Sitevision Privacy Statement​

How and when does this Privacy Statement apply?

This Privacy Statement applies to business processes in Sitevision, Sitevision websites, mobile applications and services, cloud services, communities and other Sitevision branded websites (collectively referred to as "Sitevision’s Websites" or "the Company’s Websites").

Sitevision Cloud enables Sitevision and Sitevision’s Customers to create Web sites. When Sitevision Cloud sites are posted by Sitevision, the site will link to this Privacy Statement, and this Privacy Statement applies. When Sitevision Cloud Web sites are posted by Customers, the privacy statement of the Customer applies, and this Privacy Statement does not apply.

This Privacy Statement provides information about data processing carried out by Sitevision when Sitevision determines the purpose and means of the processing, i.e. when Sitevision acts as data controller.

Whose personal data does Sitevision process?

Sitevision processes personal data about contact persons or Service users tied to our Customers. In addition, we process personal data about job seekers (Applicants) and persons representing potential Customers (Leads) that approach us via Sitevision’s Websites or other channels.

Why and how we process information as a data controller

Customer contacts and users of Services

Purpose of processing: Perform deliveries in accordance with agreements made with Customers that are legal entities.

• Categories of personal data processed: Contact details of the person representing our Customer.
• Legal basis: Legitimate interest. Our legitimate interest is to perform deliveries in accordance with agreements made with the Customer.
• Retention time: The personal data is stored for as long as necessary to perform deliveries in accordance with the agreement.

Purpose of processing: Perform deliveries in accordance with agreements made with Customers who are sole proprietors.

• Categories of personal data processed: Contact details and, if applicable, social security number.
• Legal basis: The processing is necessary for the performance of a contract with you. Where applicable, personal data is processed on the basis that it is clearly justified by the importance of secure identification.
• Retention time: The personal data is stored for as long as necessary to perform deliveries in accordance with the agreement.

Purpose of processing: Execute sales and contract process to Customers.

• Categories of personal data processed: Contact details of the person representing our Customer, financial information such as billing information.
• Legal basis: Legitimate interest. Our legitimate interest is to execute sales and contract process to Customers.
• Retention time: The personal data is stored during the contractual relationship and one year thereafter.
  
  

Purpose of processing: Execute sales and contract process to Customers who are sole proprietors.

• Categories of personal data processed: Contact details, financial information such as billing information, and, if applicable, social security number.
• Legal basis: The processing is necessary for the performance of a contract with you. Where applicable, personal data is processed on the basis that it is clearly justified by the importance of secure identification.
• Retention time: The personal data is stored during the contractual relationship and one year thereafter.

Purpose of processing: Deliver support to users of our products and services.

• Categories of personal data processed: Unique user information such as login ID, username, password and security questions, feedback, comments or questions about Sitevision or regarding Sitevision Services
• Legal basis: Legitimate interest. Our legitimate interest is to deliver support to users of our products and services.
• Retention time: The personal data is stored during the contractual relationship and one year thereafter.

Purpose of processing: Improve and develop the quality, functionality and user experience of our products, services and Sitevision’s Websites.

• Categories of personal data processed: Unique user information such as login ID, username, password and security questions, Feedback, comments or questions about Sitevision or regarding Sitevision Services.
• Legal basis: Legitimate interest. Our legitimate interest is to improve and develop the quality, functionality and user experience of our products, services and Sitevision’s Websites.
• Retention time: The personal data is stored during the contractual relationship and one year thereafter.

Purpose of processing: Detect, mitigate and prevent security threats and perform maintenance and debugging.

• Categories of personal data processed: Unique user information such as login ID, username, password and security questions.
• Legal basis: Legitimate interest. Our legitimate interest is to detect, mitigate and prevent security threats and perform maintenance and debugging.
• Retention time: The personal data is stored during the contractual relationship and five years thereafter.

Purpose of processing: Prevent abuse of our products and services.

• Categories of personal data processed: Unique user information such as login ID, username, password and security questions.
• Legal basis: Legitimate interest. Our legitimate interest is to prevent abuse of our products and services.
• Retention time: The personal data is stored during the contractual relationship and five years thereafter.

Purpose of processing: Process orders, invoicing, payments and other financial follow-up.

