1. GENERAL

1.1Privacy and data protection is important to us atKoolaber and this Privacy Policy aims to explain how we process personal data as a personal data controller. We may process personal data in connection with application processes, physical and digital meetings, social media interactions and through emails, text messages and calls. The processing of personal data is carried out in accordance with applicable legislation, including the general data protection regulation (“GDPR”). Set forth below is a description of how personal data is processed by us.

1.2This Privacy Policy is incorporated in, and an integral part of our General Terms and Conditions. Terms defined in our General Terms and Conditions apply to this Privacy Policy unless otherwise stated.

1.3If you have any further questions or queries concerning how we process your personal data, you are welcome to contact us at:contact@koolaber.ai

2. PERSONAL DATA WE PROCESS

2.1Personal data refers to information which, directly or indirectly, may be associated with a living natural person, such as name, contact details, photos, personal identity number, IP address, email address, the contents of emails, phone number, the contents of text messages and calls and other communication forms.

2.2We process personal data about persons who:

2.2.1 interacts withKoolaber through social media or

2.2.2 receives our newsletters, other communication and/or attend our events

2.3If you have any further questions or queries concerning how we process your personal data, you are welcome to contact us at:contact@koolaber.ai

2.4We process personal data for the purposes of administering and performing our various Engagements, managing client relationships, recruiting new team members, sending newsletters, text messages and marketing our services.

2.5We obtain personal data from our clients in connection with an Engagement. We may also extract personal data from private and public registers as well as from public authorities.

3. LEGAL BASIS

3.1We process personal data when necessary to fulfill our client Engagements, in accordance with applicable legislation, to administrate theKoolaber, to send out newsletters and other communication and otherwise when there is a legitimate interest for us to process your personal data. If we process your personal data for any specific purpose which requires your consent under the GDPR, or any other data protection legislation, we will obtain your consent in advance.

3.2Personal data will always be processed confidentially and protected by appropriate security measures. We ensure that companies that manage personal data on our behalf, use a high level of security measures in order to protect your personal data.

3.3We may disclose your personal data to external companies with whom we collaborate. We may also disclose your personal data when we have a legal obligation to do so, or in response to a legal request.

4. STORAGE AND DELETION OF PERSONAL DATA

4.1Personal data will only be stored for as long as it is necessary in order for us to fulfil the purposes of the processing, or for as long as we are required to store the information according to applicable legislation and relevant guidelines. The personal data is thereafter erased in accordance with our erasure procedure.

4.2Koolaber uses professional services in order to destroy physical documents and manage digital information. The professional service providers ensure integrity and confidentiality of information contained in any physical documents and digital information and are specialised in accommodating our needs for digital integrity and confidentiality.

4.3You may unsubscribe from newsletters or similar communication at any time. In such events we will no longer store or process your personal data for such purposes.

5. YOUR RIGHTS AS A DATA SUBJECT

5.1As a data subject, you have certain rights as regards your personal data. The rights are however not absolute, meaning that there are exceptions to some of the rights where we cannot proceed and fulfill your request.

5.2As a data subject, you have the following rights:

5.2.1Right to withdraw your consent – meaning that you have the right to withdraw your consent whereKoolaber process your personal data based on consent;

5.2.2Right to access – meaning that you have the right to information about the processing, access to the personal data in question, and the right to obtain a copy of your personal data;

5.2.3Right to rectification – meaning that you have the right to have any incorrect personal data about you as a data subject corrected by us;

5.2.4Right to erasure – meaning that you have the right have your personal data erased under certain circumstances (such as if there no longer is a legitimate purpose for our processing of your personal data);

5.2.5Right to object – meaning that you have the right to object toKoolaber’s processing of your personal data in certain specific cases;

5.2.6Right to restricted processing – meaning that you have the right to haveKoolaberrestrict the processing of your personal data, but not delete it; and

5.2.7Right to data portability – meaning that you may requestKoolaber to transfer your personal data to another data controller.

5.3If you feel that our processing of your personal data does not comply with data protection legislation, you are entitled to lodge a complaint with the Swedish Data Protection Authority (Sw. Datainspektionen).

5.4Any requests by you as a data subject under this Privacy Policy shall be sent tocontact@koolaber.ai