This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at aidoni.se (the "Website") or use our services (the "Services").

This Privacy Policy is written to meet the General Data Protection Regulation (GDPR), (EU) 2016/679, and the other data protection laws that apply in Sweden. It describes what we record when you visit the Website, and what we record only if you agree.

1. Data Controller

The controller is Aidoni Group AB, organisation number 559477-9794, Kvarnbergsgatan 2, United Spaces, 411 05 Göteborg, Sweden. Send questions about your personal data to hello@aidoni.se.

2. Information We Collect

We may collect and process the following categories of personal data:

2.1. Personal Data You Provide to Us:

  • Contact information: name, email address, phone number, company name, and job title that you give us when you contact us, request a quote, use a contact form, or apply for a job
  • Communication data: the messages, inquiries, and feedback you send us
  • Application data: your CV, cover letter, and other application material

2.2. Data Collected When You Visit:

  • Visit data: your IP address, your browser type, the pages you open and when, and the other details described in Section 7 for each service used.
  • Storage in your browser: see Section 7.

We process your personal data on the following legal grounds under the GDPR:

  • Consent: when you have allowed statistics or marketing through the cookie choice in Section 7, for the purposes that choice covers.
  • Contractual necessity: when processing is necessary to perform a contract, or to take steps at your request before entering into a contract.
  • Legitimate interests: when processing is necessary for our legitimate interests, such as running and securing the Website, logging page views, and finding and fixing errors, provided these interests do not override your fundamental rights and freedoms.
  • Legal obligation: when processing is necessary to comply with a legal obligation that applies to us.

4. How We Use Your Information

We use the information we collect for these purposes:

  • To provide, maintain, and improve the Website and our Services
  • To respond to your inquiries and to provide customer support
  • To process job applications and manage recruitment
  • To send you marketing messages, only with your explicit consent, which you can withdraw at any time
  • To see which pages are used and where visitors stop, through the page-view log and, if you allow statistics, the tools in Section 7
  • To detect, prevent, and fix technical problems, fraud, and security threats
  • To comply with legal obligations and to enforce our legal rights

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal data. We share it only in these circumstances:

  • Service providers: we share data with the trusted companies that run the Website and handle our requests, including the services listed in Section 7. They may use the data only for the purposes we set, and they are contractually obliged to protect it.
  • Legal requirements: we disclose data when the law, a court order, or a government authority requires it, or to protect our rights, property, or safety, or those of our users or others.
  • Business transfers: if we merge with another company, are acquired, or sell assets, your data may pass to the acquiring entity.
  • With your consent: we share data with third parties when you have explicitly agreed to it.

6. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Some of the services in Section 7 are based in the United States. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions by the European Commission
  • Other safeguards required by applicable data protection law

7. Cookies and Similar Technologies

A cookie is a small file that a website stores in your browser. Local storage and session storage are other places in the browser where a website can keep data. They are not cookies, but the same rules apply to them. Campaign links add tags to the address, called UTM values, such as utm_source and utm_campaign, that show where a visit came from. This section lists what the Website stores in your browser and sends, and how your choice changes it.

What the Website stores in your browser

  • A cookie named NEXT_LOCALE. It remembers the language version of the Website during your visit, and is deleted when you close the browser. It is set when we need to remember which language version you are reading.
  • Your cookie choice, with the time you made it, in local storage. It is kept until you change the choice or clear the site data.
  • Your light, dark, or system theme, in local storage. It is kept until you clear the site data.
  • The background animation you chose with "?scene=bird" or "?scene=globe" in the address, kept in local storage.
  • The job adverts you have applied for from this browser, in local storage, so the application form can show that you have already applied.

Your choice

When you first open the Website, a cookie bar asks you to choose. You can allow statistics, allow marketing, or allow only the storage the Website needs to work. Storage the Website needs to work, such as the language cookie, is always on. You can change your choice at any time with "Cookie settings" in the footer. Some changes take effect at once; the rest apply when the next page loads.

Error reports and session replays (Sentry)

When a page or script fails, the Website sends an error report to Sentry, an error-monitoring service, so that we can find and fix the fault. This starts on every visit, once the page has appeared, and does not wait for your choice. A report holds the error, the page address, and details about your browser, and it includes your IP address.

On a small share of visits (5 percent of sessions, and half of the sessions in which an error occurs), Sentry also records a session replay. A replay shows the page layout and what was clicked. Text, form fields, and images are hidden in the replay. The replay keeps its session details in your browser's session storage, which is cleared when you close the tab.

Google's advertising tag

Google's tag is a script from Google. It loads only after you allow statistics or marketing. Nothing from Google loads before that choice, or after you choose Necessary only. The tag also runs with storage switched off for each category you have not allowed (Google's Consent Mode). Even then, Google receives page visits and some events without cookies, through its measurement and advertising servers. The page address that Google receives can include the campaign values from the link you opened.

After you allow marketing, Google's tag sets cookies for advertising conversions: _gcl_au and _gcl_aw. If you also allow statistics, it can set _ga for measurement. Google's own privacy information covers what Google does with the data.

Statistics (PostHog)

We use PostHog, a product analytics service, to see how the Website is used. Its servers are in the EU. The Website loads PostHog only after you allow statistics. Until then, no PostHog script or request is made, and PostHog records no events and sets no cookie. Once you allow statistics, PostHog sets its own cookie and local storage entries, records each page view with the page address, the referrer, and any campaign values, and records clicks on the page. If you then reject statistics, PostHog stops recording events.

Company and visitor identification

If you allow marketing, three more services load on the Website: Albacross, Leadfeeder, and RB2B. They try to work out which company a visitor works for, and RB2B also tries to identify the visitor as a person. Each sets its own cookies and sends visit data to its own servers. None of them loads unless you allow marketing.

If you then reject marketing, these services stop loading on the next page. To stop one that is already running in the current tab, reload the page.

Your browser settings

You can instruct your browser to refuse all cookies or to tell you when a cookie is sent. If you refuse cookies, parts of the Website may not work. You can change your choices at any time, as described above.

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods are:

  • Contact and inquiry data: Retained for 3 years after the last contact, unless you request deletion
  • Job application data: Retained for 2 years after the application process ends, unless you request earlier deletion
  • Marketing consent data: Retained until you withdraw consent

Error reports and session replays are kept for 90 days.

PostHog statistics data is kept for up to 26 months.

Albacross, Leadfeeder, and RB2B keep data for 12 months.

10. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

  • Right of access: You have the right to request access to and receive a copy of your personal data
  • Right to rectification: You have the right to request correction of inaccurate or incomplete personal data
  • Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data under certain circumstances
  • Right to restrict processing: You have the right to request restriction of processing of your personal data
  • Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller
  • Right to object: You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent: Where processing is based on consent, you have the right to withdraw your consent at any time

To exercise any of these rights, please contact us at hello@aidoni.se. We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten, IMY).

11. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority without undue delay, and in any event within 72 hours of becoming aware of the breach, where feasible.

13. Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

15. Supervisory Authority

If you have concerns about how we process your personal data, you have the right to lodge a complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten, IMY):

Integritetsskyddsmyndigheten (IMY)

Website: imy.se

Email: imy@imy.se

Phone: +46 8-657 61 00

16. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Company: Aidoni Group AB, organisation number 559477-9794, Kvarnbergsgatan 2, United Spaces, 411 05 Göteborg, Sweden.

Email: hello@aidoni.se