Privacy policy

Last updated on 27 February 2023

Klimato’s core beliefs regarding personal data
‍Klimato’s purpose is to work for a sustainable future. And how sustainable would a future be without respect for private life? Not very, in our opinion it is therefore of great importance to us that we collect your data in a GDPR-compliant way. GDPR is a legislative bill which aims to protect your private life. It obligates Klimato to take care of the people within its collected data. This document aims to answer all your questions regarding how we handle your personal data. If you read this document and still have unanswered questions please contact our Data Protection Officer.

Klimato's website and application have multiple functionalities, products and services and in order to keep these products and services as good as possible we would like to handle some of your personal data. For example if you sign up for our newsletter Klimato would like to handle your email address to be able to send you the email. Klimato will not rent, sell or in any similar way distribute or publish all or any part of your personal information. 
‍
‍Applicable legislation
‍Klimato’s internal computer systems and websites (app.klimato.se and klimato.co) are constructed to comply with the following national and international data protection legislation:

- Dataskyddslag (2018:218)
- UK Data Protection Act 2018
- EU General Data Protection Regulation 2018 (GDPR)

‍Klimato’s compliance with these data protection bills, which are stringent in nature, means that this site is probably compliant with the data protection and user privacy legislation set out by many other countries and territories as well. 

‍Cookies
‍Klimato uses the following cookies on its website and/or in its app: 

- Google Analytics - analytical & marketing cookies
- Calendly - functional cookies
- Mailchimp - functional cookies
- Stripe - functional cookies
- LinkedIn - marketing cookies
- Userpilot - functional / analytical cookies

Apart from collecting personal data, Klimato collects anonymous data from you when using the site. In this process, cookies (small text files) are put on your computer for us to be able to provide you with a functioning website and, if you approve of it, collect information about you and your experience on our website to create better marketing and anonymized statistics. Google Analytics cookies help us measure how you interact with the content of the website and the app. Furthermore, LinkedIn cookies help us analyse marketing efforts through LinkedIn advertisements. If you subscribe to Klimato’s Newsletter, Mailchimp will place cookies on your device to provide them with some information necessary to ensure compliance with its terms and conditions. Klimato also uses services from Calendly to enable demo booking on Klimato’s website. You have the chance to opt in to Calendly’s cookies separately and you can read more about their cookie policy here. Stripe cookies are used for functionality when you use the application (app.klimato.se). Stripe cookies aim to ensure that the app is free from fraud. Userpilot cookies are used to provide additional features as well as collect information about user interactions and device data, which are valuable to improve the user experience. If you decline some of these cookies we will be unable to provide you the full Klimato application experience. Moreover some of the functionality which requires that Klimato collects personal data from you will not be available. 
‍
‍How and why Klimato collects your personal data
‍Klimato’s websites (app.klimato.se and Klimato.co) collects and uses personal information for the reasons explained in the following sections. If you are under 13 years of age you MUST obtain parental consent before signing up for any of the below mentioned. 

‍SITE ACTIVITY TRACKING
‍
Google analytics
Like most websites, Klimato.co and app.klimato.se use Google Analytics to trace user interaction. Klimato will use data from Google Analytics to determine the number of people users on the website, and to better understand how they find and use our web pages. Our hope is that these insights will help Klimato develop the application’s and website’s functionality and user experience. 

Google Analytics collects your data such as geographical location, device, internet browser and operating system, however this information does not personally identify you to us. Furthermore Google Analytics records computer IP addresses, this info could be used to identify you, but Google does not grant Klimato access to this. Klimato uses the analytics.js and gtag.js implementations of Google’s services. Google is regarded as a third party data processor. You can read more about third party processors below.

Disabling cookies on your internet browser will put an end to Google Analytics from tracing any part of your visit at Klimato’s app or website. For further information regarding Google's use of cookies please read its privacy policy. Klimato provides further information about its use of cookies in our cookie policy. 

‍Linkedin Insight Tag
The LinkedIn Insight Tag is a piece of lightweight JavaScript code that we have added to our website to enable in-depth campaign reporting and to help us unlock valuable insights about our website visitors. We use the LinkedIn Insight Tag to track conversions, retarget website visitors, and unlock additional insights about members interacting with our LinkedIn adverts. The LinkedIn Insight Tag enables the collection of metadata such as IP address information, timestamp, and events such as page views. All data is encrypted. The LinkedIn browser cookie is stored in a visitor's browser until they delete the cookie or the cookie expires.

Disabling cookies on your internet browser will put an end to LinkedIn from tracing any part of your visit at Klimato’s website. For further information regarding LinkedIn's use of cookies please read their privacy policy.

‍NEWSLETTER
If you decide to sign up for our email newsletter, the email address submitted to Klimato will be forwarded to MailChimp. This company provides Klimato with email services. Klimato considers MailChimp to be a third party data processor. You can read more about our third party processors below. A submitted email address will not be stored within this website’s own database or in any of our internal computer systems.

Your email address will remain within MailChimp’s database for as long as we continue to use MailChimp’s services for email marketing or until you specifically request removal from the list. You can do this by unsubscribing using the unsubscribe links provided in any email newsletters that we send you or by requesting removal via email. 

