Xensam Privacy Notice

Privacy Policy

At Xensam AB (“Xensam”, “we”, “us” or “our”) we care about your privacy and the protection of your personal data.

Xensam is a Controller in accordance with the definition of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) and applicable local, national and/or state law with regard to the personal data we process within the framework of our business.

Xensam AB (Swedish Org. no. 559183-2760), Röntgenvägen 3D, 171 54, Solna Sweden, is responsible for how your data is processed under this Privacy Notice. This means that we are responsible for ensuring that the personal data is processed correctly and in accordance with applicable data protection legislation. (e.g. GDPR for EU data subjects)

The purpose of this Privacy Notice is to inform you how and why Xensam processes your personal data. We will describe your rights in relation to the legal basis for the processing, the storage period of your personal data as well as cases where we transfer your personal data to a third party.

We reserve the right to continuously update this Privacy Notice. Any changes will be published on www.xensam.com.

Please note that Xensam’s website is targeted to business-to-business professionals and is not intended for consumers and/or minors.

Scope
This Privacy Notice applies to you who are visiting our website and/or are otherwise interacting with us through our official channels.

This Privacy Notice only covers the processing of personal data for which we are the Controller. It does not cover any processing of personal data that we conduct as processors or sub-processors, such as when we process personal data on behalf of our customers and partners in accordance with their instructions. In those situations, please refer to the applicable Data Processing Agreement signed between Xensam and your organization.

Processing
Xensam processes the following personal data about you.

Personal data processed within commercial relationships with our contractors, suppliers, vendors, prospects, customers, and partners:

Name, business contact details, and organizational details.

The legal bases for this processing are a balancing of interests between Xensam’s legitimate interests and your right to privacy, your given consent, and/or fulfilling contractual obligations. Xensam’s legitimate interest in processing this personal data is to build relationships with potential customers/partners and retain current customers/partners.

If you visit our website and other digital platforms:

Your region, country, business contact details, how you found Xensam, and how you use our website such as page visits, sessions, and clicks.

The legal basis for the processing of essential cookies is Xensam’s legitimate interest in having a functional and secure website. The legal basis for preference, statistic, and marketing cookies is your consent. You always have the right to change or withdraw your consent to cookies through your web browser settings.

When you contact us through a contact form on our website, we may process your email address, name, and any other information submitted by you through the form for the purpose of administering your request. The legal basis for the processing is a balancing of interests and is motivated by Xensam’s legitimate interest in being able to identify you and provide you with support regarding Xensam’s services.

If you interact with us through social media:

When you visit Xensam on Facebook, Instagram, or Linkedin, we, together with the social media platform, process any personal data that you provide to us through reactions, instant messages, or comments on our posts/videos.

The legal basis for such processing is a balancing of your and Xensam’s interests. We have a legitimate interest in being able to provide information about our services and communicate with the people who want to interact with us via these platforms.

Processing for the purpose of recruitment:

Xensam utilizes Teamtailor for recruitment. Please see the specific Privacy Notice for our career page here: https://careers.xensam.com/privacy-policy.

Please see the cookie notice on our career page for specific information about what cookies we use at the following link. https://careers.xensam.com/cookie-policy.

Annual review of purposes:

Xensam’s management reviews this Privacy Notice at least annually to ensure that the processed personal data is used in conformity with the purposes identified in this Privacy Notice.

Your Rights

Introduction
According to the GDPR you have numerous rights in relation to the processing of your personal data. Please fill out this form if you wish to exercise your rights. If you have any questions relating to any of the rights presented below please reach out to privacy@xensam.com.

Right to access: You have the right to receive a copy of the personal data we process about you.

Right to rectification: If your personal data is inaccurate or incomplete, you have the right to request rectification of the personal data.

Right to withdraw consent: You have the right to withdraw your consent where we’ve used your consent as the legal basis for the processing of your personal data.

Right to erasure: You have the right to erasure of your personal data if you believe your personal data is no longer necessary for the purpose(s) we collected it, if your personal situation leads to our assessment of legitimate interest in your case is incorrect, if the processing has otherwise been unlawful or if we have a legal obligation under applicable law to erase your personal data.

Right to restriction: You have the right to restrict our processing of your personal data if the personal data we process about you is inaccurate, if our processing is unlawful, or if we no longer need your personal data for the purposes it was collected for, but we keep it for other reasons (such as defending legal claims).

Right to object: You have the right to object to our processing of your personal data if you can show that our assessment regarding your personal situation and our legitimate interest is incorrect.

Right to data portability: You have the right to have your personal data ported from Xensam’s systems to a different party in accordance with Article 20 GDPR.

Right to lodge a complaint with a supervisory authority: If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal data, you can report it to the competent supervisory authority.

Storage and transfers
Your personal data is stored and processed mainly inside the EU/EEA, and in some cases in such third country that is considered by the European Commission to have an adequate level of protection, or processed by such suppliers that have entered into such binding agreements that fully complies with the lawfulness of third country transfers or to other suppliers where adequate safeguards are in place to protect the rights of the data subjects whose data is transferred.

Storage Time
We will store and process your personal data only for as long as we deem it necessary for the purposes described above. You are always welcome to contact us at privacy@xensam.com if you have any questions about this Privacy Notice.

Data Protection Officer
Robin Wikström
privacy@xensam.com

Röntgenvägen 3D, 171 54 Solna, Sweden

Appointed Processors
Company; Country; Purpose; Legal Basis; Transfer Mechanism

• Google, LLC; EU/USA; Webpage analytics and marketing; Legitimate interest and consent; Adequacy decision
• Hubspot, Inc; USA; Lead generation, marketing, and, administrating commercial relationships; Legitimate interest and consent; Adequacy decision
• TeamTailor; Sweden; Recruitment; Legitimate Interest; N/A.