Trackado is committed to maintain robust privacy protections for its users of our website www.trackado.com, other related subdomains and any domain as we would instruct. This Privacy Notice is designed to help you understand how we collect, process and share your personal data, in accordance with Data Protection Laws.

Trackado AB is committed to protect your privacy and complies with EU Data Privacy Laws, including the General Data Protection Regulation (GDPR). This Privacy Notice is designed to help you understand how we collect, use, store and share your personal data when you use our webpage and our services, and your rights. 

Definitions and terminology

For purposes of this Privacy Notice, “we”, “us”, and “our” refer to Trackado. “You” refers to you, as a customer, user or subscriber of the services provided by us.

The term “Website” means the website www.trackado.com, other related subdomains or any such domain that we would instruct.

“Service” means, Trackado’s software-as-a-service solution for contract management, including the web application, the API, associated support services, etc. as described on the Website and the applicable order form.

“Personal Data” means any information relating to an identified or identifiable natural person.

“Data Protection Laws” refer to the applicable data protection laws, which in the EU is the General Data Protection Regulation (“GDPR”). 

Responsibility for processing Personal Data

Trackado AB, org. no. 559045-8948, with address Råsta Strandväg 13C, 169 79 Solna, Sweden is responsible for the processing of the Personal Data and is data controller in the sense of GDPR for the activities of marketing, delivering our website, protecting our systems and website, and follow up on new customers communications with us as set out below. Note that we deliver our contract management Service in the role as data processor to you where we process your content according to your instructions. 

We Collect the following categories of Personal Data

Purpose and Legal Bases for our Processing 

When you visit our Website or Service we will collect information your browser sends to us. This may include the name of your internet service provider, the website from which you visited us from, the parts of our Website or Service you visit, the date and duration of your visit, and information from the device (device type, operating system, screen resolution, language, country you are in, and web browser type) you used during your visit. 

We process your Personal Data in accordance with article 6 of the GDPR and for the following purposes and legal basis:

•  Provide the Services: To fulfill the agreement with you regarding the use of our Services, including managing you user account and support, we may need to process your name, e-mail address, contact information, account information and payment information.
  We use a third-party payment supplier that processes your transactions and act as independent personal data controller. For more information, see section “Access and disclosure to third parties” in this notice.
  Legal basis: We will process this personal data only to the degree it is necessary for us to fulfill our contractual obligation to you (article 6.1(b) of the GDPR).
• Customer support and Communication: For us to provide customer support, process customer inquiries and communicate with you, we may need process personal data such as name, e-mail address, and the messages and information you send us.
  Legal basis: We will process this personal data only to the degree it is necessary for us to fulfill our contractual obligation to use, article 6.1(b)of the GDPR and to the degree it is necessary for us to fulfill our legal obligations in accordance with relevant Consumer Laws (article 6.1(c) of the GDPR).
  We may also need to process this personal data to the degree necessary for us to fulfill our legitimate interest to provide you with a good customer experience and develop our customer services (article 6.1(f) of the GDPR).
• Analytics and Improvement of our Services: In order for us to provide you with good and updates services and websites that fit your needs and expectations, we may need to process personal data such as device information, IP-address, and user data (web navigation and visited pages).
  Legal basis: We will process this personal data only to the degree it is necessary for us to fulfill our legitimate interest to develop end improve our website and our services (article 6.1(f) of the GDPR).
• Security and Fraud Prevention: To protect your personal data and our systems against unauthorized access and fraud, we may need to process personal data such as IP-address, device information, and login information.
  Legal basis: We will process this personal data only to the degree it is necessary for us to fulfill our legitimate interest to improve our safety measures, (article 6.1(f) of the GDPR) and for us to fulfill our legal obligations to protect your personal data (article 6.1(c) of the GDPR).
• Compliance with legal obligations: For us to fulfill our legal obligations according to national laws, such as bookkeeping, tax reports and other national agency requirements, we may need to process personal data such as name, contact information, payment information and contracts.
  Legal basis: We will process this personal data only to the degree it is necessary for us to fulfill our legal obligations (article 6.1(c) of the GDPR).
• Business Transactions (e.g., business mergers): In the event of a merger, acquisition, or sale of the business, we may need to transfer all types of personal data that we process to the third party acquiring our business. Any such party will be obligated to fulfill our obligations towards you and your privacy.
  Legal basis: We will process this personal data only to the degree it is necessary for us to fulfill our legitimate interest to conduct a successful business transaction and transfer of the process of your personal data (article 6.1(f) of the GDPR).

