Privacy policy

1. Data controller

Zenivo AB is the data controller for the processing of personal data that takes place within SiteAdmin, unless otherwise stated in specific agreements or service-specific terms.

2. Roles and responsibilities

Zenivo AB is normally responsible for the processing of personal data that takes place within the customer relationship, the user account and the use of SiteAdmin.

To deliver, operate and secure the platform, Zenivo AB may use technical subcontractors and processors. More information about such providers is available on the page for subprocessors and processors.

3. Personal data that may be processed

We may process personal data that you provide to us yourself or that arises when you use the platform.

This may include, for example:

• name
• email address
• phone number
• organisation details
• billing information
• account details and user-related information
• technical data such as IP address, browser information and log data
• communication with support or other contacts with us

4. How personal data is collected

Personal data may be collected when you register an account, use the platform, contact support, place orders or otherwise interact with Zenivo AB.

This also applies when you access a free website review via a share link and book a web meeting through the form associated with the review.

Some data is also collected automatically through the platform’s technical features, for example in connection with sign-in, security checks, logging and operational monitoring.

5. Purposes of processing

We process personal data in order to:

• provide, operate and administer the platform
• manage accounts, sign-in and access
• provide support and respond to enquiries
• handle requests for web meetings after a website review
• manage orders, payments and related administration
• maintain security, logging and incident handling
• comply with legal obligations
• develop, improve and quality-assure the platform

6. Legal basis

Personal data is processed on the basis of an applicable legal basis under data protection legislation.

This may for example be:

• contract, when processing is necessary to provide the platform or related services
• legal obligation, for example under bookkeeping or other legislation
• legitimate interest, for example for operations, security, support and improvement of the platform
• consent, when this is required for a particular processing activity

7. Sharing of personal data

Personal data may be shared with selected subcontractors and processors used to deliver, operate, secure and further develop the platform.

Information about such providers is available on the page for subprocessors and processors. Personal data may also be disclosed when required by law, authority decisions or legal obligations.

8. International transfers

We strive to use providers within the EU/EEA as far as possible.

If personal data is in some cases processed outside the EU/EEA, this is done with appropriate safeguards under applicable data protection legislation.

9. Retention period

Personal data is not stored longer than necessary for the purposes for which it is processed.

The retention period is determined among other things by whether the account is still active, which services are used, legal obligations, needs for security and traceability, support history and the need to handle claims or disputes. When data is no longer needed it is deleted or anonymised in an appropriate way.

10. Security

We use technical and organisational security measures to protect personal data against unauthorised access, loss, misuse and unlawful alteration.

Security work includes, among other things, access control, logging, monitoring, secure communication and other measures relevant to the platform’s operations and risk level.

11. Your rights

Under applicable data protection legislation you may have the right to:

• request information about which personal data we process about you
• request rectification of inaccurate data
• request erasure of data in certain cases
• request restriction of processing
• object to certain processing
• request data portability where applicable
• lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

If you wish to exercise any of your rights you can contact us via hello@siteadmin.se. We may where necessary request additional information to ensure that we disclose data to the right person.

12. Cookies and related documents

Information about how SiteAdmin uses cookies and similar technologies is available in our cookie policy. More information about subprocessors, terms of use and reporting of abuse is available on separate information pages where such documents are provided.