PRIVACY POLICY
– Film the Fault –
1 GENERAL
1.1 This privacy policy (the ”Privacy Policy”) always applies, unless otherwise agreed in writing, between EyeAtProduction AB, org.no 556788-1924, (”EyeAtProduction”), and any user (the ”User”) of the mobile application ‘Film the Fault’ (the ”App”) and the homepage https://eyeatproduction.com (the ”Website”).
1.2 EyeAtProduction is the Personal Data controller for the processing of the User’s Personal Data (see definition under section 3 below) which is registered with EyeAtProduction via the User’s user account in the App or on the Website, or which EyeAtProduction collects directly from the User or any third party.
1.3 This Privacy Policy serves to assure the User that EyeAtProduction, as the Personal Data controller, handles the User’s Personal Data in accordance with applicable privacy laws and regulations. Below follows a description of how EyeAtProduction processes the User’s Personal Data. Information is also given regarding the User’s rights, and how the User can get in contact with EyeAtProduction, in case the User has any questions or wants to exercise his or her rights.
1.4 By using the App and the Website (together hereinafter referred to as the ”Services”), the User agrees to EyeAtProduction’s processing of the User’s Personal Data, where the processing is needed for EyeAtProduction to provide the Services to the User. If the User does not provide the required information or explicit consent when needed, the User may not be able to access the Services or part of the Services.
2 CHANGES TO THE PRIVACY POLICY
Should EyeAtProduction have to change this Privacy Policy, the User will be informed through announcements in the Services.
3 PERSONAL DATA TREATMENT, OBJECTIVES AND LEGAL BASIS
3.1 Personal Data refers to any information that can be attributed to an identified or identifiable living individual. Different pieces of information, which collected together can lead to the identification of a particular person, also constitute Personal Data.
3.2 The purpose of processing the Personal Data is to enable EyeAtProduction to offer the Services in full, provide information about the Services and market the Services. EyeAtProduction collects and processes the User’s Personal Data only to the extent it is necessary to provide the Services to the User.
3.3 The collection and processing of the User’s Personal Data is conducted solely with the User’s consent or on the premise of an existing agreement or legal obligation, e.g. when EyeAtProduction must save the data according to accounting rules. Exceptions are made for cases where a prior consent is not possible for practical reasons, the processing of the data is permitted by law, and EyeAtProduction has a legitimate interest in processing the Personal Data, e.g. for marketing, follow-up of the Services, or for exercising or defending EyeAtProduction against legal claims, according to a so called balance of interests.
3.4 Any Personal Data that EyeAtProduction processes in connection with the registration of the User’s user account in the Services or the use of the Services is referred to below as ”Registration Data”.
3.5 EyeAtProduction processes the Registration Data to administer the User’s user account and to be able to offer the Services to the User. The legal basis for the processing is the User’s consent and/or EyeAtProduction’s contractual relationship with the User in accordance with EyeAtProduction’s User Terms and Conditions for the Services.
3.6 When a User contacts EyeAtProduction via EyeAtProduction’s support service, EyeAtProduction saves the Personal Data that EyeAtProduction needs to be able to provide the support service as part of the Services, administer support and complaint cases and be able to contact the User. In addition to Registration Data, EyeAtProduction may process Personal Data relating to case/ticket numbers. The legal basis for the treatment is EyeAtProduction’s contractual relationship with the User in accordance with EyeAtProduction’s General Terms and Conditions for the App.
3.7 EyeAtProduction processes the User’s Registration Data for direct contact with the User via email, in order to conduct user surveys or to deliver updated user terms, newsletters etc. The legal basis for the processing is a so-called balance of interests.
3.8 EyeAtProduction may process the Registration Data to fulfill its legal obligations based on legal requirements, judgments or decisions by authorities etc. In such cases, the legal basis for the processing is EyeAtProduction’s legal obligation.
4 SENSITIVE PERSONAL DATA
4.1 EyeAtProduction does not process any User sensitive Personal Data.
4.2 Sensitive Personal Data refers to data which reveals a User’s ethnic origin, political opinions, religious beliefs or membership of the trade union, as well as Personal Data relating to health or sex life.
5 SHARING OF PERSONAL DATA TO THIRD PARTIES
5.1 Without the User’s explicit permission, EyeAtProduction will not share the User’s Personal Data with any third party in any other way than what follows from this Privacy Policy, unless EyeAtProduction is obliged to do so following the applicable regulations or unless the Personal Data is shared in connection with an ongoing legal-, administrative- or recovery procedure in which the User and EyeAtProduction are both parties.