Cookies

Cookies are small pieces of information that are stored by your browser on your device. Trackado uses cookies to assure and enhance the use of certain functions and to provide you with a better experience on our Website and Service.

You may deactivate or restrict the transmission of cookies by changing the settings of your web browser. Cookies that are already stored may be deleted at any time. Should you visit our Website with cookies deactivated, you may possibly not be able to use all of the functions on our Website and Service to the full extent. 

On our Website and Service, you can contact us, for example via email, a chat function or contact forms. We will ask you for your contact information (e.g. name, email address etc.). We use this data solely in connection with answering the queries we receive.

If you receive emails from us, we may use certain analytics tools, to capture data such as when you open our email or click on any links or banners our email contains. This data helps us to gauge the effectiveness of our communications and marketing campaigns.

Trackado account

When you sign up for an account with Trackado we will ask you to provide us with information such as your name, email address and details about your organization. As otherwise detailed in this Privacy Notice, we will solely process this information to provide you with the Service you signed up for. Please refer to our Terms & Conditions of Use for further details on registering and using the Service.

If you sign up for a free trial, you are not required to enter your credit card information unless and until you decide to continue with a paid subscription. We are using third-party providers manage the credit card processing and we never receive or store your full credit card information.

You can sign in to your account using Single Sign-on (SSO) services like your Google or Microsoft account. You can also connect to their cloud storage from within our Service. When using this functionality, these services will authenticate your identity and provide you with the option to share certain personal information with us such as your name and email address. We solely use this information to verify and configure your account.

Embedded content from other websites

Our Website may include embedded content (e.g. videos, images, articles, etc.) from other websites. Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Access and disclosure to third parties

We use a select number of trusted external service providers for certain technical data analysis, management of your subscription, processing and/or storage offerings. These service providers are carefully selected and meet high data protection and security standards. We only share information with them to the degree necessary for the services offered and we contractually bind them to keep any information we share with them as confidential and to process Personal Data only according to our instructions and in accordance with applicable laws.

We use Stripe Payments Europe Ltd. (Stripe) as our payment service provider. We will collect the necessary information to complete a purchase from you and on your instructions share it with Stripe. The personal data shared with Stripe include name, email-address and information about your order. Our legal basis for collection of your personal data is the necessity to processes payment for your purchase and thus necessary for the performance of our contract with you. 

Stripe is an independent controller regarding the processing of your personal data to process payments. For complete terms and more information about their processing, please visit the Stripe Privacy Policy.

We use Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies. We use this information to determine the popularity of products and services, for site optimization as well as fraud/security purposes. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, you will be notified via email and/or a prominent notice on our Website of any change in ownership or uses of your personal information, as well as any choices you may have regarding your personal information.

If we are inquired to share your personal data with public authorities or national courts, we will only do so if required by law.

We will never sell your data. If not explicitly mentioned above will only pass your data on to third parties without your express consent if we are obliged to do so by statutory law or an instruction by a public authority or court.

We want to communicate with you

We may occasionally send you notification emails about updates to our product, legal documents, offer customer support or marketing emails. Except for cases where we are required to do so by law (e.g. notifying you of a data breach), you shall have the opportunity to unsubscribe from receiving these messages free of charge.

Retention

We will retain you personal data only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal obligations, resolve disputes, and enforce agreements. 

The retention period depends on the nature of the data and the processing activity. Upon expiration of the retention period, your data will either be securely deleted or anonymized. 

