Privacy Policy

1. Data Controller

CShift AB ("we", "us", "our") is the data controller for the personal data processed through the Fidureon platform and this website.

2. Who We Collect Information From

We collect personal data from:

• Visitors to our website
• Users of the Fidureon platform
• Individuals who contact us via email or contact forms
• Business contacts and potential customers

3. What Information We Collect

We may collect the following categories of personal data:

• Contact information: Name, email address, phone number, company name
• Account information: Username, password (encrypted), role, organization details
• Usage data: IP address, browser type, pages visited, time spent on pages
• Communication data: Messages sent via contact forms or email correspondence
• Content data: Information you create in the platform (risks, controls, documents, policies)

4. Cookie Notice

We use cookies and similar technologies to:

• Essential cookies: Required for the website and platform to function properly
• Analytics cookies: Help us understand how visitors interact with our website
• Preference cookies: Remember your settings and preferences

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our website and platform.

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Contract performance: Processing necessary to provide our services to you
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security
• Legal obligations: Processing necessary to comply with legal requirements
• Consent: Where you have given explicit consent, such as for marketing communications

6. How We Use Your Information

We use your personal data to:

• Provide, maintain, and improve the Fidureon platform
• Respond to your inquiries and support requests
• Send important service notifications
• Analyze usage patterns to improve user experience
• Comply with legal obligations
• Protect against fraud and security threats

7. Data Storage and Transfers

Your data is stored on servers located within the European Union. We do not transfer personal data outside the EU/EEA unless appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When your data is no longer needed, we will securely delete or anonymize it.

9. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or another supervisory authority.

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

11. Third-Party Services

We may share your data with trusted third-party service providers who assist us in operating our platform. These providers are bound by data processing agreements and process data only as instructed by us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the platform. The "Last updated" date at the top of this page indicates when this policy was last revised.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us.

CShift AB
C/O AVillage, Datavägen 14a
436 32 Gothenburg, Sweden
Email: [email protected]