Privacy policy
1 Background and purpose
1.1
KanslietOnline AB, org. no. 559340-4188AB, is the personal data sub controller for the processing of your personal data to your membership club using WeUnite member system and the related app. This policy states how we collect, use,disclose and store your personal data, how you as a user have control over your personal data, how you can get in touch with us and how we otherwise ensure that your personal data is processed in accordance current legislation.
2 Personal data and access
2.1
Which information do we collect?
2.1.1
To be able to use the system and app you are required to create a personal member account on your clubs WeUnite website (“platform”) and consent to the clubs specific member and user terms and conditions.
2.1.2
Most of the personal data that we process about you is collected in connection with your usage of the WeUnite Club website (“Platform”) and member app, clicking on links in digital communications, being in contact with other users, your club or our customer service, and when you by other means have contact with us and provide information about you. In some cases, we can supplement the personal data provided by you with information from another (third party) in order to evaluate and improve the platform and for marketing purposes.
2.1.3
WeUnite Club will only process personal data on behalf of your club and according to their legal basis to do so as according to “medlems- och användarvillkor” agreed upon by yourself. Below are a number of examples of personal data that we collect and need to process about you. We collect information you provide, that is automatically collected and information from others. More detail about each category is provided below.
2.2
Information you provide
Profile information. We collect information that you provide when you set up your member account with your club, such as your date of birth (social security number), username, email address and/or telephone number, and password.
User content. On behalf of your club we collect the content you create or publish through the Platform, including photographs, videos, audio recordings, and comments, and the associated metadata. We collect such content at the time of creation, import, or upload, regardless of whether you choose to save or upload. We also collect content (such as text, images, and video) from your device’s clipboard if you choose to copy and paste content to or from the Platform or share content between the Platform and a third party platform.
Messages. When your club or you communicate with others using direct messages, we collect the content of the message and the associated metadata. Correspondence and other information for support cases or other contacts such as calls, notes and emails when contacting customer service, including chat and messages via social media.
Order information. If you purchase any service or product from your club we collect information such as order number, ordered products, order date, price, any discount, purchase history and billing and delivery address.
2.3
Automatically collected information
Technical information. For example, IP address, device information (technical information about computer, mobile phone and other devices that you use, e.g., browser settings, time zone, operating system), location information, click and visit history which, among other things, shows which of your clubs services, goods or offers you have been interested in.
Usage Information. We collect information about how you engage with the Platform, including information about the content you view, how long and how often you use our Platform, how you engage with other users, your search history on the Platform, and your settings.
Inferred Information. We infer your attributes (such as age-range and gender) and interests based on the information we have about you in order for us to keep our Platform safe, for content moderation.
Cookies. We use cookies and similar tracking technologies to operate and provide our Platform. For example, we use cookies to remember your language preferences.
3 Why do we process personal data
3.1
We collect and processes data about you, primarily on behalf of your club for various purposes, which are the outer frameworks for what we may use your personal data for. Note that some of your personal data may be processed for several purposes.
Processing is required to administer and develop the Platform, such as enabling you to create, share, and consume content and to interact with other users. Processing for this purpose includes activities to, among other things, confirm your identity and verify your personal and contact details.
We may process personal data to provide customized information, benefits and offers from your club as well as provide a personalized experience. The processing is then done so that we can provide you with a personally adapted experience, to create, offer and provide you with customized content in communication and marketing, to send general offers and direct marketing through various channels, for example via post, e-mail, SMS/mms and phone, as well as reminding about abandoned digital shopping carts.
Maintain and enhance the safety, security, and stability of our Platform by identifying and addressing technical or security issues or problems (such as technical bugs, spam accounts, and detecting abuse, fraud, and illegal activity).
Review, improve, and develop our Platform, including by monitoring interactions and usage across your devices, analyzing how people are using our Platform, and informing our algorithms.
In some cases, processing of personal data is required to e.g., investigate complaints, handle support cases, answer questions that come in to customer service or via our support functions (for example through e-mail, telephone, digital channels), ensure your identity, to correct incorrect information, provide support and nurture the customer relationship.
