What different types of cookies are there?
A cookie can either be classified by its lifespan or by the domain to which it belongs. By lifespan, a cookie is either a:
session cookie which is erased when you close your browser or
persistent cookie which remains on your computer/device for a pre-defined period of time.
Session cookies enable us to keep track of your movement from page to page on our website so you don’t get asked for the same information you’ve already given to the site. Cookies allow you to proceed through many pages of our website quickly and easily without having to authenticate or reprocess each new area you visit.
A persistent cookie enables us to remember you on subsequent visits, speeding up or enhancing your experience of our services or functions offered.
As for the domain to which a cookie belongs, there are either:
first-party cookies which are set by us as the owner of the visited website (in this case wearecube.se) or
third-party cookies which may be set by another website.
What kind of information do we collect by using cookies?
When you visit our website, we may automatically collect the following types of information from you:
Social networks and other third party websites
How can you block cookies?
Questions about our website?
Valid starting on the 25th of May 2018
Table of contents
1 Introduction 2 What is personal data and what does the processing of personal data mean? 3. For whom is this policy applicable? 4. For what areas is this policy applicable? 5. What does it mean to be a Data Controller? 6. WeAreCube as a Data Controller 7. Why are we allowed to process personal data? 8. What personal data do we process and why? 9. How long do we generally store personal data? 10. Our actions to protect personal data 11. When do we share personal data? 12. Your rights 13. Cookies 14. Changes to this policy 15. Contact
Our goal is that you, after having read this policy, will feel secure in that your personal integrity is respected and that your personal data is treated in a correct manner. We therefor also work on a continuous basis with securing that our treatment of personal data is completely in compliance with current legislation, especially the General Data Protection Regulation (GDPR) which will be in effect starting on May 25th 2018.
2. What is personal data and what does the processing of personal data mean?
2.1 Personal data consists of all information that directly, or indirectly together with other information, can be connected to a living (physical) person. A non-exhaustive list with examples of personal data consists of, among others:
2.2 The Processing of personal data includes every action connected to the use of the personal data, regardless of whether such an action is performed automatically or not. This means that the following actions, among others, are included:
3. For whom is this policy applicable?
4. For what areas is this policy applicable?
5. What does it mean to be a Data Controller?
A Data Controller is a legal person or other entity that determines the purpose and means for the processing of personal data. A corporation is a Data Controller in regards to personal data it has for its own benefit in regards to its employees, customers, partners, users and others.
6. WeAreCube as a Data Controller
We, WeAreCube AB (company reg. no. 556925-4104) and WeAreCube Denmark ApS (CVR-nr 37217166) are the Data Controller and therefor accountable in accordance with applicable legislation, for the processing that occurs with your personal data, within the scope of our Services.
7. Why are we allowed to process personal data?
7.1 For it to be permissible for us to process personal data there must always be support for said treatment within the GDPR, so-called lawful basis. Such lawful basis may include:
7.2 It may occur that the same personal data is processed both through support in terms of fulfilling an agreement as well as in terms of specific consent or in terms of the processing of that specific information is necessary to fulfill other legal obligations. This means that even though you may revoke your consent and the treatment based on said consent ceases, that specific personal data may remain with us for separate reasons.
8. What personal data do we process, and why?
In this section, we explain how your personal data is used in order for us to be able to provide you with high quality services.
8.1 When you communicate with us
You can choose to communicate with us in many different ways, for example via social media and through emails with our customer service.
When you communicate with us, we process data which you personally provide to us, for example:
8.1.1 We process your personal data in order to:
8.1.2 Legal grounds for the processing:
We process your personal data for our, and your, legitimate interest in administering your matter (weighing of interests).
8.1.3 Period of storage:
We save your personal data for up to 12 months after the matter is closed in order to ensure traceability in your communications with us.