• Categories of personal data processed: Contact details of the person representing our Customer, financial information such as billing information.
• Legal basis: Legitimate interest. Our legitimate interest is to process orders, invoicing, payments and other financial follow-up.
• Retention time: The personal data is stored during the contractual relationship and seven years thereafter.

Purpose of processing: Accounting.

• Categories of personal data processed: Contact details of the person representing our Customer, financial information such as billing information.
• Legal basis: The processing is necessary for compliance with a legal obligation in the Accounting Act (1999:1078).
• Retention time: The data is stored for seven years.

Purpose of processing: Create interest profiles in order to promote relevant products and services.

• Categories of personal data processed: Unique user information such as login ID, username, password and security questions,
• Legal basis: Legitimate interest. Our legitimate interest is to create interest profiles in order to promote relevant products and services.
• Retention time: The personal data is stored during the contractual relationship and one year thereafter.

Purpose of processing: Operate user communities to educate and enable interaction between users and Sitevision.

• Categories of personal data processed: Unique user information such as login ID, username, password and security questions.
• Legal basis: Consent.
• Retention time: The personal data is stored during the contractual relationship and one year thereafter.

Job Applicants

Purpose of processing: Recruitment.

• Categories of personal data processed: Contact details, CV, cover letter, other documents attached to your application.
• Legal basis: Legitimate interest. Our legitimate interest is to administrate recruitments.
• Retention time: The data is stored until the position is filled, or as agreed with the candidate.

Purpose of processing: To comply with the regulations regarding the provision of information on qualifications pursuant to the Discrimination Act (2008:567).

• Categories of personal data processed: Contact details, CV, cover letter, other documents attached to your application.
• Legal basis: Processing is necessary for compliance with a legal obligation pursuant to the Discrimination Act.
• Retention time: The personal data is stored 6 months after the position is filled.
  

Purpose of processing: Saving applications for future recruitment processes.

• Categories of personal data processed: Contact details, CV, cover letter, other documents attached to your application.
• Legal basis: Consent.
• Retention time: The personal data is stored until the consent is redrawn.
  

Leads

Purpose of processing: Sitevision processes personal data about Leads for marketing purposes. In order to provide targeted and relevant content to potential Customers, Sitevision builds an interest profile based on your navigation, choices and actions on Sitevision’s Websites as well as your response to marketing communications per email.

• Categories of personal data processed: Contact details
• Legal basis: Consent.
• Retention time: The data is stored until the consent is redrawn.

Visitors of Sitevision’s Websites

Sitevision uses different digital tracking technologies to collect information about your navigation on Sitevision’s Websites and when interacting with us. Please refer to our Cookie Policy for more detailed information, available here.

How we collect data

In general, Sitevision collects personal data directly from you or other persons linked to our Customer. These persons may be a manager or colleague. If the Customer for which you are an employee purchases Sitevision Services via a Sitevision partner company, we may collect information about you from the partner company.

We will also use cookies and other tracking technologies when you use Sitevision’s Websites and interact with our marketing communications per email in order to optimise your experience of Sitevision and Sitevision’s Websites. Please see the paragraph describing automatic data collection tools for more information on how these technologies function and your rights in this context.

In some cases, we may also collect information about you from other sources. These sources may be third-party data aggregators, Sitevision’s marketing partners, public sources or third-party social networks. Sitevision will be able to combine personal data about you obtained from one source with data obtained from another source. This gives us a better understanding of you, which also gives us the possibility of serving you in a more relevant way with a greater degree of personalisation.

Sharing of information collected

Sitevision user communities

If you make a post, comment or similar on Sitevision user communities or other forums on Sitevision’s Websites, such information can be read and used by anyone with access to such forums and used for purposes over which neither Sitevision nor you have control. Sitevision is not responsible for any information you submit on such forums or Sitevision’s Websites. Sitevision will not post any comment, testimonial or similar made by you without your prior consent.

Business partners

Sitevision may share your personal information with our partners in the event this is legitimate from a business perspective and according to applicable privacy legislation. For example, if you purchase a product or service on behalf of your employer that Sitevision provides through one of our partners. In this regard, Sitevision and our partner may share personal data in order to be able to provide the product or service to the Customer.

Public Authorities

The police and other authorities may demand the handover of personal information from Sitevision. In these cases, Sitevision will only hand over the data if there is a legal obligation to do so.

