Privacy Policy

1. Data controller

Samvaro is provided by Nyotic AB, reg. no. 559593-8969, based in Solna, Sweden. For personal data collected through this website and in your contact with us, Nyotic AB is the data controller.

If you have questions about how we process personal data, reach us at hello@samvaro.se.

2. The samvaro.se website

This website uses no cookies, no ad tracking and no analytics tools. The only personal data we collect through the website is what you provide yourself in the contact or interest form:

• your name and email address
• your association's name and approximate size
• the message you write

3. Why we process the data

We use the form data to answer your enquiry, schedule a demo and prepare a possible agreement with your association. The legal basis is our legitimate interest in responding to enquiries, and steps taken prior to entering into a contract (Articles 6(1)(b) and (f) GDPR).

We keep the data for as long as the dialogue is ongoing and delete it when it is no longer needed. If the association becomes a customer, the data is instead handled under the customer agreement. We never sell personal data, and we do not use it for marketing you have not asked for.

4. Data in the Samvaro service

The service itself processes data about the association's members and residents, for example names, contact details, apartment and ownership records, and the content users publish themselves.

For this data, the association is the data controller and Nyotic AB is the data processor. We process the data only on the association's instructions and under the data processing agreement that forms part of the customer agreement, never for our own purposes. Questions about how your association processes your data should go to its board in the first instance.

5. Where the data is stored

Data in the Samvaro service is stored and processed in Sweden. We use established infrastructure providers that process data on our behalf under contract; they may never use the data for their own purposes.

The samvaro.se website is served through a global delivery network, so data you submit through the forms may be processed outside the EU/EEA before it reaches us. Where that happens, approved transfer mechanisms under the GDPR are used, such as the European Commission's standard contractual clauses.

We protect the data with appropriate technical and organisational measures, including encryption in transit and role-based access.

6. Your rights

Under the GDPR you have the right to:

• be informed about and access the personal data we process about you
• have inaccurate data corrected
• have data erased when it is no longer needed
• object to or request restriction of processing
• receive data you have provided in a machine-readable format (data portability)

7. Complaints

If you believe we are processing your personal data incorrectly, we would like you to contact us first, but you always have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY). If your data concerns an association's use of Samvaro, contact the association in the first instance. We help the association fulfil your rights.