5.2 EyeAtProduction uses subcontractors for services in connection with EyeAtProduction’s Services (so called Personal Data assistants). These subcontractors may handle Personal Data and may need some access to Personal Data collected through the Services. EyeAtProduction may also need to use the subcontractor’s services to store Personal Data. EyeAtProduction will always limit such subcontractors’ access to Personal Data to the minimal amount needed for EyeAtProduction to still be able to offer the User access to the Services. EyeAtProduction also requires all subcontractors to (i) protect the User’s Personal Data in accordance with this Privacy Policy and (ii) not use or disclose the User’s Personal Data for any purpose other than to provide the agreed upon services to EyeAtProduction, enabling EyeAtProduction to offer access of the Services to the User. These subcontractors may only process the User’s Personal Data in accordance with EyeAtProduction’s instructions and may not use the User’s Personal Data for any other purpose.
6 STORING OF PERSONAL DATA
6.1 The Services have been developed by EyeAtProduction and EyeAtProduction owns and controls the Services. The User’s Personal Data is stored in EyeAtProduction’s own database, which is linked to the Services, but may also be stored locally on the mobile device that the User uses to access the Services. The database is stored on an external server provided by EyeAtProduction’s Personal Data assistant in the EU/EEA.
6.2 The User’s Personal Data will not be stored for any longer than necessary, with regards to the purpose of the processing and taking into account EyeAtProduction’s eventual legal obligations regarding to accounting regulations etc. If certain Registration Data is not provided, EyeAtProduction’s legal obligations cannot be fulfilled and EyeAtProduction can therefore be forced to deny the User access to the Services.
6.3 EyeAtProduction regularly deletes all Personal Data which is no longer needed with regards to the purpose of the processing, in accordance with the relevant laws and regulations in force at any time.
7 TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
EyeAtProduction will not transfer Personal Data to third countries (i.e. countries outside the EU/EEA). Should EyeAtProduction need to do so in the future, inter alia due to EyeAtProduction choosing a digital service provider based in a third country, EyeAtProduction will only transfer Personal Data if the third country has an adequate level of protection according to applicable privacy laws and regulations.
8 THE RIGHT TO REQUEST INFORMATION
8.1 The User has a right to request and obtain, free of charge, information regarding what Personal Data (if any) that is being processed by EyeAtProduction, a so-called register extract. The User also has the right to have any incorrect Personal Data corrected. If the User wishes to know if EyeAtProduction processes any Personal Data about the User, he or she can send a written and signed request to EyeAtProduction in accordance with section 17 below. In the request, the User needs to indicate specifically what kind of information the User is interested in receiving (unless the User is interested in receiving information about all Personal Data). That way, EyeAtProduction can provide the User with information that is relevant. If the User repeatedly sends requests for an extract from the register, EyeAtProduction may charge a fee or, in some cases, in accordance with statutory law, refuse to comply with the request.
8.2 The extract from the register will be sent to the User within 30 days from the time EyeAtProduction received the request. If the extract is extensive and EyeAtProduction needs more time or if EyeAtProduction for some reason cannot comply with the User’s request, EyeAtProduction will without undue delay notify the User thereof.
9 THE RIGHT TO RECTIFICATION
9.1 In order to fulfill its obligations to always have accurate and relevant Personal Data, EyeAtProduction systematically works with its registers and updates Personal Data where necessary. If the User notices that the Personal Data EyeAtProduction processes is incorrect or if EyeAtProduction lacks important Personal Data, the User has the right to have their Personal Data corrected. EyeAtProduction normally performs simple data corrections without consideration, but in some cases EyeAtProduction may need to consider the User’s request. EyeAtProduction will not approve the User’s request if it is impossible or requires an unreasonable amount of work. Upon a request by the User, EyeAtProduction will inform the User about whom the correction has been submitted to.
9.2 In the event that the User’s Personal Data is changed at the User’s request, EyeAtProduction will inform any subcontractors and partners that processes the Personal Data about the change.
10 THE RIGHT TO ERASURE
10.1 The User has the right to request that EyeAtProduction erases the User’s Personal Data when:
a) they are no longer needed for the purposes for which they have been collected and for which they are being processed;
b) EyeAtProduction processes Personal Data under the User’s consent and the User withdraws said consent;
c) EyeAtProduction processes Personal Data for direct marketing and the User opposes the continued processing for this purpose;
d) EyeAtProduction processes Personal Data on the legal basis of a balance of interests and there are no legitimate interests that
e) EyeAtProduction does not process Personal Data in accordance with applicable rules;
f) It is required that Personal Data is erased in order to fulfill a legal obligation; or
g) there is another relevant legal basis for the Users request to erase the Personal Data.
