PRIVACY POLICY
Your privacy is important to Lavapotion. This Privacy Policy describes how Lavapotion as a personal data controller, according to the definition defined in the EU General Data Protection Regulation (GDPR) collect and process personal data and other information about the users. Lavapotion, "we" or "us", safeguards the protection of personal data and personal data integrity.
IDENTITY OF LAVAPOTION – PERSONAL DATA CONTROLLER
Lavapotion AB
Västra Hamngatan 18
411 17 Göteborg
Sweden
Company registration number: 559087-8954
Please submit inquiries regarding personal data protection, privacy and security matters to the contact on the last page of this document.
DATA RESPONSIBILITY
Lavapotion is the personal data controller, that means that we decide which personal data is to be collected and how it should be processed. As a stakeholder to us, visiting our websites we may process your data. Your security is important to us. Therefore, we have taken appropriate technical, organizational and administrative security measures to protect your personal data from unauthorized access and other unauthorized processing. We regularly analyse and evaluate the measures to ensure that the protection of your data is as safe as possible.
PERSONAL DATA
Personal data is any information that can be directly or indirectly linked to a physical person. Examples of personal data that we can come to process about you are name, email, address, phone number, location information, IP address. We only collect your data when we have a legal purpose and lawful grounds for personal data processing.
When you visit our websites www.lavapotion.com or www.songsofconquest.com we collect personal data from you for various purposes, we do this by using IP Tracking for security reasons, Google Analytics, Social Media Links in particular: Like and Share functions and cookies.
SUBSCRIPTION
If you create a subscription account on our websites or in our application, you will be asked to provide personal information about yourself such as name and email address. Lavapotion processes this information to maintain account functions, provide you with information to the extent permitted by law and for the purpose to analyse your interests for marketing purposes. You can cancel your subscription by unsubscribing in the email sent from us.
CONTACT BY EMAIL
You can contact us by e-mail at any time. In this case, the personal data transmitted by e-mail or with your inquiry will be processed. The data is used exclusively for communication. The data will be deleted as soon as it is no longer necessary for the purpose of its collection. You can object to the storage of your data at any time or revoke your consent.
THIRD PARTIES SERVICE PROVIDERS
We may use external service providers to act as a personal data assistant (“Data Processor”) for Lavapotion, which provides services related to, for example, the websites, marketing, and IT support. External service providers may have access to and/or process your personal data. We will require that these external service providers fulfil sufficient data protection standards.
OTHER RECIPIENTS
In accordance with applicable personal data legislation we may transfer personal data to regulators, other public authorities, legal advisors, external consults and partners. In the case of a merger or acquisition of companies, personal data may be transferred to third parties involved.
INTERNATIONAL TRANSFERS
Your data is stored and processed mainly in the EU / EEA area. Your data may be stored outside of this area through those who provide systems to us. Lavapotion will by the applicable law take all necessaries to ensure an adequate level of protection for personal data transmitted outside the EU, Art. 44 ff. GDPR.
IP TRACKING
When you visit our websites, access data is recorded in the log file on our servers. We record: Internet protocol, address / IP address, page from which the file was requested, date, time, browser type and operating system, page visited, data transfer, access status (file transfer, file not found, etc.).
We use the log files to ensure the functionality of the websites, to monitor traffic on our websites, to resolve technical issues, and to generate statistics that help us tailor our services to your needs. This is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
We do not store this data together with other Personal Data of the user. If it comes to an abuse of our websites, we can block IP addresses if necessary. The data is stored only for a limited period of time and only for as long as necessary to ensure the safety and functionality of our websites.
On our websites, we use active Java Script content from external providers. By visiting our websites these external providers may receive Personal Data about your visit. In this case, processing of data outside the European Economic Area (EEA) is possible. You can prevent this by using a java script blocker such as install the browser plugin ‘NoScript’ (www.noscript.net) or disable java script in your browser. This can lead to functional restrictions on websites.
