Privacy policy

Confect's Privacy Policy helps you understand what personal data we collect and why we collect it, as well as how we handle, protect, store, transfer, and delete your personal data. Personal data is any kind of information that can be directly or indirectly linked to a living person, such as an email address, street address, or phone number.

What personal data does Confect process?


Personal data that Confect may process about you includes:

Basic personal data such as name, address, phone number, email, as well as information about users and web traffic like login ID, username, and IP address. Content you have uploaded or shared, such as photos, comments, articles, and video clips Information via job applications

For the purposes mentioned in the section "Why we process personal data," Confect does not process sensitive personal data about you.

How we collect your personal data In general

Confect collects personal data directly from you or other people connected to our customer. We also use cookies and other tracking technologies when you use Confect's websites and when you interact with us via email, to optimize your experience of us, our offering, and our websites. In some cases, we may also collect information about you from other sources. These sources may include data aggregation from third parties, marketing partners, public sources, or third-party social networks.

Why we process personal data

Confect's privacy policy applies when Confect and its subsidiaries process your personal data for various purposes when you interact with us, such as; Purchase and delivery

Manage customer orders, agreements, and payments Offer services directly to you, such as e-learning, webinars, and reports Provide offers of products and services to customers Create and manage accounts for users of our services

Support and improvement

Improve and develop the quality, functionality, and user experience of our products, services, and Confect's websites Offer customer support for our products and services Operate user forums to educate and enable interaction between users and Confect

Security

Detect, remedy, and prevent security threats and abuse, as well as perform maintenance and troubleshooting

Marketing

Manage and send marketing materials Create interest profiles to market relevant products and services

Recruitment

To manage recruitment processes and job applications Evaluate submitted documents, conduct interviews, and call references

Information on how personal data is processed in one of our many services is described in the respective data processing agreement for that service. In these cases, Confect acts as a data processor and processes the data on behalf of and according to instructions from the customer. For more information about this, please contact customer support for the specific service.

Legal Basis for Processing Your Personal Data
Confect processes personal data based on several legal grounds.

Agreement with You
We process your personal data based on a legally binding agreement with you, for example, when you apply for a job at Confect. Processing your personal data such as CV, application, and references is necessary for Confect to handle inquiries from job applicants before a contract is entered into.

Your Consent
Confect may process your personal data based on consent. You always have the option to withdraw your consent after it has been given.

Legitimate Interest
Confect has a legitimate interest when we process your personal data for security, support, and improvement, or when you act as a contact person for an existing or potential customer. Your personal data is processed from a business perspective in a way we believe does not conflict with your rights and freedoms as an individual.

Furthermore, Confect processes your personal data based on legitimate interest if you sign up for a webinar, download reports or other content from our websites, and when you use Confect's user forum. The legitimate interest is to provide you with accurate content, conduct webinars, market, and manage your inquiries. Read more about how Confect processes your personal data for marketing purposes based on legitimate interest and your rights when we process your personal data for such purposes under the "Marketing" section of this privacy policy.

How Your Personal Data is Shared

Within Confect

Since Confect consists of various subsidiaries, it is important for us to provide you with the best possible overall experience. To maintain an overview and have insight, Confect may share your personal data between companies within Confect.

Outside Confect
Confect may also share your personal data with external third parties in the following contexts:

Confect User Forum (Communities)
If you post, comment, or similar on Confect's user forum or other forums on any of Confect's websites, this information can be read and used by others who have access to these forums. Confect is not responsible for any of the information you provide on such forums or on Confect's websites.

Business Partners
Confect may share your personal data with our partners if it appears legitimate from a business perspective and in accordance with applicable data protection legislation.

Authorities
The police and other authorities may request access to personal data from Confect. In these cases, Confect will only provide the information if there is a court order to do so.

When Does Confect Use Subprocessors?
Confect uses subprocessors to process personal data. These are usually cloud service providers or other IT providers.

