Dear user, The privacy policy applies to services and products provided on dibz.se, (collectively referred to as "the Services") provided by OptiQueue Nordics AB, registration number 559286–3251, with the address Drottninggatan 78, 111 36 Stockholm, Sweden ("we" or "us"). The Services involve you providing us with personal data, which we then share with the third parties you have chosen for us to do so. This means that the personal data will be processed by these third parties as data controllers, in accordance with their current privacy policy at any given time. Your privacy is important to us. According to the General Data Protection Regulation 2016/679 ("GDPR"), we are responsible for the processing of personal data when we determine the purposes and means of the processing. By "personal data" we mean information that is directly or indirectly attributable to a living physical person and which is processed within the framework of the Services. This document contains information about our collection, use, and processing of personal data, which parties we may share personal data with, and your rights in relation to your personal data. When you use the Services, we will process personal data for several purposes, as stated below.
1. PERSONAL DATA PROCESSED
We collect and use the following types of personal data to provide the Services and for the purposes stated below: (a) name; (b) email address; (c) phone number; (d) billing address; (e) personal identification number; (f) password; (g) username; (h) school; (i) income; (j) type of income; (k) potential employer and contact information for such employer; (l) potential membership in tenant association/cooperative housing society and contact information for such tenant association/cooperative housing society; (m) current and desired form of housing; and (n) number of children in the household. (o) desired rent (p) number of desired rooms Please note that we cannot provide the Services or part of the Services without processing the above personal data. When you use the Services, certain information will be automatically collected by us, including: (a) information about your use of the Services; (b) information provided by you when contacting our customer service; (c) content that you post, upload, and/or contribute to the Services; and (d) technical data, which may include the URL you were on when you navigated to the Website, your IP address, unique device ID, network and computer performance information, type of browser, language, and information about identification and operating system.
2. PURPOSES OF PROCESSING AND LEGAL BASIS
We will process the information above for the following purposes: (a) Name, email address, phone number, billing address, personal identification number, password, and username to administer your account, ensure the provision of the Services and integration with third-party services, and otherwise provide the Services in accordance with the terms of use. The processing of personal data for this purpose is based on the necessity for us to fulfill our contract with you; (b) The personal data in point a above as well as income, type of income, information to potential employer and tenant association/cooperative housing society, current and desired form of housing, number of children in the household, desired rent, number of desired rooms, and number of queue days belonging to each queue system to administer your registration to desired queue provider and regularly log in and update your information. The processing of personal data for this purpose is based on the necessity for us to fulfill our contract with you; (c) Name, email address, and phone number to send you notifications and messages via email and SMS, including sending you marketing of our and affiliated third parties' products and services, based on our legitimate interest to send marketing material to you about products and services you may be interested in and to inform you about our updates of the Services and terms of use, based on our legitimate interest to keep you updated about the development of the Services (such as new features) and the terms you have consented to by using the Services; (d) Information about your use of the Services, information stated when contacting customer service and content that you post, upload, and/or contribute to the Services to personalize and improve your experience of the services, based on our legitimate interest to give you a customized experience tailored to your preferences. (e) Information about your use of the Services and other technical data to ensure the technical functionality of the Services (to be able to fulfill our contract with you) and to prevent use of the Services in violation of the terms of use, based on our legitimate interest to ensure that our Services are not misused and to protect ourselves and our other users; (f) Information about your use of the Services to enforce the terms of use, including protecting our rights, property, and safety and if necessary also third parties' rights, property, and safety based on our legitimate interest to protect our company, our Service users, and other third parties; and (g) to fulfill obligations under the law, based on our obligation to comply with applicable laws and regulations. For the processing of personal data based on our legitimate interest, we have balanced the importance of our legitimate interest and what the personal data processing means for your interests and your right to privacy, and concluded that our legitimate interest can be exercised without an intrusion into your right to privacy that prevents the processing of personal data.
3. STORAGE OF PERSONAL DATA
As a general rule, we only store your personal data for as long as necessary to provide the Services, unless there is a legal obligation to store the personal data for longer. After you have terminated your account, the personal data associated with your account is stored for a maximum of 180 days. Contact details for you used for marketing and information mailings are stored as long as your account is active, and deleted if you unregister from our mailings, provided they are not needed to continue providing the Services to you. Personal data used to improve the Services and develop new services are anonymized as soon as possible, however not longer than six months from the time they were created or collected. Personal data that is used where applicable to enforce the terms of use and/or protect our rights are stored during ongoing cases, and deleted in accordance with applicable limitation periods (three years in consumer relationships and ten years in other cases). Personal data processed according to a legal obligation is stored for as long as the legal obligation states that the personal data should be stored. This includes when personal data is stored for accounting purposes, where accounting information is stored for the current year and until the end of the seventh year after the end of the calendar year in which the fiscal year ended.
