Privacy policy
Version 1.0 — April 24th, 2024
Cevoid AB Reg. No. (559238-6519) ("Cevoid", "we", "us", "our") is the Controller of all Personal Data Processing activities described in this Privacy Statement, email: info@cevoid.com. This Privacy Statement provides information on how we handle Personal Data when you communicate with us, use the Services or visit our website cevoid.com.
Definitions
"Applicable Law" refers to the legislation applicable to the Processing of your Personal Data, including the GDPR, supplementary national legislation, as well as practices, guidelines and recommendations issued by a national or EU supervisory authority.
"Controller" is the company/organization that decides for what purposes and in what way Personal Data is to be Processed and is responsible for the Processing of such Personal Data in accordance with Applicable Law.
"Data Subject" is the living, natural person whose Personal Data is being Processed.
"Personal Data" is all information relating, directly or indirectly, to an identifiable natural person.
"Processing" means any operation or set of operations which is performed on Personal Data, e.g., storage, modification, reading, handover and similar.
"Processor" is the company/organization that Processes Personal Data on behalf of the Controller and can therefore only Process the Personal Data according to the instructions of the Controller and the Applicable Law.
“Customer” is the company that uses our Services.
"The Services" refer to Cevoid's unified platform and digital services that empower Brands (Customers) to engage their brand community, facilitate content creation, and foster meaningful interactions. This platform seamlessly integrates features to collect, showcase, generate, and organize content from consumers, influencers, and other third-party contributors. Additionally, it allows Brands to launch engaging Missions, reward participants for completing them, and effectively manage their brand community.
“Visitor” is the individual who visits our website and in different ways interact with us.
Cevoid's role as a Controller
The information in this Privacy Statement covers Personal Data Processing for which Cevoid is the Controller. As a Controller we are responsible for the Processing for which we decide the purpose and the means for the Processing (what methods, what personal data and for how long it is stored). The Privacy Statement does not describe how we Process Personal Data in the role of a Processor – i.e., when we process Personal Data on behalf of another party such as a Customer. Data Subjects whose Personal Data is displayed through or otherwise processed via the Services are referred to the relevant Cevoid Customer (typically the owner of the showcased brand and/or the owner of the website using our Services) for further information on the Processing of their Personal Data.
Cevoid's Processing of your Personal Data
We will only Process your Personal Data for legitimate purposes and only keep your Personal Data as long as it is necessary for such purposes. In the list below, we indicate, where possible, the period during which the Personal Data will be processed, and the criteria used to determine the retention period.
For you who represent a Customer
1. Processing and purpose of Processing: Register user accounts to enable representatives of Customer to access and use their account with Cevoid, communicating with such users and carry out necessary activities for billing purposes.
Personal Data: E-mail, name, company name and billing information (where applicable if you are included as a billing reference).
Source: Directly from yourself or from the Customer which you represent.
Legal basis: Our legitimate interest to fulfill and administrate our contract with the Customer you represent and handle requests and inquiries.
Retention period: During active agreement between Cevoid and Customer and maximum twelve (12) months thereafter or for as long as necessary for Cevoid to fulfill its obligations in accordance with mandatory law e.g., the Swedish Bookkeeping Act (1999:1078). We will of course update and remove the relevant Personal Data if we are informed that you no longer represent the relevant Customer.
For Visitor (including job applicants)
2. Processing activities and purpose: Administrate and respond to any questions and/or inquiries sent to us by e-mail, contact form or via social media. Communicating with and administrating contact details for potential customers and others who have or may have an interest in the Services.
Personal data: Name, e-mail, and any other information included in your messages to us.
Source: Directly from you/the Data Subject.
Legal basis: Our legitimate interest to communicate with potential customers and assist individuals who contact us with questions and/or inquiries.
Retention period: As long as necessary to fulfill the purpose of the Processing, typically until we no longer have an open matter or active conversation with you.
3. Processing activities and purpose: Receiving job applications to review them and carry out our recruitment process.
Personal data: Name, e-mail, phone number, and any information the individual chooses to include in the CV/personal letter.
Source: Directly from you/the Data Subject.
Legal basis: Our legitimate interest to carry out necessary activities relating to a recruitment process.
Retention period: As long as necessary for the purpose it was collected (typically until we have terminated the relevant recruitment process). We may save applications for future job openings in which case we will ask for your consent before we save the application.
4. Processing activities and purpose: Administration and distribution of information related to the Services, newsletters, and Cevoid’s current and future offerings.
Personal data: Name, e-mail, phone number, and any information the individual chooses to share through forms.
Source: Directly from you/the Data Subject.