In order for us to be able to fulfill legal obligations, we need to process personal data where applicable on behalf of your club as well as ourselves.
4 Legal basis for processing personal data
4.1
For the right to collect and process your personal data, there must be a legal basis for each purpose for which the data is processed. The legal grounds on which we base the processing are set out below. Note that several legal grounds may apply for the same processing.
4.2
Contractual basis
4.2.1
The processing of personal data is necessary to fulfill an agreement with you as a member of your club. We use your information to provide your club and yourself with our Platform. This includes using your information so you can create, share, and consume content, and interact with your club and other members. It also includes using your information to provide you with products and services you purchase and partake in through the Platform. We also personalize your experience on the Platform. We use your information to enforce your clubs terms, guidelines and policies.
4.3
Legitimate interests
4.3.1 We use your information where this is necessary to achieve legitimate interests whether belonging to your club, you, or us as an intermediate third party – provided these interests are not outweighed by your interests or fundamental rights and freedoms. Whenever we use your information on the basis that it is necessary for legitimate interests, you can object to, and request restriction of, such usage.
4.4
Consent
4.4.1 This basis means that we process your personal data as a result of your explicit consent to the processing. By, for example, accepting the terms of use, using the Platform, making a post, contacting your club or us, or by ticking a checkbox on our Platform, we obtain your consent to process personal data. Under the terms and conditions as set up by your club, you have the right to withdraw your consent by contacting your club directly. The withdrawal of consent shall not affect the legality of processing based on consent before it was withdrawn.
4.5
Legal obligation
4.5.1 This basis means that our processing is necessary to fulfill a legal obligation, for example in order to fulfill the requirements of the Accounting Act, fulfill legal obligations regarding product liability and consumer legislation as well as any other legal obligations in connection with your club membership.
5 Security
5.1
We take the necessary technical and organizational security measures to ensure that your personal data is not manipulated, lost or destroyed or accessed by unauthorized persons. Our security procedures change as technology develops and improves. Regarding the websites, WeUnite Club always has an SSL certificate (Secure Socket Layer) which ensures that your personal data is transmitted in a secure and confidential manner by encrypting the information. Furthermore, the Platform has taken appropriate security measures to prevent personal data stored from being lost or used in an inappropriate or illegal way by us as a provider. Access to the personal data collected is limited to authorized persons and the information will be treated confidentially.
5.2
We will primarily handle your personal data within the EU/EEA. But we may also transfer your personal data to a country outside the EU/EEA if we need to share your data with suppliers or partners who are either located outside, or who store personal data in, a country outside the EU/EEA. If your personal data is transferred to a country outside the EU/EEA, we take the necessary measures to legally transfer the personal data. This means that we will ensure that your personal data is handled with an adequate level of protection that is comparable to the protection offered within the EU/EEA, for example by entering into an agreement with the recipient that includes the European Commission’s standard contractual clauses or, if the transfer takes place to the USA, by the recipient certified to follow the principles of so-called Privacy Shield.
6 Storage
6.1
We save your personal data for as long as is necessary to fulfill the purposes for which the data is processed. The storage period can thus vary depending on the purpose for which the data is processed e.g. legal obligation on behalf of your club or authorities. We regularly perform thinning and remove personal data that is no longer necessary.
7 Disclosure of personal data
7.1
We do not disclose your information to other companies for any commercial purposes. The recipients of your personal data can either be personal data assistants or independent personal data controllers, i.e., companies that are independently responsible for the processing of your data as they have a direct relationship with your club or you as a member, such as online payment services, national associations etc .
7.2
We may also disclose limited information, such as age, gender, location, order details and user-generated data, to partners for the purpose of analysis and case management.
7.3
If you have completed a purchase from your club, we may disclose your personal data to other recipients for processing your order based on our contractual obligations towards you as a legal basis. The foregoing applies to logistics companies and freight forwarders who carry out goods transport so that your club can deliver their products and services to you. We only give out contact details and order information to these recipients.
7.4
We may also disclose your personal data to the extent that we are obliged to do so by law or other constitution or in order for us to be able to establish, defend or enforce legal claims.