4. TRANSFER OF PERSONAL DATA
We will share and transfer your personal data to the queues you indicate. We will also share your personal data with our partners, suppliers, and affiliated third parties for the purposes stated above. The housing queues covered by the Service require personal data in connection with registration. Therefore, we will share the personal data that you have provided to us, with these housing queues in accordance with the information they request. The housing queues we share personal data with use the data for housing searches. We also share your personal data with providers of IT services and payment services within the EU/EEA where you may have lower protection for your personal data. You can get more information about the transfer by contacting us at hello@dibz.se.
5. COOKIES, BEACONS, AND OTHER TECHNOLOGY
We collect information using technology such as cookies, pixels, beacons, and local storage (e.g. on your browser or device). For information on how we use technology and analysis tools and how you can prevent the use of cookies, please contact us at: hello@dibz.se.
6. LEGAL ORDERS AND PREVENTION OF HARM
We may use, store, and share your information as a result of legal orders (such as search warrants, court orders, subpoenas, or similar), or when it is necessary to detect, prevent, and address fraud and other criminal activity, to protect ourselves, you, and other users, including as part of an investigation if we are in good faith that it is required under applicable law. This may include responding to legal requests from jurisdictions outside the EU/EEA, where we are in good faith that the response is required under the law in that jurisdiction, affects users in that jurisdiction, and is in accordance with internationally recognized standards. Information that we receive about you, including financial information, through the Website when you use the Services, may be used and stored for a longer period of time when the information is the subject of a legal request or obligation, government investigation, or investigations concerning possible violations of our terms of use or policies, or otherwise to prevent harm.
7. OTHER THINGS YOU NEED TO KNOW
Links to other websites You should be aware that when you visit our Website, you may be referred to other websites operated by third parties where their collection of personal data is beyond our control. The privacy policy on their websites will govern the handling of information collected from you.
Change in ownership If the ownership of our business changes, we may transfer your information to the new owners so that they can continue to provide the Services. The new owners will continue to observe the commitments we have stated in this privacy policy.
Notification of changes If we make changes to this privacy policy, we will notify you by uploading a new policy on the Website. If the changes are significant, we will also send a separate notification to you or notify you in another appropriate way, and, if required by applicable law, we will ask for your consent.
Your rights under EU legislation You can object at any time to the processing of your personal data regarding direct marketing. You can also withdraw your consent if you have given one. The withdrawal of your consent does not affect the legality of previous processing before the consent was withdrawn, and we may continue to process your personal data based on other legal grounds, except for direct marketing.
You have the right to request access to and further information about the processing of your personal data, or request that we correct, rectify, complete, delete or limit the processing of your personal data. You have the right to receive a copy of the personal data that we process about you free of charge once (1) each calendar year. If you request additional copies, we may charge a reasonable fee based on administrative costs. If the processing is based on the legal grounds of legitimate or general interest, you have the right to object to the processing. If you do this, we will no longer be able to process the personal data unless we can demonstrate that our legitimate reasons for the processing outweigh your interests, rights and freedoms – provided that the processing does not occur for the establishment, exercise, or defense of legal claims.
If the processing is based on the legal ground of consent or performance of a contract, you have the right to data portability. Data portability means that you can receive the personal data you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transfer such personal data to another data controller.
To exercise the rights above or if you have questions about our processing, your rights under EU legislation, or if you wish to have your data deleted, please contact us at the following address: hello@dibz.se or OptiQueue Nordics AB, Drottninggatan 78, 11 136, Stockholm. To ensure that you receive a prompt response, please state your full name in your message and, if applicable, your address, username, and the email address used at registration. Note that you should sign your message to receive information about the processing of your personal data. Note that you may need to verify your identity before your request can be processed.
If you have any complaints regarding our processing of your personal data, you can send a complaint to the relevant data protection supervisory authority. You can find more information about local data protection authorities by clicking on the following link: information about data protection authorities.