Sol Emma Smångs AB (“we”, “us”, or “the company”) is the data controller for the processing of personal data in accordance with this privacy policy. Here we explain what type of personal data we collect, how we process it, and what rights you have. This policy applies to www.freedomguidebyemma.com.

You are always welcome to contact us if you have any questions about how we process your personal data.

What personal data do we collect about you and when?

Data you provide to us We process the personal data that you provide to us when you contact us, for example through our website or when using our services. We also collect personal data you send to us via email, text message, or similar, or when you call us.

Why do we process your personal data? We process your personal data to provide and manage the services and products we offer. We also process your personal data to market our products and services.

To follow up and improve our products and services, we may also process your personal data in the form of usage statistics.

What legal grounds do we have for processing your personal data? In order to process your personal data, we need a legal basis. We process your personal data on the following grounds:

- To fulfill, administer, or enter into an agreement with you or your employer.

- When we have a legitimate interest in processing your personal data, for example, for marketing our products and services and for compiling statistics on your use of our services.

- When we have a legal obligation to process your personal data, for example, for accounting purposes.

Who might we share your personal data with?

Data processors In some situations, it is necessary for us to engage other parties to perform our work. This may include using various IT service providers. These are considered data processors, and we have signed data processing agreements with them. We remain the data controller, and the data processor only processes your data according to our instructions.

We check all data processors to ensure that they can provide sufficient guarantees regarding the security and confidentiality of personal data. Data processors are only engaged for purposes compatible with the purposes for which we collect the data since we remain the data controller.

We may also disclose personal data to third parties, such as the police or other authorities, if it concerns a criminal investigation or if we are otherwise legally obliged to do so, or to protect our legal interests.

Where do we process your personal data? Your personal data is only processed within the EU/EEA.

How long do we store your personal data? We never store your personal data longer than necessary for each purpose. We have developed routines to ensure that personal data is not stored longer than needed. If and when you choose to close your account with us, we delete your data connected to the service within 3 months.

The storage period varies depending on the purpose of processing and how long the data is needed. Certain information, such as accounting data, must be stored for at least seven (7) years under applicable law.

Personal data collected for marketing purposes is deleted no later than two (2) years after collection.

Cookies Our website uses cookies. More information about our cookie management can be found on our website.

What are your rights? Under applicable legislation, you have several rights regarding your personal data:

Right of access (register extract) You have the right to request access to the personal data we process about you. We may need to ask some questions to ensure efficient processing and that the data is provided to the correct person.

Right to rectification If you find that something is incorrect, you have the right to request correction of your personal data. You can also supplement incomplete personal data.

Right to erasure You may request that we delete personal data we process about you, for example, if:

- The data is no longer necessary for the purposes it was collected for.

- You object to a legitimate interest and your reasons outweigh ours.

- The data has been unlawfully processed. The data was collected from a child (under 13 years old) for whom you are the guardian.

- The data was collected based on your consent and you withdraw it.

We may, however, deny your request if we are legally required to retain certain data or if processing is necessary to establish, exercise, or defend legal claims.

Right to restriction of processing You have the right to request that the processing of your data be restricted, for example, while verifying its accuracy or when you need the data for legal claims.

Right to object You always have the right to object to processing based on legitimate interest, including direct marketing.

Right to data portability If processing is based on consent or a contract, you have the right to receive your data in a structured, commonly used, and machine-readable format, provided it is technically feasible.

Exercising your rights Requests must be made in writing and signed by you. We will respond without undue delay and within 30 days. Please email your request to the address below, preferably from the email address registered with us.

Supervisory authority The Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) is the supervisory authority overseeing data protection laws. If you believe we are processing your data incorrectly, you can contact IMY at https://www.imy.se.

Contact information Sol Emma Smångs AB 559462-0956 freedomguidebyemma@outlook.com

Changes to this privacy policy We reserve the right to make changes to this privacy policy. You will always find the latest version on our website. Significant changes affecting personal data processing will be communicated to you.