Privacy Notice

Privacy Notice (version 25:06)

TeamEngine Group AB is a Swedish registered SaaS business (corporate id.nr. 5556533-1955) based in Stockholm ("TeamEngine", "we" or "us"). TeamEngine provides a suite of board and management products and services ("the Service").

Your integrity and data protection is very important to us. The information you provide to us will therefore be processed and protected in accordance with this privacy notice ("Privacy Notice") and applicable law.

When we refer to "Personal Data" in this Privacy Notice, we mean any information relating to an identified or identifiable natural person such as a name, an identification number, location data or an online identifier.

When we refer to "the Portal" in this Privacy Notice, we mean the secure, web-based platform, provided as a Software-as-a-Service (SaaS), through which our customers access and manage various Service functionalities.

TeamEngine as data controller

In some cases, TeamEngine acts as the data controller, while in other cases we serve as the data processor for the processing of your Personal Data. This Privacy Notice informs you about the processing of Personal Data when TeamEngine is the data controller.

For clarification, TeamEngine is a data processor in relation to its customers who have entered into an agreement with us to use the Service. In these circumstances, our customers will be the data controller and TeamEngine will act as the data processor for the customers.

TeamEngine is the data controller for the processing of the Personal Data that you share with us in the following situations:

• When you or the person you represent order the Service and become a customer of TeamEngine.
• When you are a supplier or represent a supplier with whom TeamEngine has an agreement.
• When you are a potential customer of TeamEngine.
• When you visit our office.
• When you receive our newsletters.
• When you visit our website.
• When we liaise with you in connection with a role with us.
• When you interact with our marketing activities and content (e.g. webinars, conferences, whitepapers).

To help you navigate this Notice, please click on any of the links below to move to the section of the Notice that you are interested in:

Contents

• Personal Data we process about you and why
• Who do we share your Personal Data with?
• Do we transfer your Personal Data to countries outside the EU/EEA?
• What rights do I have?
• How is my Personal Data protected?
• How long we keep information
• Cookies and similar tracking techniques
• Contact, questions and supervisory
• Update of Privacy Notice

Personal Data we process about you and why

The Personal Data we collect, the legal basis and the purposes of the processing of Personal Data are listed below. Sometimes the processing of Personal Data is performed by a third-party, for more information on how we share information with others, see "Who do we share your Personal Data with?" below.

Activity	Categories of personal data	Processing Purpose	Legal basis
To provide the Portal and the user account	Name Personal identification no. Contact details (e.g. address, title, E-mail and phone number)	The creation and the facilitation of the user account	Contractual obligation
To set up and manage the customer account and onboarding	Reference name Contact details (e.g. address, title, E-mail and phone number)	The creation of the customer account Providing training, product and service information	Legitimate interest Contractual obligation
To prevent abuse of a service or to prevent and investigate crimes against us	User-generated data (e.g. access and error logs)	Prevent unauthorized use of the Services Protecting and improving our IT environment against attacks and intrusion	To comply with legal obligations or, if none exist, to protect our legitimate interest in preventing abuse and investigating crimes against us
To deliver an individually adopted experience of the Portal	Name IP-address Language settings Browser settings Time Zone Operating System Platform Screen resolution User-generated data (e.g. reading history)	Simplification of your use of the Portal (e.g. by saving language selection and identifying device type)	Legitimate interests in ensuring you obtain the best from our services
To send (or make available), marketing materials, newsletters or other periodical messages	Name, title E-mail address	Receive news about us and our product and services	Consent Our legitimate interest in informing about and marketing our business
Deployment of cookies (and similar tracking technologies as described in "Information about Cookies") Capture and provision of information when you visit our website or interact with our assets	Contact details (e.g. name, title, address, E-mail and phone number), company name together with any additional information provided Personal Data derived from cookies and similar technologies including your IP address, device details, browser type and general location together with the additional information described on our cookies page	To provide you with information that you have requested To respond to/process your requests (e.g. for a demo, quote or to attend an event) To track your interaction with our website and our assets	Our legitimate interest in providing information that you have requested Our legitimate interest in optimising and improving our website and providing you with tailored advertising based on your browsing history Our legitimate interest in understanding visitors to our site/interaction with our assets
When you visit our office	Name Company name	Keeping track of who is visiting the premises	Legitimate security interest
Sales, marketing and customer relations	Contact details (e.g. name, address, E-mail and phone number) Role/title Call recording and analysis	To provide you with information about our services, events and webinars To develop and support our sales process For us to be able to contact our customers and inform about our services, etc.	Our legitimate interests in growing our business through communicating our product and services suite and continually improving our sales processes
Correspondence	Contact details (e.g. name, address, E-mail and phone number) Role/title	Replying to/engaging in correspondence from/with you or responding to unsubscribe or preference updates	Performance of contract with customers Legitimate interest
Account management	Contact details (e.g. name, address, E-mail and phone number) Role/title	Setting up and managing your account Invoicing and accounting (including purchase history)	Our legitimate interests in setting up and managing our relationship with you and processing payments Our legal obligation to account for services provided
Managing & responding to queries, complaints or claims	Names and contact details Address Account information Purchase or service history Customer or client accounts and records Financial transaction information Information relating to health and safety Correspondence	To manage and respond to queries, complaints or claims	Legitimate interest Legal obligation
Communications with regard to a role/opportunity with us	Contact details (e.g. name, address, E-mail and phone number) Role/title	To manage communications and documentation in connection with a role/opportunity with us	Legitimate interest Compliance with a legal obligation
Collecting personal data from publicly and commercially available sources	Email Name Phone number Role/title	Lead generation Data enrichment Communicating with prospects	Legitimate interest in growing our business and gathering contact details of, and communicating with, individuals who may be interested in our products and services

Who do we share your Personal Data with?