When Confect uses subprocessors, Confect enters into data processing agreements (DPA) with them to protect your privacy. If subprocessors are located outside the EU/EEA, Confect ensures legal grounds for international transfers on your behalf by using EU standard contractual clauses (EU SCC).

You can always request an overview and more detailed information about Confect's subprocessors. How to contact Confect is found at the bottom of this document.

How Long Are Your Personal Data Stored?
Confect stores your personal data only as long as required to fulfill our contractual obligations. When we process your personal data on other legal grounds, such as legitimate interest, the information is stored as long as necessary to fulfill the purpose of the processing. Consequently, your personal data may be subject to different storage policies based on the type of data and the purpose of collecting them. Below are some examples:

In recruitment, Confect will delete your personal data such as CV, application, and other documents when the recruitment process is completed, usually a maximum of 6 months after the last application date unless otherwise agreed with you.
Another example is contact information stored for marketing purposes, including leads or potential customers. These personal data will be deleted no later than 24 months after the last recorded activity.

For further information regarding deletion, feel free to contact Confect (contact information is in the last section of this document).

Your Rights

As a registered user, you can invoke the following rights concerning Confect's processing of your personal data:

• Right to Access. You have the right to request a copy of the personal data we process about you.
• Right to Rectification. You also have the right to request that Confect corrects any inaccurate personal data concerning you.
• Right to Erasure. You can request that Confect deletes your data. Right to Restriction (of processing). You can ask us to limit the processing of your personal data.
• Right to Data Portability. You can request that we provide you or others with your personal data in a structured, commonly used, and machine-readable format.
• Right to Object. You have the right to object to our processing of your personal data based on legitimate interest or for direct marketing purposes.
• You also have the right to object to our processing of your personal data for tasks carried out in the public interest or in the exercise of official authority or based on legitimate interests.

Please note that there may be certain exceptions or limitations to the aforementioned rights that may apply depending on the specific circumstances of your situation. In such cases, we will provide you with detailed information about the applicable exception or limitation and assist you in exercising your rights to the fullest extent possible, in accordance with applicable laws and regulations.

Marketing and Profiling

The Legitimate Interest

When you interact with Confect, for example, by visiting Confect's websites, downloading content, participating in webinars, and as part of using Confect services, Confect will process your personal data based on a legitimate interest. One of Confect's legitimate interests is to process personal data for direct marketing.

Confect uses your personal data to provide relevant content to you through direct marketing on social media platforms and email, websites, or in a Confect service, based on your preferences. The personal data we process are aggregated data about you, such as IP address, interests (where you have clicked, etc.), username, and device. This is done, for example, through cookies and is called profiling. Confect will also have the opportunity to combine this information with information about the customer relationship we may have with your company.

The purpose of profiling is to deliver customized marketing to you, improve your user experience of our services/websites, and provide products that our customers are satisfied with. Confect's services are generally used as tools for work-related purposes, and your behavior in these tools says little about your private life. No sensitive data is processed. Your personal data is thus processed from a business perspective in a way that we believe does not conflict with your rights and freedoms as an individual.

Confect uses email as a tool to communicate marketing, but only with your consent in accordance with applicable marketing laws (if such is required). If you have given your consent, you will always have the option to opt-out as described below, or when you receive an email containing marketing material.

Right to Opt-Out of Marketing Communication

You have the right to opt-out of receiving marketing materials from Confect and being subject to profiling. You can do this by following the opt-out instructions in the marketing communication. Note that even if you choose to opt-out of receiving marketing materials, you may still receive administrative information from Confect, such as order confirmations and notifications necessary to manage your account on the service Confect offers our customers.

Changes
We encourage you to review Confect's privacy policy regularly. If Confect makes significant changes to this policy that substantially alter our privacy practices, we may also notify you in other ways, such as by sending an email or posting a notice on our website before the changes take effect.

Contact Us
All important privacy decisions at Confect are made by the management team at Confect. For current contact information, see the footer on Confect.se‍