1. Data controller
CShift AB ("we", "us", "our") is the data controller for the personal data processed through the Fidureon platform and this website.
CShift ABOrg. nr: 559375-6108
Kungsgatan 57
411 15 Göteborg, Sweden
Email: [email protected]
2. Who we collect information from
We collect personal data from:
- Visitors to our website
- Users of the Fidureon platform
- Individuals who contact us via email or contact forms
- Business contacts and potential customers
3. What information we collect
We may collect the following categories of personal data:
- Contact information: Name, email address, phone number, company name
- Account information: Username, password (encrypted), role, organization details
- Usage data: IP address, browser type, pages visited, time spent on pages
- Communication data: Messages sent via contact forms or email correspondence
- Content data: Information you create in the platform (risks, controls, documents, policies)
5. Legal basis for processing
Under GDPR, we process your personal data based on the following legal grounds:
- Contract performance: Processing necessary to provide our services to you
- Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security
- Legal obligations: Processing necessary to comply with legal requirements
- Consent: Where you have given explicit consent, such as for marketing communications
6. How we use your information
We use your personal data to:
- Provide, maintain, and improve the Fidureon platform
- Respond to your inquiries and support requests
- Send important service notifications
- Analyze usage patterns to improve user experience
- Comply with legal obligations
- Protect against fraud and security threats
7. Data storage and transfers
Your data is stored on servers located within the European Union. We do not transfer personal data outside the EU/EEA unless appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
8. Data retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When your data is no longer needed, we will securely delete or anonymize it.
9. Your rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access: Request a copy of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Request limitation of how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another supervisory authority.
10. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.
11. Third-party services
We may share your data with trusted third-party service providers who assist us in operating our platform. These providers are bound by data processing agreements and process data only as instructed by us.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the platform. The "Last updated" date at the top of this page indicates when this policy was last revised.
13. Contact us
If you have any questions about this Privacy Policy or our data practices, please contact us:
CShift ABKungsgatan 57
411 15 Göteborg, Sweden
Email: [email protected]