8 Your rights
8.1
When we process personal data about you, you have several rights according to the data protection regulation. You have the right to contact us at any time regarding these, and if you wish to exercise any of the rights described below, the easiest way to contact us is at support@WeUnite Club.com.
8.2
Access to personal data
8.2.1 You have the right to know which personal data we process about you. If you want to know, you can get a compiled register extract that contains the personal data your club and we process about you. Note that in the event of a request for access, your club may need additional information about you to ensure that they provide the information to the right person and which information you want to access.
8.3
Amendment
8.3.1 If the information we have about you is incorrect, you have the right to request that it be corrected by your club. You also have the right to supplement any incomplete personal data, e.g., name or address.
8.4
Deletion (”the right to be forgotten”)
8.4.1 You have the right to request that your club delete your personal data when the data has been processed unlawfully, must be deleted to fulfill a legal obligation to which they or we are subject, is no longer necessary for the purposes for which it has been processed or when you object to a balance of interests of legitimate interest that your club have done and there is no legitimate interest for them or us as a third party that weighs more heavily , or if you revoke given consent. It should be noted that your club or we cannot always comply with a request as there may be reasons that give us the obligation or right to continue processing, e.g., if the personal data is processed to fulfill a legal obligation as a legal basis or if the data is necessary for us to establish, enforce or defend legal claims.
8.5
Data portability
8.5.1 In certain circumstances, you have the right to receive the data we process about you in a general, written, machine-readable and structured format. You have the right to this regarding the personal data that you yourself have provided to us and that we process based on your consent or when the personal data is required to enter into or complete an agreement with you. You are able to download this information yourself anytime in your member account at your club website.
8.6
Limitation of treatment
8.6.1 Under certain conditions, you have the right to request that your club limit their and our processing of your data. This means that they mark the data so that in the future we only process it for certain special purposes.
8.7
Right to object
8.7.1 You have the right to object to the processing of personal data carried out for the purpose of carrying out a task of public interest, as part of the exercise of authority or after a balancing of interests.
8.8
Right to file a complaint
8.9 You have the right to lodge a complaint with the Data Inspection Authority if you believe that your club process your personal data in an incorrect manner. You can read more about this on The Swedish Authority for Privacy Protection (IMY) website www.imy.se.
9 Miscellaneous
9.1
Personal data controller
9.1.1 WeUnite Club is the personal data sub controller for the personal data we process about you on behalf of your member organization.
9.2
Policy Updates
9.2.1 The most recently updated version of our privacy policy is always available on the Platform. Our privacy policy applies at all times in the form and to the content published on our Platform including our website.
9.3
Contact
9.3.1 For questions regarding this policy or the club website in general, primarily contact your club responsible of your account directly and secondarily contact us at info@weunite.club alternatively by regular mail to: KanslietOnline AB, Enhagsslingan 6, 187 40 Täby, Sweden.
9.3.2 For other questions, you can reach us most easily at support@weunite.club.
10 More on cookies
10.1 Our website uses cookies and similar tracking technologies (hereinafter ”cookies”) to improve your experience with us. We use cookies to simplify and adapt our services and our communication. Below, it is explained in more detail how we use cookies and which choices you can make regarding them.
10.1 Cookies are small text files with information that are stored on your computer, mobile, tablet or other device. Some cookies are necessary for the website to function effectively, while others are used to improve your experience and facilitate your ability to navigate the website. There are different types of cookies. We use so-called session cookies, which are cookies that are temporarily stored on the device you use to visit our website. Session cookies disappear when you as a visitor close your browser. No personal information, e.g., e-mail or name, saved about the visitor.
10.3 Your club website may themselves may use third party analysis tools to get a picture of how visitors use the website. We may use our own internal analysis tools for the sole purpose of traffic load and user experience tracking and enhancement.
10.4 We do not use any third-party cookies which are set for marketing purposes.
10.5 Your browser or device allows you to change the settings for the use and scope of cookies. Go to your browser settings or device settings to learn more about adjusting cookie settings. For example, you can choose to block all cookies, to only accept first-party cookies (cookies placed by the website you visit) or to delete cookies when you close your browser. Please note that some of our services may not function properly if you block or delete cookies.