Legal basis: Our legitimate interest to provide the Data Subject with the requested early access treatment and provide information regarding our services to those who are interested.
Retention period: As long as you have an active subscription to receive newsletters and other information from Cevoid. We only send marketing emails after receiving your consent (such as when you register yourself to a waitlist or a contact form) and you always have the right to withdraw said consent at any time.
Your rights
Access - You have the right to obtain information on whether Cevoid is Processing your Personal Data, and if so, get access to such Personal Data by receiving a copy of the Personal Data from us, a so-called register extract. There is no charge for obtaining said register extract. For any additional copies you request, Cevoid may charge a reasonable fee to cover our administrative costs.
Rectification - If you find that the Personal Data we Process about you is incorrect, you have the right to have it rectified. If you are a representative of a Customer, you can update your contact information by logging into the Service and adjusting it there.
Erasure - You have the right to be forgotten and request deletion of your Personal Data when the Processing is no longer necessary for the purpose for which it was collected. If we are required to retain your information under applicable law or a contract that we have entered with you, we will ensure that it is Processed only for the specific purpose set forth in such applicable law or contract. We will thereafter erase the information as soon as possible.
Objections - If you disagree with our assessment that a legitimate interest for Processing your Personal Data overrides your interest in protecting your privacy, you have the right to object to such Processing activities.
Restriction - You can ask us to restrict our Processing of your Personal Data in the following cases:
● if the accuracy of your Personal Data is contested by you, we can restrict the Processing during the period which we verify the accuracy of the Personal Data;
● if the Processing of your Personal Data is unlawful you can, instead of requesting erasure, request us to limit the Processing of your Personal Data;
● in cases where we no longer need the information in relation to the purpose for which it was collected, but they are required by you for the establishment, exercise or defense of legal claims; or
● if you have objected to the Processing, we can restrict the Processing pending the verification whether our legitimate grounds override your interests, rights, and freedoms.
Data portability - You have the right to receive certain Personal Data about you in a structured, commonly used and machine-readable format, known as data portability. You have the right to transfer such data to another recipient, such as another service. If technically feasible, as determined by Cevoid, you also have the right to request that Cevoid transfer the data directly to the other recipient.
Withdraw consent - If you have given consent to one or several specific Processing(s) of your Personal Data, you have the right to withdraw your consent at any time and thus ask us to terminate the Processing immediately. Please note that you can only withdraw your consent for future processing of Personal Data and not for Processing that has already taken place.
Transfer of Personal Data
In order to run our business, we may need help from others who will Process Personal Data on our behalf, so-called Processors.
In cases where we might transfer your Personal Data outside the EU/EEA, we have ensured that the level of protection is adequate, and in compliance with Applicable Law, by controlling that either of the following requirements are fulfilled:
● the EU Commission has determined that the level of protection is adequate in the third country where the data is Processed;
● the Processor in question is certified under the EU-U.S. Data Privacy Framework;
● the Processor has signed up to the EU Commission's standard contract clauses (SCCs) for data transfer to non-EU/EEA countries; or
● the Processor has taken other appropriate safeguards prior to the transfer and that such safeguards comply with Applicable law.
We may also need to disclose your Personal Data to certain designated authorities in order to fulfill obligations under applicable law or legally binding judgements.
Data removal
● Companies using Cevoid can remove data directly from the platform.
● Companies using Cevoid can delete their workspace, including all data from the platform.
● Individuals that want their content to be removed can require the deletion of their content at https://upload.cevoid.com/data/remove or by sending us an email at info@cevoid.com with their email, name and social media handles.
Cookies
Cevoid uses cookies and similar tracking techniques to analyse the use of our website and related functions so that we can give you the best user experience. For more information on how we use cookies, see our Cookie Notice (https://cevoid.com/cookies).
How you can exercise your rights
You are welcome to contact us if you want to exercise your rights or if you have any questions about how we Process your Personal Data: info@cevoid.se.
If you wish to exercise any of your rights, we will inform you of the action we have taken in response to your request within one month. This period may be extended if necessary, in view of the complexity of the request or the number of requests received. Exercising your rights is free of charge unless your request is manifestly unfounded or unreasonable.
If you think that we are not Processing your Personal Data correctly, let us know. You are also entitled to submit your complaint to the Swedish Authority for Privacy Protection (IMY). More information about our obligations and your rights can be found at https://www.imy.se/.
Updates to this Privacy Statement
We will update this Privacy Statement when necessary – such as if we start Processing your Personal Data in a new way, because we want to make the information even clearer to you, or if it is necessary to do so in order to comply with Applicable Law.
If we make major changes, we will communicate this on our website or in some other way that makes you aware of the change, for example by sending you an email.