PRIVACY NOTICE FOR USAGE OF THE ACUVA APP
Data controller and personal data processed
Watersprint AB, Swedish company reg. no 556921-1062 (“Watersprint”), is committed to protecting your personal data. This privacy notice describes how Watersprint processes and uses the personal data that we receive from you when you enter information in connection with your use of the Acuva App (“the App”) and how you can contact us if you have additional questions regarding our processing of your personal data. Watersprint is the data controller of any personal data that may be collected, processed and held by Watersprint following your usage of the App, unless we inform you otherwise.
You can reach Watersprint using the following contact details:
Watersprint AB
Medicon Village, Scheeletorget 1
223 81 Lund, Sweden
support@watersprint.com
The following personal data regarding you may be collected from your usage of the App.
– Name*
– Email*
When creating an account in the App, some information fields are marked with * character. They are mandatory when you fill in your data. The consequence of not providing the information is that Watersprint will not be able to set up an account for you.
Why we are processing your personal data and our lawful basis
Watersprint collects and stores personal data that you submit as part of your account details to administer your account.
In addition to the above-mentioned use and purposes, we may also use your personal data to administrate and improve the App, for our internal records, for statistical analysis and/or to contact you regarding sales and as a part of our customer relation procedures. Additionally, we store your preferences you set up when using the App.
Watersprint has a legitimate interest in processing your personal data for the mentioned purposes. When legitimate interest is the appropriate justification for processing your personal data, we have undertaken a legitimate interests assessment where the needs, expectations, rights and freedoms of all parties have been considered. Before relying on legitimate interest, we have made sure that our interests are compelling enough and will not cause any unwarranted harm. The personal data regarding your account information, which you enter when registering an account in the App, are processed based on our legitimate interest to provide monitoring services, as well as ensuring that you adhere to, the terms set forth by the App’s terms of use. For other personal data processing, Watersprint’s legitimate interest for the collection of personal data is based on the necessity to carry out the processes stipulated above in order for Watersprint to provide the App to customers and end-users. To the extent that Watersprint uses the personal data to improve the App or for analysing statistics, Watersprint’s legitimate interest is based on our interest to conduct such improvements and analysis as well as the intention to provide you a better service and more specific information.
Transfer of personal data
The personal data that is collected and stored is exclusively used by companies within the Watersprint group, except in the following cases where we may submit the data to recipient parties:
- When required by law
To a buyer or a potential future buyer of our business, and/or;- To service providers appointed by a Watersprint company who provides services connected to the App, but only to the extent it is necessary in order to provide these services – for example IT service provider(s) which hosts data or develops and offers support for the App.
Watersprint will take measures to protect all personal data transferred to such third party, or that has been transferred to other countries, in accordance with applicable data protection laws and as stated above.
Watersprint will transfer your personal data to its fully owned subsidiary Watersprint Holdings Limited in Canada, who will conduct hosting/storage of the personal data collected in the App through the third party hosting provider Amazon Web Services (AWS). The data transfer to Canada will be performed on the basis of the European Commission’s adequacy decision, confirming that the level of data protection in Canada is essentially equivalent to the level of protection in the European Economic Area.
Any third party which processes data on behalf of Watersprint, shall have sufficient guarantees to implement appropriate technical and organizational measures in such a manner that processing meets the requirements of the GDPR, and ensures the protection of the rights of the data subjects. Such processing is governed by a suitable Data Processing Agreement with the relevant processor.
Storage period
Watersprint stores the personal data as long as it is necessary to fulfil the purpose for which the data has been collected. This means that Watersprint deletes your personal data when such data is no longer necessary to administrate your account.
Statistics which have been anonymized may be saved thereafter.
Your rights
Under data protection law, you have rights including:
- Your right of access – You have the right to ask us for copies of your personal information that we process about you. Through this copy you will be able to understand which of your personal data we have and process. The right of access is applicable when a record contains information where an individual can be identified, and the information is about them. This means that records that are accessible to you will have the personal data about other people redacted where appropriate, in order to protect their right to privacy. Your personal data will be redacted if someone else requests access to a record containing your personal data. Legislation provides other exemptions that may be applicable such as records where legal privilege needs to be observed or there is an obligation of confidentiality in specific circumstances. Any exemption applied will have a relevant legal basis and will be explained to you were necessary.
- Your right to be informed – You have the right to be informed of how we process your personal data. This privacy notice is an initial means of informing you about the processing of your personal data. Additional methods of keeping you informed include through questions, contractual agreements and through discussions – if you have a question about how we are processing your personal data, you can contact us by writing to support@watersprint.com.
For more information about the general right to be informed, please see the webpage of the Swedish Authority for Privacy Protection - Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete. Any request to rectify your personal data will also be transferred and actioned by any processor with whom your personal data has been shared. This process is managed by us and will not require any additional action from you for your right to be exercised in full.
For more information about the general right to rectification, please see the webpage of the Swedish Authority for Privacy Protection. - Your right to erasure – You have the right to ask us to erase your personal information when the information is no longer necessary to fulfil the purpose of processing the information or if you retract your consent. Please note that deletion could mean that Watersprint cannot process requests, or that your account expires. Any request to be forgotten will also be managed by Watersprint with any processor that is processing your personal data on our behalf.
For more information about your general right to erasure, please see the webpage of the Swedish Authority for Privacy Protection. - Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances such as if the personal data is not relevant to fulfil our legal obligations.
For more information about the general right to restriction of processing, please see the webpage of the Swedish Authority for Privacy Protection. - Your right to object to processing – You have the right to object to the processing of your personal data. The right can be invoked when the legal basis is legitimate interest, including profiling. If an objection is made, Watersprint must show compelling legitimate interest to continue processing personal data for that specific purpose.
For more information about the general right to object to processing, please see the webpage of the Swedish Authority for Privacy Protection. - Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation. This enables you to transfer it in a machine-readable format to another recipient. The right to data portability applies to personal data that is processed based on your consent or to perform a contract. It applies only to such personal data that you have provided Watersprint with yourself.
For more information about the general right to data portability, please see the webpage of the Swedish Authority for Privacy Protection. - Your right regarding automated decision-making – You have the right to request that a review of any profiling that is undertaken using your personal data to be undertaken by a human. However, your personal data will not be subject to any automated decision-making or profiling by Watersprint.
For more information about general rights regarding automated decision-making, please see the webpage of the Swedish Authority for Privacy Protection. - Your right to withdraw consent – You have the right to withdraw consent where this is the lawful basis established for the processing of your personal data i.e. when collected for certain marketing activities.
For more information about the general right to withdraw consent, please see the webpage of the Swedish Authority for Privacy Protection.
Watersprint is responsible for the processing of your personal data, and requests to exercise your rights as stated above shall be addressed to Watersprint. You can contact us using any of the following details if you wish to make a request:
Watersprint AB
Medicon Village, Scheeletorget 1
223 81 Lund, Sweden
support@watersprint.com
Deletion of account
To perform a user account deletion from within the Acuva app, please follow these instructions:
- Open the App and log into your account
- Open the settings by pressing the gear icon
- Open ‘Account Settings’
- Press ‘Delete Account’
- Re-enter your account password to confirm deletion
If you would like us to delete your user account without using the App, please contact support@watersprint.com from the email that was used to create the account.
Complaints
If you have a complaint regarding the processing of your personal data by Watersprint you are entitled to report such dissatisfaction to Integritetsskyddsmyndigheten (“IMY”), the supervisory authority for the personal data processing of Watersprint. The contact details for IMY are as follows:
Postal address: Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm
E-mail: imy@imy.se