As a main rule we will not disclose your Personal Data to third parties but if we do, it will be done in accordance with applicable law and consistent with this Privacy Notice. We take appropriate and reasonable legal, technical and organizational measures to ensure that your data is handled securely and with adequate protection when transferred or shared with third parties.

1. Suppliers and Subcontractors: We may share your Personal Data with our suppliers and subcontractors. This may include service providers that support us with our operations, for example: customer relationship management (CRM systems), IT operations (such as hosting), advertising and marketing services and payment processors. Your data is only shared for the purposes described in the section titled "Personal Data we process about you and why."
2. Our parent company, subsidiaries and other affiliates: We may share your Personal Data with companies within our corporate group (including our parent company, subsidiaries, and affiliates). These entities will use your data only for the purposes outlined in this Privacy Notice, or as permitted by law.
3. Authorities: When required by law, we may need to disclose your Personal Data to public authorities and other similar organisations (such as supervisory authorities). We may also need to disclose your data if it is necessary to exercise, establish or monitor legal claims.
4. Reorganisation or Divestment: If we sell or buy a business or assets, or if TeamEngine or a substantial portion of our assets are acquired by third parties, we may disclose your Personal Data in connection with these transactions. If your Personal Data is relevant to the change, it will be transferred to the new owner or controlling party. They will then be permitted to use that data for purposes consistent with this Privacy Notice.
5. Professional advisors: We may disclose your Personal Data to our professional advisors as necessary to meet or support our professional, legal or commercial obligations.

Do we transfer your Personal Data to countries outside the EU/EEA?

Your Personal Data may be processed both within and outside of the EU/EEA, depending on specific requirements. We take necessary legal, technical, and organizational measures to ensure that the transfer is legal and that your information remains protected by recipients outside the EU/EEA. These measures include compliance with the European Commission's Model Clauses and agreements with subcontractors to provide an adequate level of data protection. Additionally, we ensure that there is a legal basis for these transfers in accordance with applicable data protection legislation. You are welcome to contact us if you would like more information about where your Personal Data is processed, by whom, and what security measures have been taken.

What rights do I have?

When we process Personal Data about you, you have a number of rights. You have the right to contact us at any time with respect to these, and if you wish to exercise any of the rights described below, you can reach us at: support@teamengine.com.

We reserve the right to take appropriate protective and security measures to ensure that you are the person you claim to be when you contact us. If you cannot satisfactorily demonstrate your identity, we may not be able to respond to your request.

You have the right to be informed about our collection and use of your Personal Data and to request information from us about the Personal Data we process about you. We will also correct or delete information that is inaccurate and encourage you to notify us if this is the case. You also have the right to object to processing that takes place with support of our legitimate interest and to request that your information not be processed for direct marketing purposes. You also have rights with respect to automated decision making and profiling. While we investigate the validity of your request, you have the right to request that we limit the processing. We may then, in principle, only store your information while the issue is investigated. In certain limited cases, you also have the right to receive your Personal Data in a machine-readable format or, if it is technically possible, to have the information transferred to a third party you indicate.

If you are dissatisfied with our processing, you also have the right to submit a complaint to the supervisory authority where you live or work or where you believe that a breach of the General Data Protection Regulation has been committed. In Sweden, you can contact the Swedish Authority for Privacy Protection (www.imy.se).

How is my Personal Data protected?

We use IT systems to protect the privacy, integrity and access to Personal Data. We have taken security measures to protect your Personal Data against unauthorised or unlawful processing (such as unauthorised access, loss, destruction or damage). Only people who need to process your Personal Data to fulfil our stated purposes have access to it.

How long we keep information

We will only retain your Personal Data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your Personal Data for a longer period if it relates to a complaint or in connection with our legal rights or obligations.

To determine the appropriate retention period for Personal Data, we consider the amount, nature and sensitivity of the Personal Data, the potential risk of harm from unauthorised use or disclosure of your Personal Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, together with any applicable legal, regulatory, tax, accounting or other requirements.

Cookies and similar tracking techniques

We use cookies and similar tracking techniques to make this website as user-friendly and accessible as possible. For more information about cookies and our handling of this, please read our policy regarding cookies, "Information about cookies".

Contact, questions and supervisory

If you have questions about how we process your Personal Data or if you have questions about privacy and data protection, you can always reach us at: support@teamengine.com.

What does it mean that the Data inspection board is the supervisory authority?

We are subject to Swedish data protection legislation. The Swedish Data Protection Authority (Sw. Integritetsmyndigheten) is responsible for supervision of the application of data protection law, and anyone who considers that a company processes Personal Data incorrectly is able to file a complaint with them. You can read more about this on the Swedish Data Protection Authority's website: www.imy.se.

Update of Privacy Notice

We may make changes to this Privacy Notice. The latest version of the Privacy Notice is always available on our site.

To view the User Privacy Policy please click here.