‍CONTACT FORMS
Should you choose to contact us using the contact form, the data that you supply will be stored by the third party data processor Webflow detailed below. Webflow sends an email to the responsible officer at Klimato. If necessary for the request you send us, we will use your personal data for sales administration and marketing. All data will be stored within our internal computer systems for a maximum of 24 (twenty four) months. Your data will be erased once your email-conversation with Klimato is over. Klimato suggests that you always consider email as an insecure medium and therefore not include personal, confidential or otherwise sensitive information within an email via this form.

‍BOOK A DEMO
If you choose to book a demo with Klimato, the email address, job title, organisation and message that you submit to us will be forwarded to Calendly who provide us with calendar services. Klimato considers Calendly to be a third party data processor. Read more about our third party data processors in the section below. Any information that you submitted will be stored for sales management reasons.

Calendly uses cookies to enable you to use its service. When booking a demo you will have the opportunity to or to not consent to the use of these third party cookies. For further information regarding Calendly’s use of cookies please read our cookie policy.

The personal data will be stored within Calendly's database and in our internal computer systems for a maximum of 24 (twenty four) months or for as long as you are still interested in a Klimato demo. 

‍APPLICATION
This section is only applicable to use of our application found at at app.klimato.se

Register
‍When registering on app.klimato.se your submitted information will be stored in our internal computer systems. This information will be used to enable you to use the app and for Klimato to administer the application.
‍
Payment via Stripe 
All information submitted to sign up for Klimato’s product subscription is transferred to Stripe. Stripe is a third party data processor. The payment information will not be saved within Klimato’s own computer systems or servers however Klimato is able to administer the subscription.

Stripe uses cookies to enable you to safely use its payment services. When using Stripe as a payment method you will be presented with the option to consent or not to consent to the use of Stripe third party cookies. For further information regarding Stripe's use of cookies please read our cookie policies.

Stripe also uses functional cookies to keep the app safe from fraud. These cookies are always active in order to protect you and Klimato's web application. 

‍Userpilot
‍In order to display features to you and allow you to provide feedback, we use Userpilot Inc, Attn: Yazan Sehwail, 2035 Sunset Lake Road. The data which is processed is: Anonymous ID, browser, language, country, pixel width and height, your IP, operating system and device type. We have limited the scope of IP processing to determine the country code of the country of origin for identifying all users. Beyond that, IP addresses are not processed, stored or shared with other parties. The processed data will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Mandatory legal provisions - in particular legal retention periods - remain unaffected. We have concluded a contract with Userpilot in which we oblige Userpilot to protect your data and not to pass it on to third parties.

Save recipes and any uploaded personal data
‍If you use the application to calculate and register recipes this data will along with your name be saved on our servers within a database system provided by MongoDB and/or Postgres. Your data will be saved on servers from Amazon Web Service (hereinafter: AWS). Any personal data registered with a recipe will be saved on AWS’ servers for as long as the recipe is available in the application. You can at any time decide to delete your recipe and through that delete your own personal data from our server. Neither AWS, MongoDB or Postgres are not to be regarded as third party data processors. Your name and organisation will be saved with your recipe to enable Klimato to administer and structure its database. 

‍How Klimato stores your personal data
‍As explained above in this document, any submitted personal information will be stored within Klimato’s cloud database at MongoDB. MongoDB is hosted by AWS. You can read more about how AWS stores your personal data below.

ABOUT KLIMATO’S APPLICATION AND WEBSITE SERVER
This website is hosted by Amazon Web Services (AWS) on a German data centre located just outside Frankfurt (EU-central-1). This host provides Klimato with many security features, here is a selection of them;

- Entry is controlled and monitored
- AWS Data centers workers are scrutinised
- AWS use a layer by layer access review
- AWS maintains its equipment regularly
- Access to server rooms are fortified with electronic control devices
- AWS is prepared for technological intrusion - the servers are ready to warn employees of any attempts to displace data
- Automatic disability of server in case of a breach.

More information about the data centers of Amazon Web Services can be found on their website, subpage “Our Data Centers”. 

‍OUR THIRD PARTY DATA PROCESSORS
We use a number of third parties to process personal data on our behalf. These third parties have been carefully chosen and all of them comply with the legislation set out in this document. All 4 (four) of these third parties are based in the USA or within the EEA and are GDPR compliant.
‍
- Google (Privacy policy)
- Calendly (Privacy policy)
- Stripe (Privacy policy)
- Mailchimp (Privacy policy)
- Webflow (Privacy policy)
- LinkedIn (Privacy policy)
- Userpilot (Privacy policy)

‍DATA BREACHES
Klimato will report any unlawful data breach on its application or its website’s database or the database(s) of any of our third party data processors to any and all relevant persons and authorities within 72 hours of the breach if it is clear that personal data stored in an identifiable manner has been disclosed or taken.

‍DELETE PERSONAL DATA
If you wish to have your data deleted you can send an email to our Data Protection Officer who will delete or remove personal data upon request. You also have the right to ask us to delete or remove your Personal Data where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully or where we are required to erase your Personal Data to comply with local law. 

‍DATA CONTROLLER
The data controller of this website is: Klimato AB, a Swedish limited Company with company number: 559139-1759
‍
‍Whose registered office is:
‍Medborgarplatsen 3, Stockholms län, 118 26 Stockholm.
‍
‍Data protection officer:
Anton Unger, Chief Executive Officer
Anton@Klimato.se

‍CHANGES TO KLIMATO’S PRIVACY
‍We might once every then change our privacy policy in order to comply with mandatory requirements. In this case we will not directly inform you about the changes, instead we recommend you to check out this page every once in a while for any policy changes.