8.2 When we represent you in your role as a creator
When we represent you in your role as a creator, we process data which you personally provide to us, for example:
8.2.1 We process your personal data in order to:
Handle your collaborations with different companies
8.2.2 Legal grounds for the processing:
We process your personal data based on the performance of a contract.
8.2.3 Period of storage:
We save your personal data for up to 12 months after our collaboration to ensure traceability in your communications with us, as well as to be able to handle future inquiries from customers.
8.3 When you use our website
When you visit our website, we process:
8.3.1 We process your personal data in order to:
8.3.2 Legal grounds for the processing:
We process your personal data based on:
8.3.3 Period of storage:
We save your personal data for 3 month after you have used our digital channels.
9. How long do we generally store personal data?
Your personal data is stored only during the period for which there is a need to store the information to be able to fulfill the terms of the agreement. We may store your personal data longer if this is necessary from a legal standpoint or to safeguard our legal interests, for example within the scope of legal proceedings that we are involved in.
10. Our actions to protect personal data
10.1 We have ensured that we have taken all necessary and appropriate technical and organizational measures to safeguard your personal data against loss, misuse or unauthorized access.
10.2 To technically ensure that personal data is processed in a safe and confidential manner we use digital networks that are breach protected through for example encryption, fire walls and password protection. In any instance where a breach may occur we have created routines to identify, assess and minimize any damage that may occur as well as report said damage to all affected parties.
10.3 To ensure an adequate knowledge level regarding processing of personal data we will arrange ongoing educational efforts regarding GDPR, both for our employees as well as the consultants that may from time to another be contracted to do work for us.
11. When do we share personal data?
11.2 Furthermore we may share personal data if we are required to do so by law, court order or if withholding such personal data would hinder any ongoing legal investigation.
12. Your rights
12.1 We are responsible for your personal data being processed in accordance with applicable legislation.
12.2 Upon your request, or at our own initiative, we will correct, de-identify, delete or complete any information that has been found to be wrongful, incomplete or misleading.
12.3 You have the right to demand access to your personal data. This means that you have the right to demand transcripts regarding the processing that we have maintained over your personal data. You also have the right to receive a copy of the personal data that are being processed. You have the right to, once a year and through written application, without cost receive a transcript regarding what personal data is stored in regards to you, the purpose of the storage and processing as well as to whom said information has been made accessible. You also have, within the transcripts, the right to be informed of the period of time in which the personal data will be stored and what criteria we have used to determine said period of time.
12.4 You have the right of correction of your personal data. We will, upon your request and as quickly as possible correct the incorrect or incomplete personal data we process in regards to you.
12.5 You have the right to demand deletion of your personal data. This means that you have the right to demand that your personal data is removed if it is no longer necessary for the objectives for which it was gathered. There may exist legal requirements stating that we may not immediately delete personal data (for example in terms of auditing and taxation related legislation). We will in any such case cease the processing being done for any other reasons than to adhere to the legislation of GDPR.
12.6 You have the right to object to any processing of personal data that is carried out on a lawful basis of weighing of interests. If you object to such processing we will only continue the processing if there are legitimate reasons for the processing that outweigh your interests.
12.7 If you do not want us to process your personal data for direct marketing, you always have the right to object to such processing. This is done either by unregistering in each specific email or by sending us an email at firstname.lastname@example.org When we have received your objection we will cease the processing of personal data for any such marketing. You also have the right to report our processing of your personal data to any public authority responsible for monitoring the application of the GDPR, for example The Swedish Data Protection Authority in Sweden. However, we do recommend that you contact us first so that we can try solving the matter in a more efficient and timely manner.
14. Changes to this policy
WeAreCube AB (company reg. no. 556925-4104) is the Data Controller for the processing of your personal data. If you would like to have additional information on how your personal data is handled, please contact us through a written and personally signed request sent to:
Birger Jarlsgatan 9
111 45 Stockholm
In the letter, please include your name, address, email, telephone number and personal ID number. Please also enclose a copy of your ID. A reply will be sent to your address as stated in the National Population Register.