Privacy Policy

At Swedespots, we think it's important that you know what personal data we collect, why we use it and what choices you have in that.

This Privacy Policy applies to the Swedespots app, our website and the private Swedespots beta.

Swedespots is a product of:

Swedespots
Blackatorp 2261
283 96 Killeberg
Sweden

Email: info@swedespots.com
Website: www.swedespots.com

In this Privacy Policy, we refer to this organisation as "Swedespots", "we" or "us".

Swedespots is responsible for the processing of your personal data as described in this Privacy Policy.

Depending on how you use Swedespots, we may process the following data.

Account data
When you create a Swedespots account, we may process:

• email address;

• name or username, if you provide one;

• account ID;

• password or other authentication data, with passwords stored securely and encrypted or managed by our authentication provider;

• information about your account status and access to the beta.

Contact form
If you fill in the contact form on the website, we process your name, email address and message, plus the page on which you filled in the form and the time you sent it. We only use this data to answer your question.

Usage data
When you use the app, we may collect information about how you use Swedespots, such as:

• which parts of the app you use;

• which locations you view;

• which searches and filters you use;

• which places you save;

• which lists or routes you create;

• interactions with parts of the app;

• date and time of use;

• technical information about the device and the app;

• information about errors and crashes.

We use this information, among other things, to understand how Swedespots works and how user-friendly it is, and to keep improving the app.

Location data
Swedespots can use your location to offer features that depend on your current location, for example to discover nearby places.

We process your precise location only when you have given permission and when the relevant feature uses this information.

You can change or withdraw permission for location use at any time via your device settings and, where available, via the settings within Swedespots.

When your location data is used, it may include, for example:

• GPS location;

• geographic coordinates;

• date and time at which the location was determined.

We only use location data for the purposes explained to you at the time you give permission.

Important: location is only processed while the app is open.

Providing Swedespots
We use data that is necessary to:

• create and manage your account;

• give you access to the app;

• save your preferences and saved places;

• make lists and routes available;

• make the app's features work.

Improving the app
We use usage and technical data to understand:

• which features are used;

• where users get stuck;

• which parts work well;

• which features can be improved;

• where technical problems occur.

This helps us keep developing Swedespots.

Analytics
We use analytics to gain insight into how the app is used, for example how often the app is used, which screens are viewed, which features are used, how users navigate through the app, technical performance, and crashes and errors.

Analytics provider: PostHog, hosted in the European Union. Analytics is only used based on your consent: nothing is placed and nothing is measured until you choose "All cookies" in the cookie banner or on the cookie page. See our Cookie Policy for details.

Communication
We may use your email address to:

• give you access to Swedespots;

• send you important information about your account;

• provide information about the beta;

• contact you about the user test;

• respond to questions or feedback.

We do not use your email address for commercial marketing that requires separate consent unless we have an appropriate legal basis for doing so.

Under the GDPR, we must have a legal basis for every type of processing. Depending on the purpose, we may rely on:

Performance of the agreement
For data necessary to provide your Swedespots account and the related services.

Legitimate interest
For certain processing necessary to keep Swedespots secure, improve it and ensure it works well technically, as long as our interests do not outweigh your privacy interests. When we rely on a legitimate interest, we carry out a balancing test as required under the GDPR.

Consent
For processing for which we ask your consent, for example the use of certain location or analytics data, we only process the relevant data after you have given consent.

You can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

When Swedespots wants to use your location, we ask for separate permission.

You can choose not to give permission. In that case, you can keep using Swedespots, but features that depend on your current location may be limited or unavailable.

You can change your choice later via your device's privacy or location settings.

We never ask for more location data than is necessary for the relevant feature.

To improve Swedespots, we use analytics. This may involve processing data such as device and usage information, interactions, technical data and a pseudonymous user ID.

Analytics service: PostHog (PostHog EU B.V., hosted in the European Union).

Analytics is only switched on after you have given permission via the cookie banner. You can withdraw given consent later via the cookie settings; analytics then stops immediately and the analytics cookie is removed from your browser.

We do not sell your personal data.

We may share personal data with carefully selected service providers who help us provide and improve Swedespots. At the moment, these are:

• Vercel (hosting and infrastructure);

• Neon (database);

• PostHog EU (analytics and error reporting, only with your consent);

• Resend (sending emails, such as account emails);

• Cloudflare (spam checks on the contact form, without cookies);

• Google (map, location and business information, see below).

These parties may only process personal data according to our instructions and for the purposes for which we engaged them, insofar as they act as processors.

Swedespots uses services from Google for certain location, map and business information: the Google Maps Platform, including the Maps JavaScript API (displaying the map) and the Places API (place and business information and searching by place name).

When you use features that rely on Google services, information may be processed by Google in accordance with Google's terms and privacy policy.

More information: Google Privacy Policy.

Some of our service providers may process personal data outside the European Economic Area (EEA).

When personal data is processed outside the EEA, we make sure there is a valid legal basis and appropriate safeguards in place, such as an adequacy decision or suitable contractual safeguards where required.

Information about relevant international transfers can be requested via our contact address.

We do not keep personal data longer than necessary for the purposes for which it was collected, unless a longer retention period is legally required or permitted. For the beta, the following principles apply:

• Account data: for as long as your account exists.

• Location data: your precise location is only processed while using the app and is not stored by us.

• Analytics data: up to 1 year.

• User test feedback: for as long as it is relevant to the development of Swedespots.

• Messages via the contact form: up to 1 year.

• Email communication: for as long as needed to handle your question or the beta.

• Live user test recordings: in line with the period communicated in advance of the recording.

• Technical and crash data: up to 1 year.

When you delete your account, we delete or anonymise your personal data within a reasonable period, unless we are legally required to keep certain data.

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. Examples include:

• encrypted connections;

• access restrictions;

• secure authentication;

• limited access to personal data;

• monitoring and logging of systems;

• security updates.

No system can guarantee complete security. If a data breach occurs despite our measures, we act in accordance with applicable law.

Under the GDPR, you have various rights regarding your personal data. Depending on the circumstances, you can:

• request access to your personal data;

• have incorrect personal data corrected;

• request deletion of your personal data;

• request restriction of processing;

• object to certain processing;

• request data portability;

• withdraw consent for certain processing.

You can contact us about this via info@huemansquest.com.

We may ask for additional information to verify your identity before fulfilling a request.

When processing is based on your consent, you can withdraw that consent at any time. Withdrawing consent should be just as easy as giving it.

For location data, you can for example change your consent via your phone's settings. For analytics, you can change your preference via the cookie settings.

Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Swedespots is not specifically aimed at children.

If you are younger than the minimum age at which applicable law allows you to independently give consent for certain online services, we ask you to only use Swedespots with the consent of a parent or legal representative where legally required.

Swedespots does not use your personal data for automated decision-making that has legal or similarly significant effects on you.

We may update this Privacy Policy from time to time, for example when Swedespots introduces new features or when laws or regulations change.

The most recent version is always available on this page.

If a change has a significant effect on how we process your personal data, we will inform you of this in an appropriate way.

Do you have questions about this Privacy Policy or about how we handle your personal data? Get in touch with us:

Swedespots
Huemans
Blackatorp 2261
283 96 Killeberg
Sweden

Email: info@swedespots.com
Website: www.swedespots.com

If you feel we are not handling your personal data properly, you can always contact us first. We'll do our best to resolve your question or complaint.

You also have the right to file a complaint with the privacy regulator in the country where you live, work or where you believe privacy law has been violated.

For the Netherlands, this is the Autoriteit Persoonsgegevens. For Sweden, this is the Integritetsskyddsmyndigheten (IMY).