where it is required to fulfil the agreement, where Swedish or European law or a decision by a court or authority requires otherwise, or where retention is based on a balancing of interests. If you believe there are no legitimate grounds or that the balancing of interests is incorrect, you have the right to object to the processing. You also have the right to withdraw consent and lodge a complaint about the processing with the Swedish Authority for Privacy Protection (IMY).

If you would like to know more

If you have questions about this policy or the processing of your personal data, or would like to delete or correct inaccurate data, you can reach us using the contact details on IdRelay’s website.

Appendix 1 — Categories of personal data

Appendix 2 — Subprocessors for personal data processing