Who is the data controller?

Swing by AB, org. no. 559401-6676, is the data controller for the processing of your personal data as described in this privacy policy. Swing by AB is subsequently referred to as 'Swing by', 'we' or 'us'.

Which personal data do we process?

We process the information you provide to us, for example when you use our website or create a personal or shared account in our application 'Swingby.se' ('the Service') and during your subsequent use of the Service.

The personal data we process when you register for membership in the Service includes:

- first and last name
- date of birth
- email address
- username
- password
- purchase and payment information
- photos
- information about sexual life or sexual orientation

Information that the Service collects:

When you use our website or the Service, we also store information about how you use the website or the Service, i.e. your user behavior. The personal data that we process and that is related to your use of our website and the Service includes:

- information about your device such as operating system, web browser version, and IP address
- logins and logouts to and from the Service
- number of visits to the website or the Service
- settings
- behaviorally generated data such as chat messages to other users in the Service, and
- cookies.

Especially regarding information about sexual life or sexual orientation

We only process information about your sexual life or sexual orientation if you have expressly consented to this, and only for the purposes you have approved. You can always revoke your consent by informing Swing by that you no longer consent to the processing of information about your sexual life or sexual orientation (see our contact information below).

Why do we process your personal data?

It is a requirement for us to enter into a contract with you as a customer that you provide your personal data to us.
Below is a table indicating the purposes for which Swing by processes your personal data and the legal bases for Swing by's processing of your personal data.

With whom does Swing by share your personal data?

Swing by may disclose your personal data to our consultants, subcontractors, and partners as listed in the table below. When these process personal data as our subprocessor, we ensure through agreements that they may not process your personal data for any purpose other than providing us with the service they provide.

Where do we process your personal data?

Swing by always strives to ensure that your personal data is processed within the EU/EES, and all of Swing by's own IT systems are located within the EU/EES.

How long do we process your personal data?

As a starting point, we process your personal data for the duration of the contract and for a maximum of seven years thereafter. Some personal data may be stored for a longer period of time depending on the reason for processing the personal data. Personal data that is processed for the purpose of managing our finances and bookkeeping in accordance with law is stored for seven years. We may store your personal data for up to eleven years (or for the duration of the dispute) in order to establish, assert or defend legal claims. In order to establish, assert or defend environmental law claims, we may process your personal data for a longer period of time.

What are your rights?

Access
You have the right to know whether we process your personal data or not. If we process your personal data, you also have the right to receive a copy of the personal data and information about, among other things, which categories of personal data are being processed, the purposes of the processing, how long the personal data will be stored, who the personal data has been shared with and where the personal data has come from.
In some cases, however, we may refuse to disclose certain information, for example due to provisions in other legislation, if disclosure would be detrimental to others, or if you make unfounded or excessive requests (e.g. if you request access a number of times in a short period of time).

Correction
You have the right to have incorrect personal data concerning you corrected without undue delay. This also means that you have the right to supplement such personal data that is missing and is relevant in relation to the purpose of the processing of personal data.

Deletion
You have the right to request that we delete your personal data without undue delay. Under certain conditions, we are then obliged to delete your personal data in accordance with your request, for example if you have objected to our processing of your personal data (see below under 'Objections') and there are no overriding legitimate grounds for the processing.
However, the right to deletion is not absolute. Under certain conditions, we have the right to continue processing your personal data, for example to fulfill a legal obligation and in connection with legal claims.

Limitation of processing
You have the right to request that we limit the processing of your personal data. Under certain conditions, we are then obliged to limit the processing of your personal data, for example during the time that we verify the accuracy of your personal data after you have pointed out that it is incorrect, or while we assess whether our legitimate grounds for processing outweigh your legitimate grounds for objecting to the processing (see below under 'Objections').
If processing has been limited in accordance with the above, such personal data, with the exception of storage, may only be processed with your consent or for the purpose of establishing, exercising or defending legal claims or to protect the rights of another natural or legal person or for reasons of important public interest.

Data portability
You have the right to receive the personal data you provided us in a structured, commonly used, and machine-readable format, and have the right to transmit these data to another data controller (or directly from us to such other data controller, if technically feasible). This right applies if our processing of your personal data is automated and the legal basis for our processing is your consent or the performance of a contract between you and us.

Objections
You have the right to object at any time to our processing of your personal data based on balancing of interests as the legal basis for processing, including profiling based on such legal basis. After such an objection, we may no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing is for the purpose of legal claims.
You always have the right to object at any time to the use of your personal data for direct marketing. If you object, your personal data will no longer be processed for such purposes.

How to exercise your rights and more information
If you want to exercise your rights, you can contact us using any of the methods listed below under the heading 'Contact us if you have any questions'.
We have listed above what we consider to be the most important aspects of your rights, but it is difficult to simultaneously fully and easily convey all aspects of your rights and what they mean.
If you would like to read more about your rights, there is additional information on the Data Protection Authority's website, https://www.imy.se/ You also have the right to file a complaint with the Data Protection Authority if you have any comments on our treatment of your personal data.

Contact us if you have any questions

If you have any questions or comments on Swing by's handling of your personal data, do not hesitate to contact Swing by AB via email at info@swingby.se