Your data, your rights

Trackado follows relevant Data Protection Laws within the European Union, which in relevant cases includes the following rights:

• Right to be informed: You have the right to be informed about how your personal data is collected used and processed.
• Right of access: You have the right to request access to a register of your personal data that we are processing, and you have the right to request information about the processing and access to a copy of your personal data.
• Right to rectification: You have the right to request that we correct any personal data about you that are incorrect.
• Right to erasure: Otherwise known as the right to be forgotten, you have under certain circumstances the right to request that we erase your personal data, e.g., if the personal data is no longer necessary for the purpose which they were originally collected for.
• Right to restrict processing: You have under certain circumstances the right to request that we limit the processing of your personal data, e.g. if the personal data is no longer necessary for the purpose which they were originally collected for but needed for protection against legal claims.
• Right to data portability: You have the right to data portability, which is the right to request us to provide your personal data to another organization accountable for the processing. This is possible where our processing of your personal data is based on your consent or the performance of an agreement with you and when the processing is carried out by automated means.
• Right to object: you have the right to object to data processing that are based on legitimate interest or necessary for a common interest. We can continue to process your personal data in the cases where we can provide a necessary interest for the continued processing.
• Right related to automated decision-making and profiling: You have the right to object to automated decisions with significant effects.
• Right to withdraw consent: You have the right to withdraw your consent from processing at any time, when the processing of your personal data is based on consent.
• Right to lodge a complaint: You have the right to lodge a complaint about how we process your personal data. These complaints can be made to a supervisory authority if you feel that your rights are infringed. In Sweden, the correct supervisory authority is Integritetsskyddsyndigheten, IMY.

You have a right to be informed of Personal Data processed by Trackado, a right to rectification/correction, erasure and restriction of processing. You also have the right to receive from us a structured, common and machine-readable format of Personal Data you provided to us.

If we are to process your personal data in a manner and/or for a purpose not the one it was originally collected for, we will, prior to the processing, inform you of that other purpose and of any other information relevant to the processing.

We can only identify you via your email address and we can only adhere to your request and provide information if we have Personal Data about you through you having made contact with us directly, and/or you by using our Website and/or Service.

To exercise any of the rights mentioned in this Privacy Notice and/or in the event of questions or comments relating to the use of Personal Data you may contact our support team: [email protected].

Where you have provided consent, you may withdraw it at any time, without affecting the lawfulness of the processing that was carried out prior to withdrawing it. Whenever you withdraw consent, you acknowledge and accept that this may have a negative influence on the quality of the Website and/or Service. You further agree that Trackado shall not be held liable with respect to any loss and/or damage to your Personal Data if you choose to withdraw consent.

Where Personal Data is processed for the above purposes on the basis of Trackado’s legitimate interests, under the GDPR, you may object to such processing at any time, and we may restrict our use of your personal data if there are objective grounds for a restriction. To do so please contact: [email protected].

Trackado falls under the authority of Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY). For any inquiries or complaints, please contact the Swedish Authority for Privacy Protection directly using the following contact details: [email protected], Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm, Sweden.

How we protect information

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password, and we urge you to use a strong password, to change the personal passwords at regular intervals and to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use.

We have implemented certain technological security measures including firewalls, secure socket layer technology and file encryption. When using our Service, we protect all communication between your browser and our servers by HTTPS/SSL and all uploaded files to our Service are encrypted.

These measures reduce the risk for unauthorized access, use, disclosure and destruction of your information. However, they do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

International transfers of information

Your Personal data may be processed, stored, and used outside of the country in which you are located in. Our Website and Service are hosted within the EU, but your Personal data may be processed, stored, and used outside of the EU by one of our external service providers. In some cases, personal data will be transferred to companies outside the EU/EEA. Any such data transfer will be kept to a minimum relevant for the purpose. When your data is transferred to a third country, Trackado will take appropriate measures to make sure the security level is the same as in EU/EEA and at an adequate security level. Those safeguards can for example be using the EU Commission’s Standard Contractual Clauses, binding corporate rules or other supplementary measures.

Changes to our Privacy Notice

We reserve the right to change this Privacy Notice from time to time. The most current version of this Privacy Notice can always be found on our Website. You should periodically check the Website and this privacy page for updates.

If you have an account with us, we will notify you of significant changes to our Privacy Notice by sending a notice to the email address associated with your account and/or by written notice within our Service.

All changes or modifications automatically take effect on the sooner of the day You use the Website and/or Service, or 30 calendar days after they are initially published on the Website.

By continuing to access our Website and Service, after those changes become effective, you agree to be bound by the revised Privacy Notice.

Contact us

If you have any questions regarding this Privacy Notice or the practices of this Website and Service, please contact us.

Trackado AB
Råsta Strandväg 13C
169 79  Solna
Sweden
Email: support[at]trackado[dot]com