LINKS TO SOCIAL MEDIA
Our website contains interactive links to third party websites. The third-party providers collect data about your online activities, such as the websites you visit, the automatic transmission of your IP address and the use of cookies. In this connection, no link is created between this information and your name, address, telephone number or e-mail address. We have no influence on the content and design of the linked external websites and their respective links. The data processing by these third parties is therefore not included in this Privacy Policy. The responsible providers are solely responsible for the content and design of these websites and for compliance with the provisions of the data protection acts. For more information about these services or how to disable these services, see the web pages for these services.
LEGAL BASIS FOR PROCESSING PERSONAL DATA
We may process your personal data based on the following legal grounds:
Consent - You have given us your consent to the processing of personal data for one specific purpose (Art. 6 par. 1 (a) GDPR). You can revoke a given consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Contract - You have a contract or is to enter a contract with us and processing of personal data is necessary for the performance of the contract (Art. 6 par. 1 (b) GDPR).
Weighing of interests - We may process personal data about you without your consent if our legitimate interests outweigh those of yours and if the processing is necessary for the purpose in question (Art. 6 par. 1 (f) GDPR).
Legal obligation – There are laws and rules that oblige us to process personal in its activities (Art. 6 par. 1 (c) GDPR).
Exercise of official authority or tasks in the public interest – If we must process personal data to carry out its duties as an authority or to carry out a task in the public interest (Art. 6 par. 1 (e) GDPR).
Fundamental interest – We must process your data to protect the vital interests of you or another natural person (Art. 6 par. 1 (d) GDPR).
HOW LONG DO WE PROCESS YOUR PERSONAL DATA?
We process data about you as a customer, prospect, supplier or other stakeholders for the duration of the agreement with you and for a reasonable time thereafter. We save your information as long as it is necessary to carry out our commitments to you and as long as required by statutory storage times. If we process data on the base of your consent, we will delete your data immediately upon withdrawal of your consent.
YOUR RIGHTS
When we process personal data about you, you as registered have several rights. You have the right to contact us at any time concerning these, and if you wish to exercise any of the rights described below. We reserve the right to take appropriate protective and security measures to ensure that you are the person you claim to be when you contact us. If you cannot satisfactorily demonstrate your identity, we may not be able to respond to your request.
Access to personal data Art. 15 GDPR
You have the right to know what personal data we process about you. If you wish to know, you can get a compiled register extract from us that contains all the personal data we process about you.
Correction and deletion Art. 16, 17 GDPR
If we process your personal data incorrectly or if we no longer need the data, you are entitled to have it deleted. If the data is incomplete, you have the right to have it supplemented. Please keep in mind that we may not be able to provide you with our services if you request to have your personal data deleted.
Restrictions to processing Art. 18 GDPR
Under certain conditions, you have the right to request that we restrict our processing of your data. This means that we mark the data so that in the future we only process it for certain specific purposes. We may not be able to provide you with our services if we restrict the processing of your personal data.
Right to data portability Art. 20 GDPR
You have the right to receive your personal data in a structured, commonly used and machine-readable formant and have the right to transmit those data to another controller.
Right to make objections Art. 21 GDPR
You have the right to object to the processing of personal data that is carried out to perform a task in the public interest, as part of an exercise by a public authority or after a balance of interests. We do not process your personal information for any of these purposes or on any of these grounds. Therefore, you cannot direct any objections to our processing on this basis.
Right to lodge a complaint Art. 77 GDPR
You have the right to lodge a complaint with the Swedish Data Protection Authority if you believe that we are inappropriately processing your personal data. You can read more about this on the Swedish Data Protection Authority's website www.datainspektionen.se.
CHANGES IN THIS POLICY
We may update this policy, the valid version will always be available at www.lavapotion.com to see when it was last updated check the end of this document. Should we make changes to this policy, that we are obliged to notify you about or ask for your consent, to apply to data protection laws, we will do so.
CONTACT
Lavapotion AB
info@lavapotion.com
Last updated 2021-02-16