10.2 EyeAtProduction has the right to refrain from erasing the User’s Personal Data if EyeAtProduction needs to retain these in order to fulfill a legal obligation or to be able to make legal claims against the User or in defense against legal claims from the User.
10.3 When EyeAtProduction receives the User’s request regarding erasure, EyeAtProduction will conduct an assessment in order to evaluate if there are reasons to erase the User’s Personal Data. The User will then be informed about EyeAtProduction’s assessment. If the User’s Personal Data are erased at the User’s request, EyeAtProduction will inform potential suppliers and third-party partners to which Personal Data has been transferred that the Personal Data has been erased. However, EyeAtProduction will not do this if it is impossible or requires an extensive amount of work.
11 THE RIGHT TO RESTRICTION OF PROCESSING
11.1 The User has the right to request the restriction of EyeAtProduction’s processing of the User’s Personal Data when:
a) the User has disputed the accuracy of the Personal Data, during the time EyeAtProduction has the opportunity to check whether the Personal Data are correct;
b) the processing is illegal, and the User opposes that the Personal Data is deleted and instead requests a limitation of its processing;
c) EyeAtProduction no longer needs the Personal Data for the purposes of the processing, but the User needs the Personal Data to be able to determine, enforce or defend legal claims; or
d) the User has objected to processing in accordance with section 13 below, when awaiting information of the legitimacy of whether EyeAtProduction’s interests weigh heavier in relation to the interests of the User.
11.2 Restriction of processing implies that the Personal Data will be marked, so that they in the future may only be processed for certain limited purposes.
12 DELETION OF PERSONAL DATA
12.1 The Personal Data will not be retained for any longer than is necessary with regard to the purposes of the processing, and EyeAtProduction will otherwise delete Personal Data in the manner that follows from applicable legislation, where an examination is made on a case-by-case basis when different types of Personal Data should be culled.
12.2 If the User chooses to deactivate his or her user account, the User’s Registration Data will be deleted or de-identified no later than 30 days from the deactivation of the User account. This is provided that the Personal Data is not required to be saved in the future in order for EyeAtProduction to fulfill its legal obligations or to be able to exercise its legal claims.
13 THE RIGHT TO WITHDRAW CONSENT AND OBJECT TO PROCESSING
13.1 The User has the right to object to EyeAtProduction’s processing of the User’s Personal Data which EyeAtProduction conducts with the support of so-called balancing of interests according to law. If the User wishes to exercise this right, the User needs to specify in writing which processing the User objects to. In the event of such an objection, EyeAtProduction may only continue to process the User’s Personal Data if EyeAtProduction can show that there are compelling, entitling reasons for why the Personal Data must be processed, and provided such reasons weigh heavier than the User’s interests.
13.2 If the User’s Personal Data is processed for direct marketing, the User always has the right to object to the processing at any time.
14 THE RIGHT TO DATA PORTABILITY
If the User has provided his or her Personal Data to EyeAtProduction, the User may, in some cases, be entitled to extract his or her Personal Data in order to, for example, move them to another company. In order for the User to be able to use his or her right to so called data portability, the User’s request must relate to Personal Data that the User himself/herself has provided to EyeAtProduction and which EyeAtProduction processes with the consent of the User or to fulfill an agreement with the User. The right to data portability does not apply when EyeAtProduction’s processing of the User’s Personal Data is based on a balance of interests or a legal obligation for EyeAtProduction. The right to data portability does not apply when data portability is technically difficult to implement.
15 THE RIGHT TO COMPLAIN
In the event that the User has complaints or objections in connection with EyeAtProduction’s Processing of the User’s Personal Data, EyeAtProduction kindly asks the User to initially contact EyeAtProduction, so that EyeAtProduction can help the User in the best way possible. However, the User always has the right to submit his or her complaints directly to the Swedish Data Protection Authority (Datainspektionen).
16 SECURITY
EyeAtProduction undertakes all appropriate technical and organizational security measures, that are required in accordance with applicable regulatory frameworks governing the processing of Personal Data, to ensure a high level of security appropriate to the risks and to protect the Personal Data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to processed Personal Data.
17 CONTACT INFORMATION
17.1 If the User wishes to exercise his or her rights under these Terms, a request shall be made in written form and sent to EyeAtProduction by email to [email address]. Since it is important that EyeAtProduction does not disclose the User’s Personal Data to anyone but the User, the request must be made in writing from the email address registered with EyeAtProduction.
17.2 If the User has any questions about this policy or EyeAtProduction’s Personal Data processing, the User can contact EyeAtProduction by email to info@eyeatproduction.com.
