Privacy Policy

Date: 2022-11-11 This policy describes your right to privacy and Basetool AB's commitment to protect your personal data. Basetool AB is a Swedish company with headquarters in Gothenburg that provides software and services to private and public companies and organizations in both Sweden and Europe. We therefore follow both Swedish and European standards data protection legislation.

What does the Policy cover?

This Policy applies to Basetool AB's Services Destinero and Basetool and its peripheral products. The policy also applies to Basetool AB's consulting and support services.

What is personal data and what is processing of personal data?

Personal data is any kind of information that directly or indirectly can refers to a physical person who is alive. Encrypted data and different kinds of electronic identities (eg IP numbers) are personal data if they can be linked to a persons.

Processing of personal data is everything that happens with the personal data. Any action taken with personal data constitutes processing, regardless of whether it is performed automatically or not. Examples of common treatments are collection, registration, organization, structuring, storage, processing, transmission and deletion.

Who is responsible for the personal data we collect?

Basetool AB, business number 556721-4175, address Lindholmspiren 7, S-417 56 Göteborg, Sweden is the party responsible for personal data.

What personal data do we process and for what purpose?

The overall purpose for processing your personal data is for Basetool AB to be able to provide the software, functions and services that our customers order (hereinafter referred to as "Services") in the manner expected.

* Only the personal data you yourself have chosen to write

How do we handle social security numbers?

We only handle social security numbers in cases where it is also used as an organization number for an individual company.

When does Basetool AB collect personal data for processing?

Basetool AB receives and processes personal data when:

• you visit our website and accept cookies.
• you contact Basetool AB or one of Basetool AB's employees via any communication tool such as phone, email, letter etc.
• one of Basetool AB's employees receives your business card or similar, physically or digitally, with the intention of establishing a commercial relationship or ordering a Service.
• you or your company or your organization order a Service.
• you register as a user in one of Basetool AB's Services and agree to its terms of use.
• you use any of the Services and thereby change or add information about yourself.
• another user in Basetool invites you to register a user account in any of the Services.
• you submit information about events you arrange.
• you use Basetool's booking and payment functions.
• as a personal data processor, we receive your personal data from your employer (our customer).
• you register for Basetool AB's trainings and events.

Where do we process your personal data?

Your personal data may appear in the following Basetool AB's systems (servers, databases and employees' electronic work equipment):

• In Basetool and Destinero Services and their functions
• Customer register (CRM)
• Supplier Register
• Email and calendars
• Support and Case Management
• Electronic business documents
• Project Planning Tool
• Financial system
• Internal communication (chat)

In addition to these systems, printouts of personal data are only processed if it is a prerequisite for fulfilling our delivery of Services or as a result of legal obligations in accordance with applicable legislation.

What are cookies and how do we use them?

Basetool AB's website and Services use so-called Cookies. Cookies are a small text file that is placed on the computer or phone by a web server and acts as an ID card. Cookies enable the Services to remember important information that simplifies your work and experience of the Services. Like most other websites, Basetool AB uses cookies with the following overall purposes:

• You have logged in to one of the Services and do not have to log in to each new page you visit.
• Help you keep track of which pages you have as favorites.
• Help you keep track of bookings you want to make or have made.
• Customize our Services according to the settings and preferences you specified in your browser.
• Count the number of users and traffic. By understanding how the Services are used, we can develop and improve them.
• Customize our services so that information you receive from Basetool AB is relevant to you.
• Collect and analyze behavioral data based on use of the Services, to improve the user experience and also enable personalized communication and messages to the user.

There are two types of Cookies and Basetool AB's Services use both. One type, called a Permanent Cookie, saves a file that remains on the visitor's computer or phone indefinitely. It is used, for example, to be able to adapt a website to the visitor's wishes, choices and interests, as well as for statistical monitoring. The second type is called Session Cookie. During the time a visitor is on Basetool AB's website or uses a Service, it is temporarily stored in the memory of the visitor's computer or phone. Session Cookies disappear when you close your browser.

The services also use third-party cookies for, among other things, Google Analytics and to include content from other services, e.g. Facebook and Instagram. The purpose is partly to understand how our Services are used and to be able to improve them, as well as to be able to include additional relevant content from third-party services.

Can you control the use of cookies yourself?

You can use browser settings or other software to prevent cookies from being stored on your computer or phone. If you do, Basetool AB cannot guarantee that the Services we provide work correctly or according to our terms of delivery.

How is your personal data protected?

Basetool AB undertakes to prevent unauthorized access, dissemination and other improper processing of personal data. Basetool AB must ensure the confidentiality of the personal data that we process, preserve the integrity of the personal data and ensure the accessibility of the personal data in accordance with the applicable data protection legislation.

As part of our commitments, we apply reasonable and appropriate organizational, technical and physical procedures and measures to protect the information that we collect and process, taking into account the type of personal data and the risk that you and our customers face in the event of a possible breach.

• All data communication takes place with Secure Sockets Layer (SSL).
• To gain access to the Services, login with username and password is required.
• The services apply password protection in the form that the login procedure is completely encrypted. The user's password is stored encrypted and cannot be read by anyone other than the user himself.
• There is continuous verification of users. Each call to the Services involves a check of the logged-in's authorization.
• Basetool AB's Services are operated on internal servers and modern cloud services with redundancy in several levels.
• All servers and cloud services are protected by firewalls.
• Basetool AB continuously monitors both firewalls and system logs.
• Basetool AB has comprehensive backup routines that ensure the continuity of the Services.
• Only a few key people at Basetool AB know how the security system is structured.
• All Basetool AB's personnel are bound by a confidentiality agreement that prevents the dissemination of data, information, and the customer's or user's personal data.

How long do we store your personal data?

Basetool AB only stores your personal data as long as necessary for the specified purpose, taking into account that we must be able to answer questions and solve problems and fulfill legal obligations in accordance with applicable legislation, so-called balancing of interests.

This means that Basetool AB may save your personal data for a reasonable period of time after your last login to the Services or the last contact between you or our customer and us. When we no longer need the personal data we have collected, we delete it. We may process personal data for statistical purposes, but then the data will be pseudonymised or de-identified.

Who can we share your personal data with?

To deliver our Services, Basetool AB uses several cloud services provided by companies and organizations within and outside the EU/EEA to store personal data. Basetool AB sometimes hires consultants who process personal data. We have confidentiality and personal data processing agreements with all such personal data processors.

In order for Basetool to function as a Service, personal data is shared between users in Basetool.

What rights do you have as a registered user?

As a customer of Basetool AB or a user of the Services, you have the right to request a register extract of what information is registered about you free of charge once a year, provided you have legitimate reasons. In some cases, you also have the right to data portability of the personal data. You have the right to have your personal data corrected if it is incorrect, incomplete or misleading and the right to restrict the processing of personal data until it is changed. You have the right to be forgotten, but deletion of personal data cannot take place if it is required to fulfill the agreement or if another Swedish or European law, court or authority decision says otherwise, and if it is based on balancing of interests. Should you think that there are no justified reasons or that the balancing of interests is incorrect, you have the right to object to the processing. You also have the right to withdraw consent, submit complaints about the processing to the Data Protection Authority, oppose automatic decision-making, profiling and object to direct marketing.

When will this privacy policy be updated?

Basetool AB updates the privacy policy on an ongoing basis. When this happens, it is published and available at www.basetool.com and www.destinero.com.

What is the easiest way to contact us with questions about data protection?

If you have questions about this policy and the processing of your personal data, want to delete or change incorrect data, you can contact us by sending an e-mail to support@basetool.se or calling our support on +46 (31) 788 15 20.