Communications preferences

Sitevision offers you means to choose how the Company uses the information provided. You may manage your receipt of marketing communications by clicking on the "unsubscribe" link located on the bottom of the Company’s marketing emails. Additionally, you may unsubscribe by contacting us using the information in the "Contacting Us" section below.

Your rights

• Withdrawal of consent: Where we use your Personal Data with your consent you may withdraw your consent to all or part of the processing at any time and we will stop using your Personal Data for the purpose for which consent was given, with effect from the time of withdrawal.

• Right to access: You have the right to access information about what personal data we process about you and how we process such personal data. You also have the right to request a copy of the personal data processed by us.

• Right to rectification: You also have the right to request that we correct inaccuracies in your personal data.

• Right to erasure and restriction: You may have the right to have your personal data erased if, for example, you believe that the data we are processing is incorrect or that the processing itself is unlawful. There are situations where we have the right to deny your request for erasure. Such situations may include i) when we need the data to fulfil a legal obligation, ii) when we need the data to establish, exercise, or defend legal claims, iii) when we need the data due to certain legal archiving obligations, or iv) when the data is necessary to fulfil contractual obligations we have towards you. You may also request that certain processing of your data be restricted, for example, if you contest the accuracy of the data.

• Right to data portability: Where we process your personal data based on consent or on a contract with you, you have a right to receive the personal data that you have provided to us in a commonly used machine-readable format and to transfer your data to another data controller. You may receive our assistance in transferring the data to another data controller when this is technically feasible.

• Right to object: You have a right to object to our processing of your personal data when we process your data based on a balancing of interest according to article 6.1.f) of the GDPR.

• Right to file a complaint: You also have the right to file a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten). Please find more information here Länk till annan webbplats..

Security

We have taken a number of security measures to ensure that the personal data we keep is secure. For example, access to areas where personal data is stored is limited to our employees and service providers who require it in the course of their duties and who are informed of the importance of maintaining the security and confidentiality of the personal data we keep. We maintain appropriate safeguards and security standards to protect your personal data against unauthorized access, disclosure or misuse. We also monitor our systems to discover vulnerabilities in order to protect your personal data.

How we act as a data processor for Customers

Sitevision provides Services to our Customers. The Services enable Sitevision’s Customers to create Web sites that may be used to collect personal information. In these cases the Customer acts as a data controller, and we act on their behalf as a data processor. It is the Customer’s duty as data controller to comply with the information duty towards data subjects. If you have a question about how your information is processed or have any other requests relating to your data, please contact the owner of the website.

When we process data on behalf of our Customers we do so in accordance with privacy regulations applicable for data processors.

Sitevision’s Customers may electronically submit data or information to the Services for hosting and processing purposes ("Customer Data"). Sitevision will not review, share, distribute, or reference any such Customer Data except as provided in Sitevision’s General Terms and Conditions for Sitevision Cloud, or as may be required by law.

Information shared with subcontractors

In order to deliver our Services, we rely on a number of different subcontractors. These subcontractors act as data processors on our behalf, and are typically vendors of cloud services or other IT hosting services.

We hold our subcontractors to the same high privacy standards as we hold ourselves to. When using subcontractors, Sitevision will enter into a data processing agreement (DPA) with each subcontractor in order to safeguard your privacy rights and fulfil obligations towards our Customers. Some service providers are based outside the EU. When subcontractors are located outside the EU, Sitevision ensures that there is an adequacy decision from the EU commission for the recipient country, or that other appropriate safeguards are in place, such as standard contractual clauses.

More information on Sitevision’s subcontractors is provided here.

Contacting us

Questions regarding this Privacy Statement or the information practices of the Company’s Web sites and Services should be directed to Sitevision AB by contacting privacy@sitevision.se or by mailing us at:

Sitevision AB
c/o Privacy Department
Drottninggatan 18a
702 10 Örebro
Sweden

Changes to this Privacy Statement

If we modify our Privacy Statement, we will post the revised statement here, with an updated revision date. We encourage you to review the Statement regularly. If we make significant changes to our Statement that materially alter our privacy practices, we may also notify you by other means, such as sending an email or posting a notice on our corporate website prior to the changes taking effect.

This Privacy Statement was last updated August 19th, 2025.